Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dKNNHGquzmP-RqZm44MlC4MSuoc.roa
File: dKNNHGquzmP-RqZm44MlC4MSuoc.roa (raw, json)
Hash identifier: kFxdaWVfO92BDimlaRSxC8n8dMjVchqFVR53G7mfnGc=
Subject key identifier: 74:A3:4D:1C:6A:AE:CE:63:FE:46:A6:66:E3:83:25:0B:83:12:BA:87
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0195B95A7D2F1DB9F65870B89B4F5D80DCCC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dKNNHGquzmP-RqZm44MlC4MSuoc.roa
Signing time: Fri 21 Mar 2025 15:37:49 +0000
ROA not before: Fri 21 Mar 2025 15:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:5a:7d:2f:1d:b9:f6:58:70:b8:9b:4f:5d:80:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 21 15:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a34d1c6aaece63fe46a666e383250b8312ba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a9:0c:1c:b2:38:4b:72:a3:c3:46:a8:45:75:
ac:aa:ce:c5:c9:99:03:14:e8:86:3e:0e:d3:63:77:
77:67:0f:bd:67:87:02:ce:15:f8:24:0a:65:a7:54:
b9:32:35:cb:e4:a5:e4:fb:c9:99:98:e4:82:a3:f1:
70:c5:6e:6d:cd:2b:7c:bd:21:44:78:89:4f:30:17:
6f:ca:b5:b8:23:32:81:ac:09:a4:83:c4:d6:81:b3:
12:de:bb:59:8f:cd:db:76:92:ae:44:d9:54:67:67:
89:9a:9f:60:d8:4f:99:c8:df:e7:fc:fc:f4:af:87:
50:e8:fa:05:c7:55:3c:4e:15:7c:88:92:b0:df:11:
6f:d7:ca:43:cd:d4:8d:49:59:ad:a5:28:f4:de:8b:
db:b1:a1:f9:a4:e0:61:8d:44:00:e6:01:01:75:6a:
4d:65:7c:07:69:d0:5d:02:e7:c2:15:48:2e:9c:02:
0a:4b:80:2b:61:b8:0c:ad:b5:e5:d8:c1:92:32:44:
d0:de:79:97:0e:e2:b0:eb:9b:df:a8:e5:a0:70:18:
99:7c:ed:59:bd:5a:20:32:bb:9e:a4:25:15:b7:49:
b3:cf:74:b2:d4:8e:9d:03:3c:d8:8e:ec:44:d0:1a:
ee:e7:29:20:0f:44:42:47:b2:1e:99:a4:7d:3d:17:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A3:4D:1C:6A:AE:CE:63:FE:46:A6:66:E3:83:25:0B:83:12:BA:87
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dKNNHGquzmP-RqZm44MlC4MSuoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
46.102.237.0/24
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
94.177.106.0/24
185.34.101.0/24
188.208.103.0/24
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9b:3f:9d:e6:ee:ff:8e:e9:73:fb:27:6c:bf:af:71:0d:9b:
79:ff:fe:b2:af:ab:b8:ab:0d:68:aa:88:4e:79:39:e9:0d:5c:
91:5d:3a:fd:c3:4d:2c:02:b0:f8:79:d1:06:b1:1d:88:7e:81:
15:1e:67:3d:e9:47:d9:b1:a7:de:00:e2:86:db:f4:32:38:05:
9c:b1:51:f9:13:cf:3b:ae:88:65:cd:9e:fb:bb:a4:ba:c9:f5:
14:0b:c7:93:5b:7e:a5:48:d7:0e:37:c1:13:26:be:94:a9:28:
6e:31:0f:c1:e7:23:cf:86:5e:38:07:5b:62:e5:1e:59:28:4c:
da:99:23:4b:f8:16:27:1a:c8:43:76:c5:ab:9e:85:de:7e:a5:
66:0f:58:17:83:82:1d:66:29:62:6b:04:76:ec:85:2b:1c:27:
fe:0a:a3:22:50:54:f8:81:fc:8a:72:2c:3f:00:b5:23:b0:02:
6d:f6:39:78:a2:37:8d:e0:f8:20:6c:e6:1f:fc:72:c3:5b:8f:
88:a0:6e:14:f2:1f:43:ca:1c:ff:ad:49:f7:c6:b6:2f:71:d9:
bb:a5:6c:10:dd:31:67:4c:77:81:15:e8:c1:10:fa:51:00:69:
0e:28:f9:34:df:38:13:00:60:33:3a:2e:db:cc:5a:f6:61:a6:
35:e6:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:07 2025 by rpki-client