Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/l_4towjM6IXiQikoqm_Qaaqf6xE.roa
File: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (raw, json)
Hash identifier: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=
Subject key identifier: 97:FE:2D:A3:08:CC:E8:85:E2:42:29:28:AA:6F:D0:69:AA:9F:EB:11
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01975E9F74A24B227C6281E0BE1E8CC3532C
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/l_4towjM6IXiQikoqm_Qaaqf6xE.roa
Signing time: Wed 11 Jun 2025 10:53:17 +0000
ROA not before: Wed 11 Jun 2025 10:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41944
IP address blocks: 37.114.43.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.49.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:9f:74:a2:4b:22:7c:62:81:e0:be:1e:8c:c3:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jun 11 10:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97fe2da308cce885e2422928aa6fd069aa9feb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:7d:6a:29:9d:d3:7a:87:9c:0e:ee:da:8a:
ab:33:ed:1d:0f:0e:23:6a:dd:c5:5b:63:51:95:e2:
e5:0d:6c:fa:31:35:d3:21:d8:24:99:4f:dd:73:ba:
25:bd:86:be:28:6b:e9:01:ff:19:d7:85:0c:2f:0e:
52:38:62:6d:0b:57:25:7a:4a:ce:bd:2e:d7:d0:6c:
d2:ac:54:48:09:b8:5a:25:dd:b7:82:b6:60:ae:13:
03:cb:98:f7:21:87:45:f2:6d:97:77:12:83:70:fb:
b3:ed:7c:1d:9e:a8:54:fe:3e:24:2c:dc:1b:0b:90:
87:34:63:78:b4:17:52:4b:a3:c1:df:4f:16:c0:9d:
a0:b3:2f:f6:4e:93:e4:51:3e:24:24:ec:73:1c:18:
1d:da:e0:9d:42:34:4a:7e:b4:64:d3:3d:b9:1c:d5:
86:8b:08:16:9d:fd:4c:fd:ff:0e:24:fc:e9:82:28:
2f:be:2d:7e:5b:8a:aa:83:ba:7d:46:9b:5f:13:9d:
7e:7f:ac:b7:01:51:0a:57:20:b2:7d:bd:71:09:a5:
03:5a:6b:97:9a:04:6d:69:08:fb:16:5e:1e:d2:84:
97:c6:c6:63:29:09:e0:94:9f:6e:bd:78:44:22:5f:
5e:d4:c4:00:b9:b4:2b:da:42:a7:67:3c:8d:b8:98:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:2D:A3:08:CC:E8:85:E2:42:29:28:AA:6F:D0:69:AA:9F:EB:11
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/l_4towjM6IXiQikoqm_Qaaqf6xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.43.0/24
37.114.48.0/23
37.114.51.0/24
37.114.55.0/24
37.114.63.0/24
176.100.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:74:7d:15:85:5b:f3:2f:be:4f:25:c3:d1:47:b6:6f:0a:76:
53:20:f9:87:54:d8:d2:51:c6:da:2f:98:27:b8:fe:0e:e4:ad:
a0:47:e5:a9:07:ba:c5:c6:61:46:dd:0a:02:d5:92:9b:cc:c7:
15:81:77:25:1e:ce:0e:72:a9:fa:18:8d:ce:a4:54:60:5c:cf:
82:84:bf:eb:24:c9:96:cb:de:4e:e3:86:47:da:2b:d0:7b:f3:
35:e9:85:3a:c8:77:55:d1:5b:9d:26:28:38:5e:06:4e:c5:a0:
8e:53:11:ae:77:23:5c:22:5d:7b:26:03:c3:c3:c8:01:a7:d5:
41:19:7f:bf:22:32:26:0a:d8:c5:34:5d:8b:91:06:cd:1d:f0:
29:a8:68:5c:75:10:3a:79:89:94:60:2d:54:ea:b8:7b:09:4b:
a1:e9:7f:c0:2d:8f:7d:e5:fc:62:01:36:b3:5b:22:25:c8:fa:
eb:a3:fb:5e:f7:38:03:3a:76:aa:df:1a:11:b7:95:aa:50:76:
64:ed:4b:33:3d:7a:04:d9:8a:97:00:1f:f9:31:36:04:4f:a4:
51:ed:93:ea:e5:8d:00:e9:94:f7:f8:56:b5:54:4c:b7:c1:44:
55:51:e2:28:b7:93:cb:f7:ad:2e:de:8b:6c:1b:fd:29:2b:16:
51:5c:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:50:19 2025 by rpki-client