Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Us5fsFK1rDmbmMuRZc376JRXA1A.roa
File: Us5fsFK1rDmbmMuRZc376JRXA1A.roa (raw, json)
Hash identifier: uMRE+27TjtGt0OGORHpHmlRoFrYZQRl3Whf6j5Y0xFM=
Subject key identifier: 52:CE:5F:B0:52:B5:AC:39:9B:98:CB:91:65:CD:FB:E8:94:57:03:50
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01944BCD631CB692673492D3749974B2B14F
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Us5fsFK1rDmbmMuRZc376JRXA1A.roa
Signing time: Thu 09 Jan 2025 16:02:18 +0000
ROA not before: Thu 09 Jan 2025 16:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5482
IP address blocks: 31.22.12.0/22 maxlen: 24
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
51.179.192.0/18 maxlen: 24
51.179.192.0/21 maxlen: 21
51.179.200.0/21 maxlen: 21
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
141.195.128.0/19 maxlen: 24
141.195.136.0/21 maxlen: 24
141.195.144.0/21 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a04:c880::/32 maxlen: 48
2a05:87c0::/29 maxlen: 48
2a0a:5583::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:cd:63:1c:b6:92:67:34:92:d3:74:99:74:b2:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 9 16:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52ce5fb052b5ac399b98cb9165cdfbe894570350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:ca:cb:78:c9:86:1d:85:8c:cf:44:e5:8e:
a7:0a:cc:f9:ed:78:0f:f3:6d:78:91:db:a3:7d:60:
2e:a7:4c:60:22:d8:fb:bc:4d:f0:cc:8c:35:ea:04:
27:77:0f:b4:22:45:f8:2f:74:83:52:f5:a2:cc:b4:
44:2b:0e:74:81:12:73:ac:c4:c9:af:3d:5e:8d:cb:
a7:01:53:30:79:d1:0b:83:e6:22:4a:ba:ed:79:7d:
9e:53:7b:52:5f:ec:7d:c1:3b:69:dd:49:a0:d3:21:
df:92:8f:6c:46:6d:22:27:7b:ce:92:a2:f7:10:e6:
36:10:82:72:d4:cb:d7:a1:9a:6f:f3:6f:f5:e6:e0:
89:3c:7d:63:e5:75:10:05:f5:6c:f1:52:89:1e:7a:
14:3f:12:f5:3c:24:8e:1c:05:b7:dd:61:a8:4c:fb:
84:5f:2a:84:32:db:e2:ad:3d:f6:f6:1d:61:e0:46:
8b:a0:e9:cf:bb:1b:bb:2c:4a:a1:27:ab:2f:b8:41:
69:15:20:99:1a:9e:05:ca:4b:cb:04:ac:b6:e8:f8:
5c:50:5a:7e:89:6f:b5:75:09:38:96:fd:ce:4a:d9:
15:34:1d:72:89:95:10:b3:42:18:79:00:f6:f0:b6:
cc:b0:7f:df:94:83:7e:26:2e:8b:9a:6c:06:95:49:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:5F:B0:52:B5:AC:39:9B:98:CB:91:65:CD:FB:E8:94:57:03:50
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Us5fsFK1rDmbmMuRZc376JRXA1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
37.48.224.0/24
37.48.229.0-37.48.230.255
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
141.195.128.0/19
185.102.148.0/22
188.74.64.0/19
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a04:c880::/32
2a05:87c0::/29
2a0a:5583::/32
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
14:11:84:18:0b:65:da:b7:f3:cc:00:3c:3b:c2:5d:da:a2:4d:
0a:22:91:b6:23:7e:45:ce:f7:e6:2e:03:b6:b1:33:d8:a3:4f:
24:a7:9f:a9:be:b1:1c:bf:5b:5f:2e:2d:a0:d8:38:d9:a6:a7:
60:83:5b:73:72:3f:f0:d1:92:7b:07:60:cb:43:49:20:eb:8a:
da:6b:00:74:22:8d:4c:f0:e4:5a:c9:98:a2:65:7c:b1:1c:17:
50:d6:ae:4a:90:ad:2e:f0:fc:82:80:e6:9e:66:67:5c:4a:45:
e4:6b:de:be:ca:8b:41:65:c4:b9:5c:a1:f9:36:3a:51:e7:83:
07:6e:f4:a9:27:e6:c9:1a:59:13:42:90:75:bf:fc:ea:90:ae:
33:82:6c:74:30:5f:ac:99:84:4b:c2:9c:22:bf:49:5a:47:fe:
90:8b:f0:b3:19:97:c6:6e:d8:f8:9e:6e:78:cc:bf:bc:78:69:
0f:75:34:9d:1d:fb:62:71:78:94:31:61:6e:10:27:94:80:c7:
cf:6f:7a:4c:54:42:33:8b:bc:94:50:03:8c:98:30:d8:f4:c4:
e4:e8:79:2d:1c:cd:15:dd:be:e2:fa:07:8e:b3:66:1a:1d:88:
f9:33:0d:18:2c:e9:00:bc:25:f4:e0:18:61:ac:90:d3:ee:85:
21:00:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:40 2025 by rpki-client