Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sAtEU0UL52WMQTQVlFtSm0ZV06Y.roa
File: sAtEU0UL52WMQTQVlFtSm0ZV06Y.roa (raw, json)
Hash identifier: BV/2WzVI2zV/q1rr/rMDlghy/ihFZ2c9D74DiX8g/lE=
Subject key identifier: B0:0B:44:53:45:0B:E7:65:8C:41:34:15:94:5B:52:9B:46:55:D3:A6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01966D52E27DB7746441F68D455E83A30612
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sAtEU0UL52WMQTQVlFtSm0ZV06Y.roa
Signing time: Fri 25 Apr 2025 14:21:10 +0000
ROA not before: Fri 25 Apr 2025 14:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.218.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.224.0/23 maxlen: 23
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:52:e2:7d:b7:74:64:41:f6:8d:45:5e:83:a3:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 25 14:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b00b4453450be7658c413415945b529b4655d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:bb:9c:48:a3:ad:ac:6a:3f:b1:07:22:fa:
90:e0:fa:61:ad:f2:22:c9:83:e0:cd:e8:7e:9d:5c:
24:03:de:e9:52:d5:2c:cc:4e:24:1b:4e:4b:42:e2:
4a:cc:8c:df:5c:95:41:ab:1a:03:85:cc:a0:7e:59:
bf:14:e3:3a:d3:69:33:dc:3f:c8:0f:c2:0e:e5:a3:
03:0b:b6:ee:22:17:75:54:37:bb:0a:78:4a:d2:64:
9d:dc:78:6b:f2:2f:2e:71:9e:88:a0:56:ed:15:3e:
ca:46:16:28:bf:16:74:cb:42:0f:64:ad:92:64:01:
2d:19:72:53:60:3d:f6:32:67:28:d8:90:f1:89:fb:
36:70:2a:7c:98:16:8a:52:52:7c:7d:74:c3:57:b7:
46:7a:35:e1:8f:a8:9a:be:00:35:c3:09:d1:ad:43:
c3:a4:54:ea:21:73:1d:74:ec:2e:3f:c8:17:d9:20:
ec:e3:d6:bb:fd:e2:9e:62:df:50:f2:c6:5d:51:0f:
26:cb:bb:55:fc:06:47:bc:ce:b8:3a:6c:8f:0b:37:
15:72:29:57:ca:15:8e:f1:b2:6b:91:bd:f5:0a:c3:
6a:28:1b:9e:cf:e4:a1:c9:4f:5f:43:52:d5:a3:0b:
07:06:4b:b9:db:52:85:f7:71:b6:ea:01:c2:65:66:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:44:53:45:0B:E7:65:8C:41:34:15:94:5B:52:9B:46:55:D3:A6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sAtEU0UL52WMQTQVlFtSm0ZV06Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0-82.153.218.255
82.153.243.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.224.0/23
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:7a:27:d8:53:c3:f5:92:06:f6:cd:28:f0:f0:ab:2f:b7:8a:
9a:bb:69:50:74:99:f6:50:c5:11:60:68:7f:53:6f:25:d3:54:
79:ce:84:30:4e:ad:df:90:69:29:71:c8:10:02:c6:53:bd:cf:
cd:f9:9e:2e:d1:41:0e:00:32:c4:28:c9:1c:1c:2d:29:cc:12:
78:ac:1d:e4:82:a1:84:02:a8:0b:92:85:cc:d2:b1:87:af:60:
e8:74:c7:5e:ae:28:2a:b3:35:15:f6:0f:2c:07:ee:03:35:f4:
de:97:6c:df:5e:95:3e:2d:ca:09:80:ca:04:49:67:0a:97:a6:
ea:d3:5e:76:16:ca:37:f8:14:cc:4b:82:93:5a:7f:06:7b:d5:
ca:ad:44:70:e8:8e:24:45:4d:7f:ef:dd:6a:a4:65:68:57:2a:
8a:10:30:fc:07:ef:3a:12:87:74:07:c6:be:07:03:20:10:7f:
5d:60:0f:6e:23:bc:a3:70:fe:0e:41:4b:80:11:eb:d7:3c:3e:
ec:cd:42:19:f6:c5:dd:55:73:ca:ef:41:04:49:e0:bc:25:a7:
73:73:95:2c:60:70:b8:ce:78:8a:99:61:af:17:26:c3:87:a1:
58:7c:93:e7:51:ee:b3:c3:7e:e1:89:79:53:67:f9:b6:07:e7:
56:d2:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:02:47 2025 by rpki-client