Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa
File: XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa (raw, json)
Hash identifier: xjzNWhe5FpZ13zIe4c3zk/xvRI8dLOaIlu7Ow5qH8uo=
Subject key identifier: 5D:04:A1:7C:F3:FC:4F:B3:69:5D:F1:C5:DD:B4:77:64:06:92:FF:B1
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01948E41875C3D349FEEDF92787CA98034A4
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa
Signing time: Wed 22 Jan 2025 13:44:06 +0000
ROA not before: Wed 22 Jan 2025 13:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50835
IP address blocks: 37.97.120.0/24 maxlen: 24
37.97.121.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
46.173.254.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
77.36.58.0/24 maxlen: 24
77.36.66.0/23 maxlen: 23
81.161.8.0/22 maxlen: 22
81.161.48.0/22 maxlen: 22
91.193.30.0/23 maxlen: 23
91.224.212.0/24 maxlen: 24
91.232.19.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
91.232.226.0/24 maxlen: 24
91.233.200.0/24 maxlen: 24
91.236.76.0/24 maxlen: 24
91.238.39.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.246.192.0/22 maxlen: 24
91.246.203.0/24 maxlen: 24
93.120.34.0/23 maxlen: 23
93.120.40.0/23 maxlen: 23
109.207.128.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
176.113.180.0/22 maxlen: 22
176.115.236.0/22 maxlen: 24
176.116.228.0/24 maxlen: 24
176.116.236.0/24 maxlen: 24
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
194.33.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:41:87:5c:3d:34:9f:ee:df:92:78:7c:a9:80:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 22 13:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d04a17cf3fc4fb3695df1c5ddb477640692ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:08:46:35:e9:30:95:5b:38:78:5b:97:24:
5a:4a:f8:b6:d0:7c:e5:d6:a5:62:d0:1d:88:7e:6a:
6f:e7:c4:15:25:6f:5d:16:2c:24:e7:a1:76:e6:56:
d6:40:c3:6d:2a:4b:c2:37:de:9a:cf:7e:f2:e0:bd:
cd:ba:c8:8f:73:95:64:8a:87:f3:d2:6c:c2:00:b5:
8a:c6:15:75:6a:d7:d8:51:9f:e2:66:04:69:df:d5:
c4:7b:3a:1a:ff:68:21:cf:bc:24:f1:43:a7:55:7f:
40:95:54:be:84:ff:89:5f:31:a0:5f:dc:4c:48:ab:
0b:94:6a:53:ed:6e:cb:d7:54:6e:b7:3c:89:09:a9:
a6:ba:31:87:91:ce:33:ba:ec:d6:3d:f5:19:88:6c:
4d:f8:fb:49:d1:e4:c5:11:a4:08:1b:a8:dd:c6:4a:
0d:58:a2:da:a0:d5:b9:68:08:5c:d8:c9:2d:ee:5e:
6e:24:76:31:33:e2:18:33:f3:ca:ae:c6:0d:71:b4:
33:18:6e:b3:97:60:92:cb:71:51:1f:2f:c1:f2:62:
bb:5d:a7:cd:37:59:23:4b:0d:f0:15:1a:62:6f:62:
5a:97:ff:5a:db:35:8c:f6:d4:5c:39:f6:c6:64:a8:
44:af:87:a5:b7:37:d3:20:1f:85:78:59:95:de:95:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:A1:7C:F3:FC:4F:B3:69:5D:F1:C5:DD:B4:77:64:06:92:FF:B1
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
46.173.254.0/23
64.43.120.0/22
77.36.58.0/24
77.36.66.0/23
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.224.212.0/24
91.232.19.0/24
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
93.120.34.0/23
93.120.40.0/23
109.207.128.0/24
109.207.130.0/24
109.207.132.0/24
176.96.94.0/24
176.113.180.0/22
176.115.236.0/22
176.116.228.0/24
176.116.236.0/24
176.121.108.0/22
194.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:1b:1c:f9:bb:15:c9:6f:de:b9:44:a5:4d:a2:19:ce:b5:8b:
66:e7:67:06:4d:36:e2:dc:0d:12:24:c7:a8:e6:37:bb:6f:93:
2a:ab:f0:30:90:43:8c:1f:38:20:87:22:5a:87:35:c8:e1:5d:
87:6b:59:21:06:d9:6f:2c:ce:10:57:18:5e:4c:2a:e4:bc:ad:
17:e3:bb:a8:f8:e7:4d:6b:c8:18:15:f5:71:9f:ec:d0:70:6c:
9d:ec:58:f8:8b:45:62:d2:d4:f7:28:18:61:d0:4b:e6:ef:c7:
c9:07:00:76:90:79:3d:e1:57:5f:13:ef:b6:03:14:87:41:88:
6c:df:eb:20:0b:3a:77:55:9f:36:af:a1:23:4d:87:eb:7e:ea:
1c:9e:b5:bf:93:c6:3b:73:66:8d:1f:6b:86:2a:ed:08:db:a8:
ea:a0:29:2c:57:83:f1:f1:00:29:b0:88:49:f3:9d:39:03:96:
f2:19:73:55:3c:4c:d0:19:20:40:ec:1f:95:91:c7:2a:3c:4f:
d0:f2:98:c0:ed:b4:a8:52:88:84:22:82:69:be:bc:3c:3e:ff:
bf:90:55:17:d7:b4:31:9d:3d:21:e4:99:a1:b3:2f:c4:04:6c:
34:92:3f:02:2f:61:dc:fb:7f:67:5a:60:35:b9:30:7d:99:db:
6d:a0:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:50 2025 by rpki-client