Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/lSpQXF77aOd5aaWL7y9AyYlQaWs.roa
File: lSpQXF77aOd5aaWL7y9AyYlQaWs.roa (raw, json)
Hash identifier: k9FWEbwffQtuSyIeXa8qgZ8XemL3dT9nYO5Khh1P6zU=
Subject key identifier: 95:2A:50:5C:5E:FB:68:E7:79:69:A5:8B:EF:2F:40:C9:89:50:69:6B
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 0195A832B3DD7EF145853A467AAFA308EE9B
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/lSpQXF77aOd5aaWL7y9AyYlQaWs.roa
Signing time: Tue 18 Mar 2025 07:40:49 +0000
ROA not before: Tue 18 Mar 2025 07:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60246
IP address blocks: 80.72.20.0/23 maxlen: 32
80.72.24.0/23 maxlen: 32
85.198.120.0/21 maxlen: 32
92.118.72.0/23 maxlen: 32
95.174.96.0/20 maxlen: 32
95.174.112.0/21 maxlen: 32
95.174.120.0/24 maxlen: 32
95.174.123.0/24 maxlen: 32
95.174.124.0/22 maxlen: 32
178.212.139.0/24 maxlen: 32
185.9.184.0/24 maxlen: 32
185.9.186.0/23 maxlen: 32
185.230.240.0/23 maxlen: 32
185.230.242.0/24 maxlen: 32
2a00:8740::/47 maxlen: 128
2a00:8740:2::/48 maxlen: 128
2a00:8740:10::/47 maxlen: 128
2a00:8740:15::/48 maxlen: 128
2a00:8740:16::/47 maxlen: 128
2a00:8740:18::/45 maxlen: 128
2a00:8740:20::/44 maxlen: 128
2a00:8740:30::/46 maxlen: 128
2a00:8740:34::/47 maxlen: 128
2a00:8740:36::/48 maxlen: 128
2a00:8740:100::/48 maxlen: 128
2a00:8740:110::/47 maxlen: 128
2a00:8740:112::/48 maxlen: 128
2a00:8740:201::/48 maxlen: 128
2a00:8740:ff00::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:32:b3:dd:7e:f1:45:85:3a:46:7a:af:a3:08:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Mar 18 07:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=952a505c5efb68e77969a58bef2f40c98950696b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:27:8e:cd:c1:6e:62:fa:26:18:86:46:7c:
80:65:9e:24:e2:52:20:ce:77:2f:22:ee:b3:05:99:
a5:6d:9c:d2:09:e2:3a:1a:a9:79:6c:0e:02:ed:6f:
30:b1:db:07:3b:1c:4c:82:ba:81:eb:16:25:61:37:
67:0c:b8:f1:15:8b:7c:34:e9:a4:2e:27:f2:0a:ca:
d0:1e:e8:08:5c:ef:d4:57:cd:12:f0:54:e0:fd:9c:
16:a6:75:b1:b4:70:c5:eb:7c:a6:86:1a:0a:29:78:
29:56:3a:89:5a:ac:3f:c8:bb:00:c1:4f:24:f8:c8:
50:65:60:82:28:d3:cf:60:80:26:84:09:e8:b3:5d:
37:c1:60:12:f4:45:a1:62:f0:dc:9d:57:f9:2b:4f:
44:54:b4:ca:e4:6d:76:f2:82:44:7e:a5:1d:85:84:
4d:cb:2c:84:3a:22:74:4b:fe:30:16:48:d3:d2:d2:
b5:cb:7c:58:ca:37:9a:28:2e:2e:0c:df:c6:80:a3:
c6:38:ef:bf:0d:4f:de:9d:d2:46:6b:81:49:02:c5:
0f:32:99:d8:f7:d4:45:a6:54:42:89:f7:c8:fa:e4:
d2:e3:79:9e:2e:14:1e:02:d3:bb:bd:c1:d7:e0:cc:
c1:30:02:76:56:fb:02:ec:06:94:98:55:ea:f7:41:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:50:5C:5E:FB:68:E7:79:69:A5:8B:EF:2F:40:C9:89:50:69:6B
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/lSpQXF77aOd5aaWL7y9AyYlQaWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.20.0/23
80.72.24.0/23
85.198.120.0/21
92.118.72.0/23
95.174.96.0-95.174.120.255
95.174.123.0-95.174.127.255
178.212.139.0/24
185.9.184.0/24
185.9.186.0/23
185.230.240.0-185.230.242.255
IPv6:
2a00:8740::-2a00:8740:2:ffff:ffff:ffff:ffff:ffff
2a00:8740:10::/47
2a00:8740:15::-2a00:8740:36:ffff:ffff:ffff:ffff:ffff
2a00:8740:100::/48
2a00:8740:110::-2a00:8740:112:ffff:ffff:ffff:ffff:ffff
2a00:8740:201::/48
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b6:de:7c:2d:e2:54:b4:a8:2d:da:a2:4a:4e:c4:bc:9a:aa:
2f:34:09:d7:4a:6b:92:4b:0f:bb:96:14:d5:f4:1d:9d:ec:76:
28:5a:3e:27:84:80:00:f0:a9:97:85:c5:e9:8e:dd:34:10:2f:
72:92:2d:87:aa:15:69:74:50:1e:a0:ed:a2:cb:aa:92:c9:5c:
7e:79:bd:25:89:61:1f:4d:9a:c0:8c:73:64:bd:7d:d8:92:e7:
f5:09:b2:41:f3:fd:16:6d:3e:2a:e9:a8:7f:80:02:1d:9c:d1:
6f:05:9d:b4:f1:dd:d7:39:3d:97:d6:b9:71:39:77:53:a0:df:
97:86:0b:90:d3:cb:71:b9:1a:92:ff:92:7f:66:21:02:9b:19:
69:4b:53:67:2f:92:a1:c7:b2:5c:f4:ce:4e:84:89:d9:6e:55:
f3:6f:de:0e:60:a5:3d:88:c0:1d:9a:1e:40:cb:c2:fa:19:f3:
74:dd:e5:cb:e4:a6:1c:0b:43:91:0d:f4:cc:16:ef:31:dc:8e:
35:ca:25:99:8e:57:35:d3:8a:24:8b:23:b5:19:e7:25:99:e5:
7b:09:d9:6c:d8:11:58:c4:fd:ee:b1:37:c9:e3:90:83:93:d1:
7f:39:75:d8:b5:e8:67:a4:ce:2f:e1:05:ea:c6:40:3a:6b:1f:
d0:3b:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:53:38 2025 by rpki-client