Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0zJ5hUoY5Sh_dB6AslSlTotUuOY.roa
File: 0zJ5hUoY5Sh_dB6AslSlTotUuOY.roa (raw, json)
Hash identifier: w5/3gaAAz6lb+VaBP8fPyOne4FZGgtZ2/rxfrdjS9xQ=
Subject key identifier: D3:32:79:85:4A:18:E5:28:7F:74:1E:80:B2:54:A5:4E:8B:54:B8:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01971FAFA8A73FBC2A0AD8509A5FCAF93CFE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0zJ5hUoY5Sh_dB6AslSlTotUuOY.roa
Signing time: Fri 30 May 2025 05:34:54 +0000
ROA not before: Fri 30 May 2025 05:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:af:a8:a7:3f:bc:2a:0a:d8:50:9a:5f:ca:f9:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 30 05:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d33279854a18e5287f741e80b254a54e8b54b8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:3d:69:06:73:39:48:ef:60:36:bc:81:bf:
66:af:45:6f:5b:3a:66:90:3c:aa:c2:4f:d8:df:6e:
4c:65:b4:ff:ba:42:11:81:cd:4a:e1:db:8b:c1:78:
61:10:2e:e4:5e:2a:1c:a8:91:cf:0c:d1:30:80:12:
19:60:0d:f3:62:d6:7d:19:6d:06:8c:9a:c6:38:72:
ed:ca:2a:d0:2c:9a:ad:20:38:f6:98:23:f8:2b:03:
a3:9f:69:cf:45:37:49:42:2a:e5:63:c4:52:f4:71:
7f:fb:d5:2a:8a:31:3f:27:94:b5:4e:cf:2e:a4:e5:
d7:f1:34:b1:f8:2e:e7:70:5d:36:59:d6:37:b9:75:
93:84:97:c2:ab:ec:73:88:70:8b:91:03:26:dd:ed:
76:91:b4:26:dc:02:6b:65:c9:75:04:f5:f7:69:7a:
5a:a3:8e:ca:5e:6e:1a:a1:c3:e6:d5:a6:36:5d:39:
93:94:ac:24:71:41:2f:66:69:2d:15:bd:2c:d2:6f:
3c:54:66:de:3b:99:67:8a:d2:9f:c8:9d:8c:a8:c9:
1e:df:55:bc:e4:65:d7:1e:f8:2b:e6:9b:e2:d1:8d:
59:5c:c7:f3:51:44:ea:15:77:59:b3:79:14:aa:5a:
7b:e3:6b:c1:e8:63:a1:2f:1c:b1:70:10:b5:fd:5c:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:79:85:4A:18:E5:28:7F:74:1E:80:B2:54:A5:4E:8B:54:B8:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0zJ5hUoY5Sh_dB6AslSlTotUuOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
93.115.203.0/24
94.177.106.0/24
94.177.145.0/24
103.245.230.0/24
194.85.251.0/24
202.71.15.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a9:ab:6e:84:31:81:6f:20:9a:ca:94:71:04:f1:7d:19:33:
ed:cf:d5:d1:a6:48:44:93:8f:f3:94:e4:3c:df:20:f8:23:a0:
fc:a4:53:d5:d5:ac:74:9e:cc:78:7e:d5:f9:44:2f:56:23:27:
17:24:6b:a2:8a:c7:92:c6:a8:40:f3:5d:62:b0:14:0c:d2:df:
6b:59:2f:ad:4c:0b:29:61:ad:e0:3c:17:21:bb:2d:5e:1c:27:
a4:5c:07:51:47:44:ad:b8:08:04:e9:21:d5:b3:92:72:c3:5a:
87:b1:ed:c8:67:d9:4e:44:17:35:c1:c1:6c:21:ab:42:57:f7:
ea:6d:1c:8c:d0:b4:88:db:39:e2:13:55:11:ae:81:db:df:64:
29:aa:b5:79:75:44:1f:4e:5c:a8:65:2f:8d:75:14:7d:12:61:
e4:0c:2b:ed:09:fd:f9:3d:70:6e:fc:3d:63:3e:53:28:3b:f6:
9c:2a:e8:ac:31:e7:57:c2:06:86:60:10:83:7f:cb:15:18:1f:
97:21:72:ad:e4:4b:7a:04:04:30:2f:09:26:4b:05:18:55:6f:
4d:f7:87:53:95:18:b2:b9:ea:c8:a2:6a:1d:34:41:88:ec:f0:
9b:0c:8e:88:77:9d:95:f5:b2:ee:67:2f:3a:84:0d:41:87:3b:
9b:ed:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:41:04 2025 by rpki-client