Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/OUilzXTcj1C5IxqwTcIvFcEnut4.roa
File: OUilzXTcj1C5IxqwTcIvFcEnut4.roa (raw, json)
Hash identifier: ScF92vyKdeSTCInzPeIkBQHDmWHpsl0XDNVwCXOxpW0=
Subject key identifier: 39:48:A5:CD:74:DC:8F:50:B9:23:1A:B0:4D:C2:2F:15:C1:27:BA:DE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01961FC16D6AEE10557A593D33139603FB89
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/OUilzXTcj1C5IxqwTcIvFcEnut4.roa
Signing time: Thu 10 Apr 2025 12:51:32 +0000
ROA not before: Thu 10 Apr 2025 12:51:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215597
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
212.95.142.0/24 maxlen: 24
212.95.148.0/24 maxlen: 24
212.95.156.0/24 maxlen: 24
2a12:f680:200::/48 maxlen: 48
2a12:f680:201::/48 maxlen: 48
2a12:f680:204::/48 maxlen: 48
2a12:f680:205::/48 maxlen: 48
2a12:f680:600::/48 maxlen: 48
2a12:f680:601::/48 maxlen: 48
2a12:f680:604::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:c1:6d:6a:ee:10:55:7a:59:3d:33:13:96:03:fb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Apr 10 12:51:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3948a5cd74dc8f50b9231ab04dc22f15c127bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:6f:70:8b:6a:79:cb:02:50:04:5a:64:e8:
ed:ec:6c:d2:10:db:86:14:a6:4b:8d:c4:0a:2b:ca:
0a:44:b7:14:1f:a1:b1:3b:ee:48:fa:3a:fd:fa:e1:
6b:dd:fa:94:83:4d:a8:2d:d8:a3:10:49:37:82:4b:
fa:6d:6c:3a:43:67:d2:9b:fa:93:a5:28:78:7a:e9:
bf:75:2c:87:06:5e:46:e3:c5:b1:a3:3a:46:db:0a:
49:61:71:77:d2:df:64:6c:8c:e7:75:bb:5c:9e:b1:
0d:b5:5d:6a:45:c6:6e:ed:af:00:11:70:e3:11:c8:
69:6a:d1:7d:2d:e6:c8:fc:14:e0:43:3e:46:a9:5c:
d4:13:7d:b9:35:8b:0a:00:6c:64:8b:67:c5:e7:59:
5b:45:5d:90:10:b8:5a:a2:6b:57:6b:c9:b5:0e:05:
36:a0:19:57:8b:59:d6:8f:93:55:50:68:9a:3f:c1:
9e:e8:8b:c4:34:e3:c2:e4:09:a6:9e:ab:04:23:b6:
6c:7a:7a:b9:8a:3d:9c:e0:6c:34:7b:4c:94:14:c9:
84:a6:ca:4d:ae:a6:5f:87:1e:40:47:84:dc:16:8e:
2c:6f:92:6f:49:df:ef:83:4e:44:89:ad:01:f2:cb:
b8:ab:e7:35:94:b2:50:33:ab:15:50:0e:32:a4:a0:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:A5:CD:74:DC:8F:50:B9:23:1A:B0:4D:C2:2F:15:C1:27:BA:DE
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/OUilzXTcj1C5IxqwTcIvFcEnut4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/23
82.199.222.0/23
91.213.191.0/24
91.217.185.0/24
185.95.206.0/23
212.95.142.0/24
212.95.148.0/24
212.95.156.0/24
IPv6:
2a12:f680:200::/47
2a12:f680:204::/47
2a12:f680:600::/47
2a12:f680:604::/48
Signature Algorithm: sha256WithRSAEncryption
43:11:5b:67:39:f3:0c:99:f0:b1:0e:21:7f:70:ba:ef:bf:ee:
1f:07:9c:6d:ea:da:4a:bb:61:38:05:34:72:6e:d5:dd:b2:6d:
dc:a6:3c:f8:b7:7b:24:75:21:a6:bd:f1:37:85:dc:93:97:8b:
2a:00:d3:4d:67:42:71:20:f9:42:b1:a8:d6:5f:4c:ce:1b:49:
a2:63:18:3c:98:98:3e:78:69:83:2e:5a:27:1a:68:c2:2e:f1:
3f:eb:d5:ab:21:24:4c:2f:d2:11:b1:c4:67:2c:e1:d5:1d:ec:
40:38:46:e4:71:98:75:11:49:5e:c2:59:09:86:44:f5:bd:a6:
88:7f:2c:9e:9f:9e:b7:72:89:b9:5e:a8:ad:49:3a:8f:a9:7a:
b8:15:21:6a:a6:5c:29:ed:3f:6c:b8:76:f8:5e:b3:9e:32:1f:
76:58:ae:06:f2:f0:8f:a3:57:b7:9c:03:66:d6:bb:79:ff:09:
b4:68:6e:41:99:90:79:46:9d:73:a3:fc:6b:2f:63:a2:c7:48:
ef:94:59:db:72:bd:7d:b2:53:f6:48:b2:64:1a:c5:ff:a1:ae:
8e:77:59:55:7c:98:64:ea:65:d3:73:1b:3e:25:32:a1:45:2d:
86:39:ca:fd:b9:1c:d7:5b:db:ab:ac:fa:5e:60:8e:cd:90:ca:
68:85:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:57 2025 by rpki-client