Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sb7PCon3eUWCVJA_mQwcySmU5dc.roa
File: sb7PCon3eUWCVJA_mQwcySmU5dc.roa (raw, json)
Hash identifier: XwWg46j4dzWJE+QxhNF9taionYKX6jv0H84s8HfV07s=
Subject key identifier: B1:BE:CF:0A:89:F7:79:45:82:54:90:3F:99:0C:1C:C9:29:94:E5:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019651943AEC5C2A3BF15671081AFC2F511F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sb7PCon3eUWCVJA_mQwcySmU5dc.roa
Signing time: Sun 20 Apr 2025 05:03:11 +0000
ROA not before: Sun 20 Apr 2025 05:03:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:94:3a:ec:5c:2a:3b:f1:56:71:08:1a:fc:2f:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 20 05:03:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1becf0a89f779458254903f990c1cc92994e5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:13:6e:28:ff:a0:c7:a4:81:58:74:38:89:
72:f7:99:30:44:35:77:35:81:62:45:7a:77:f3:42:
04:82:7f:b2:cd:40:38:d3:b8:66:84:85:09:d8:47:
ef:e9:fd:ff:09:9d:9f:4a:bc:7e:07:c6:ca:86:01:
be:28:16:27:04:c3:95:22:3a:68:7c:e0:78:7c:92:
31:44:6d:08:0e:2b:46:10:bd:a8:3a:ae:3c:92:84:
80:ae:55:81:37:3b:7a:36:97:65:7a:96:54:78:75:
2d:c2:14:52:b6:30:b5:5d:8f:ef:b2:28:8f:e3:cf:
7c:7d:05:c9:5f:c6:fa:69:c6:8a:72:af:e8:72:d4:
3c:6f:f7:5c:aa:59:7c:70:a6:84:d6:a4:b1:ae:81:
0a:1d:8e:28:fa:ce:5c:ea:b7:db:2b:cd:04:7e:34:
34:cb:6f:b2:6b:48:ba:f1:31:ad:02:80:de:e5:d8:
d9:64:4b:c6:81:01:31:0d:dd:4a:57:61:14:57:56:
64:d2:e6:8b:dc:c9:ba:49:c7:41:2d:2b:6f:a3:c9:
fc:07:f9:8f:59:e5:63:99:af:3b:62:30:0e:25:8c:
6b:b2:b9:cd:ab:4f:85:41:19:a5:12:dd:dc:6d:6d:
86:02:07:ea:ef:8a:28:ea:51:40:b7:bd:52:9c:56:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:CF:0A:89:F7:79:45:82:54:90:3F:99:0C:1C:C9:29:94:E5:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sb7PCon3eUWCVJA_mQwcySmU5dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.242.108.0/24
151.242.111.0/24
151.242.122.0/24
Signature Algorithm: sha256WithRSAEncryption
26:65:1a:60:bb:4c:c7:1c:73:fd:e7:8f:a2:c0:5b:35:21:9b:
e5:c0:4c:36:a8:2b:10:55:9d:79:73:b5:48:64:db:1c:b5:bd:
8c:f1:5b:1a:74:b4:0e:41:67:c6:cb:42:f0:c4:24:ed:bd:be:
b1:a9:bd:a1:27:4f:9b:15:d5:c4:c7:67:1d:d6:f4:c8:67:82:
28:16:07:d8:ea:9a:2b:77:09:5f:f7:8f:a6:73:9b:dd:fa:51:
6e:6b:c5:59:3c:5b:e7:3d:81:26:bf:08:3b:c9:3b:3c:77:3e:
14:d0:d9:36:8c:89:34:67:81:84:b8:a7:0d:4f:5d:99:79:f1:
c2:67:4c:04:d3:45:06:3f:20:b3:50:b9:8a:52:98:b8:31:96:
61:13:57:66:b3:74:de:23:16:31:76:8f:69:61:2f:42:49:1c:
93:ef:b2:e2:11:a1:16:36:1a:a1:15:52:63:00:5a:89:22:e3:
2c:a7:54:1c:e0:b4:69:7a:a3:55:ce:92:4a:1a:56:02:47:9a:
eb:f6:5b:6f:c5:f9:dd:6f:61:51:74:38:bd:be:f0:db:70:0c:
8a:58:88:20:9c:49:1b:01:07:4e:d5:c7:3b:b4:de:f5:dc:74:
1b:66:1f:47:14:50:ed:14:b9:10:70:86:4f:08:ed:a8:4c:32:
09:78:b5:d0
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZZRlDrsXCo78VZxCBr8L1EfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDIwMDUwMzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWJlY2YwYTg5Zjc3OTQ1ODI1NDkwM2Y5OTBjMWNjOTI5OTRlNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqoTbij/oMekgVh0OIly95kwRDV3
NYFiRXp380IEgn+yzUA407hmhIUJ2Efv6f3/CZ2fSrx+B8bKhgG+KBYnBMOVIjpo
fOB4fJIxRG0IDitGEL2oOq48koSArlWBNzt6NpdlepZUeHUtwhRStjC1XY/vsiiP
4898fQXJX8b6acaKcq/octQ8b/dcqll8cKaE1qSxroEKHY4o+s5c6rfbK80EfjQ0
y2+ya0i68TGtAoDe5djZZEvGgQExDd1KV2EUV1Zk0uaL3Mm6ScdBLStvo8n8B/mP
WeVjma87YjAOJYxrsrnNq0+FQRmlEt3cbW2GAgfq74oo6lFAt71SnFbHQQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLG+zwqJ93lFglSQP5kMHMkplOXXMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvc2I3UENvbjNlVVdDVkpBX21Rd2N5U21VNWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAJcrBMAwD
BAAlysMDBAElysgDBACX8mwDBACX8m8DBACX8nowDQYJKoZIhvcNAQELBQADggEB
ACZlGmC7TMccc/3nj6LAWzUhm+XATDaoKxBVnXlztUhk2xy1vYzxWxp0tA5BZ8bL
QvDEJO29vrGpvaEnT5sV1cTHZx3W9MhngigWB9jqmit3CV/3j6Zzm936UW5rxVk8
W+c9gSa/CDvJOzx3PhTQ2TaMiTRngYS4pw1PXZl58cJnTATTRQY/ILNQuYpSmLgx
lmETV2azdN4jFjF2j2lhL0JJHJPvsuIRoRY2GqEVUmMAWoki4yynVBzgtGl6o1XO
kkoaVgJHmuv2W2/F+d1vYVF0OL2+8NtwDIpYiCCcSRsBB07Vxzu03vXcdBtmH0cU
UO0UuRBwhk8I7ahMMgl4tdA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:48 2025 by rpki-client