Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa
File: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (raw, json)
Hash identifier: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=
Subject key identifier: 49:D0:0E:E7:39:E9:7D:D1:4F:2B:71:EA:7B:EF:EB:E3:F9:C9:F2:A6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01973F374CA62678349ED2172E439DBBC457
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa
Signing time: Thu 05 Jun 2025 08:31:18 +0000
ROA not before: Thu 05 Jun 2025 08:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 64.43.72.0/24 maxlen: 24
91.200.135.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
91.232.19.0/24 maxlen: 24
91.232.56.0/24 maxlen: 24
91.232.57.0/24 maxlen: 24
91.234.120.0/24 maxlen: 24
91.234.121.0/24 maxlen: 24
91.238.40.0/24 maxlen: 24
91.238.41.0/24 maxlen: 24
91.238.42.0/23 maxlen: 23
91.238.42.0/24 maxlen: 24
91.238.43.0/24 maxlen: 24
91.245.91.0/24 maxlen: 24
93.120.84.0/24 maxlen: 24
176.103.121.0/24 maxlen: 24
176.115.237.0/24 maxlen: 24
176.115.238.0/24 maxlen: 24
176.115.239.0/24 maxlen: 24
178.213.180.0/24 maxlen: 24
178.213.181.0/24 maxlen: 24
195.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:37:4c:a6:26:78:34:9e:d2:17:2e:43:9d:bb:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 5 08:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49d00ee739e97dd14f2b71ea7befebe3f9c9f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:27:2d:e5:cf:a7:ca:b7:02:9f:1e:c6:83:
11:75:c2:9f:b3:b7:9b:79:c7:e0:8b:8a:b0:b1:08:
55:e1:b8:3b:6c:05:bf:8a:c6:5e:e8:c3:bf:70:ad:
87:44:e5:dc:55:91:31:c2:43:a2:eb:2c:58:e7:ed:
81:82:2c:56:d4:ce:44:de:39:fe:50:b7:85:4a:7c:
26:19:5d:e0:fb:cc:c5:b8:ef:6d:5c:c5:19:62:e3:
c0:95:70:61:87:91:e6:90:21:8b:db:e7:ac:a9:45:
18:80:14:89:6f:37:3a:74:e7:70:c1:69:93:0b:23:
a1:51:cf:74:0b:ca:a2:c6:57:ec:da:6c:8e:54:88:
55:b4:88:00:4d:4d:0e:dd:e3:8b:19:d0:83:75:f0:
ca:45:9a:5b:46:a8:b9:d8:96:c3:d7:d8:ec:81:4e:
de:d4:28:ff:b0:78:74:7b:c9:37:4c:31:e4:32:de:
99:a1:95:a8:8f:94:04:4d:48:cd:2a:8f:b1:31:31:
ce:48:4f:11:c5:ee:7a:8b:46:1c:29:b9:2d:12:4d:
88:d6:14:7b:58:4d:00:2f:e6:36:3d:bb:09:54:fc:
73:1a:ea:29:be:b5:b5:55:e5:df:f3:77:33:54:fa:
95:fa:90:3d:76:3b:f1:26:df:36:98:b3:02:95:a7:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:0E:E7:39:E9:7D:D1:4F:2B:71:EA:7B:EF:EB:E3:F9:C9:F2:A6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.72.0/24
91.200.135.0/24
91.224.212.0/24
91.232.19.0/24
91.232.56.0/23
91.234.120.0/23
91.238.40.0/22
91.245.91.0/24
93.120.84.0/24
176.103.121.0/24
176.115.237.0-176.115.239.255
178.213.180.0/23
195.80.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:48:26:d0:de:c8:46:4a:2a:14:76:05:31:a4:e4:aa:b8:a0:
c4:85:ab:a4:b3:41:60:2a:29:ce:c8:72:3d:87:e5:57:08:09:
dd:3c:ae:13:28:0a:e9:28:58:e0:e4:af:29:8f:d5:a9:8d:31:
b8:c6:2e:b7:b9:bb:4f:69:b3:7b:be:59:71:d4:b7:6f:72:0f:
ce:a8:e9:09:46:98:0b:bb:a1:b8:b5:17:83:d9:77:96:d1:0d:
7c:cf:ba:f5:59:12:1c:04:a4:d9:19:49:f1:cd:28:83:8e:45:
a3:73:bb:91:4e:e4:8c:ac:b0:8b:dd:e3:4c:cc:7a:17:a6:dc:
d2:28:c9:61:41:96:ce:7e:dd:70:d9:f0:aa:f6:6b:f3:20:34:
d5:33:16:b6:3f:87:d6:8b:ac:8d:87:d2:31:aa:46:34:5d:34:
f0:7b:e3:b0:f8:01:d6:28:f1:de:c4:05:63:e9:26:cf:80:2a:
4f:a3:dd:6b:f2:6a:38:69:82:ba:81:d3:85:48:1e:3f:83:3d:
62:fa:54:45:d4:c2:0d:24:fc:0e:5d:e9:7f:1e:f4:5b:78:dd:
ea:e9:72:a6:cb:3b:3f:27:9c:55:72:1a:09:ce:98:91:28:55:
89:42:e3:5a:40:14:c2:d9:fe:47:0d:f6:e7:e5:1e:bb:da:d6:
35:f3:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:11 2025 by rpki-client