Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/g25IGTKfPYjST4HNSDfCkGR8U-U.roa
File: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (raw, json)
Hash identifier: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=
Subject key identifier: 83:6E:48:19:32:9F:3D:88:D2:4F:81:CD:48:37:C2:90:64:7C:53:E5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01942521E9FF07630C52EC102DB11838A976
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/g25IGTKfPYjST4HNSDfCkGR8U-U.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
84.19.128.0/20 maxlen: 24
84.19.144.0/21 maxlen: 24
91.192.252.0/22 maxlen: 24
91.224.36.0/23 maxlen: 24
185.56.212.0/22 maxlen: 24
185.57.168.0/22 maxlen: 24
185.114.104.0/22 maxlen: 24
185.224.56.0/22 maxlen: 24
188.65.152.0/21 maxlen: 24
193.41.118.0/23 maxlen: 24
193.254.192.0/23 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
2a0b:fd80::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
2a0b:fd87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e9:ff:07:63:0c:52:ec:10:2d:b1:18:38:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=836e4819329f3d88d24f81cd4837c290647c53e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:36:50:93:dd:c6:7f:76:73:94:bd:07:81:
c7:77:80:e9:4a:30:82:5c:5b:f1:cf:53:50:e5:2a:
9d:1c:57:18:f5:3b:db:e2:b7:7b:bf:b2:6d:73:15:
53:20:67:48:e8:29:0c:73:11:03:f5:59:3e:b4:6b:
ce:0a:fe:0c:3d:50:4a:aa:a5:39:ac:b8:60:da:c3:
60:19:6f:ca:7b:43:cc:64:75:cf:a6:fe:b6:bf:96:
c6:7a:7e:52:50:e3:6d:9d:a1:29:c0:73:b1:1f:9d:
0e:7b:eb:29:9b:e1:3e:dd:ce:65:3c:14:6e:7e:58:
01:40:77:2b:88:1e:7f:7a:ab:a1:43:6c:68:bb:0a:
4d:f9:16:57:31:78:95:1c:49:87:88:65:75:a2:ee:
c9:49:80:1f:10:0a:a1:84:85:ec:96:64:c9:79:04:
a4:c2:34:51:fd:be:7e:c1:2d:67:5b:11:a7:c6:96:
65:85:fb:3f:9b:5c:4e:93:51:95:89:f0:86:61:00:
6c:58:75:0a:fb:85:80:60:ce:aa:e6:2a:d4:71:fa:
8c:0f:17:2a:de:ed:8f:a0:3f:08:cc:26:fb:c5:63:
5d:3c:cf:81:8c:2a:69:5f:e2:39:dc:cc:ea:7e:0f:
37:b3:22:a7:a5:74:16:b9:85:46:e6:03:0f:b3:37:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:48:19:32:9F:3D:88:D2:4F:81:CD:48:37:C2:90:64:7C:53:E5
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/g25IGTKfPYjST4HNSDfCkGR8U-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
84.19.128.0-84.19.151.255
91.192.252.0/22
91.224.36.0/23
185.56.212.0/22
185.57.168.0/22
185.114.104.0/22
185.224.56.0/22
188.65.152.0/21
193.41.118.0/23
193.254.192.0/23
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd80::-2a0b:fd82:ffff:ffff:ffff:ffff:ffff:ffff
2a0b:fd87::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fc:44:c0:59:a6:2d:64:50:37:3f:6c:da:30:49:91:df:5a:
26:9e:be:9b:c1:5c:41:ae:af:15:3f:7f:4a:01:37:a1:a0:01:
90:59:7f:dc:f6:57:bd:9a:04:ed:7b:e6:17:a6:65:a9:02:83:
9a:a0:bf:c3:c0:ab:24:46:63:8c:11:9e:b5:29:41:91:9d:a0:
8d:ec:be:4c:4e:d9:ba:ab:05:b4:7b:7c:a3:1d:7f:ba:04:8b:
9b:d5:c5:aa:a2:b9:07:f8:ae:cb:7f:13:09:d2:f4:b1:06:8a:
51:94:27:80:e4:31:eb:d9:3f:74:c1:e4:d0:98:78:03:e2:ca:
2b:02:45:fb:87:71:28:c6:71:f3:4b:8c:98:9e:2a:a9:39:8c:
dd:5c:4d:b2:d8:44:ca:45:a6:06:1a:47:96:b3:e9:6c:5e:86:
e1:af:8d:e3:cb:5d:51:28:78:41:91:ad:58:32:3d:fe:1b:b2:
36:3f:a5:4a:3f:84:8d:69:45:14:21:35:a1:44:47:78:ef:d6:
41:7a:93:ab:d7:3b:0e:2d:76:7b:52:d9:83:eb:31:84:9b:d3:
0d:67:ec:d2:6b:29:0b:2e:27:7a:03:b4:20:03:b4:60:b6:ba:
2d:68:51:e9:e3:80:ba:e8:2e:cc:b7:44:f3:27:5a:93:33:4e:
bf:a0:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:10 2025 by rpki-client