Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa
File: 7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa (raw, json)
Hash identifier: R8gbeupipBj48kbjD7lgb4EsVwsAH7m0IhgzRcQdmw8=
Subject key identifier: ED:CF:0A:22:34:A7:1B:12:8F:FC:54:93:A4:58:7D:6B:40:B9:7D:51
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 01963D3734D2877DF80877A3CE8052D11E29
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa
Signing time: Wed 16 Apr 2025 06:09:10 +0000
ROA not before: Wed 16 Apr 2025 06:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28761
IP address blocks: 91.224.30.0/23 maxlen: 23
91.232.116.0/24 maxlen: 24
91.232.118.0/23 maxlen: 23
185.76.80.0/24 maxlen: 24
188.191.16.0/22 maxlen: 22
188.191.16.0/24 maxlen: 24
188.191.17.0/24 maxlen: 24
188.191.18.0/24 maxlen: 24
188.191.19.0/24 maxlen: 24
188.191.24.0/24 maxlen: 24
188.191.25.0/24 maxlen: 24
188.191.26.0/24 maxlen: 24
188.191.27.0/24 maxlen: 24
193.188.254.0/24 maxlen: 24
194.140.228.0/24 maxlen: 24
195.26.80.0/24 maxlen: 24
195.26.81.0/24 maxlen: 24
195.26.82.0/23 maxlen: 23
195.49.204.0/23 maxlen: 23
2a05:5840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:37:34:d2:87:7d:f8:08:77:a3:ce:80:52:d1:1e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Apr 16 06:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edcf0a2234a71b128ffc5493a4587d6b40b97d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:99:3f:80:28:f5:1e:80:c6:c3:b5:b6:d6:
1c:0d:69:5c:7f:60:56:99:99:4b:03:4b:19:88:d2:
df:5f:2e:51:72:f6:aa:d8:bf:46:e0:e2:c7:dc:60:
a3:27:2f:d6:61:ad:8c:3c:b8:f0:f5:15:2d:74:b5:
53:5a:66:54:15:df:81:cd:08:ff:fc:7b:24:2f:6e:
10:20:21:31:f0:2b:aa:b1:e6:f6:e1:15:15:99:a3:
91:06:54:20:5f:f9:9a:36:71:c5:49:55:12:b1:1d:
0f:21:52:35:ee:49:c0:89:cc:33:d3:e8:06:80:23:
52:f8:57:38:79:3e:1b:59:e4:42:8a:fc:3a:03:cc:
3a:cc:6b:9c:2e:c1:a4:24:83:bb:98:ed:ee:9e:a4:
2e:17:79:98:c9:3e:6b:81:b2:54:63:73:c7:b4:44:
5b:07:a9:75:56:33:fa:23:63:58:c9:14:1a:71:ae:
d9:e2:d8:3a:9d:5f:d2:2a:50:78:1d:ee:1c:87:7f:
9c:d5:96:5d:e2:54:f4:0f:74:9a:94:66:56:93:b6:
00:97:9f:f7:c5:4f:90:50:24:2e:44:f2:e2:ba:c6:
6f:c2:71:c8:cb:36:cf:05:69:99:e2:59:1b:2d:26:
30:49:f0:be:f8:34:d5:41:56:b3:72:7a:ab:16:23:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:0A:22:34:A7:1B:12:8F:FC:54:93:A4:58:7D:6B:40:B9:7D:51
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.30.0/23
91.232.116.0/24
91.232.118.0/23
185.76.80.0/24
188.191.16.0/22
188.191.24.0/22
193.188.254.0/24
194.140.228.0/24
195.26.80.0/22
195.49.204.0/23
IPv6:
2a05:5840::/32
Signature Algorithm: sha256WithRSAEncryption
1e:e6:87:4e:22:22:81:fc:52:39:7d:63:67:1c:db:12:f9:7f:
ae:7b:87:ee:db:07:dd:9b:17:08:b5:03:d0:58:aa:43:bd:c9:
91:7b:55:8d:4d:d1:9f:fd:6a:b7:29:70:77:7e:29:c2:66:e5:
c5:01:6b:33:4d:74:b9:b8:3a:65:ff:01:5f:d5:a9:a2:73:51:
d4:80:d6:46:d5:d6:32:84:f6:bf:ff:75:ee:91:6d:99:61:57:
44:72:4f:fc:14:88:c2:18:94:73:c0:b2:90:05:53:52:a7:58:
57:09:4b:ee:8d:1c:3d:c8:43:5e:d7:5e:88:25:28:95:df:35:
64:11:e4:05:77:a6:35:67:86:ea:9d:8d:5f:a1:1c:12:ba:22:
be:f6:63:28:9e:d9:54:55:d1:39:48:2a:f3:86:e6:07:25:8f:
84:74:3e:c9:04:5d:47:c5:61:94:7d:b6:d2:a8:38:43:dc:d5:
17:e2:55:c9:36:2a:46:db:17:8d:23:da:da:6d:75:fd:b9:67:
54:31:0f:8a:04:3f:71:50:78:2c:68:bd:72:fa:6c:86:7b:7e:
ac:b7:ff:be:ca:f0:04:e4:c5:6b:30:56:ad:c8:3c:1d:16:f5:
b6:4e:33:b2:25:8f:5f:b3:2d:73:18:45:aa:ee:1d:d1:f1:5a:
7c:e8:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:26:50 2025 by rpki-client