Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/fqLEL6poBmeg0u3l_HiFBte4OcU.roa
File: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (raw, json)
Hash identifier: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=
Subject key identifier: 7E:A2:C4:2F:AA:68:06:67:A0:D2:ED:E5:FC:78:85:06:D7:B8:39:C5
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01957242426D385A3B1FFAA6C1FAECECE908
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/fqLEL6poBmeg0u3l_HiFBte4OcU.roa
Signing time: Fri 07 Mar 2025 20:18:19 +0000
ROA not before: Fri 07 Mar 2025 20:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200482
IP address blocks: 37.114.35.0/24 maxlen: 32
37.114.38.0/24 maxlen: 24
37.114.60.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
43.251.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:72:42:42:6d:38:5a:3b:1f:fa:a6:c1:fa:ec:ec:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Mar 7 20:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea2c42faa680667a0d2ede5fc788506d7b839c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:bc:75:5a:33:83:77:a2:92:be:bf:ef:3d:
1e:b4:5b:30:dd:fb:ca:1b:c8:79:5d:35:60:47:17:
d9:37:79:43:4b:da:19:db:e0:d3:73:46:36:fb:d6:
b1:1f:60:84:9b:50:55:e2:6f:b7:43:4c:14:b0:97:
34:43:01:9c:d4:81:08:f4:57:e0:f8:0d:30:05:60:
fe:3e:bf:05:e6:7b:96:47:28:db:50:9a:09:6e:c5:
65:4d:3b:79:6f:50:1f:48:07:a3:25:b3:94:54:58:
95:e2:d8:c6:d8:91:17:cf:35:d5:71:c5:57:4a:50:
f3:32:8a:ca:02:f0:a1:8a:58:db:b4:94:d2:69:e7:
cf:85:cd:ea:f3:07:35:9e:50:89:db:88:3c:51:eb:
e1:52:af:b4:5f:4c:d7:a8:4b:8b:ac:57:42:d6:b3:
a7:46:a0:bb:47:54:55:d8:c5:8a:03:3e:50:e6:1e:
3f:93:89:5d:c2:5c:49:47:27:a6:bf:7c:8c:1b:77:
0e:79:f0:d5:ab:97:25:6a:48:1c:dd:af:21:f1:b7:
ce:f8:f8:e8:08:48:db:7c:a9:db:cf:6b:62:bb:62:
2e:b4:21:c4:ae:60:7a:0d:21:81:66:4c:5b:73:6b:
47:1c:db:f8:da:4c:cc:f3:d8:e1:64:d0:08:20:ab:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:C4:2F:AA:68:06:67:A0:D2:ED:E5:FC:78:85:06:D7:B8:39:C5
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/fqLEL6poBmeg0u3l_HiFBte4OcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.35.0/24
37.114.38.0/24
37.114.60.0/23
43.251.162.0/23
Signature Algorithm: sha256WithRSAEncryption
84:8f:80:22:89:81:8c:3c:54:fa:e2:ab:3a:31:63:31:9f:83:
a9:f1:28:ea:61:0a:68:b1:47:ac:b2:44:b1:4c:37:b5:3e:9c:
a9:49:ec:2f:ef:73:01:a6:b0:9d:a3:28:aa:28:1c:2f:ed:9e:
2d:8d:d3:bd:82:5b:b1:66:1d:e0:e0:be:61:86:20:6d:b5:fa:
94:83:23:57:41:e1:d1:00:2e:4c:66:15:05:6e:ef:f4:0d:65:
bd:f6:c4:12:20:41:c5:51:9d:9c:e9:87:1e:67:fd:23:4b:85:
68:07:53:ba:c4:9f:2d:c2:2a:fb:7e:62:57:5a:eb:89:23:61:
f5:c0:26:5d:a0:67:a2:99:82:b6:47:56:97:9f:ab:33:04:6f:
8c:df:c2:02:4c:fb:9b:fd:e1:ef:0e:8d:33:8c:13:18:1c:fd:
34:cc:1e:fd:ab:7b:c8:ac:3c:f4:82:a6:da:ab:01:c7:b3:e9:
8b:a8:89:bd:07:f2:2b:86:ad:b2:6d:49:03:f2:fb:d2:ef:bf:
da:38:c4:c1:9c:c3:58:78:db:c3:03:69:36:dd:89:a9:8b:14:
ea:84:71:99:ba:6b:07:11:22:aa:48:93:78:5f:82:ea:cc:1f:
58:db:6f:f8:52:9f:36:e2:d4:ab:75:21:b0:c6:9e:37:24:43:
2e:49:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:37 2025 by rpki-client