Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa
File: S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa (raw, json)
Hash identifier: 298ot3rN9ux+k96S6A3kz+LkCwnTR/d/qtOX4jSeeqQ=
Subject key identifier: 4B:82:A1:3B:FF:BC:C7:33:2F:B7:50:7A:93:FF:86:2B:F5:CD:4C:6B
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019427481A7B2761CD23C951B63F60575229
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50923
IP address blocks: 5.53.16.0/20 maxlen: 20
5.53.16.0/21 maxlen: 21
5.53.16.0/22 maxlen: 22
5.53.20.0/22 maxlen: 22
5.53.24.0/21 maxlen: 21
5.53.24.0/22 maxlen: 22
5.53.28.0/22 maxlen: 22
5.53.30.0/24 maxlen: 24
37.60.16.0/21 maxlen: 21
37.60.16.0/22 maxlen: 22
37.60.16.0/23 maxlen: 23
37.60.16.0/24 maxlen: 24
37.60.18.0/23 maxlen: 23
37.60.20.0/22 maxlen: 22
37.60.20.0/23 maxlen: 23
37.60.22.0/23 maxlen: 23
37.143.96.0/20 maxlen: 20
37.143.96.0/21 maxlen: 21
37.143.96.0/22 maxlen: 22
37.143.97.0/24 maxlen: 24
37.143.100.0/22 maxlen: 22
37.143.104.0/21 maxlen: 21
37.143.104.0/22 maxlen: 22
37.143.108.0/22 maxlen: 22
178.208.224.0/19 maxlen: 19
178.208.224.0/20 maxlen: 20
178.208.224.0/21 maxlen: 21
178.208.232.0/21 maxlen: 21
178.208.240.0/20 maxlen: 20
178.208.240.0/21 maxlen: 21
178.208.248.0/21 maxlen: 21
185.3.68.0/22 maxlen: 22
185.3.68.0/23 maxlen: 23
185.3.68.0/24 maxlen: 24
185.3.69.0/24 maxlen: 24
185.3.70.0/23 maxlen: 23
185.3.70.0/24 maxlen: 24
185.3.71.0/24 maxlen: 24
2a00:ae40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1a:7b:27:61:cd:23:c9:51:b6:3f:60:57:52:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b82a13bffbcc7332fb7507a93ff862bf5cd4c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:ef:ed:33:d7:83:46:1e:1e:f7:67:c5:ac:
d1:dc:14:87:4a:1c:22:59:1b:96:25:a2:40:26:ae:
69:ae:bc:61:37:a1:e4:db:a3:2a:d5:10:2e:a2:39:
79:45:89:97:e9:53:0b:d1:0f:fa:f1:26:21:56:ed:
c1:d3:95:eb:c4:e9:4f:a7:11:e7:cb:83:db:cc:4b:
78:07:7f:24:e3:45:23:58:cb:99:51:20:a8:21:f7:
da:20:d3:c2:df:c7:ca:12:a5:8f:4a:24:10:af:b6:
5f:9e:5c:b2:76:03:40:bf:cf:e3:41:e1:b0:cf:99:
9e:d6:ba:d0:44:e5:61:c9:f4:6d:02:5e:d3:16:bf:
7c:af:db:c0:68:f5:34:93:3d:da:ba:dc:df:96:80:
6d:9c:87:d5:82:ca:29:05:de:df:41:3a:6c:b9:d4:
06:ed:e4:61:9e:da:7c:78:3f:3b:b9:55:a0:86:18:
bd:57:e5:5a:c6:ae:f4:a0:5e:cf:bb:69:d7:66:29:
79:c4:48:5c:95:17:5b:bd:65:92:71:9f:a1:57:35:
d1:82:80:a7:bf:75:66:ed:28:f8:66:b3:ee:4b:e3:
7b:e6:1e:d9:51:80:25:46:6f:d5:56:8c:5a:fa:3c:
6e:ba:b5:19:95:c8:b0:2e:e4:f4:4d:a7:d0:1a:4d:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:82:A1:3B:FF:BC:C7:33:2F:B7:50:7A:93:FF:86:2B:F5:CD:4C:6B
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.16.0/20
37.60.16.0/21
37.143.96.0/20
178.208.224.0/19
185.3.68.0/22
IPv6:
2a00:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
cd:9e:2d:09:b1:9c:f0:2a:5f:d4:de:8a:f1:4a:ea:99:e0:fd:
1a:3d:2a:3b:d7:e6:36:b4:52:2e:89:d6:1a:31:06:7c:eb:7c:
28:ed:d2:5e:b6:7e:fb:29:cd:e7:1a:c7:af:14:06:a9:e1:ac:
ae:18:47:41:ca:21:1f:2d:cd:41:d3:52:a8:3c:8a:cf:5c:cb:
2c:55:b1:a6:47:c1:96:53:1c:68:ac:fb:00:63:e9:b3:93:b2:
94:28:a1:63:1f:35:db:47:ab:19:13:2c:8f:d0:6a:3c:cb:32:
4e:0a:09:f1:ff:a4:51:29:08:2c:33:5f:99:99:31:eb:db:6b:
28:cc:d0:61:47:7b:71:47:ba:a6:7a:db:b8:92:07:7e:c7:b4:
cb:9e:20:6f:67:49:c6:73:56:4c:1e:2c:e3:75:1b:58:dc:01:
ad:79:ea:e3:88:72:29:71:86:a6:e9:f5:22:80:f3:33:0a:fd:
c5:ba:84:67:95:71:b2:b2:9e:8c:c0:2f:30:e9:68:2b:e8:32:
9d:a7:f4:68:9e:2d:96:5e:b9:3c:dd:34:3e:ff:55:8b:51:ce:
97:ae:da:d0:9a:3a:61:03:0a:13:bf:06:af:98:ad:0c:44:89:
c2:b4:a8:8d:90:17:ed:c2:c4:f1:26:22:b1:a1:af:a6:c6:73:
f8:aa:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:54:58 2025 by rpki-client