Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9u8TKPOLqWihXC6WCmPSlRnm_xk.roa
File: 9u8TKPOLqWihXC6WCmPSlRnm_xk.roa (raw, json)
Hash identifier: wag8prwBeLKvXGpP8yLviHCcbtKL/sJa6N7VUk584iA=
Subject key identifier: F6:EF:13:28:F3:8B:A9:68:A1:5C:2E:96:0A:63:D2:95:19:E6:FF:19
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0195D9C87CE3DD7E6EF98A329A256C878048
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9u8TKPOLqWihXC6WCmPSlRnm_xk.roa
Signing time: Thu 27 Mar 2025 22:45:49 +0000
ROA not before: Thu 27 Mar 2025 22:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:c8:7c:e3:dd:7e:6e:f9:8a:32:9a:25:6c:87:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 27 22:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ef1328f38ba968a15c2e960a63d29519e6ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:f9:97:95:fb:cc:0d:b7:c0:76:73:65:33:
82:c6:40:c9:b2:cc:95:73:d5:bc:f2:7c:fa:3d:28:
1f:61:20:9b:69:21:df:62:00:92:c3:ca:72:5f:4f:
e9:14:cb:73:cf:64:7c:41:25:4b:28:c3:ab:5f:20:
ec:93:5c:35:b5:28:37:ce:6f:a6:28:b1:1f:a3:6e:
8c:9e:fe:f7:60:79:39:f4:2a:9a:a3:6b:8c:33:63:
43:1c:00:fc:40:73:f7:87:db:34:4d:42:4f:af:58:
11:cc:06:85:07:c2:d7:df:06:52:9a:6d:c5:a9:21:
93:35:a9:30:97:a1:14:fa:da:60:cb:48:76:d6:69:
b9:3e:ac:7d:1a:6e:90:76:a6:34:4e:f7:c7:8a:2b:
27:fd:cd:6d:f0:dd:79:03:d8:96:8b:bd:9e:2c:a7:
2e:b9:b9:6f:ef:90:74:38:b5:ef:e2:eb:fd:9a:12:
29:90:5e:76:db:4f:3f:52:df:67:92:c5:f7:31:16:
44:43:7a:ff:04:4e:3b:ee:bd:ec:20:c5:f2:70:a0:
50:3c:ac:d0:54:24:8b:1c:a9:dd:c8:dc:6a:0d:37:
69:ef:be:e2:2d:8b:0f:90:05:bc:d2:ea:c8:22:d2:
1b:19:7b:72:76:4b:fe:8c:ec:82:2c:dc:b0:89:d0:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:13:28:F3:8B:A9:68:A1:5C:2E:96:0A:63:D2:95:19:E6:FF:19
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9u8TKPOLqWihXC6WCmPSlRnm_xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.208.0/24
176.125.251.0/24
185.199.151.0/24
185.199.213.0/24
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:84:5b:f3:28:90:81:ba:56:b6:c5:ff:c8:6f:a6:d2:62:a4:
06:c9:4c:b3:e2:30:e9:4e:66:bb:1c:88:0c:24:92:da:9e:85:
5c:14:5d:d6:70:4c:b9:01:a0:b7:e4:cb:0c:f1:b4:c4:51:22:
21:41:ea:c0:56:71:bb:e5:63:7b:d4:92:14:1a:b8:2e:58:00:
4e:5a:94:16:4d:01:cc:53:06:de:a4:a0:d5:0b:a1:bc:4f:b9:
02:ee:78:b2:2d:b1:00:a7:a7:23:7c:eb:fc:f8:2f:0a:5b:b6:
89:45:04:47:4c:52:b2:5d:cb:eb:48:bf:f7:cd:d6:ca:d8:f1:
86:da:4c:63:da:fc:2a:49:f9:0f:31:49:4b:0a:a4:f9:79:1e:
5b:3a:ff:c0:87:d1:98:82:91:e4:b9:64:07:3d:23:5c:ef:f0:
1a:7b:c7:1a:ee:92:b9:0d:45:60:a2:05:4e:1f:45:d7:ec:55:
df:ea:91:fa:29:f6:2f:a4:02:4b:ce:15:47:1b:52:a8:5e:21:
fe:c0:79:0b:e8:eb:c4:2f:02:93:e5:fc:41:59:8e:12:39:5c:
a6:d7:4c:b7:26:2e:5e:3f:dd:e4:fc:25:cc:24:9c:1b:ee:c5:
a4:ec:67:b8:ea:fe:5c:ef:04:1d:69:fe:66:0b:36:cd:e5:19:
4d:8d:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:22 2025 by rpki-client