Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/8F98rTSwPOpZS4Rzfg71Kw6oATI.roa
File: 8F98rTSwPOpZS4Rzfg71Kw6oATI.roa (raw, json)
Hash identifier: QtxPboJkw4rOLdUx7QH5EP5ZvFcFd0VJLxIZUYnjoyU=
Subject key identifier: F0:5F:7C:AD:34:B0:3C:EA:59:4B:84:73:7E:0E:F5:2B:0E:A8:01:32
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 01941F8C18E6B91F41D89510C4476A050436
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/8F98rTSwPOpZS4Rzfg71Kw6oATI.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44143
IP address blocks: 37.19.104.0/21 maxlen: 21
37.19.104.0/22 maxlen: 22
37.19.107.0/24 maxlen: 24
37.19.108.0/23 maxlen: 23
37.19.110.0/24 maxlen: 24
77.243.16.0/20 maxlen: 20
77.243.16.0/21 maxlen: 21
77.243.16.0/24 maxlen: 24
77.243.19.0/24 maxlen: 24
77.243.20.0/22 maxlen: 22
77.243.20.0/23 maxlen: 23
77.243.20.0/24 maxlen: 24
77.243.22.0/24 maxlen: 24
77.243.23.0/24 maxlen: 24
77.243.24.0/22 maxlen: 22
77.243.28.0/22 maxlen: 22
77.243.28.0/24 maxlen: 24
77.243.29.0/24 maxlen: 24
77.243.30.0/24 maxlen: 24
77.243.31.0/24 maxlen: 24
95.86.4.0/22 maxlen: 22
95.86.8.0/22 maxlen: 22
95.86.48.0/21 maxlen: 21
185.37.24.0/22 maxlen: 22
185.37.24.0/24 maxlen: 24
185.37.25.0/24 maxlen: 24
185.37.26.0/24 maxlen: 24
185.37.27.0/24 maxlen: 24
188.120.96.0/20 maxlen: 20
188.120.96.0/21 maxlen: 21
188.120.96.0/24 maxlen: 24
188.120.97.0/24 maxlen: 24
188.120.98.0/24 maxlen: 24
188.120.99.0/24 maxlen: 24
188.120.100.0/24 maxlen: 24
188.120.101.0/24 maxlen: 24
188.120.102.0/24 maxlen: 24
188.120.103.0/24 maxlen: 24
188.120.104.0/21 maxlen: 21
188.120.112.0/21 maxlen: 21
188.120.112.0/22 maxlen: 22
188.120.113.0/24 maxlen: 24
188.120.116.0/22 maxlen: 22
188.120.116.0/24 maxlen: 24
188.120.117.0/24 maxlen: 24
188.120.118.0/24 maxlen: 24
188.120.119.0/24 maxlen: 24
2a00:61c0::/29 maxlen: 29
2a00:61c0::/32 maxlen: 32
2a00:61c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:18:e6:b9:1f:41:d8:95:10:c4:47:6a:05:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05f7cad34b03cea594b84737e0ef52b0ea80132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:64:6d:2a:01:36:cc:55:6f:a2:98:1e:d7:
52:d8:db:d0:d1:a5:94:1d:65:72:d6:96:28:aa:72:
23:8b:d4:7e:c6:db:f2:45:ad:d8:f7:99:75:a6:b4:
27:d7:d5:0e:59:2b:97:66:15:c6:8f:55:01:93:e5:
58:44:6b:57:40:ed:b1:ee:ea:a6:a6:e9:17:f0:bf:
75:85:3d:b9:31:30:be:e9:5f:6c:a5:71:0c:03:bc:
af:bb:99:48:a5:69:9a:00:1e:dc:a0:6a:bd:88:6a:
a3:eb:f4:77:ca:21:1d:ad:33:64:53:8e:24:e4:5a:
cb:72:d0:9d:f3:57:82:99:ff:2a:4c:6d:8b:3a:4c:
ff:6e:f8:62:f3:c5:55:4c:c5:fc:13:30:2c:37:2b:
74:dc:8d:4d:1d:1c:cc:6c:e2:0f:bf:db:af:43:06:
d0:1a:55:e5:dc:69:8b:65:a6:22:15:aa:8d:c6:a9:
23:db:44:0f:2e:9d:bb:b4:5f:5f:76:82:35:2f:32:
71:dd:e7:4f:ad:df:74:46:51:c8:6f:5e:99:ba:a1:
ca:e2:f6:ef:2a:60:fb:a0:62:43:24:38:43:0a:fb:
4c:ba:22:77:b7:10:89:04:5a:38:71:59:67:f3:39:
26:fd:60:9c:9c:16:b2:84:b7:1a:75:9c:84:0c:af:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:7C:AD:34:B0:3C:EA:59:4B:84:73:7E:0E:F5:2B:0E:A8:01:32
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/8F98rTSwPOpZS4Rzfg71Kw6oATI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.104.0/21
77.243.16.0/20
95.86.4.0-95.86.11.255
95.86.48.0/21
185.37.24.0/22
188.120.96.0-188.120.119.255
IPv6:
2a00:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:ae:ae:e9:49:1e:41:ec:79:9e:ef:35:49:a8:d3:c3:39:8c:
7e:9c:8d:53:27:95:80:fd:9f:ff:a2:31:5b:3a:33:cb:66:46:
3e:50:02:19:a6:8a:3f:04:c3:07:06:64:e9:4c:ed:53:a0:21:
f4:97:d1:5b:e4:27:2c:b2:74:09:ae:41:56:94:76:f6:97:84:
d9:02:0e:b4:d2:f1:2b:8b:e0:88:f6:6e:bd:96:aa:52:da:88:
7e:45:f0:26:b9:8d:6f:ed:9a:86:e3:a3:8f:7f:6f:b1:e7:09:
b1:fd:06:25:b4:c4:45:47:5c:02:6d:8b:4b:07:96:b7:c7:eb:
d8:9e:42:9e:50:12:f7:6b:85:1c:aa:5a:c0:19:60:60:4d:cd:
27:d1:a6:38:bd:c4:80:47:85:f2:91:eb:2a:2d:f9:75:8a:e4:
99:ab:af:3c:c4:63:5c:32:3e:3f:13:27:a1:51:42:d4:8a:a9:
59:ad:13:b9:12:9b:71:87:94:fa:ad:d9:65:26:93:d3:4a:4c:
56:af:2b:d6:00:f9:ff:f5:a4:2c:b5:2a:c2:4d:db:7d:db:e3:
b0:11:e9:0a:73:af:ef:05:1e:9f:fd:86:a6:52:6e:7d:f2:ff:
e3:06:68:eb:0f:d5:82:1b:59:49:c0:27:b5:76:fe:d2:19:3b:
66:6b:4c:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:50 2025 by rpki-client