Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/o-h2A957dlcPkUpwvfVIlQ19QGk.roa
File: o-h2A957dlcPkUpwvfVIlQ19QGk.roa (raw, json)
Hash identifier: TLWzVDizEQzpjZ25+tu4lXknyJozTbrV/Wbt2G8zyy8=
Subject key identifier: A3:E8:76:03:DE:7B:76:57:0F:91:4A:70:BD:F5:48:95:0D:7D:40:69
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0195F1D56B13D229AF91127FF0AFB987E908
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/o-h2A957dlcPkUpwvfVIlQ19QGk.roa
Signing time: Tue 01 Apr 2025 14:50:50 +0000
ROA not before: Tue 01 Apr 2025 14:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 31.135.4.0/23 maxlen: 23
31.135.4.0/24 maxlen: 24
31.135.5.0/24 maxlen: 24
46.173.240.0/24 maxlen: 24
46.173.241.0/24 maxlen: 24
46.173.242.0/24 maxlen: 24
46.173.243.0/24 maxlen: 24
46.173.252.0/24 maxlen: 24
46.173.253.0/24 maxlen: 24
77.36.112.0/24 maxlen: 24
77.36.113.0/24 maxlen: 24
77.36.114.0/24 maxlen: 24
77.36.115.0/24 maxlen: 24
91.193.28.0/24 maxlen: 24
91.193.29.0/24 maxlen: 24
91.200.133.0/24 maxlen: 24
91.233.0.0/24 maxlen: 24
91.233.1.0/24 maxlen: 24
91.246.176.0/24 maxlen: 24
91.246.177.0/24 maxlen: 24
91.246.178.0/24 maxlen: 24
91.246.179.0/24 maxlen: 24
109.207.136.0/24 maxlen: 24
109.207.137.0/24 maxlen: 24
109.207.138.0/24 maxlen: 24
109.207.139.0/24 maxlen: 24
176.96.95.0/24 maxlen: 24
176.110.216.0/24 maxlen: 24
176.110.217.0/24 maxlen: 24
176.110.218.0/24 maxlen: 24
176.110.219.0/24 maxlen: 24
176.110.220.0/24 maxlen: 24
176.110.221.0/24 maxlen: 24
176.110.222.0/24 maxlen: 24
176.110.223.0/24 maxlen: 24
176.112.80.0/22 maxlen: 24
193.36.220.0/24 maxlen: 24
193.36.221.0/24 maxlen: 24
193.36.222.0/24 maxlen: 24
193.36.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:d5:6b:13:d2:29:af:91:12:7f:f0:af:b9:87:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 1 14:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e87603de7b76570f914a70bdf548950d7d4069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:c3:fc:cc:6e:fc:20:13:99:3e:a9:ce:14:
c1:62:d1:72:99:f5:01:ce:1d:af:e1:fb:89:02:eb:
95:04:9d:e5:08:9d:de:6a:25:10:8b:51:9e:06:e8:
4c:fa:ba:ea:8f:e2:ca:3e:0b:cb:4b:ff:bd:9c:5d:
79:7f:42:a1:27:c6:9c:af:70:25:07:03:04:16:9a:
af:8a:93:56:58:1d:ac:82:16:6c:7a:d0:18:6f:a0:
d9:df:6b:5f:60:b3:57:46:08:39:2b:d2:d5:0f:a5:
1b:c6:b8:3f:c9:2f:53:01:fa:75:92:bf:f9:0c:07:
61:62:b3:33:d2:4c:43:6c:61:15:c7:36:b6:d8:ab:
26:57:b7:18:b5:23:18:af:db:5e:c4:06:6c:7e:aa:
a6:43:19:46:be:00:b3:15:a8:6e:d7:a6:8b:62:2b:
34:c2:cc:2d:f0:8b:4a:7f:9d:46:0d:1d:fe:78:a4:
b7:a6:20:f6:ce:11:bf:fd:cd:07:39:71:b7:9e:49:
e3:e6:43:5d:36:4c:0a:19:4d:59:4d:72:6b:8b:aa:
3c:c5:9e:bc:3d:9e:11:b5:86:e7:0b:70:c0:4d:13:
83:e1:b4:e4:35:96:f4:14:c4:3f:19:49:f5:2a:4f:
65:df:86:89:6b:ff:5d:6b:65:dd:e9:24:e7:4b:9e:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:76:03:DE:7B:76:57:0F:91:4A:70:BD:F5:48:95:0D:7D:40:69
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/o-h2A957dlcPkUpwvfVIlQ19QGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.4.0/23
46.173.240.0/22
46.173.252.0/23
77.36.112.0/22
91.193.28.0/23
91.200.133.0/24
91.233.0.0/23
91.246.176.0/22
109.207.136.0/22
176.96.95.0/24
176.110.216.0/21
176.112.80.0/22
193.36.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:f2:b3:0a:6f:f3:ec:1f:ce:9f:c4:20:a9:5e:db:38:c3:a0:
1e:07:59:b8:bf:c3:68:d2:8d:69:e2:1a:4f:4c:26:e4:f3:cb:
94:95:11:2a:65:9f:1d:3a:9c:0d:6d:ad:db:77:6a:e8:fc:6e:
8e:42:29:31:a0:f0:c5:2d:0a:5d:6a:33:66:21:fb:14:7f:3a:
8c:61:61:93:3c:f3:21:1a:d1:e4:ea:34:e2:a4:13:da:03:50:
8b:8c:5a:7a:14:65:a5:ee:f7:e1:f2:00:99:bc:4f:1e:87:51:
e0:9c:4c:e1:99:56:90:54:63:97:42:7b:77:d7:c2:70:a7:93:
8e:64:ff:1c:08:53:ff:0d:c4:99:7c:6e:d5:1e:28:a9:a2:29:
91:36:28:54:42:fe:89:90:83:91:9c:7e:40:c5:34:13:e0:51:
51:81:b7:be:ee:1e:4e:9e:9f:9f:b7:dc:5b:f2:54:1b:d5:bc:
ff:58:05:5c:13:81:17:0e:0a:91:d6:82:37:2c:f5:8c:33:53:
99:5c:73:88:68:da:00:95:5a:59:32:fd:ff:3f:ad:a1:f6:4c:
09:0c:e1:7b:6b:51:c6:5f:84:28:da:46:36:13:ef:2e:e8:b1:
10:46:13:e1:43:67:ce:e5:0c:90:9a:71:e8:65:78:18:8b:a8:
87:c1:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:19 2025 by rpki-client