Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8dwJTuhTZaUiuujK7TuCMPLctQU.roa
File: 8dwJTuhTZaUiuujK7TuCMPLctQU.roa (raw, json)
Hash identifier: QeU5KFUma4Kv59HCuWfHI55yUUEbLOzDiY9xlmxxDFk=
Subject key identifier: F1:DC:09:4E:E8:53:65:A5:22:BA:E8:CA:ED:3B:82:30:F2:DC:B5:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01974F2C629E3F9BD24F6A3E3E0F1EFFEAA3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8dwJTuhTZaUiuujK7TuCMPLctQU.roa
Signing time: Sun 08 Jun 2025 10:53:18 +0000
ROA not before: Sun 08 Jun 2025 10:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
151.244.101.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:2c:62:9e:3f:9b:d2:4f:6a:3e:3e:0f:1e:ff:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 10:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1dc094ee85365a522bae8caed3b8230f2dcb505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:d8:de:34:40:d2:ab:6b:51:bc:94:1b:52:
9b:be:7a:c1:fd:7a:f2:b9:dd:9f:09:16:fb:c1:72:
7a:2f:c2:b6:25:3f:16:63:31:42:86:57:eb:6f:89:
59:95:07:85:d4:55:5f:4d:aa:ad:42:ce:e9:11:81:
5f:ce:01:ef:7e:2e:e2:6e:b0:99:c4:6a:6f:dd:c5:
85:9a:88:36:15:ea:9c:16:e0:00:fe:60:83:fe:d9:
52:a2:75:b2:79:95:09:cd:1b:e1:ef:ee:2b:d5:5a:
34:01:c0:42:ca:32:df:81:f1:ad:e2:9b:c5:8a:88:
ee:a5:67:44:f9:8c:3f:60:a7:91:b3:7a:b6:46:a5:
8e:4c:18:72:be:ea:ff:9c:35:eb:4a:9e:3f:b8:83:
75:2f:b8:94:c6:a4:e0:77:59:0f:54:fa:b8:10:65:
01:24:c8:49:e2:ee:38:fe:c9:cc:f3:6f:1c:9c:be:
75:a5:22:b7:d4:4b:06:e8:44:25:55:80:31:7c:d0:
d3:6d:f9:12:e2:0d:03:54:8c:15:99:0b:dd:a8:ca:
d0:66:1a:b8:0f:43:fe:24:9a:b8:6f:f9:f8:e3:1a:
35:fd:0c:be:aa:ef:84:16:17:b8:de:bb:db:49:cd:
67:ec:0d:3e:6c:9b:98:e5:7d:c9:7e:c8:6c:b2:f9:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:09:4E:E8:53:65:A5:22:BA:E8:CA:ED:3B:82:30:F2:DC:B5:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8dwJTuhTZaUiuujK7TuCMPLctQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0/23
151.243.107.0-151.243.110.255
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.97.0/24
151.244.101.0/24
151.244.105.0/24
151.244.110.0/24
151.244.114.0/24
151.244.118.0/24
151.244.124.0/24
Signature Algorithm: sha256WithRSAEncryption
33:48:a6:06:dd:15:8f:33:42:9b:00:0d:97:2f:a1:e0:f7:e6:
95:54:4a:4c:d3:53:ee:e4:3c:fe:6d:df:bd:0e:55:8a:52:73:
32:ea:52:87:92:57:b8:d3:6d:f2:a8:bc:d6:fd:86:d7:dd:35:
2b:24:95:b2:c7:bb:53:3a:4e:ed:82:ea:30:f3:d4:12:bd:3c:
47:b6:2c:c8:46:9a:cf:1e:24:8f:a7:14:f9:65:42:fb:95:3f:
30:1b:73:fa:c8:89:b7:58:3c:c7:8e:4c:e2:b8:eb:c2:96:22:
30:0f:97:dd:ce:3a:bd:f0:93:35:d0:d7:78:1f:63:c3:e7:c5:
f3:75:a7:66:08:27:94:42:bb:4b:12:50:6b:1d:a5:ee:b7:73:
02:4a:81:5a:96:b1:6e:a4:91:1e:f3:f3:f5:60:9c:d9:39:4e:
a1:a3:77:16:e8:c5:fb:91:e3:a8:97:87:2f:74:8e:fd:47:4f:
7a:53:14:24:71:4a:c1:f0:4e:96:ee:7d:1b:49:c4:31:e8:de:
c3:74:0b:74:fb:47:e5:37:6f:05:39:be:46:2d:74:74:64:8d:
e0:2a:3f:5e:2d:18:3c:8d:37:9b:5f:01:db:9c:b0:24:8f:59:
d9:df:61:28:5d:bf:90:d7:45:64:61:9a:b7:b8:96:43:2d:2b:
c7:fc:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:36:33 2025 by rpki-client