Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Xp7xkGck5HfUbla90352EjK1R_4.roa
File: Xp7xkGck5HfUbla90352EjK1R_4.roa (raw, json)
Hash identifier: j33DUUX9yDrQBerlsMfMuiwGPme7s1p3cgAMKdvHfjc=
Subject key identifier: 5E:9E:F1:90:67:24:E4:77:D4:6E:56:BD:D3:7E:76:12:32:B5:47:FE
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01957F2E0F5222927C97E47D37B059643F7D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Xp7xkGck5HfUbla90352EjK1R_4.roa
Signing time: Mon 10 Mar 2025 08:31:19 +0000
ROA not before: Mon 10 Mar 2025 08:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56882
IP address blocks: 37.209.160.0/21 maxlen: 21
45.252.236.0/22 maxlen: 22
46.251.252.0/23 maxlen: 23
46.251.254.0/23 maxlen: 23
84.236.154.0/24 maxlen: 24
84.236.156.0/24 maxlen: 24
84.236.157.0/24 maxlen: 24
84.236.158.0/24 maxlen: 24
91.228.91.0/24 maxlen: 24
115.42.52.0/22 maxlen: 22
168.245.196.0/23 maxlen: 23
185.59.64.0/24 maxlen: 24
185.59.65.0/24 maxlen: 24
185.59.66.0/24 maxlen: 24
185.59.67.0/24 maxlen: 24
185.130.152.0/22 maxlen: 22
185.193.8.0/22 maxlen: 22
188.227.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:2e:0f:52:22:92:7c:97:e4:7d:37:b0:59:64:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Mar 10 08:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9ef1906724e477d46e56bdd37e761232b547fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:34:8b:3c:1f:9f:89:f5:8d:c6:28:13:b4:
15:6d:44:bc:a6:22:e6:4e:d7:78:7c:71:5b:10:77:
4d:16:34:de:cd:17:59:50:d7:3f:cc:8e:b2:f4:da:
79:87:e2:0a:27:a4:35:c5:8f:0f:e8:53:1e:5b:56:
95:3d:d4:7f:70:57:24:e4:cb:e4:5f:16:d0:02:f6:
8d:6c:78:bd:bd:9c:11:8b:6c:f3:19:84:d2:74:1e:
b2:51:df:ef:9f:e0:6c:4d:7a:16:f2:c4:48:a7:26:
24:f7:3f:a4:06:5d:ce:97:28:89:04:97:72:af:a1:
27:b1:1a:a8:ed:f2:05:f8:c4:3b:e3:33:a0:4a:f2:
07:0a:77:2d:11:80:0e:a3:7b:71:97:18:76:f8:9a:
8b:d2:9e:4e:a5:ae:af:d8:d6:28:51:d5:7d:67:2a:
8c:c0:3d:94:cd:29:64:2d:6d:7c:41:9b:9d:1a:45:
98:08:5f:4d:b4:dc:a7:fe:4b:1e:7d:2f:0f:c2:af:
20:02:73:80:97:12:78:6d:43:79:a2:97:d8:ef:56:
16:38:15:ed:7b:61:c6:17:5a:d9:8b:47:fe:73:87:
f6:6f:f9:c8:f6:b7:58:6f:8e:a3:b4:07:1f:7c:cd:
17:10:94:19:02:02:d3:1f:a6:5c:35:10:33:fb:9b:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:F1:90:67:24:E4:77:D4:6E:56:BD:D3:7E:76:12:32:B5:47:FE
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Xp7xkGck5HfUbla90352EjK1R_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
84.236.154.0/24
84.236.156.0-84.236.158.255
91.228.91.0/24
115.42.52.0/22
168.245.196.0/23
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.227.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:77:a7:a6:1e:2a:5f:f4:7e:c9:ae:bb:22:77:93:bc:23:f5:
29:c0:d1:1f:eb:93:b3:4b:d6:1c:d6:35:36:ba:c0:88:25:cd:
9f:9e:1e:51:ca:4c:d3:1b:3f:13:f6:f2:9d:3b:83:d2:47:ba:
fb:da:92:59:84:3d:35:26:28:04:72:3a:90:7c:15:c9:e2:5e:
41:20:ed:b2:6d:1c:47:4f:1b:f0:32:0c:d0:f1:2c:86:47:5b:
79:bf:27:a8:ac:32:34:c6:2e:b9:79:07:43:e7:ce:08:a8:1e:
5b:34:71:73:dd:53:cc:5c:3a:73:ab:5f:c3:9b:cc:3f:fc:9d:
65:1b:2d:a4:09:5a:4a:9a:b2:3e:17:53:97:02:62:e7:56:e7:
08:49:f2:16:50:b7:6e:f2:fd:83:ec:d4:ae:b5:8f:e4:95:de:
34:18:64:59:a3:f8:7f:19:44:c4:d8:66:c5:cb:66:97:0c:22:
f2:3f:fb:81:df:1f:36:c1:e5:50:b9:27:07:20:c9:e2:5c:59:
c7:09:4e:10:46:07:c5:0e:eb:d0:7c:d4:72:e4:b0:f7:47:ba:
fd:53:ec:ef:ab:e6:90:e0:7e:43:25:78:f1:7d:05:ff:6d:ee:
89:e2:a1:78:59:9d:82:c9:f2:00:b2:ee:84:b6:7b:95:2c:18:
b3:cf:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:52:28 2025 by rpki-client