Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/IUhjeSZNLRuDHaFdnLWNCkDEtoA.roa
File: IUhjeSZNLRuDHaFdnLWNCkDEtoA.roa (raw, json)
Hash identifier: 7mHS1yKQvcVUsvgxBWbk52TGnvHhH+IlGhrKPQMDS/Q=
Subject key identifier: 21:48:63:79:26:4D:2D:1B:83:1D:A1:5D:9C:B5:8D:0A:40:C4:B6:80
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 0195994BB2D08B0AE922B26ADD554E61E9B1
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/IUhjeSZNLRuDHaFdnLWNCkDEtoA.roa
Signing time: Sat 15 Mar 2025 10:13:49 +0000
ROA not before: Sat 15 Mar 2025 10:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48716
IP address blocks: 77.240.38.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
78.40.108.0/23 maxlen: 24
82.115.40.0/22 maxlen: 24
82.115.50.0/23 maxlen: 24
85.202.194.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.92.0/24 maxlen: 24
91.147.93.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.104.0/22 maxlen: 24
91.201.214.0/23 maxlen: 24
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.139.0/24 maxlen: 32
94.247.128.0/21 maxlen: 24
109.233.108.0/22 maxlen: 32
185.4.180.0/22 maxlen: 24
185.22.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
185.102.72.0/22 maxlen: 24
185.146.0.0/22 maxlen: 24
194.32.140.0/22 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.66.0/24 maxlen: 24
194.39.67.0/24 maxlen: 24
194.110.54.0/23 maxlen: 24
195.49.209.0/24 maxlen: 24
195.49.210.0/23 maxlen: 23
195.49.210.0/24 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/22 maxlen: 22
195.49.212.0/24 maxlen: 24
195.49.213.0/24 maxlen: 24
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.210.46.0/23 maxlen: 24
2a00:5da0::/36 maxlen: 48
2a00:5da0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:4b:b2:d0:8b:0a:e9:22:b2:6a:dd:55:4e:61:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Mar 15 10:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21486379264d2d1b831da15d9cb58d0a40c4b680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:4a:86:62:a6:46:4a:0b:3a:ad:62:97:a3:
73:60:30:5c:40:36:4a:ae:e4:1e:63:9a:96:d8:9b:
42:7b:8c:59:76:41:49:0e:ac:34:29:1f:c6:13:c7:
1d:44:d1:91:66:bc:06:a3:09:a4:f3:f5:3e:f5:0a:
59:66:4d:c9:64:f7:14:dc:50:73:3d:fc:8f:c0:99:
d2:4a:8f:00:6b:ae:a8:75:b9:fc:b4:4d:28:8e:57:
17:99:2f:84:27:41:0b:b8:64:4c:3c:6e:77:4a:6e:
cd:9e:e3:dd:72:e5:08:16:e8:70:ce:85:9f:22:7f:
32:28:68:40:a5:1d:62:62:70:cb:dd:d1:3b:e2:36:
69:d1:81:b7:5a:e6:75:29:b9:8c:09:68:8f:7b:38:
13:e3:67:dc:0d:c7:e6:35:04:dd:56:36:0b:15:17:
b4:d9:25:2b:03:6f:08:d3:ae:e0:43:14:8c:8f:b5:
5f:78:03:33:8c:7a:e4:b3:e4:06:de:2f:25:45:1f:
ca:6d:39:2f:f2:16:1e:3f:aa:7f:97:79:72:a7:d6:
62:57:90:f6:e9:88:c4:dc:65:da:6b:9d:34:22:c4:
c7:89:64:17:19:00:48:03:86:db:d7:00:56:d4:c0:
3f:f4:87:dd:ef:c2:fe:11:24:38:d6:71:f2:8d:ea:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:63:79:26:4D:2D:1B:83:1D:A1:5D:9C:B5:8D:0A:40:C4:B6:80
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/IUhjeSZNLRuDHaFdnLWNCkDEtoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
82.115.40.0/22
82.115.50.0/23
85.202.194.0/23
89.219.32.0/22
91.147.92.0/22
91.147.104.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.32.140.0/22
194.39.64.0/22
194.110.54.0/23
195.49.209.0-195.49.215.255
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/35
Signature Algorithm: sha256WithRSAEncryption
1c:6a:fa:d0:2a:76:a3:b1:db:d9:41:a1:d3:c0:de:6a:75:b5:
e9:1f:de:18:29:a5:a0:6f:1c:08:27:82:65:bd:a1:c7:ca:ed:
2a:ed:bb:44:31:27:f6:56:9c:34:25:e2:f7:04:8f:8f:19:99:
5c:1d:42:8c:00:df:f4:74:cd:bd:a5:fb:9a:5e:cf:9d:ad:ac:
a5:07:1a:80:cc:11:cf:06:8a:8d:20:ee:ea:55:f9:bf:5b:85:
4d:d0:d9:56:d9:84:1b:c9:a4:58:5b:57:c5:7c:5b:7d:84:09:
80:b7:71:1d:c9:48:d8:33:b6:f9:fb:51:fb:cb:e5:86:f1:4a:
c9:2e:3a:6a:22:72:e6:ba:09:96:cc:99:d7:7d:e5:8c:15:b3:
f3:61:b3:90:d0:ea:a3:37:85:88:eb:78:fc:9c:3f:9a:f7:ec:
69:48:e7:8a:1b:5d:3a:37:71:77:f3:26:8a:27:0f:af:2f:58:
cd:9b:38:b7:ff:f3:9f:aa:2b:5c:8c:fd:4a:78:e7:cf:fe:06:
bd:2b:e5:8f:f9:02:97:e9:52:e3:22:dd:5a:15:c0:19:dd:79:
98:9a:bd:63:81:b5:90:0d:3b:b8:82:5d:d9:6d:69:ed:d2:85:
33:84:ba:cb:e9:c2:79:66:c0:ea:9f:62:1a:91:24:05:fe:fd:
38:91:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:43 2025 by rpki-client