Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/PlSmwfeOpVaqnw9vWmhSavXR9m8.roa
File: PlSmwfeOpVaqnw9vWmhSavXR9m8.roa (raw, json)
Hash identifier: XvblAg2B53EVotnhV5tcVJ8FZXmBy2mQgnL4dA+3TBc=
Subject key identifier: 3E:54:A6:C1:F7:8E:A5:56:AA:9F:0F:6F:5A:68:52:6A:F5:D1:F6:6F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC08F41B53C6D783D7CAB695FBC2D2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/PlSmwfeOpVaqnw9vWmhSavXR9m8.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35346
IP address blocks: 45.67.116.0/24 maxlen: 24
91.242.64.0/18 maxlen: 24
91.242.68.0/23 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.80.0/24 maxlen: 24
91.242.99.0/24 maxlen: 24
91.242.102.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 20
91.242.112.0/24 maxlen: 24
91.242.113.0/24 maxlen: 24
91.242.114.0/24 maxlen: 24
91.242.115.0/24 maxlen: 24
91.242.116.0/24 maxlen: 24
91.242.117.0/24 maxlen: 24
91.242.118.0/24 maxlen: 24
91.242.119.0/24 maxlen: 24
91.242.120.0/24 maxlen: 24
91.242.121.0/24 maxlen: 24
91.242.122.0/24 maxlen: 24
178.175.176.0/22 maxlen: 24
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
2a07:5540::/29 maxlen: 29
2a07:c040::/29 maxlen: 29
2a09:700::/29 maxlen: 29
2a09:15c0::/29 maxlen: 29
2a09:3ac0::/29 maxlen: 29
2a09:4440::/29 maxlen: 29
2a09:4c40::/29 maxlen: 29
2a09:63c0::/29 maxlen: 29
2a09:7640::/29 maxlen: 29
2a09:7b40::/29 maxlen: 29
2a09:7f00::/29 maxlen: 29
2a09:a480::/29 maxlen: 29
2a09:bdc0::/29 maxlen: 29
2a09:ca40::/29 maxlen: 29
2a09:e400::/29 maxlen: 29
2a09:f6c0::/29 maxlen: 29
2a09:f940::/29 maxlen: 29
2a09:fdc0::/29 maxlen: 29
2a0a:3700::/29 maxlen: 29
2a0a:3780::/29 maxlen: 29
2a0a:6000::/29 maxlen: 29
2a0a:ef00::/29 maxlen: 29
2a0b:280::/29 maxlen: 29
2a0b:5d00::/29 maxlen: 29
2a0c:380::/29 maxlen: 29
2a0c:3600::/32 maxlen: 32
2a0c:3780::/29 maxlen: 29
2a0c:57c0::/29 maxlen: 29
2a0c:ae00::/29 maxlen: 29
2a0d:1a00::/29 maxlen: 29
2a0d:dac0::/29 maxlen: 29
2a0d:fb00::/29 maxlen: 29
2a0e:f80::/29 maxlen: 29
2a0e:2080::/29 maxlen: 29
2a0e:2500::/29 maxlen: 29
2a0e:3380::/29 maxlen: 29
2a0e:3540::/29 maxlen: 29
2a0e:3c40::/29 maxlen: 29
2a0e:7880::/29 maxlen: 29
2a0e:b000::/29 maxlen: 29
2a0e:c3c0::/29 maxlen: 29
2a0e:c700::/29 maxlen: 29
2a0e:c800::/29 maxlen: 29
2a0e:d180::/29 maxlen: 29
2a0e:d880::/29 maxlen: 29
2a0e:e540::/29 maxlen: 29
2a0e:e8c0::/29 maxlen: 29
2a0e:e940::/29 maxlen: 29
2a0e:f540::/29 maxlen: 29
2a0f:740::/29 maxlen: 29
2a0f:1b40::/29 maxlen: 29
2a0f:3900::/29 maxlen: 29
2a0f:4840::/29 maxlen: 29
2a0f:6200::/29 maxlen: 29
2a0f:82c0::/29 maxlen: 29
2a0f:9380::/29 maxlen: 29
2a0f:b200::/29 maxlen: 29
2a0f:da00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:08:f4:1b:53:c6:d7:83:d7:ca:b6:95:fb:c2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e54a6c1f78ea556aa9f0f6f5a68526af5d1f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1d:46:41:fd:92:44:b1:fc:a3:05:de:ef:bd:
