Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/C-2Nv77vdORBtXODMBObwRD87Wk.roa
File: C-2Nv77vdORBtXODMBObwRD87Wk.roa (raw, json)
Hash identifier: N6t7RosiMXetfLBziLoQs8MiQEYjeO1vmrwr27Ix98Y=
Subject key identifier: 0B:ED:8D:BF:BE:EF:74:E4:41:B5:73:83:30:13:9B:C1:10:FC:ED:69
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 0194252239E7DA4AA8EF35028794709FB4B8
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/C-2Nv77vdORBtXODMBObwRD87Wk.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208905
IP address blocks: 147.235.25.0/24 maxlen: 24
147.235.26.0/23 maxlen: 24
147.235.36.0/24 maxlen: 24
147.235.40.0/24 maxlen: 24
147.235.45.0/24 maxlen: 24
147.235.46.0/23 maxlen: 24
147.235.49.0/24 maxlen: 24
147.235.50.0/23 maxlen: 24
147.235.60.0/22 maxlen: 22
147.235.60.0/23 maxlen: 23
147.235.60.0/24 maxlen: 24
147.235.61.0/24 maxlen: 24
147.235.62.0/23 maxlen: 23
147.235.62.0/24 maxlen: 24
147.235.63.0/24 maxlen: 24
147.235.72.0/22 maxlen: 22
147.235.72.0/23 maxlen: 23
147.235.72.0/24 maxlen: 24
147.235.73.0/24 maxlen: 24
147.235.74.0/23 maxlen: 23
147.235.74.0/24 maxlen: 24
147.235.75.0/24 maxlen: 24
147.235.76.0/22 maxlen: 22
147.235.76.0/23 maxlen: 23
147.235.76.0/24 maxlen: 24
147.235.77.0/24 maxlen: 24
147.235.78.0/23 maxlen: 23
147.235.78.0/24 maxlen: 24
147.235.79.0/24 maxlen: 24
147.235.80.0/24 maxlen: 24
147.235.93.0/24 maxlen: 24
147.235.94.0/23 maxlen: 23
147.235.94.0/24 maxlen: 24
147.235.95.0/24 maxlen: 24
147.235.152.0/23 maxlen: 24
147.235.154.0/24 maxlen: 24
147.235.180.0/23 maxlen: 24
147.235.224.0/23 maxlen: 24
147.235.232.0/23 maxlen: 24
147.235.234.0/24 maxlen: 24
147.235.240.0/23 maxlen: 24
147.235.248.0/23 maxlen: 24
147.235.254.0/23 maxlen: 24
185.130.84.0/22 maxlen: 22
2a06:c702::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:39:e7:da:4a:a8:ef:35:02:87:94:70:9f:b4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bed8dbfbeef74e441b5738330139bc110fced69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:4b:47:bc:47:c9:92:57:af:34:f5:93:e0:
ec:b3:78:c5:3e:0d:7a:d5:43:cb:f0:35:63:03:73:
9e:8a:f7:95:72:57:49:8c:d0:fc:b6:fb:ae:bf:05:
62:d1:d3:8d:f0:e7:6e:e4:72:2c:3a:fe:86:81:5c:
89:d7:8f:96:a9:28:45:03:43:0e:a1:8f:58:84:2a:
6e:c0:f7:f5:23:63:10:78:0c:d9:c4:04:9d:19:43:
51:60:96:74:d0:c4:80:dc:67:03:50:69:5a:26:71:
5b:e6:79:8a:52:d1:1d:6c:4c:40:cc:e9:d8:2b:a7:
bd:53:c7:a9:e3:b2:d5:21:45:d7:50:28:b5:1d:bb:
2f:a2:50:37:02:a5:72:bf:b1:49:34:cf:74:f1:4b:
92:51:fd:ef:2a:e9:86:31:92:7f:bf:e5:c4:21:7a:
26:0d:40:20:02:cb:65:9a:35:25:5d:94:2d:a3:b4:
d4:48:38:db:db:14:32:76:f6:79:e7:c3:b3:e8:ff:
61:04:e3:5e:df:2b:97:45:92:93:7d:52:a4:d1:28:
e2:87:57:08:bd:3f:59:60:1a:3e:cc:d8:50:ee:6d:
0e:90:b6:3f:35:af:ef:e8:4a:13:6d:41:96:ca:79:
7e:ec:ee:a5:b3:79:9e:c7:28:fd:d0:bd:68:d0:bb:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:8D:BF:BE:EF:74:E4:41:B5:73:83:30:13:9B:C1:10:FC:ED:69
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/C-2Nv77vdORBtXODMBObwRD87Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.25.0-147.235.27.255
147.235.36.0/24
147.235.40.0/24
147.235.45.0-147.235.47.255
147.235.49.0-147.235.51.255
147.235.60.0/22
147.235.72.0-147.235.80.255
147.235.93.0-147.235.95.255
147.235.152.0-147.235.154.255
147.235.180.0/23
147.235.224.0/23
147.235.232.0-147.235.234.255
147.235.240.0/23
147.235.248.0/23
147.235.254.0/23
185.130.84.0/22
IPv6:
2a06:c702::/48
Signature Algorithm: sha256WithRSAEncryption
52:c8:f5:14:be:03:83:57:8d:bb:69:ad:7e:34:ff:0d:ca:ce:
6d:f6:4b:b7:7f:14:15:d7:8a:62:90:82:1b:a9:96:85:8b:7b:
13:bd:00:20:ef:c1:4d:dd:61:45:d5:4e:58:ac:98:25:26:c5:
d9:53:0d:9a:51:2e:23:8d:90:e9:5e:00:f2:79:d6:f7:0e:e3:
0f:89:fb:ca:74:9e:47:fe:29:82:14:de:d3:ff:7f:ed:8c:03:
de:07:cf:e3:e0:57:30:20:f3:fe:4f:f7:f8:2b:10:c6:37:f9:
87:9d:8e:57:2b:8a:f4:ca:eb:8f:f2:2e:13:f6:9c:84:db:db:
6e:8c:7f:d9:35:cc:be:8a:87:62:09:c3:93:d5:7c:0d:9b:32:
e2:da:64:58:5f:2d:c4:2c:2e:03:ec:42:67:98:44:00:3f:b6:
e1:d4:63:13:36:d4:54:0c:d0:16:0b:1d:f2:e3:61:58:94:35:
2e:5b:4f:e2:4c:e8:0e:1f:2b:84:6f:66:f1:01:1b:43:62:3b:
bf:d3:64:78:d1:df:21:6a:3f:61:da:89:45:09:8d:24:32:ec:
d8:fd:6e:e7:09:11:2a:1c:a6:eb:07:d3:94:45:a3:ec:75:b5:
d9:ff:ba:2b:a1:66:2a:7d:c2:b1:24:ea:7c:a3:74:39:a9:10:
6e:a2:52:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:25:09 2025 by rpki-client