Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/sxbnQp-HZOAWEFzphM2K1lCVnVg.roa
File: sxbnQp-HZOAWEFzphM2K1lCVnVg.roa (raw, json)
Hash identifier: kEKMwrabqx6d8HV9sni4rJcCg8Olec1gaFW1f6LNEvE=
Subject key identifier: B3:16:E7:42:9F:87:64:E0:16:10:5C:E9:84:CD:8A:D6:50:95:9D:58
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019426D9E0E1C3242AEA59511F623E6D941A
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/sxbnQp-HZOAWEFzphM2K1lCVnVg.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39759
IP address blocks: 89.186.32.0/19 maxlen: 19
89.186.32.0/20 maxlen: 20
89.186.32.0/21 maxlen: 21
89.186.40.0/21 maxlen: 21
89.186.42.0/24 maxlen: 24
89.186.43.0/24 maxlen: 24
89.186.48.0/20 maxlen: 20
89.186.48.0/24 maxlen: 24
89.186.49.0/24 maxlen: 24
89.186.50.0/24 maxlen: 24
89.186.53.0/24 maxlen: 24
89.186.54.0/24 maxlen: 24
89.186.55.0/24 maxlen: 24
89.186.56.0/24 maxlen: 24
89.186.57.0/24 maxlen: 24
89.186.58.0/24 maxlen: 24
89.186.59.0/24 maxlen: 24
89.186.60.0/24 maxlen: 24
89.186.61.0/24 maxlen: 24
89.186.62.0/24 maxlen: 24
89.186.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e0:e1:c3:24:2a:ea:59:51:1f:62:3e:6d:94:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b316e7429f8764e016105ce984cd8ad650959d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:58:c7:54:38:59:11:e9:81:27:f0:48:31:
91:f8:4c:44:d4:88:cf:8c:f9:26:3e:11:22:9d:c8:
3a:73:46:1e:d2:dc:88:bc:7d:d8:7e:b8:9a:54:da:
be:44:19:af:37:2d:f7:aa:03:21:25:e9:36:d2:86:
4c:d3:82:9f:eb:fe:ef:1c:d9:a6:3f:f1:a8:8c:43:
1c:e1:d9:df:a2:0c:3e:34:84:26:7e:e4:bc:65:80:
03:d6:74:3e:ba:c2:c0:61:a4:10:de:c3:5a:6f:24:
8c:00:8d:f4:4d:67:6e:2a:c8:f7:1f:18:8b:25:be:
e6:01:fd:0e:e1:22:cf:0c:68:b8:b4:9f:2e:b5:c1:
dd:0f:d0:d1:58:74:af:a3:44:c0:80:67:8c:07:d6:
e5:28:a3:3b:cd:a7:a4:e2:26:22:38:f7:c0:ca:92:
b9:46:2f:da:72:8c:d7:97:eb:18:00:1a:1d:48:4b:
c9:31:28:d2:3d:2c:cd:57:ac:d5:4e:db:17:8f:35:
83:20:50:5c:c5:16:fb:ed:3d:c1:0c:e7:dd:d2:10:
8d:04:81:b3:5e:55:db:32:ef:e3:c5:73:7e:b2:d9:
89:f0:ff:dd:ae:39:9d:57:7d:e6:a3:56:1b:b0:3e:
09:31:d4:54:67:e3:e4:9b:8e:ef:e3:1b:ac:4d:96:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:E7:42:9F:87:64:E0:16:10:5C:E9:84:CD:8A:D6:50:95:9D:58
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/sxbnQp-HZOAWEFzphM2K1lCVnVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:48:be:df:83:ee:89:e0:a2:be:2c:c5:08:40:38:cb:ae:16:
7a:4b:68:4a:83:74:5c:54:63:0a:ea:e2:11:9d:2e:71:bb:9d:
b2:87:ad:a9:c4:fb:ad:5a:a8:35:d6:8f:b6:62:17:d3:0c:dd:
6c:f0:cd:31:95:0d:88:11:39:cf:7d:ae:8a:6e:05:48:4d:f9:
f3:49:f5:99:27:01:94:b3:2a:44:54:f4:6e:ef:03:99:74:f8:
72:8f:a2:27:2b:56:fa:0a:9d:31:c0:bf:95:f2:37:6a:ec:ee:
59:f2:43:b1:15:42:f2:3a:4c:27:b1:83:f9:82:e3:22:0f:95:
9b:80:9a:1b:38:5a:bd:ea:f0:fb:cb:38:02:d8:83:7b:31:2e:
9a:2c:74:0c:17:81:60:b9:21:95:94:be:6c:44:c1:22:77:df:
90:88:03:ba:8e:70:1f:9a:6e:f8:db:f2:4c:dd:e5:75:c3:94:
c8:fd:83:e8:04:7f:68:27:be:7e:67:8c:1a:19:70:93:a9:d6:
ac:a6:34:d5:9d:d8:46:80:52:de:d1:4a:56:28:ca:14:b1:89:
c1:83:c4:de:7b:d9:f5:94:58:4d:d7:6f:6d:9f:b0:99:a6:07:
3d:3a:f6:1f:76:bb:c6:ff:37:c9:82:30:94:53:8c:b1:d8:31:
ef:7f:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:18 2025 by rpki-client