70:6f:73:b5:3b:23:7a:ef:44:4e:c5:be:32:7a:86:
54:ee:f0:99:c7:75:4e:a2:d7:cb:b1:a7:23:d3:85:
37:a4:bf:bb:67:bc:0a:b7:f8:bd:79:85:5f:85:4e:
40:5b:ad:70:4a:c4:f1:b8:d7:e5:2c:c7:9a:d6:85:
de:3d:53:62:73:c9:ba:f9:fe:79:c4:61:14:b5:4b:
8a:85:ad:6e:77:5f:d7:21:93:61:31:25:3a:b1:05:
bc:58:f1:21:7c:b5:1c:e5:84:55:5b:dd:a0:50:66:
ce:83:20:39:4b:ee:3a:18:40:ce:35:bd:91:25:e0:
03:25:87:78:e2:b9:f6:6d:2f:aa:a4:a7:36:59:81:
92:72:48:f2:54:23:76:0f:e3:57:9e:51:c2:49:09:
74:84:70:2c:1d:ad:97:48:c9:34:05:81:e9:47:e8:
59:eb:7f:5f:5a:6e:5f:cb:19:ae:8a:7b:97:4a:d1:
38:58:f5:6c:08:46:63:f4:55:59:d2:4a:25:45:70:
3c:f0:78:db:3d:53:40:9a:e7:0e:95:84:65:f5:cd:
63:82:98:3b:a9:42:80:37:dd:0b:0d:83:4b:65:d4:
d2:84:5f:03:4e:b3:bc:68:6c:75:cf:5b:ec:0f:75:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:54:A6:C1:F7:8E:A5:56:AA:9F:0F:6F:5A:68:52:6A:F5:D1:F6:6F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/PlSmwfeOpVaqnw9vWmhSavXR9m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
91.242.64.0/18
178.175.176.0/22
194.114.144.0/24
IPv6:
2a07:5540::/29
2a07:c040::/29
2a09:700::/29
2a09:15c0::/29
2a09:3ac0::/29
2a09:4440::/29
2a09:4c40::/29
2a09:63c0::/29
2a09:7640::/29
2a09:7b40::/29
2a09:7f00::/29
2a09:a480::/29
2a09:bdc0::/29
2a09:ca40::/29
2a09:e400::/29
2a09:f6c0::/29
2a09:f940::/29
2a09:fdc0::/29
2a0a:3700::/29
2a0a:3780::/29
2a0a:6000::/29
2a0a:ef00::/29
2a0b:280::/29
2a0b:5d00::/29
2a0c:380::/29
2a0c:3600::/32
2a0c:3780::/29
2a0c:57c0::/29
2a0c:ae00::/29
2a0d:1a00::/29
2a0d:dac0::/29
2a0d:fb00::/29
2a0e:f80::/29
2a0e:2080::/29
2a0e:2500::/29
2a0e:3380::/29
2a0e:3540::/29
2a0e:3c40::/29
2a0e:7880::/29
2a0e:b000::/29
2a0e:c3c0::/29
2a0e:c700::/29
2a0e:c800::/29
2a0e:d180::/29
2a0e:d880::/29
2a0e:e540::/29
2a0e:e8c0::/29
2a0e:e940::/29
2a0e:f540::/29
2a0f:740::/29
2a0f:1b40::/29
2a0f:3900::/29
2a0f:4840::/29
2a0f:6200::/29
2a0f:82c0::/29
2a0f:9380::/29
2a0f:b200::/29
2a0f:da00::/29
Signature Algorithm: sha256WithRSAEncryption
63:f7:c2:b2:2b:a6:5c:7f:ee:8e:3f:d8:9b:0b:10:f0:75:1d:
39:c9:ff:91:70:9f:5f:f8:b6:0d:27:95:02:90:40:8e:0b:b0:
d6:1b:19:0f:ff:4c:7f:f9:91:70:4e:20:0f:17:01:73:57:0d:
8d:77:e2:e8:9b:50:e5:6a:91:bf:8e:a3:11:4b:e3:b4:08:51:
88:68:26:2a:53:e2:5a:4c:1e:20:f5:99:d5:15:b6:27:7a:2e:
f3:53:e1:17:6d:6a:1b:dc:d1:d8:1d:1f:10:d5:d1:b1:80:29:
39:80:b3:8b:85:bf:f8:2e:df:1c:8f:70:41:9a:5b:be:90:a7:
b1:92:18:ff:19:a2:95:7a:af:25:1b:fe:90:d3:1b:ba:94:38:
42:23:6b:08:ec:2d:49:4d:a4:a5:94:3a:ae:cf:73:a1:36:d0:
82:30:26:99:da:e9:ae:37:c0:75:70:3c:07:eb:c1:79:4b:50:
42:15:fb:6d:9a:f0:ef:e3:57:27:28:21:cb:59:75:6e:78:2c:
55:d2:88:fb:58:c3:f3:11:59:ad:45:e1:7e:e3:37:f6:1a:3a:
ea:b7:ed:b9:7a:c6:52:c4:4c:08:f3:e5:bc:34:d3:af:d7:fc:
df:9c:a0:ee:0b:15:4a:25:54:41:39:66:e7:f4:2e:56:b7:e5:
b2:74:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:12 2025 by rpki-client