Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Nhl6HZFw6I8c4k4TcpZay4wgjDM.roa
File: Nhl6HZFw6I8c4k4TcpZay4wgjDM.roa (raw, json)
Hash identifier: CwoVe5wR0diWrJQVceQbCJVJgGJjiHATIuvo8A+gs0U=
Subject key identifier: 36:19:7A:1D:91:70:E8:8F:1C:E2:4E:13:72:96:5A:CB:8C:20:8C:33
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01953E155EFEE228641808F4683B4FAE7394
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Nhl6HZFw6I8c4k4TcpZay4wgjDM.roa
Signing time: Tue 25 Feb 2025 17:09:02 +0000
ROA not before: Tue 25 Feb 2025 17:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64080
IP address blocks: 45.43.64.0/24 maxlen: 24
45.43.65.0/24 maxlen: 24
45.43.67.0/24 maxlen: 24
45.43.68.0/22 maxlen: 24
45.43.80.0/22 maxlen: 24
45.43.84.0/23 maxlen: 24
45.43.87.0/24 maxlen: 24
45.43.93.0/24 maxlen: 24
45.43.94.0/24 maxlen: 24
45.43.95.0/24 maxlen: 24
87.239.253.0/24 maxlen: 24
89.33.6.0/23 maxlen: 24
94.177.5.0/24 maxlen: 24
107.181.128.0/22 maxlen: 24
107.181.132.0/23 maxlen: 24
107.181.140.0/22 maxlen: 24
107.181.148.0/23 maxlen: 24
107.181.150.0/24 maxlen: 24
107.181.152.0/24 maxlen: 24
107.181.153.0/24 maxlen: 24
107.181.154.0/24 maxlen: 24
113.20.157.0/24 maxlen: 24
113.20.158.0/24 maxlen: 24
155.254.32.0/24 maxlen: 24
155.254.33.0/24 maxlen: 24
155.254.34.0/24 maxlen: 24
155.254.36.0/22 maxlen: 24
155.254.48.0/23 maxlen: 24
155.254.61.0/24 maxlen: 24
162.220.246.0/23 maxlen: 24
198.105.100.0/22 maxlen: 24
198.105.108.0/24 maxlen: 24
198.105.109.0/24 maxlen: 24
198.105.110.0/24 maxlen: 24
198.105.111.0/24 maxlen: 24
198.105.119.0/24 maxlen: 24
198.105.121.0/24 maxlen: 24
198.105.122.0/24 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
2a05:9f46::/32 maxlen: 48
2a05:9f47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:15:5e:fe:e2:28:64:18:08:f4:68:3b:4f:ae:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 25 17:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36197a1d9170e88f1ce24e1372965acb8c208c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:28:7e:fe:48:e2:3d:fd:75:a6:a0:aa:fd:
47:17:1c:e6:f1:22:c2:d6:c3:8b:9a:d2:a1:af:18:
a0:2f:12:7b:5f:ce:f5:7e:aa:7b:c7:6b:92:78:d9:
19:90:32:e3:9b:2f:f0:ee:35:8a:32:c2:b0:db:4e:
18:16:ce:39:bc:8f:e4:cc:f7:46:26:6e:99:4e:ca:
31:6a:e0:81:72:50:21:27:c1:65:60:4f:b7:44:18:
13:1c:06:02:6a:3a:b9:5f:98:57:85:50:6b:66:b1:
3c:72:ae:2b:4f:e9:c1:56:91:f0:2d:89:2b:1b:c8:
74:1e:33:73:39:42:fa:66:e7:61:84:db:5d:95:5c:
ab:32:da:16:77:ee:d1:df:be:f5:5b:cc:28:a7:5c:
99:4c:6f:d3:36:fb:dc:0d:21:f4:23:ed:33:5d:cf:
fd:bb:7e:29:ca:50:3c:17:6d:a0:c5:d3:44:8e:e8:
3e:61:1c:ea:50:6d:24:5d:0d:a3:1a:68:83:23:08:
d7:64:68:3a:f6:8b:4c:9e:1a:51:ef:7d:56:dd:c3:
c5:bc:b0:c8:6f:cb:06:47:ca:e1:3e:7a:74:e7:cf:
87:9d:fc:fe:14:88:61:df:1e:ba:a9:ef:ca:ef:5b:
40:c7:a3:c7:29:44:94:3e:cb:d3:8f:85:25:3a:09:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:7A:1D:91:70:E8:8F:1C:E2:4E:13:72:96:5A:CB:8C:20:8C:33
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Nhl6HZFw6I8c4k4TcpZay4wgjDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.67.0-45.43.71.255
45.43.80.0-45.43.85.255
45.43.87.0/24
45.43.93.0-45.43.95.255
87.239.253.0/24
89.33.6.0/23
94.177.5.0/24
107.181.128.0-107.181.133.255
107.181.140.0/22
107.181.148.0-107.181.150.255
107.181.152.0-107.181.154.255
113.20.157.0-113.20.158.255
155.254.32.0-155.254.34.255
155.254.36.0/22
155.254.48.0/23
155.254.61.0/24
162.220.246.0/23
198.105.100.0/22
198.105.108.0/22
198.105.119.0/24
198.105.121.0-198.105.122.255
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
2a05:9f46::/31
Signature Algorithm: sha256WithRSAEncryption
74:ac:12:0d:a1:0b:28:66:fc:41:29:73:11:bc:5e:b1:05:6b:
8f:d7:7c:5a:59:85:a9:d3:89:09:5f:ed:ec:91:b3:bc:2c:39:
5c:9c:a1:42:f7:c2:a9:ef:b0:68:a6:ea:16:d4:96:d2:62:0e:
8f:27:5a:3b:26:ee:75:c7:48:96:91:8f:b8:38:89:bd:73:bb:
f5:72:f5:7d:d2:f3:17:0d:92:81:89:e1:0a:a8:07:e9:a0:e5:
9b:cc:98:d7:07:02:ac:5d:bf:88:c9:b5:87:2a:a8:d9:d1:92:
79:7a:e0:e1:44:0e:b6:ae:77:5d:57:a2:cf:92:fd:e9:7c:80:
29:70:9e:64:7c:17:67:63:fb:94:88:b7:7f:93:c3:4f:48:12:
af:2a:e5:91:6f:10:0e:90:79:2f:9f:83:ef:b3:24:b5:b1:74:
65:f3:b2:91:4a:df:85:6a:46:8d:39:1d:4c:dd:f8:6a:d4:e1:
04:28:b3:56:40:04:4d:9d:fc:09:e2:bb:ba:60:97:3a:9e:6b:
35:08:a8:50:3a:48:4d:af:92:65:7c:0b:65:a3:93:6b:3b:d5:
31:64:36:90:9b:9b:ca:24:7d:f8:5d:28:50:ec:a2:20:b8:52:
91:e7:7e:34:8c:d6:78:72:ec:c5:f2:ef:5c:d6:d5:14:40:ac:
b3:d9:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:52 2025 by rpki-client