Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/P8uTVptxd-UGzkymXhOkvbitcEU.roa
File: P8uTVptxd-UGzkymXhOkvbitcEU.roa (raw, json)
Hash identifier: 61AnrtiCoFhbr8PK6p0Fhr8c0CNn0nd06ZAGuQwz1l8=
Subject key identifier: 3F:CB:93:56:9B:71:77:E5:06:CE:4C:A6:5E:13:A4:BD:B8:AD:70:45
Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial: 01966B8A089F259BC0369B82769BCA0F687B
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/P8uTVptxd-UGzkymXhOkvbitcEU.roa
Signing time: Fri 25 Apr 2025 06:02:10 +0000
ROA not before: Fri 25 Apr 2025 06:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62597
IP address blocks: 163.114.192.0/18 maxlen: 24
163.114.233.0/24 maxlen: 24
185.103.32.0/22 maxlen: 24
185.103.32.0/24 maxlen: 24
185.103.33.0/24 maxlen: 24
185.103.34.0/24 maxlen: 24
185.103.35.0/24 maxlen: 24
2a00:edc0::/32 maxlen: 32
2a00:edc0:100::/44 maxlen: 48
2a00:edc0:107::/48 maxlen: 48
2a00:edc0:10f::/48 maxlen: 48
2a00:edc0:136::/48 maxlen: 48
2a00:edc0:137::/48 maxlen: 48
2a00:edc0:1f0::/44 maxlen: 48
2a00:edc0:469::/48 maxlen: 48
2a00:edc0:1000::/48 maxlen: 48
2a00:edc0:1001::/48 maxlen: 48
2a00:edc0:1002::/48 maxlen: 48
2a00:edc0:1003::/48 maxlen: 48
2a00:edc0:1004::/48 maxlen: 48
2a00:edc0:1005::/48 maxlen: 48
2a00:edc0:1010::/48 maxlen: 48
2a00:edc0:6000::/48 maxlen: 48
2a00:edc0:6259::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:8a:08:9f:25:9b:c0:36:9b:82:76:9b:ca:0f:68:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
Validity
Not Before: Apr 25 06:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fcb93569b7177e506ce4ca65e13a4bdb8ad7045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:d0:e7:65:a4:56:51:c6:c4:4d:92:f9:60:
1e:9c:f3:b7:20:33:61:77:d6:c1:e7:41:0b:52:de:
44:57:c6:7d:01:f2:72:db:b9:6c:d6:e2:c1:14:fa:
51:af:e3:e7:eb:59:e8:f2:d3:b3:f4:2f:77:4e:47:
19:2a:78:bc:47:bb:53:24:62:e5:a6:b7:81:ca:2e:
2f:a6:a0:1c:c4:1f:2c:0f:4f:b4:46:f7:a7:8e:3d:
c1:7f:22:93:87:5f:d8:e1:96:a1:7b:76:0f:91:95:
60:a4:34:b2:90:5c:55:8c:fa:21:dd:b1:46:3d:8c:
67:61:ca:e0:d4:6d:20:00:a3:1a:ab:47:1e:d5:34:
9a:47:77:83:78:d2:fe:e6:94:24:12:c6:02:65:93:
75:f2:62:a9:39:19:81:f4:8e:ce:16:28:8c:91:44:
55:43:12:6e:7f:83:fd:cf:44:04:9b:b8:7d:34:c4:
15:d0:58:c8:58:24:c1:bb:14:7c:d8:f2:c1:be:a6:
e9:19:7f:c1:8c:18:2d:5d:e2:d6:07:99:0d:7f:fa:
d9:b7:16:b5:06:47:64:47:45:91:94:5a:c4:7d:97:
fe:9f:4f:e8:20:83:a7:94:74:48:18:26:eb:f9:68:
f0:cf:66:85:54:34:bf:66:57:6d:c5:ee:01:ff:03:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:93:56:9B:71:77:E5:06:CE:4C:A6:5E:13:A4:BD:B8:AD:70:45
X509v3 Authority Key Identifier:
keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/P8uTVptxd-UGzkymXhOkvbitcEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.114.192.0/18
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:3a:39:9c:53:8c:8a:c0:ea:f6:3d:f5:24:33:9f:d0:33:60:
e7:3a:b0:47:ef:d6:4a:67:06:f1:37:21:6f:db:88:01:0e:80:
30:0a:64:22:c4:51:2a:47:05:b9:85:af:09:89:46:34:fc:66:
e2:b6:9b:d5:12:52:42:c0:b9:1a:5a:75:c9:bf:31:7d:8b:39:
bd:b1:17:6e:2b:63:80:2c:dc:85:dd:68:94:80:fd:30:25:3e:
8a:34:fe:7b:08:6a:26:9c:b1:65:54:7c:20:c0:1b:35:d5:da:
6c:fa:61:e5:bd:0a:21:ee:00:52:36:da:d0:df:b5:15:ad:b1:
6e:59:c7:89:d2:56:45:a5:64:78:72:da:92:6f:3f:36:82:f8:
e2:6a:1e:e7:48:2d:65:35:c0:59:e8:ab:dd:77:3d:c6:9c:ee:
c1:df:ee:41:bb:a5:7e:92:f8:14:ff:f4:7b:4d:c8:f5:4c:b6:
35:be:5b:c3:ab:8b:f9:df:af:b7:70:6e:0a:1d:49:40:63:34:
e3:3b:ef:3e:2f:ed:14:e3:ac:4b:4c:d4:42:80:2e:49:02:63:
38:02:8d:2d:c1:c2:5e:31:b5:85:a6:46:a5:c6:b5:fe:2a:93:
4b:79:86:fc:6e:05:a7:07:6c:6e:85:ca:db:4b:36:e8:a4:f9:
3f:c7:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:32:32 2025 by rpki-client