Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Nb7Hg7akRGgFLg0o7rP2XiE5XvU.roa
File: Nb7Hg7akRGgFLg0o7rP2XiE5XvU.roa (raw, json)
Hash identifier: EbHLf1CAMq8uu0t9HdCeXITVauMDBAY269oNlJVY/XU=
Subject key identifier: 35:BE:C7:83:B6:A4:44:68:05:2E:0D:28:EE:B3:F6:5E:21:39:5E:F5
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019600E1087960BBB1FE1C9F7919E5F1787B
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Nb7Hg7akRGgFLg0o7rP2XiE5XvU.roa
Signing time: Fri 04 Apr 2025 12:57:49 +0000
ROA not before: Fri 04 Apr 2025 12:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
185.36.124.0/24 maxlen: 24
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:e1:08:79:60:bb:b1:fe:1c:9f:79:19:e5:f1:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Apr 4 12:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35bec783b6a44468052e0d28eeb3f65e21395ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:a9:10:1a:12:d9:9f:64:7c:c5:5f:de:65:
ba:7e:bb:b3:48:14:9f:90:0b:de:d2:a1:3a:1f:55:
49:1c:cf:f3:bf:87:31:80:67:10:45:47:61:b0:2a:
b0:4e:57:d1:97:4b:61:11:ec:ca:05:20:00:88:33:
46:bc:ab:d1:13:1f:69:96:2b:f5:f0:7b:bc:4c:db:
68:24:a3:83:10:41:a9:34:02:50:ba:23:c5:a6:39:
dc:ce:8a:84:8d:2b:56:3b:64:fb:cb:c4:21:f1:5e:
9b:f7:83:b3:26:fe:03:0b:0a:a6:ea:8c:34:7a:84:
11:d3:13:89:0d:44:0f:7c:42:a9:45:f1:fb:25:d1:
26:fe:8a:90:ec:fc:31:f1:a1:5f:83:6e:95:eb:12:
0e:97:5c:1a:76:72:41:75:c1:10:2a:51:cc:be:fd:
de:ca:64:f9:58:15:76:78:f4:37:02:0a:95:4d:a4:
2e:47:78:3d:2f:e6:94:6c:a0:fd:09:3e:2d:3f:53:
33:a6:99:ea:3d:64:81:d8:2a:90:97:f4:ec:82:f4:
15:2e:83:dc:7b:99:e5:73:92:48:bb:0e:e7:34:f9:
3c:10:66:fc:2e:05:fc:88:18:c2:3e:9d:9e:de:71:
60:1a:e2:a4:22:c1:b6:88:81:35:7d:9c:72:3b:29:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:C7:83:B6:A4:44:68:05:2E:0D:28:EE:B3:F6:5E:21:39:5E:F5
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Nb7Hg7akRGgFLg0o7rP2XiE5XvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
8d:a4:38:cc:92:36:d3:47:5b:6d:83:48:d3:12:33:5f:b9:ae:
e0:09:67:cc:ac:2a:b8:29:27:55:08:86:f5:1b:ae:2a:76:d3:
81:02:71:90:7b:0b:b6:f8:f0:5b:72:2d:e1:91:a7:b3:79:e5:
f6:34:75:a2:15:d0:80:5a:2b:ad:14:3b:c4:13:a9:7b:b3:4e:
96:65:5b:b2:a3:22:2f:ab:d4:45:bb:11:65:b1:22:96:23:33:
28:29:d4:39:4e:1d:d5:e5:d2:9e:da:f1:9e:77:ac:a9:03:b6:
e1:48:76:81:0c:4c:e8:b2:fd:27:e6:f9:4b:85:b2:10:34:af:
5c:26:15:19:84:20:94:2f:04:e3:14:eb:66:d5:12:82:7e:96:
fa:1b:2c:9c:90:d1:65:a7:f0:fa:b1:63:d4:4f:d6:f2:6f:b8:
86:0d:9b:a9:9b:35:b0:0c:39:21:5b:3d:bd:e8:21:4f:ce:34:
37:0f:35:52:94:1f:5c:a8:3f:56:f0:87:05:8c:9d:c4:4d:43:
97:a1:20:b1:f7:bc:22:b7:20:38:8d:f1:fd:cd:35:55:64:3d:
9c:63:64:c8:bf:47:02:19:65:05:c4:f0:2c:49:3a:cc:81:ce:
ba:b7:ca:0a:5e:18:df:82:69:c7:c5:08:05:41:75:65:ff:28:
6b:0f:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:54:26 2025 by rpki-client