Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa
File: _cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa (raw, json)
Hash identifier: zP2/mCjB82eimNPlv5UC3nRyIxCuHe80Zw3eVdffH6Q=
Subject key identifier: FD:CB:37:1F:CA:BD:66:51:60:18:A4:4B:C2:24:38:5E:D7:FC:C4:D5
Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial: 0195F1896B776EEADCC8A91B8334B6C7EC9D
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa
Signing time: Tue 01 Apr 2025 13:27:49 +0000
ROA not before: Tue 01 Apr 2025 13:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 31.24.8.0/21 maxlen: 24
37.46.144.0/22 maxlen: 24
77.74.96.0/21 maxlen: 24
80.89.208.0/20 maxlen: 24
83.150.0.0/18 maxlen: 24
84.254.80.0/20 maxlen: 24
84.254.96.0/20 maxlen: 24
87.239.200.0/21 maxlen: 24
88.218.24.0/22 maxlen: 24
91.84.64.0/19 maxlen: 24
95.143.48.0/20 maxlen: 24
109.70.112.0/21 maxlen: 24
109.70.115.0/24 maxlen: 24
109.70.116.0/22 maxlen: 24
145.40.192.0/19 maxlen: 24
155.2.224.0/19 maxlen: 24
157.143.0.0/17 maxlen: 24
178.22.104.0/21 maxlen: 24
178.250.130.0/23 maxlen: 24
185.109.164.0/22 maxlen: 24
185.160.244.0/22 maxlen: 24
185.203.132.0/22 maxlen: 24
194.31.128.0/23 maxlen: 24
194.246.118.0/23 maxlen: 24
212.25.0.0/19 maxlen: 24
217.22.128.0/20 maxlen: 24
217.71.240.0/20 maxlen: 24
217.150.224.0/20 maxlen: 24
2001:8e0::/29 maxlen: 32
2a00:10c0::/32 maxlen: 32
2a01:bd00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:89:6b:77:6e:ea:dc:c8:a9:1b:83:34:b6:c7:ec:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
Validity
Not Before: Apr 1 13:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcb371fcabd66516018a44bc224385ed7fcc4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:6f:c5:b5:b1:a7:a9:7b:45:14:ee:6d:42:
cb:b0:64:c0:27:38:00:cb:fa:4b:e1:34:1f:8e:c4:
27:ea:89:4c:d6:2f:b0:43:17:d4:50:53:ba:af:b5:
75:39:60:89:29:3c:57:92:59:e1:4a:4d:04:83:69:
8d:ee:22:fc:ab:5a:07:8d:90:04:3c:81:3f:3c:e0:
6a:ab:65:13:7a:fe:86:6e:7b:22:d4:37:77:66:49:
d7:8a:3b:bc:0c:7b:68:8e:a4:20:4b:97:f4:1a:ac:
cf:6b:f0:e8:52:5e:46:2b:d1:89:de:59:a6:95:c6:
37:e4:8c:21:8f:04:f4:fc:5c:b3:1f:44:98:f3:ee:
5b:b2:c9:ab:4c:e1:17:38:ed:51:d1:12:30:7a:19:
27:53:2c:07:c5:47:f6:7f:a9:71:44:54:df:cf:64:
f0:94:f4:71:f0:19:f5:f4:e2:70:23:9c:10:88:3c:
b3:b9:22:df:c1:23:50:73:ba:ac:c2:c8:ad:72:58:
7b:c8:f4:25:7b:28:0d:a6:a8:49:9c:e3:23:e1:fa:
e0:d3:b2:d3:92:90:5a:ef:01:85:2d:62:5a:9a:01:
a1:eb:f2:e5:0c:36:ed:7e:03:9a:e4:30:76:5c:ef:
17:ec:76:31:1a:33:87:da:2a:53:c7:5f:a9:de:02:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CB:37:1F:CA:BD:66:51:60:18:A4:4B:C2:24:38:5E:D7:FC:C4:D5
X509v3 Authority Key Identifier:
keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.8.0/21
37.46.144.0/22
77.74.96.0/21
80.89.208.0/20
83.150.0.0/18
84.254.80.0-84.254.111.255
87.239.200.0/21
88.218.24.0/22
91.84.64.0/19
95.143.48.0/20
109.70.112.0/21
145.40.192.0/19
155.2.224.0/19
157.143.0.0/17
178.22.104.0/21
178.250.130.0/23
185.109.164.0/22
185.160.244.0/22
185.203.132.0/22
194.31.128.0/23
194.246.118.0/23
212.25.0.0/19
217.22.128.0/20
217.71.240.0/20
217.150.224.0/20
IPv6:
2001:8e0::/29
2a00:10c0::/32
2a01:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
99:80:35:07:f3:f5:f2:ba:0b:45:cb:b1:ae:fc:7e:01:48:6c:
a8:b5:2e:12:73:bb:d1:fa:9b:d0:69:ce:58:28:cd:c7:6c:25:
bb:bd:b7:a4:6e:d4:16:5d:0d:7f:4b:88:a4:bd:73:a3:94:9f:
a1:f7:f3:20:2a:bd:49:b8:a2:9e:68:83:d3:da:2a:e2:01:ae:
bb:dc:5f:ff:8d:f5:f0:da:dd:d5:38:e4:60:ec:a6:7a:0c:90:
cc:c6:fb:5e:ca:ad:11:39:01:84:d5:92:18:a7:d9:1a:e7:ee:
60:47:65:19:b5:ad:80:33:bb:d9:ef:c5:79:53:af:d6:55:d1:
a1:b1:5e:a1:f5:ff:1d:93:1b:33:c5:7d:8a:5e:fd:6f:93:a7:
45:09:90:b1:c3:79:f5:c7:03:66:42:d6:d0:98:78:10:52:65:
76:6d:46:15:94:10:b9:8d:01:64:ee:03:db:ac:51:79:a3:a3:
fe:07:73:00:51:c5:0c:cb:d0:6d:c6:f3:57:50:1e:a2:fd:34:
ce:35:07:c2:59:87:8e:0b:88:15:c2:68:31:e4:39:99:b1:2c:
d2:e5:16:8d:db:77:0e:a8:03:44:5c:b5:3e:d2:f4:d9:2d:8c:
8c:96:21:e9:9e:cd:88:79:26:1e:13:80:e1:a5:07:6a:a7:13:
ab:c6:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:25:29 2025 by rpki-client