Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/0WuzB8OkscQpoVJnc-eqQEbTX1w.roa
File: 0WuzB8OkscQpoVJnc-eqQEbTX1w.roa (raw, json)
Hash identifier: I1lgjHwWSYgBGe4PnrseSuUsE4vKM3BvC9LtoTLLwzQ=
Subject key identifier: D1:6B:B3:07:C3:A4:B1:C4:29:A1:52:67:73:E7:AA:40:46:D3:5F:5C
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019623ADC2232C6FF15C9D270E650B93C371
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/0WuzB8OkscQpoVJnc-eqQEbTX1w.roa
Signing time: Fri 11 Apr 2025 07:08:32 +0000
ROA not before: Fri 11 Apr 2025 07:08:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:ad:c2:23:2c:6f:f1:5c:9d:27:0e:65:0b:93:c3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Apr 11 07:08:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d16bb307c3a4b1c429a1526773e7aa4046d35f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:5b:e6:55:2c:90:68:6d:67:7e:ba:58:02:
42:2a:89:14:7a:84:b9:26:4b:14:5b:ec:f2:0d:45:
0c:4c:6c:4a:6b:0a:52:5e:a1:d6:0c:76:0b:7a:6e:
32:2d:d5:e5:c1:06:b2:64:ac:a8:54:23:3e:3f:bd:
b6:3b:7a:53:1f:29:ad:2e:1b:eb:a7:dc:61:66:98:
a6:89:bc:15:6b:05:67:be:ca:7e:54:59:fb:42:7e:
75:66:87:9e:8a:93:1e:78:0b:69:c2:2b:bd:44:29:
a2:66:4f:b5:7b:50:8d:88:6a:f4:c6:af:a0:bc:d0:
5f:8c:eb:9d:c9:43:2a:17:fd:24:bf:00:11:6f:fb:
6a:6c:10:c8:a0:a2:04:ab:ee:73:a3:73:d5:77:e9:
ee:cb:fe:8e:9f:b7:83:16:a9:4c:59:f0:a3:a3:5c:
d9:5c:f1:1b:23:08:b7:3f:65:e3:fa:0f:db:1e:1e:
70:35:7e:a0:07:d5:3b:29:95:a9:39:ed:8b:ae:90:
1d:6a:7d:9d:ab:b6:39:01:07:d9:81:4b:85:f8:d5:
ea:07:9b:36:d1:42:be:bd:33:f3:07:2c:56:24:b2:
16:db:ae:d3:28:a2:f8:83:c8:6a:52:52:a8:5e:d5:
de:1e:8e:0b:f4:45:42:8c:d9:76:71:7e:3f:b5:d8:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:B3:07:C3:A4:B1:C4:29:A1:52:67:73:E7:AA:40:46:D3:5F:5C
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/0WuzB8OkscQpoVJnc-eqQEbTX1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.62.64.0/18
103.199.184.0/22
148.222.54.0/23
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:1b:89:fe:b5:2e:70:18:be:f9:ce:6b:3b:b5:c4:65:bb:9d:
d9:71:e2:2a:6f:66:92:ed:2f:e2:a3:25:c8:db:11:90:60:c6:
5e:23:59:b2:a5:e5:15:cf:1a:dd:b5:52:a3:9f:42:5e:25:fd:
f5:b0:58:24:11:24:91:c9:ec:75:0c:22:d4:63:44:af:0a:a1:
b6:29:0d:f3:48:d7:fb:aa:2d:6d:8f:89:89:55:04:b0:6f:c7:
55:cb:69:ca:d5:40:82:87:14:e9:95:0f:05:0a:57:43:4a:b7:
75:48:12:9c:0c:3e:b5:62:7f:51:82:1f:c2:a2:e9:7e:c4:81:
56:36:7a:7e:61:bb:c6:2a:17:5e:d6:5b:65:15:9e:bb:46:4a:
0e:44:f0:f0:f1:49:15:e5:de:93:b2:4b:9d:44:62:61:d1:b2:
92:53:dd:48:78:9e:2c:af:3d:10:e9:41:2f:26:60:67:0e:15:
a3:b8:84:90:d6:78:5b:f6:f7:31:15:25:8f:ee:80:14:8c:5f:
0f:82:9f:19:c5:02:26:5f:42:af:8d:29:7a:ae:8a:97:a9:c5:
4c:49:3f:47:74:4d:0d:15:6f:24:25:a7:e0:6b:56:1d:e4:00:
2d:7c:60:ea:76:c7:6b:f0:95:41:0f:29:8f:b1:dd:0e:14:cf:
c6:e7:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:38:07 2025 by rpki-client