Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h54YHi8hM94l9jsvTnRnFWWqS5o.roa
File: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (raw, json)
Hash identifier: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=
Subject key identifier: 87:9E:18:1E:2F:21:33:DE:25:F6:3B:2F:4E:74:67:15:65:AA:4B:9A
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA34DD8663F5AAAB0B670A74191CB8
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h54YHi8hM94l9jsvTnRnFWWqS5o.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58087
IP address blocks: 37.114.37.0/24 maxlen: 24
37.114.46.0/24 maxlen: 24
37.114.50.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
185.14.92.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:34:dd:86:63:f5:aa:ab:0b:67:0a:74:19:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=879e181e2f2133de25f63b2f4e74671565aa4b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:f9:af:fe:1f:c9:07:46:c8:20:a5:7d:42:
c5:45:64:f3:49:aa:af:dd:dc:3a:75:25:80:3b:03:
c0:c4:68:a5:9c:24:aa:4d:1c:71:1b:6a:38:a2:78:
97:d2:b0:c6:21:5b:d2:a6:bf:58:76:12:20:28:41:
6b:7d:4d:d1:47:38:d0:43:9d:03:6b:68:5c:56:20:
4a:36:b5:f0:d4:a3:c5:f9:d8:ce:6d:0a:17:70:3e:
ce:b8:74:0b:36:e4:b6:db:50:57:d6:f0:80:74:fd:
b1:59:da:47:bb:39:4a:fe:c0:ef:c2:71:82:97:32:
d9:5c:02:91:97:e9:6e:8e:a3:dc:d8:d8:10:3f:8f:
41:ac:6c:92:48:db:57:11:49:15:fe:0c:54:68:4e:
db:4e:db:0b:6f:f0:24:21:c9:9b:13:35:a7:78:65:
34:cd:6f:48:cf:8f:06:8e:02:eb:96:56:ae:7c:1d:
15:85:3f:d3:7c:29:1c:d3:9f:92:94:d0:d9:ac:9c:
5b:38:03:f9:32:68:c5:87:a8:96:16:8e:c3:7c:8a:
b1:58:9e:fe:cd:5c:ae:f5:20:36:ef:59:ab:59:19:
e1:cf:ad:ed:db:09:92:0f:40:bc:ee:b4:8d:50:7d:
7f:1c:a1:cf:03:dc:d4:36:73:88:04:a1:cf:bb:84:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9E:18:1E:2F:21:33:DE:25:F6:3B:2F:4E:74:67:15:65:AA:4B:9A
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h54YHi8hM94l9jsvTnRnFWWqS5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
37.114.46.0/24
37.114.50.0/24
37.114.63.0/24
176.100.36.0/23
176.100.39.0/24
185.14.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d5:dc:50:bc:5b:ec:6f:25:01:66:6b:77:df:26:6b:b4:82:
71:29:a2:47:f6:36:7e:be:82:6f:2f:c4:13:c8:53:e7:bf:f4:
60:83:a0:db:00:64:d6:70:3c:6e:54:4b:e4:7b:4a:c5:85:91:
89:97:29:98:83:fa:51:51:62:ea:dd:9e:1b:12:55:57:08:91:
84:4d:f2:e0:84:a6:a6:24:34:f9:fa:3b:6d:6f:17:2a:e9:2c:
5a:ea:c5:8b:83:d2:9b:3f:8a:8b:00:0b:17:91:07:57:10:36:
dd:80:41:03:48:c7:5a:03:e5:d9:35:cf:11:24:f8:0c:b5:37:
da:ef:cc:72:10:9e:cc:ae:24:e2:fc:0c:9c:6a:ac:22:9b:27:
73:28:ca:bb:0d:de:9d:ab:3d:39:d1:21:05:0a:6a:be:bb:d9:
d4:3b:80:ba:54:61:0b:19:e6:a6:fc:c6:cb:a0:ed:49:41:aa:
88:3e:34:65:67:62:d6:22:6b:fd:12:b7:b5:a2:e5:b6:06:d6:
6b:1c:41:73:c8:43:56:e2:c7:77:8c:0b:df:77:44:45:3e:3c:
f7:75:0d:3c:16:3a:07:eb:90:1a:03:9a:f4:2c:65:57:88:26:
fa:57:49:3e:fe:ed:ed:38:4d:71:32:de:c6:5f:51:cb:e0:28:
f6:f4:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:51 2025 by rpki-client