Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa
File: CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa (raw, json)
Hash identifier: 2fQ0fJbFJmLOokw4tzaSLmT6+UmzzfHaw4FKPEJcqOo=
Subject key identifier: 09:8B:3C:63:84:24:0B:AA:4B:AD:17:54:85:0F:25:17:E7:2B:1E:FD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0195D2E26F2305CBBDE0BF19FE46694311C5
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa
Signing time: Wed 26 Mar 2025 14:36:49 +0000
ROA not before: Wed 26 Mar 2025 14:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 92.61.64.0/24 maxlen: 24
92.61.65.0/24 maxlen: 24
109.172.16.0/24 maxlen: 24
109.172.17.0/24 maxlen: 24
109.172.18.0/24 maxlen: 24
109.172.19.0/24 maxlen: 24
109.172.20.0/24 maxlen: 24
109.172.21.0/24 maxlen: 24
109.172.22.0/24 maxlen: 24
109.172.23.0/24 maxlen: 24
109.172.96.0/24 maxlen: 24
109.172.97.0/24 maxlen: 24
109.172.98.0/24 maxlen: 24
109.172.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:e2:6f:23:05:cb:bd:e0:bf:19:fe:46:69:43:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Mar 26 14:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098b3c6384240baa4bad1754850f2517e72b1efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:cf:7c:45:a8:f3:71:c4:fc:ee:a8:29:30:
e6:85:59:8d:e9:09:65:38:99:6e:a9:7c:b3:db:20:
9f:4d:1b:e3:55:4c:f1:3e:c3:1c:c6:04:ba:d9:4a:
d9:47:e5:92:d4:e4:21:cb:d2:06:9e:72:9b:5e:1c:
25:19:fb:b4:64:0e:be:0d:e1:e9:8c:df:55:64:e1:
da:66:f4:4c:cb:67:65:ad:fb:67:df:98:aa:e5:b4:
d7:8a:7e:aa:f4:ae:57:37:3f:b3:d5:99:1d:74:9c:
30:25:0e:13:41:b3:14:c9:61:92:1c:8b:44:8b:3a:
6c:01:af:ec:08:bd:71:b8:1a:8a:2d:12:a7:43:a3:
bd:f0:a2:a6:95:38:85:7e:9d:50:26:ee:bb:18:f6:
36:70:d6:85:5b:e4:cc:69:00:20:a7:b0:6d:b9:22:
88:c3:4e:51:43:f1:ef:e9:7f:6c:1f:74:a3:ab:d6:
62:62:ba:2c:d3:e8:34:f5:03:d3:44:e9:b7:9c:fa:
bb:3e:43:7d:35:49:42:73:5d:92:da:ed:75:59:44:
37:f5:ba:9a:a9:c3:0e:28:c3:a7:13:4d:f4:85:f8:
52:94:ff:56:5b:25:9c:d3:c7:55:f5:a6:29:47:bc:
24:6c:af:df:08:d1:d9:3c:8f:37:76:79:4c:0b:0d:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:3C:63:84:24:0B:AA:4B:AD:17:54:85:0F:25:17:E7:2B:1E:FD
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.64.0/23
109.172.16.0/21
109.172.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:d6:5a:87:11:41:61:9c:35:73:1c:15:0c:bd:66:a2:30:1e:
ce:b1:6e:05:24:ca:02:b1:a3:04:7a:17:96:ce:92:99:e7:e3:
f3:de:bc:8a:b8:5c:70:95:eb:a3:67:1e:6c:82:9b:07:65:59:
61:86:9d:54:f8:9a:65:26:9a:c9:64:64:6f:e7:d4:e8:bd:5c:
9a:ae:a4:5f:3a:3f:40:f7:1f:c2:3c:65:24:22:f3:c7:46:09:
3f:64:73:e6:3c:75:67:35:eb:b7:b8:4a:ff:3d:c9:3d:7a:26:
32:9d:04:6b:df:9a:b5:2a:f6:d2:88:d0:5b:30:24:8c:78:a5:
8b:69:ae:a9:69:37:bc:9d:ae:c5:03:db:3b:af:8b:c8:6a:81:
0f:e3:9f:c4:7f:a1:5c:33:23:77:67:e6:e2:f9:07:d6:b3:38:
73:91:86:67:df:6f:b5:8b:15:e2:6a:cb:80:2d:71:d2:2c:e5:
de:97:f3:2a:91:82:33:49:8f:0b:35:11:38:7d:94:5a:87:93:
a9:ed:73:ea:79:90:2a:52:1b:5a:3d:8c:dc:aa:bb:e1:de:57:
cb:7c:4e:03:4d:da:b8:f3:63:2c:3c:22:5b:bf:d1:43:b4:70:
7f:88:75:6e:21:05:23:e9:ec:52:1c:6e:43:bc:5e:fe:3c:9a:
c8:8d:21:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:06 2025 by rpki-client