Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DSW-PD8OM3uu9JPo0aFjZVp6yi0.roa
File: DSW-PD8OM3uu9JPo0aFjZVp6yi0.roa (raw, json)
Hash identifier: 2YarLW90An+rN9bi+re4VB2mr4F/1IY34Bs9hZRsIFc=
Subject key identifier: 0D:25:BE:3C:3F:0E:33:7B:AE:F4:93:E8:D1:A1:63:65:5A:7A:CA:2D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC03D6CA84F5425489DE61D92F9DE0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DSW-PD8OM3uu9JPo0aFjZVp6yi0.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/21 maxlen: 21
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.73.0/24 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.40.105.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
195.138.124.0/24 maxlen: 24
195.216.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:03:d6:ca:84:f5:42:54:89:de:61:d9:2f:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d25be3c3f0e337baef493e8d1a163655a7aca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:ff:08:cb:cc:9a:f9:ca:da:ea:37:bf:47:
eb:c8:b0:9b:e6:02:7b:7f:3b:73:88:40:7d:00:1c:
b7:60:d2:3c:0a:af:16:3e:c5:6e:b6:9e:34:d9:14:
af:01:de:ee:cd:63:2a:fc:d4:f9:ea:78:5e:ae:1f:
80:8a:f0:03:1f:30:67:37:a0:94:16:5d:05:17:67:
32:09:b4:30:d6:12:d2:6d:bd:e0:fe:e3:45:c6:87:
11:9b:20:9b:45:28:64:c6:12:96:d1:3b:8e:c3:6d:
95:2f:d4:f2:1b:70:0e:db:fc:33:13:64:6a:0a:07:
ce:94:3f:0b:ce:29:ae:36:86:b2:8a:39:3e:11:52:
34:99:db:88:6b:cc:aa:80:3c:a9:2b:d4:07:18:c5:
65:61:e3:bc:43:9d:56:24:ba:7d:a3:78:36:37:49:
7a:ae:1f:4e:15:a9:36:5b:28:a4:a8:92:f0:65:49:
d9:ae:ea:7c:47:ee:2b:7f:97:ff:82:9c:d9:e0:16:
8b:be:ff:d6:29:b3:85:fb:20:11:bf:5a:57:12:96:
7b:f8:ec:26:1c:fb:15:07:b9:f5:38:dd:16:05:50:
6e:b7:e5:d3:e4:c3:6d:cd:85:93:ec:06:82:4c:fd:
fc:dd:83:6f:4c:cc:5e:05:d0:05:32:39:04:ed:ab:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:BE:3C:3F:0E:33:7B:AE:F4:93:E8:D1:A1:63:65:5A:7A:CA:2D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DSW-PD8OM3uu9JPo0aFjZVp6yi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/21
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
176.126.223.0/24
178.175.176.0/22
185.40.105.0/24
185.180.145.0/24
185.212.11.0/24
194.50.206.0/23
195.138.103.0-195.138.108.255
195.138.112.0/24
195.138.116.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:62:6e:86:37:42:40:6e:82:65:2a:38:cb:d1:1c:03:73:f7:
80:06:a7:0e:13:a8:9b:ef:32:df:cf:5b:bc:27:63:4e:3f:f8:
a7:d2:f3:17:29:ec:71:30:da:aa:9b:e8:08:ce:22:e9:72:d3:
3f:51:2f:2b:7b:db:74:ab:31:3e:b0:2d:cc:fb:02:0b:5d:d8:
55:ef:02:28:97:fa:75:de:d9:96:7a:ae:09:1f:c0:a4:5c:67:
4f:a3:4c:59:08:c1:61:3e:dc:4f:27:2c:09:d7:a0:8f:3b:13:
9f:49:45:f1:55:91:3e:68:b1:79:36:80:14:fa:57:cd:32:ec:
51:25:3e:92:7b:8b:31:96:13:ac:1b:d3:24:d1:47:3b:b3:58:
2b:66:be:5f:0d:ff:2d:55:91:85:1c:f7:79:a8:e7:94:61:b6:
27:27:c1:8f:7d:9f:0f:4f:d1:52:1e:ae:98:bb:f0:64:66:95:
56:c9:03:d9:fb:fc:ac:94:be:77:48:48:77:ac:b3:05:a1:d4:
a7:9a:06:e8:9f:02:6a:13:9e:d5:b0:6d:d1:ca:7a:a7:ed:13:
88:32:72:b5:9a:b8:a1:d6:a4:2e:e4:9d:28:6a:ab:44:ac:7e:
64:46:15:f8:bd:b6:a8:46:7e:a4:15:74:ec:03:db:26:4d:fc:
54:19:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:52 2025 by rpki-client