Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/8Sri4eKkSQnw8ADSHQbNObPyV8g.roa
File: 8Sri4eKkSQnw8ADSHQbNObPyV8g.roa (raw, json)
Hash identifier: +X2+YBv7QBHdra9UQ+hQtq+hWCfEiX43Slks/6n+cxQ=
Subject key identifier: F1:2A:E2:E1:E2:A4:49:09:F0:F0:00:D2:1D:06:CD:39:B3:F2:57:C8
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 01957FB1E6E5FA5647889C1E63A5A0F69B54
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/8Sri4eKkSQnw8ADSHQbNObPyV8g.roa
Signing time: Mon 10 Mar 2025 10:55:20 +0000
ROA not before: Mon 10 Mar 2025 10:55:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30742
IP address blocks: 2.59.32.0/22 maxlen: 24
2.59.33.0/24 maxlen: 24
2.59.34.0/24 maxlen: 24
2.59.35.0/24 maxlen: 24
80.245.132.0/22 maxlen: 24
80.245.136.0/21 maxlen: 24
82.198.192.0/19 maxlen: 24
176.118.180.0/22 maxlen: 24
176.118.180.0/24 maxlen: 24
176.118.181.0/24 maxlen: 24
176.118.182.0/24 maxlen: 24
176.118.183.0/24 maxlen: 24
185.43.24.0/22 maxlen: 24
185.48.224.0/22 maxlen: 24
185.106.184.0/22 maxlen: 22
185.115.80.0/22 maxlen: 24
185.139.112.0/22 maxlen: 22
192.145.112.0/22 maxlen: 22
193.176.72.0/22 maxlen: 22
194.146.0.0/22 maxlen: 22
2a01:9b60::/32 maxlen: 32
2a03:9980::/29 maxlen: 32
2a03:9980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:b1:e6:e5:fa:56:47:88:9c:1e:63:a5:a0:f6:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Mar 10 10:55:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12ae2e1e2a44909f0f000d21d06cd39b3f257c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:11:c7:31:c0:6a:83:e8:6e:ee:51:dc:4d:
dd:a5:40:42:19:a3:f5:1a:9e:7d:a5:ba:4a:c6:09:
4a:83:0b:8e:ec:1a:64:4d:97:68:41:10:c2:bf:27:
bf:7a:63:e8:f6:51:ab:ac:e9:03:cc:50:c0:1f:18:
5b:95:14:0b:00:44:40:fe:f2:7b:c2:35:97:75:b8:
ea:3b:dc:7a:7a:23:41:85:02:48:45:45:4c:92:35:
76:63:e2:52:92:a5:1d:a5:c8:f8:60:7f:5f:52:dd:
e3:62:a1:bc:00:7c:7f:f8:5e:d6:f3:4c:5b:8b:81:
5f:43:99:2b:25:fa:14:64:19:0b:5e:72:10:60:82:
4b:92:e4:fc:12:49:e5:29:84:c6:91:a3:0b:f8:07:
9e:4a:8f:05:2a:23:6f:0b:23:49:04:75:ce:92:15:
72:5b:58:7f:e1:2b:81:ca:d3:9d:6f:6a:14:54:1c:
a3:50:49:34:41:ba:2e:ff:18:e7:96:a4:ac:d6:ba:
38:ae:45:aa:7f:e9:cc:3c:eb:fb:b7:3c:0f:c7:73:
6d:2c:49:36:1d:5d:f2:3b:3c:02:e6:b8:20:4d:83:
d8:0f:23:69:c6:28:4d:4d:13:92:4c:35:18:44:aa:
25:10:d2:c3:de:ec:de:8e:cf:01:26:b1:f3:3f:e8:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:E2:E1:E2:A4:49:09:F0:F0:00:D2:1D:06:CD:39:B3:F2:57:C8
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/8Sri4eKkSQnw8ADSHQbNObPyV8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.32.0/22
80.245.132.0-80.245.143.255
82.198.192.0/19
176.118.180.0/22
185.43.24.0/22
185.48.224.0/22
185.106.184.0/22
185.115.80.0/22
185.139.112.0/22
192.145.112.0/22
193.176.72.0/22
194.146.0.0/22
IPv6:
2a01:9b60::/32
2a03:9980::/29
Signature Algorithm: sha256WithRSAEncryption
3f:a5:a5:d7:41:9f:31:3a:9d:41:95:26:ed:89:ad:c3:2e:bd:
1d:1b:85:2d:80:96:e6:3d:32:75:86:51:01:48:3b:10:53:90:
a7:73:b1:96:d2:42:b8:09:47:da:a9:00:41:0f:a8:df:fc:24:
cd:0e:36:47:3b:0d:96:22:31:b4:8a:95:40:fc:e7:6c:7f:d9:
9f:b6:4e:07:05:70:0b:60:12:21:70:51:29:e3:56:30:b7:72:
58:f8:c9:29:46:ef:c0:f0:93:68:7a:d7:c0:58:fe:fb:f8:47:
86:55:de:d2:e5:e1:02:88:3a:96:eb:9d:34:64:74:8b:c3:53:
46:41:7d:86:a0:b0:8c:8e:73:bf:79:46:26:d0:bc:74:03:d2:
25:29:9c:16:42:11:6e:fd:2d:1e:c0:96:a9:0c:d8:3e:45:f2:
ad:91:ca:55:b7:03:5f:c9:71:e7:f7:f8:5d:2e:f3:3f:c8:6c:
02:e1:3c:9a:30:f4:68:87:2c:61:b8:71:47:2c:1a:a2:e3:b0:
a0:1f:c8:2b:d1:09:29:a0:3e:b4:04:1a:ec:ab:0a:1d:96:d0:
ff:3b:6f:db:35:21:23:53:64:d5:ba:46:b6:40:26:32:45:1e:
1e:83:1f:51:eb:1b:f4:f7:84:c8:2e:80:81:fc:59:a0:01:d0:
3f:d1:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:28:57 2025 by rpki-client