Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fXBzXmZJGf23EvRdc3xb5EktGtg.roa
File: fXBzXmZJGf23EvRdc3xb5EktGtg.roa (raw, json)
Hash identifier: vJDsizStGIwy+tamoowVGTi0t427SozLwutzBsKoKdY=
Subject key identifier: 7D:70:73:5E:66:49:19:FD:B7:12:F4:5D:73:7C:5B:E4:49:2D:1A:D8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1108D42ECBE724D697D74AC22E99
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fXBzXmZJGf23EvRdc3xb5EktGtg.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12302
IP address blocks: 80.96.1.0/24 maxlen: 24
80.96.22.0/24 maxlen: 24
80.96.96.0/23 maxlen: 24
80.96.104.0/24 maxlen: 24
80.96.129.0/24 maxlen: 24
80.96.134.0/23 maxlen: 23
80.96.150.0/24 maxlen: 24
80.96.151.0/24 maxlen: 24
80.96.164.0/23 maxlen: 24
80.96.177.0/24 maxlen: 24
80.96.184.0/24 maxlen: 24
80.96.206.0/24 maxlen: 24
80.97.64.0/21 maxlen: 24
80.97.72.0/21 maxlen: 24
80.97.80.0/21 maxlen: 24
80.97.88.0/21 maxlen: 24
81.181.16.0/22 maxlen: 24
81.181.32.0/21 maxlen: 21
81.181.40.0/22 maxlen: 22
81.181.45.0/24 maxlen: 24
81.181.46.0/23 maxlen: 23
81.181.74.0/23 maxlen: 23
85.120.158.0/24 maxlen: 24
193.226.3.0/24 maxlen: 24
193.226.30.0/24 maxlen: 24
193.226.42.0/23 maxlen: 23
193.226.47.0/24 maxlen: 24
193.226.58.0/24 maxlen: 24
193.226.83.0/24 maxlen: 24
193.226.100.0/24 maxlen: 24
193.226.105.0/24 maxlen: 24
193.230.129.0/24 maxlen: 24
193.230.160.0/24 maxlen: 24
193.230.161.0/24 maxlen: 24
193.230.162.0/24 maxlen: 24
193.230.163.0/24 maxlen: 24
193.230.166.0/24 maxlen: 24
193.230.167.0/24 maxlen: 24
193.230.168.0/24 maxlen: 24
193.230.169.0/24 maxlen: 24
193.230.174.0/24 maxlen: 24
193.230.177.0/24 maxlen: 24
193.230.193.0/24 maxlen: 24
193.230.202.0/24 maxlen: 24
193.230.203.0/24 maxlen: 24
193.230.240.0/24 maxlen: 24
193.230.247.0/24 maxlen: 24
193.231.82.0/24 maxlen: 24
193.231.96.0/24 maxlen: 24
193.231.120.0/24 maxlen: 24
193.231.121.0/24 maxlen: 24
193.231.126.0/24 maxlen: 24
193.231.180.0/22 maxlen: 24
193.231.208.0/20 maxlen: 24
193.231.255.0/24 maxlen: 24
194.102.87.0/24 maxlen: 24
194.102.90.0/24 maxlen: 24
217.156.10.0/24 maxlen: 24
217.156.34.0/24 maxlen: 24
217.156.43.0/24 maxlen: 24
217.156.63.0/24 maxlen: 24
217.156.73.0/24 maxlen: 24
217.156.98.0/24 maxlen: 24
217.156.110.0/24 maxlen: 24
217.156.116.0/24 maxlen: 24
217.156.117.0/24 maxlen: 24
217.156.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:11:08:d4:2e:cb:e7:24:d6:97:d7:4a:c2:2e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d70735e664919fdb712f45d737c5be4492d1ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:bd:ac:08:53:45:09:7c:85:0e:7c:df:0b:
5d:fd:6d:65:7a:64:50:de:e2:36:42:86:c9:52:f3:
c7:b1:4e:81:e8:3a:cb:e8:78:f9:32:6f:d3:0b:ac:
