Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/01wFg2WycA308VAga4vCWjC9prk.roa
File: 01wFg2WycA308VAga4vCWjC9prk.roa (raw, json)
Hash identifier: lvu4qSesebWY1jALkjHvn8rm9Z6yYFtDNOjM9PUgd5Y=
Subject key identifier: D3:5C:05:83:65:B2:70:0D:F4:F1:50:20:6B:8B:C2:5A:30:BD:A6:B9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244516625348DC5750010BEAF5F8CA32
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/01wFg2WycA308VAga4vCWjC9prk.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43201
IP address blocks: 31.222.251.0/24 maxlen: 24
37.72.139.0/24 maxlen: 24
91.247.77.0/24 maxlen: 24
91.247.79.0/24 maxlen: 24
193.3.170.0/24 maxlen: 24
194.56.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:16:62:53:48:dc:57:50:01:0b:ea:f5:f8:ca:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d35c058365b2700df4f150206b8bc25a30bda6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:09:60:99:27:be:72:73:5f:12:70:a0:ac:
27:f4:00:83:98:66:33:d1:42:ab:70:a6:9f:e6:94:
a1:65:cd:ce:aa:99:47:21:f3:16:94:45:fc:5b:8c:
92:af:f3:a6:c4:eb:a2:7d:94:ba:25:0e:15:83:e7:
45:24:b8:44:f8:0d:02:e3:65:19:6a:dd:39:63:89:
86:20:70:c7:e3:f8:cf:8e:f4:8a:8e:3f:ea:0d:07:
ec:6d:db:c9:6d:fb:f0:ae:c8:f2:f0:13:0b:ab:0a:
ba:63:91:d8:9a:0e:0e:c1:83:17:62:81:80:9e:7f:
9b:bd:9e:90:e0:55:1b:c0:87:12:ee:54:22:5d:8b:
38:f3:b6:fd:98:1b:34:13:55:ad:12:12:b1:ee:8d:
71:23:37:6c:7b:e2:22:51:d4:bd:ed:a9:ee:b4:3c:
ec:39:dc:70:4d:7d:b3:5d:80:50:b3:cf:16:de:b7:
21:00:e4:0c:55:87:63:01:bf:44:38:de:4f:9d:14:
92:50:0f:d0:45:ee:d1:d1:f2:2c:d1:69:a3:09:b5:
1a:17:c3:b7:30:fb:af:b6:57:ab:bc:23:cd:37:aa:
34:bb:67:39:4b:5c:7a:76:11:ab:95:47:1b:92:90:
84:68:18:09:2b:03:2e:8c:d2:74:d8:b4:60:4d:1b:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5C:05:83:65:B2:70:0D:F4:F1:50:20:6B:8B:C2:5A:30:BD:A6:B9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/01wFg2WycA308VAga4vCWjC9prk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.251.0/24
37.72.139.0/24
91.247.77.0/24
91.247.79.0/24
193.3.170.0/24
194.56.180.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1d:c4:b1:e7:f6:2a:c7:1a:3f:b2:f6:1b:d1:7b:52:28:9a:
6b:56:cb:c1:47:20:c0:c3:08:43:01:02:b4:34:ce:18:cf:97:
25:0c:8b:ae:75:38:d0:84:a5:0e:55:7d:4c:b4:81:db:0e:29:
1a:d1:42:92:e5:9b:97:c5:5b:a7:c3:e7:bf:c3:96:bc:e1:b1:
f3:8e:ae:ec:b8:a5:ad:4f:46:4c:e5:c8:e1:69:cb:21:98:d0:
28:6d:80:2b:e2:d2:6e:5b:37:53:59:55:de:a4:4d:d9:02:1c:
4b:b7:c2:4b:d9:7d:44:5b:e9:0e:a1:50:46:9c:03:a6:b2:23:
8f:1a:c1:9d:bd:59:21:cb:cd:9e:94:1a:e7:c5:73:dc:98:f5:
26:c3:cb:49:86:e5:f9:3a:08:9d:f6:2a:21:81:b5:54:dc:67:
5e:00:18:4d:55:fc:3d:45:56:1b:09:7f:46:b0:e9:25:10:07:
4a:3e:c0:f2:94:4e:3a:b8:35:59:38:32:50:44:94:9d:fa:8a:
5d:b8:4b:e0:e0:f5:54:f0:90:3e:af:10:51:af:3a:d4:fa:68:
d5:48:4a:cb:b9:d7:bd:ad:d8:f0:08:56:5f:7d:d8:a8:90:c5:
91:e8:b4:b9:a0:19:49:c6:8c:0d:b3:0c:f8:0c:98:49:69:23:
bb:95:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:55 2025 by rpki-client