Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_Rt3k0AcFC5NWUg1viszcdS0dV8.roa
File: _Rt3k0AcFC5NWUg1viszcdS0dV8.roa (raw, json)
Hash identifier: zuYBxgL+uGiUIY38aCHv+jtcB6hFaJHI2d1MgLiQ5/Y=
Subject key identifier: FD:1B:77:93:40:1C:14:2E:4D:59:48:35:BE:2B:33:71:D4:B4:75:5F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01966759877FA691D5CE7D537DEAFA9D091C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_Rt3k0AcFC5NWUg1viszcdS0dV8.roa
Signing time: Thu 24 Apr 2025 10:30:42 +0000
ROA not before: Thu 24 Apr 2025 10:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 46.102.191.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.87.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.64.0/23 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.104.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
94.176.3.0/24 maxlen: 24
94.177.58.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:59:87:7f:a6:91:d5:ce:7d:53:7d:ea:fa:9d:09:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 24 10:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd1b7793401c142e4d594835be2b3371d4b4755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:aa:a7:e3:7f:c2:08:31:62:4f:f0:42:f1:
72:4a:b6:89:2e:9f:36:4a:61:65:1a:7b:36:c7:91:
7e:6d:32:b2:05:fc:8e:ce:f5:97:25:1e:2d:73:22:
6e:e5:40:f9:20:f9:60:a0:9e:71:df:7b:3f:29:84:
8d:81:e0:7e:f9:b3:95:34:6f:2a:c5:58:f6:4b:da:
2e:ad:c0:09:25:4d:34:77:fe:52:00:98:c4:0f:51:
f4:e5:75:2a:f2:20:04:6b:e1:04:7c:6f:8a:2b:d3:
98:81:0b:25:30:94:de:a4:01:ab:ca:44:bb:b7:43:
5f:1f:a7:0e:c4:4b:13:e3:52:65:6e:c7:be:2e:fc:
9c:03:32:95:b8:41:4c:74:ea:c0:c6:1a:05:ac:59:
24:62:53:0f:8c:7d:92:0c:9f:cf:0a:22:61:fb:de:
ac:c3:75:3f:62:8c:9d:e4:02:07:47:7d:0b:b9:15:
21:40:77:a8:53:1c:f3:91:45:e0:e9:5a:b7:58:82:
96:1f:27:99:41:c3:b4:58:6c:0c:af:e1:c8:2d:e1:
51:15:69:7e:ce:be:a5:7c:a8:ec:8e:e9:6a:a0:d3:
7e:67:9e:a9:c9:0d:41:91:1a:2c:e1:2b:fa:06:08:
8a:b0:07:46:f3:f8:fd:35:c3:99:2c:a3:7e:3a:24:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:77:93:40:1C:14:2E:4D:59:48:35:BE:2B:33:71:D4:B4:75:5F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_Rt3k0AcFC5NWUg1viszcdS0dV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
77.81.183.0/24
86.105.151.0/24
86.107.47.0/24
86.107.184.0/24
86.107.244.0/23
89.33.87.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.64.0/23
89.39.80.0/24
89.39.90.0/24
89.40.65.0/24
89.40.104.0/23
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
94.176.3.0/24
94.177.58.0/24
188.240.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:aa:4c:7e:f8:a3:e4:9b:82:e8:96:36:a6:0b:d0:aa:23:9b:
51:50:b3:41:bc:ef:e0:49:65:1f:87:19:f6:92:ab:3b:d5:5b:
4e:08:4d:ca:78:ba:a8:7b:dd:02:ed:e5:73:24:5f:59:31:86:
c0:1e:30:8e:b7:26:76:42:ff:ce:64:af:35:88:28:44:43:d0:
16:d4:ea:16:35:55:06:01:fb:ae:4c:11:f3:26:5b:cd:d9:7c:
f5:3e:2d:7b:f5:bc:b2:0a:fb:f6:db:ac:d3:97:e2:ab:a2:54:
9d:55:55:5b:8e:ea:56:97:51:f2:86:0f:d6:4d:f8:f2:e7:36:
75:86:ac:73:ed:aa:c7:e0:61:56:e2:a7:e6:b3:08:ad:24:90:
70:71:5e:7f:9b:5d:21:f6:0f:76:d0:c7:2b:44:06:21:f8:ac:
06:c4:c4:b2:f5:2c:d6:eb:55:aa:21:61:e8:2d:82:ef:3d:e1:
94:9e:ea:ee:e0:00:1f:96:59:9e:6c:b9:b1:de:40:36:67:71:
b4:f3:00:09:00:3c:d3:92:8e:70:3c:3e:d7:a3:02:5b:ab:e2:
13:f7:c4:7f:3c:cc:1a:96:8d:75:3d:2c:27:6a:d0:d7:d5:8a:
71:c1:2f:4f:91:30:ec:03:e3:b3:2e:22:4f:cb:a7:92:28:a8:
37:35:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:27:16 2025 by rpki-client