Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8tw_KHHi6CGYhD3JJ8dYd2q6OZE.roa
File: 8tw_KHHi6CGYhD3JJ8dYd2q6OZE.roa (raw, json)
Hash identifier: CHBEM8ZOI7IV+5GWcU/yA4G3UTbvKnv4HCF4/9ncvVU=
Subject key identifier: F2:DC:3F:28:71:E2:E8:21:98:84:3D:C9:27:C7:58:77:6A:BA:39:91
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 0195DD59449D4139BEEF1FB9F28AFF1A2FAC
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8tw_KHHi6CGYhD3JJ8dYd2q6OZE.roa
Signing time: Fri 28 Mar 2025 15:22:49 +0000
ROA not before: Fri 28 Mar 2025 15:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:59:44:9d:41:39:be:ef:1f:b9:f2:8a:ff:1a:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Mar 28 15:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2dc3f2871e2e82198843dc927c758776aba3991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:03:97:40:15:ac:b2:32:54:04:a8:c9:a3:
4d:b7:60:60:3e:4a:47:22:9d:61:fd:d9:4f:bf:7e:
96:ad:bd:19:8f:40:44:2a:97:8c:e1:cf:ca:3f:eb:
ae:12:d0:01:78:0e:07:d7:ae:f6:0c:63:9f:bf:1d:
85:e6:4b:93:56:8b:4e:1a:ff:c0:a7:b8:47:f3:41:
a6:b6:5e:27:25:36:7f:87:e1:80:4c:ea:33:0c:5e:
d4:83:94:e5:2c:4c:97:f8:e1:f9:28:33:5e:71:e6:
7b:25:e4:f1:2d:c4:b3:02:69:2a:99:39:9b:47:8c:
76:8d:31:6e:08:ca:7f:82:33:44:fc:54:54:01:8e:
ae:8c:8a:a0:87:fa:36:45:ad:c0:9d:5e:22:83:29:
bb:bb:d9:e0:c9:fa:f6:0a:d6:b5:25:92:e5:5b:2e:
20:45:05:37:e9:ab:b2:be:47:ef:23:c7:43:46:fa:
d4:07:26:70:b5:01:bf:38:93:88:86:12:f4:ee:d5:
03:42:c7:0c:5f:67:9b:9c:ce:b7:0a:ab:ed:09:cd:
ef:a8:2d:e1:10:9c:25:80:14:c2:e5:bc:dc:d4:25:
ac:45:b3:80:5d:85:f2:25:ef:2d:26:52:ed:2d:8a:
1d:6b:7e:71:c4:23:a5:e3:08:f7:24:7f:a4:90:20:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:3F:28:71:E2:E8:21:98:84:3D:C9:27:C7:58:77:6A:BA:39:91
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8tw_KHHi6CGYhD3JJ8dYd2q6OZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.132.60.0/22
93.94.140.0/24
93.94.142.0/24
95.169.202.0/24
185.1.156.0/24
185.243.213.0/24
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
68:b2:f1:53:be:05:2f:32:5c:90:c1:c6:e5:d8:c2:ce:6f:dd:
70:5f:30:a1:55:07:b5:c6:d7:61:b3:8a:06:39:02:1f:21:c6:
80:7f:13:fc:76:74:6e:ee:35:68:2a:0c:1c:d9:6a:a2:d6:67:
36:bc:08:32:9c:e6:3a:7d:27:d7:09:23:b7:d9:1e:8b:de:0e:
2a:cb:f7:90:3c:5f:96:d7:7c:66:0f:d6:61:67:73:f5:cf:60:
8a:9e:14:a6:93:2f:96:ec:e3:b0:fe:55:2e:3b:c6:fa:52:80:
fe:0d:7b:d5:17:72:44:d7:e1:f5:81:8b:e2:43:0d:e0:37:14:
80:08:86:e9:da:5b:19:98:3e:a9:55:a8:5e:95:28:5a:6b:77:
08:81:cd:00:75:bc:dc:cc:08:3d:30:18:38:c9:c7:50:56:80:
2a:1e:1e:89:4b:c3:cf:51:b5:f5:e0:70:06:38:da:2e:17:cd:
f6:03:41:27:01:98:8c:e6:0f:66:ad:b3:99:b5:1b:dd:2f:e5:
06:95:a9:7c:86:5f:22:d8:54:15:4e:4e:29:b2:0e:6f:3f:ed:
64:30:65:37:0b:d0:55:7a:bf:e3:da:67:fd:7e:10:3e:31:b2:
15:41:ef:15:a1:ac:68:ac:b6:c1:ae:4d:5c:ed:0d:09:fe:bf:
ca:e7:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:24:06 2025 by rpki-client