Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/OCUMyaB2g4jhQgIXQ_njFrrkC4Q.roa
File: OCUMyaB2g4jhQgIXQ_njFrrkC4Q.roa (raw, json)
Hash identifier: 85JTr/kuwYRdyXfwgiaqG0NdUyxA3Tafu+qHo76UFeI=
Subject key identifier: 38:25:0C:C9:A0:76:83:88:E1:42:02:17:43:F9:E3:16:BA:E4:0B:84
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0195F266FAE31857572C527DBCFC6E3D7534
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/OCUMyaB2g4jhQgIXQ_njFrrkC4Q.roa
Signing time: Tue 01 Apr 2025 17:29:50 +0000
ROA not before: Tue 01 Apr 2025 17:29:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 37.156.35.0/24 maxlen: 24
46.102.191.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
84.247.36.0/22 maxlen: 24
86.105.151.0/24 maxlen: 24
86.105.224.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.77.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.81.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
89.34.174.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.64.0/23 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.69.0/24 maxlen: 24
89.40.104.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
93.117.175.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
94.176.164.0/23 maxlen: 24
94.177.58.0/24 maxlen: 24
176.223.163.0/24 maxlen: 24
188.215.78.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:66:fa:e3:18:57:57:2c:52:7d:bc:fc:6e:3d:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 1 17:29:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38250cc9a0768388e142021743f9e316bae40b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:b7:03:bc:fa:ce:48:b1:fb:b5:55:b9:82:
7e:fc:55:b2:cb:6d:d8:37:03:97:1b:92:e5:f0:bc:
db:1c:07:35:05:76:ea:57:35:a7:be:f3:93:e7:a9:
0c:f4:a6:5d:32:07:56:84:21:2c:1f:0d:28:a8:31:
0c:40:8d:ae:dc:c2:0f:a5:0c:2d:6a:e3:89:f7:db:
95:0b:31:d8:00:14:cd:01:27:2f:f4:3c:68:79:4c:
b5:af:7a:f9:3a:51:88:c7:3b:28:98:d4:31:2c:29:
29:75:92:1c:b1:1b:05:28:ea:32:ab:c5:b0:8d:ad:
9b:a8:a6:98:a8:fa:f1:05:61:3b:88:39:f4:a5:06:
83:62:4b:cd:be:69:c0:25:38:6f:fc:86:f6:54:0f:
fa:77:af:26:a7:e5:37:c8:84:7c:66:3d:e9:c5:63:
19:31:91:6f:72:47:98:0c:81:a5:3d:22:ea:a7:ce:
7c:a8:f1:1e:d3:d5:77:dc:00:86:ab:29:8b:84:c9:
48:67:a9:01:fb:0b:ee:b8:1a:d3:ec:0e:a3:21:de:
0a:2d:ed:84:e3:1a:fd:7a:03:61:93:2d:57:fd:02:
a8:b4:88:6f:fc:94:1b:d5:50:96:a1:da:51:41:a0:
85:7b:8f:b4:f3:6e:cf:c4:09:53:fc:43:57:ff:01:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:0C:C9:A0:76:83:88:E1:42:02:17:43:F9:E3:16:BA:E4:0B:84
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/OCUMyaB2g4jhQgIXQ_njFrrkC4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
46.102.191.0/24
77.81.183.0/24
84.247.36.0/22
86.105.151.0/24
86.105.224.0/24
86.107.47.0/24
86.107.77.0/24
86.107.184.0/24
86.107.244.0/23
89.33.81.0/24
89.33.87.0/24
89.34.90.0/24
89.34.174.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.64.0/23
89.39.80.0/24
89.39.90.0/24
89.40.65.0/24
89.40.69.0/24
89.40.104.0/23
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
93.117.175.0/24
94.176.3.0/24
94.176.164.0/23
94.177.58.0/24
176.223.163.0/24
188.215.78.0/24
188.240.17.0/24
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fa:cf:9e:38:e4:6e:89:6d:ef:69:68:f3:a7:fd:dd:45:62:
df:4f:ef:ad:b8:8e:57:aa:1b:8c:ff:50:4d:c6:d6:7d:76:be:
f0:4d:8e:4b:04:23:c4:bc:ee:64:b3:e5:6a:d2:6b:8c:06:c8:
e3:cb:f2:08:4f:1e:e4:cc:3e:08:ad:8f:e6:e3:06:87:b5:bd:
c1:b4:e6:c5:7c:a8:7d:37:64:07:79:c0:4f:bc:ef:58:9c:bf:
d6:d1:9e:7c:de:19:80:a1:34:cd:7a:12:e3:d0:5d:83:39:c7:
01:7a:95:f3:4f:9e:ff:5c:a8:ee:f9:3a:92:61:04:6d:33:eb:
e7:aa:a3:7b:6e:1d:d7:d6:1b:f4:88:1c:ad:b5:f5:da:72:6b:
20:67:b2:41:e3:59:0b:63:aa:bb:94:3e:12:b7:19:ec:18:27:
dd:87:1f:76:4d:87:21:28:9f:16:a3:a5:f2:a5:1f:bb:e7:4a:
90:60:99:fd:16:83:7e:e8:e2:ee:21:de:7e:51:7a:89:51:5e:
67:68:5c:65:f7:9c:31:0c:2c:46:56:f8:38:7a:a0:e6:70:23:
df:2e:15:22:97:c1:d9:53:a8:09:3c:8e:82:f8:93:90:35:c5:
43:e8:e1:85:b7:d3:7b:08:58:b3:e4:71:66:d2:cb:57:42:32:
be:7b:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:50:57 2025 by rpki-client