Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa
File: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (raw, json)
Hash identifier: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=
Subject key identifier: 0E:AD:54:67:C6:5A:FC:A8:82:DE:27:F0:26:6C:F8:4E:85:E3:00:B0
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3327149BC48C7A050BBCC9DB55E0
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 37.114.53.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
185.14.94.0/24 maxlen: 24
2a00:ccc1:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:33:27:14:9b:c4:8c:7a:05:0b:bc:c9:db:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ead5467c65afca882de27f0266cf84e85e300b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:bd:d4:ef:ad:62:8d:49:db:6d:01:2c:39:
b6:1c:c0:a1:9a:88:6d:d3:c7:54:2f:c2:72:0f:e9:
c2:fc:55:8d:c8:b7:bb:09:08:b8:d5:f5:15:7b:6a:
e2:43:9e:d1:31:30:82:82:d1:fa:bb:62:9a:46:c7:
aa:84:4d:7a:a3:49:0d:70:bd:50:0a:10:2a:5b:c1:
05:4e:e7:30:07:c2:9e:27:2e:b5:9d:7b:fa:1c:19:
4c:74:a5:19:74:01:93:99:52:c3:e4:66:4d:1f:0e:
60:3b:c2:0e:11:af:83:37:9e:76:5d:c2:f6:0c:02:
67:95:a3:0b:02:d8:12:32:a8:17:bb:e2:8d:f9:7a:
65:83:86:78:1f:db:49:07:c3:dd:fc:28:5d:f9:3d:
74:e4:76:34:f2:0e:fa:9c:9d:f4:1d:72:b5:b3:5d:
df:ea:9c:1e:0f:8d:54:e4:ff:3f:80:f6:c6:15:e9:
fc:33:3a:31:af:fb:57:3e:2c:c8:d9:09:dc:f2:f6:
e3:ca:65:33:32:3b:d1:4a:1b:47:e1:50:9d:08:4f:
f5:83:58:3c:cb:d4:0d:f7:da:4a:8b:e8:de:06:00:
ab:eb:77:05:ac:89:1e:75:77:21:88:06:87:f3:91:
e6:b1:20:2b:87:48:a6:e0:d4:27:c7:d7:b9:29:7c:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:54:67:C6:5A:FC:A8:82:DE:27:F0:26:6C:F8:4E:85:E3:00:B0
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.53.0/24
37.114.57.0/24
37.114.61.0-37.114.62.255
185.14.93.0-185.14.94.255
IPv6:
2a00:ccc1:5::/48
Signature Algorithm: sha256WithRSAEncryption
02:95:34:9a:32:d0:99:60:5e:26:42:c9:f4:c2:84:98:a3:1c:
86:55:c6:48:55:be:4a:08:2f:bc:10:22:a7:2d:82:14:3b:03:
59:3e:f7:af:73:3c:3f:a2:64:2d:c3:86:5a:41:8f:eb:90:d7:
07:ef:74:02:9e:9a:05:50:dc:c3:d8:87:bb:9c:2a:a0:60:c4:
e2:7f:cf:fb:01:67:9d:25:6c:06:1e:06:ac:91:7a:e4:91:02:
53:aa:b6:86:b1:7b:9c:71:21:02:c9:b1:5f:eb:3f:a7:91:c3:
80:82:65:eb:08:fb:2f:56:62:d0:e4:ab:6a:c9:50:37:8d:d8:
ac:91:e7:35:98:81:d6:3c:8a:83:49:e7:7a:7e:29:25:0f:ea:
b4:53:00:b1:7f:b0:28:ec:e4:7c:67:b1:ea:cb:bf:dd:46:ee:
6c:56:ca:07:21:ec:d7:69:0e:63:ef:c0:33:5b:9c:6a:51:b1:
2e:35:64:99:cf:37:e1:e1:f1:a0:9c:a9:cc:3d:56:4d:48:7a:
1a:75:49:c9:e9:db:60:a3:86:77:32:70:0e:cf:86:d8:6c:73:
54:6a:6f:a2:b5:92:3e:8d:74:05:cc:86:58:8a:ab:78:f5:01:
96:71:45:3e:8c:ae:7e:6f:8f:5d:1f:f8:b8:69:10:c7:e2:80:
5d:46:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:34 2025 by rpki-client