ba:57:92:f5:f4:56:17:ed:cd:fe:c7:aa:03:cc:4c:
bf:bb:54:85:3f:b7:f6:e5:06:fc:f4:ae:dd:18:cc:
ff:6f:5a:63:78:df:51:61:db:97:69:d1:98:03:38:
9a:65:35:01:b7:2c:f8:f9:86:79:f0:31:68:ee:fd:
2e:b7:01:8b:38:ea:5d:14:01:56:03:21:9c:6a:86:
cc:8f:c6:9b:33:f1:e9:75:89:11:02:03:63:02:c8:
44:24:fe:eb:6b:dd:ee:f6:2f:a9:cb:55:29:4e:af:
5d:f9:74:6f:a5:59:42:97:6f:d4:4f:2b:29:b0:f0:
ee:37:7b:e1:fb:a3:4f:8f:76:9b:d5:9b:02:ef:ed:
70:de:c2:74:04:6c:43:a8:e5:6a:38:e6:ac:1d:6c:
48:ed:77:5f:f3:13:8c:c6:25:12:df:13:74:f9:f9:
91:ee:7d:3f:df:91:a9:ea:3d:df:19:e9:90:71:ff:
25:92:62:a5:cd:cf:08:a6:a0:0f:45:c4:34:02:3a:
55:48:fc:80:2f:1e:26:02:56:7b:94:54:88:fc:26:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:73:5E:66:49:19:FD:B7:12:F4:5D:73:7C:5B:E4:49:2D:1A:D8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fXBzXmZJGf23EvRdc3xb5EktGtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.1.0/24
80.96.22.0/24
80.96.96.0/23
80.96.104.0/24
80.96.129.0/24
80.96.134.0/23
80.96.150.0/23
80.96.164.0/23
80.96.177.0/24
80.96.184.0/24
80.96.206.0/24
80.97.64.0/19
81.181.16.0/22
81.181.32.0-81.181.43.255
81.181.45.0-81.181.47.255
81.181.74.0/23
85.120.158.0/24
193.226.3.0/24
193.226.30.0/24
193.226.42.0/23
193.226.47.0/24
193.226.58.0/24
193.226.83.0/24
193.226.100.0/24
193.226.105.0/24
193.230.129.0/24
193.230.160.0/22
193.230.166.0-193.230.169.255
193.230.174.0/24
193.230.177.0/24
193.230.193.0/24
193.230.202.0/23
193.230.240.0/24
193.230.247.0/24
193.231.82.0/24
193.231.96.0/24
193.231.120.0/23
193.231.126.0/24
193.231.180.0/22
193.231.208.0/20
193.231.255.0/24
194.102.87.0/24
194.102.90.0/24
217.156.10.0/24
217.156.34.0/24
217.156.43.0/24
217.156.63.0/24
217.156.73.0/24
217.156.98.0/24
217.156.110.0/24
217.156.116.0/23
217.156.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8a:ec:95:4d:50:20:6c:4a:74:01:30:6b:38:a3:d6:88:03:
85:e4:92:c2:3d:85:0c:0b:c0:e9:4e:47:99:38:b2:6b:19:43:
d6:f1:21:2e:7d:3b:d1:9d:ec:d3:5a:85:fe:a6:c4:d5:7d:a5:
93:d5:27:65:39:81:ce:ba:49:d7:29:56:84:35:c2:ac:d0:ca:
4b:de:ae:05:d5:e8:d5:bd:3e:df:a8:ed:b3:3e:30:ce:b0:93:
0f:9c:8c:5a:dc:35:06:32:9e:36:77:ed:f0:da:2b:16:f1:cc:
b4:45:15:89:fe:ce:5a:f9:3e:09:49:35:53:12:8e:83:8c:81:
b7:b8:19:25:87:2b:b7:ef:4b:1b:f6:70:ed:57:08:f9:68:ed:
03:12:8d:06:ac:0d:b0:ae:94:9b:42:29:54:c3:3f:b0:80:0a:
e5:21:97:e1:67:3b:c7:28:02:15:bf:9f:47:83:27:5d:c6:a8:
ee:9c:d1:31:34:1b:d2:70:3f:d8:c5:89:02:46:90:a8:4f:ce:
71:cf:8e:32:84:b8:90:ea:f4:de:e6:51:29:e0:52:09:0d:ba:
00:00:80:77:0f:2c:f6:d0:ad:b6:a6:5f:b6:4f:6c:da:93:bc:
0a:32:80:96:70:db:45:27:d6:49:e5:a5:f7:d4:5e:a9:aa:ea:
e9:d9:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:56 2025 by rpki-client