Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RYqwCne0Subns8-y8iVavkOq2Qk.roa
File: RYqwCne0Subns8-y8iVavkOq2Qk.roa (raw, json)
Hash identifier: Z+d4X06SrKehtMK8KmBcdyINkP+XRfxB7bKH0XKqtgs=
Subject key identifier: 45:8A:B0:0A:77:B4:4A:E6:E7:B3:CF:B2:F2:25:5A:BE:43:AA:D9:09
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 019662F030E74A34326BC6B9622D12337920
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RYqwCne0Subns8-y8iVavkOq2Qk.roa
Signing time: Wed 23 Apr 2025 13:57:10 +0000
ROA not before: Wed 23 Apr 2025 13:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47638
IP address blocks: 91.235.56.0/22 maxlen: 24
185.46.200.0/22 maxlen: 24
185.66.205.0/24 maxlen: 24
185.66.206.0/24 maxlen: 24
185.149.208.0/24 maxlen: 24
185.149.209.0/24 maxlen: 24
185.149.210.0/23 maxlen: 24
185.161.132.0/22 maxlen: 24
192.175.40.0/22 maxlen: 24
194.0.116.0/22 maxlen: 24
2a04:1840::/29 maxlen: 48
2a0b:8640::/29 maxlen: 48
2a0f:cd40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:f0:30:e7:4a:34:32:6b:c6:b9:62:2d:12:33:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Apr 23 13:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=458ab00a77b44ae6e7b3cfb2f2255abe43aad909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:91:ca:9b:65:0a:69:9a:04:29:39:c5:99:
25:90:74:4e:8b:8f:2b:1b:67:99:a4:a8:44:c7:7e:
1c:d7:c1:5e:70:5d:27:a5:36:33:21:be:06:6e:15:
f5:7d:f0:03:8d:c7:d8:5f:73:7e:11:e4:43:da:26:
c0:ac:08:8c:62:b3:80:70:26:7b:1e:78:32:0d:b8:
0f:3a:37:18:f3:13:21:ac:ee:ab:b4:df:f3:4e:05:
8d:de:c8:c3:4e:9e:18:e0:e9:b6:01:55:85:5e:84:
2d:61:be:65:5f:5d:e5:c1:eb:fa:bc:9c:f9:c0:20:
e8:3a:27:e1:4b:ec:77:c2:7a:2b:96:50:08:82:29:
26:6c:18:28:7c:e7:a3:e5:47:34:e6:f9:10:e2:67:
94:73:c2:89:f8:07:d1:5e:f6:07:51:a6:47:94:54:
c6:41:55:16:dd:ac:38:cd:c7:18:8d:f0:76:70:c8:
77:8b:f2:cc:fa:2e:55:e9:20:65:fa:2e:cb:63:e7:
e0:56:e0:ed:18:15:65:c7:21:7f:1e:f4:77:9f:e7:
5d:9d:ad:d4:6b:66:c5:78:f4:96:5e:a5:59:aa:44:
d4:46:b3:bf:ca:29:cc:91:ae:68:a5:51:f6:0d:a3:
a9:df:b9:03:35:94:e3:de:45:9a:70:e0:e8:d4:dc:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8A:B0:0A:77:B4:4A:E6:E7:B3:CF:B2:F2:25:5A:BE:43:AA:D9:09
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RYqwCne0Subns8-y8iVavkOq2Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.56.0/22
185.46.200.0/22
185.66.205.0-185.66.206.255
185.149.208.0/22
185.161.132.0/22
192.175.40.0/22
194.0.116.0/22
IPv6:
2a04:1840::/29
2a0b:8640::/29
2a0f:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
2a:f5:54:9e:da:01:3b:fe:5d:7e:e0:79:75:db:8c:79:0f:15:
7a:4e:ae:8f:a0:84:16:f6:29:2c:fc:86:21:37:28:e1:82:f2:
82:d3:d2:b5:45:a4:74:50:96:12:12:cf:14:10:0b:0f:72:8d:
c2:2d:cd:2e:87:d8:c2:0c:42:b6:b8:03:95:ec:d1:28:b2:d0:
d1:7c:16:89:59:86:89:aa:ce:06:66:04:ec:d9:e6:ac:09:25:
78:c4:9c:e9:33:00:10:e1:41:63:91:b0:d5:d2:bb:83:b6:61:
e1:97:77:49:5f:e2:b7:e4:74:cf:6a:55:d8:ef:17:e9:da:52:
e7:eb:30:2f:fa:16:25:c6:a7:cd:de:a5:7a:30:8c:43:8f:c8:
b4:fe:15:24:38:15:da:65:58:73:87:ac:b8:b2:52:dd:d4:fc:
bf:28:fb:02:d4:fe:cd:52:ea:ac:19:84:d2:55:74:33:23:0a:
b5:13:cc:e1:da:d8:25:f7:5f:e9:e5:0f:1e:20:93:0b:a8:8d:
6d:37:7b:7a:cc:ee:d9:44:10:fa:1e:77:46:fd:32:9a:ec:52:
37:8d:69:93:02:07:49:2b:30:12:64:f9:c8:35:6f:92:25:9b:
98:be:f5:df:f9:07:13:33:2a:dc:63:7f:c4:bd:0f:e9:07:68:
6d:be:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:42 2025 by rpki-client