Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/MiDFo4hvMWm2LnOXchY-qMjiF4I.roa
File: MiDFo4hvMWm2LnOXchY-qMjiF4I.roa (raw, json)
Hash identifier: 9GhdLgk27HafhbXSH87ygI5j9h8CqnJUJSkfSDeoTo8=
Subject key identifier: 32:20:C5:A3:88:6F:31:69:B6:2E:73:97:72:16:3E:A8:C8:E2:17:82
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 0194266C1C82B99FDDCF5C4842AC020B6D8B
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/MiDFo4hvMWm2LnOXchY-qMjiF4I.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 37.58.16.0/24 maxlen: 24
37.58.17.0/24 maxlen: 24
37.58.18.0/24 maxlen: 24
37.58.19.0/24 maxlen: 24
37.58.20.0/24 maxlen: 24
37.58.21.0/24 maxlen: 24
37.58.22.0/24 maxlen: 24
37.58.23.0/24 maxlen: 24
46.20.144.0/24 maxlen: 24
46.20.145.0/24 maxlen: 24
46.20.146.0/24 maxlen: 24
46.20.147.0/24 maxlen: 24
46.20.148.0/24 maxlen: 24
46.20.149.0/24 maxlen: 24
46.20.150.0/24 maxlen: 24
46.20.151.0/24 maxlen: 24
46.20.152.0/24 maxlen: 24
46.20.153.0/24 maxlen: 24
46.20.154.0/24 maxlen: 24
46.20.155.0/24 maxlen: 24
46.20.156.0/24 maxlen: 24
46.20.157.0/24 maxlen: 24
46.20.158.0/24 maxlen: 24
46.20.159.0/24 maxlen: 24
81.22.96.0/24 maxlen: 24
81.22.97.0/24 maxlen: 24
81.22.98.0/24 maxlen: 24
81.22.99.0/24 maxlen: 24
81.22.100.0/24 maxlen: 24
81.22.101.0/24 maxlen: 24
81.22.102.0/24 maxlen: 24
81.22.103.0/24 maxlen: 24
81.22.104.0/24 maxlen: 24
81.22.105.0/24 maxlen: 24
81.22.106.0/24 maxlen: 24
81.22.107.0/24 maxlen: 24
81.22.108.0/24 maxlen: 24
81.22.109.0/24 maxlen: 24
81.22.110.0/24 maxlen: 24
81.22.111.0/24 maxlen: 24
95.128.56.0/24 maxlen: 24
95.128.57.0/24 maxlen: 24
95.128.58.0/24 maxlen: 24
95.128.59.0/24 maxlen: 24
95.128.60.0/24 maxlen: 24
95.128.61.0/24 maxlen: 24
95.128.62.0/24 maxlen: 24
95.128.63.0/24 maxlen: 24
185.56.236.0/24 maxlen: 24
185.56.237.0/24 maxlen: 24
185.56.238.0/24 maxlen: 24
185.56.239.0/24 maxlen: 24
185.59.72.0/24 maxlen: 24
185.59.73.0/24 maxlen: 24
185.59.74.0/24 maxlen: 24
185.59.75.0/24 maxlen: 24
2a02:dc40::/48 maxlen: 48
2a02:dc40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1c:82:b9:9f:dd:cf:5c:48:42:ac:02:0b:6d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3220c5a3886f3169b62e739772163ea8c8e21782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:43:8a:97:9b:e4:8e:66:79:18:9a:24:5a:
58:43:b6:18:2d:a8:e8:19:86:79:49:b3:fa:2b:a9:
19:72:da:7b:82:69:77:6c:f2:b7:2d:06:66:55:73:
6c:34:be:64:05:1f:5e:a6:41:c0:ed:f7:5a:bc:ca:
65:ba:36:fa:4b:2e:40:af:c0:da:0f:11:47:91:30:
9e:fb:aa:68:7b:b7:e8:18:58:57:10:5c:40:06:98:
b7:d6:88:7a:8f:06:96:49:e8:33:47:c7:e7:f9:ac:
cb:98:5b:2e:d9:f6:fa:99:c9:65:ac:db:98:22:e2:
68:0a:8f:e4:27:12:d6:34:f0:f2:f3:6f:f3:91:d5:
d2:3f:b6:df:a9:02:7d:26:b8:6b:03:7d:a8:9e:ae:
67:60:d7:41:90:12:b9:11:9b:5f:79:53:73:6c:c7:
a7:57:7a:5b:13:0e:3e:a3:6f:ec:85:4e:17:ed:59:
1f:75:c6:d9:74:4b:77:43:4d:89:11:a0:1a:f3:b6:
2e:5e:7c:0e:8f:56:bc:19:a2:7f:55:35:3f:7a:70:
96:9d:90:e9:3b:e1:13:36:a7:b5:56:60:db:59:4c:
1d:f9:c0:db:88:64:61:03:6a:a3:b3:6b:8d:5e:6e:
a8:16:33:7e:4d:cd:d8:31:02:40:6e:82:7d:e0:2c:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:C5:A3:88:6F:31:69:B6:2E:73:97:72:16:3E:A8:C8:E2:17:82
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/MiDFo4hvMWm2LnOXchY-qMjiF4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.16.0/21
46.20.144.0/20
81.22.96.0/20
95.128.56.0/21
185.56.236.0/22
185.59.72.0/22
IPv6:
2a02:dc40::/47
Signature Algorithm: sha256WithRSAEncryption
89:cc:1b:ba:c5:47:49:b7:ff:e0:2f:b6:6c:34:4c:f9:61:4c:
92:fa:5b:6d:67:1c:6c:30:fe:2f:cf:c5:89:95:dd:b7:2e:14:
5f:87:a1:3b:32:3b:bd:7c:63:b0:4f:c1:b8:5c:41:9e:5a:06:
36:72:9d:25:83:af:b7:92:6e:10:01:c5:02:fd:4f:c6:52:8a:
b6:5d:8d:42:07:5a:ae:b1:6c:fd:c0:e3:05:e1:c3:1a:03:e5:
9c:75:07:d8:43:ac:05:f9:59:88:bb:66:08:c2:8d:ca:af:e3:
2a:9a:2f:f1:0c:79:58:fb:e6:c9:ce:ca:85:a2:78:ac:d1:d2:
72:15:c5:e8:24:9d:96:eb:8e:c2:61:3a:0c:a9:4a:dc:b2:35:
57:dc:5f:9f:9d:44:b1:98:7f:e7:47:b7:0c:b0:f8:4c:60:a2:
8d:cc:ee:25:cb:04:76:4f:af:a1:2e:1a:ce:1f:8e:4a:61:fe:
37:66:94:6a:93:fc:e0:30:a6:2a:72:a8:d4:79:5f:d1:49:db:
70:af:4a:0e:08:59:a2:e2:e9:74:ea:74:c1:31:70:c1:5f:37:
01:22:40:60:d4:d2:6e:bb:d4:08:51:49:17:28:e7:8f:9e:fd:
ff:f1:7f:ad:9c:30:d2:c5:82:da:67:bc:5b:90:10:e6:b9:4f:
80:f4:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:05 2025 by rpki-client