Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/ATi_Bwlv3Jj4IB4BpyKVNAFc_kM.roa
File: ATi_Bwlv3Jj4IB4BpyKVNAFc_kM.roa (raw, json)
Hash identifier: MWLTnUp2/uK02bics6n76jtOUMYQIGtbRzMIp5qiCR0=
Subject key identifier: 01:38:BF:07:09:6F:DC:98:F8:20:1E:01:A7:22:95:34:01:5C:FE:43
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 0195EB866ADCFA11976ACF98B8F08C286BF4
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/ATi_Bwlv3Jj4IB4BpyKVNAFc_kM.roa
Signing time: Mon 31 Mar 2025 09:26:49 +0000
ROA not before: Mon 31 Mar 2025 09:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58002
IP address blocks: 37.208.64.0/20 maxlen: 20
77.247.232.0/21 maxlen: 21
92.241.0.0/19 maxlen: 24
92.241.0.0/21 maxlen: 21
92.241.8.0/22 maxlen: 22
92.241.12.0/23 maxlen: 23
92.241.14.0/24 maxlen: 24
2a00:c9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:86:6a:dc:fa:11:97:6a:cf:98:b8:f0:8c:28:6b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Mar 31 09:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0138bf07096fdc98f8201e01a7229534015cfe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:37:f3:00:98:ee:eb:1a:5a:a5:26:db:e2:
48:0f:e4:5c:a3:a2:c4:1a:fc:2b:1d:0e:a5:42:c6:
b7:e7:c1:df:cd:c1:55:2b:6d:ed:a5:49:c4:cb:ea:
6c:72:21:70:1d:08:03:41:84:83:af:ff:47:67:92:
5c:fc:7d:5f:f9:be:44:af:62:1e:a7:33:0f:c8:81:
63:de:5c:84:e0:cb:48:f4:3f:fd:e6:cd:ee:65:87:
ee:ec:3c:2e:6a:43:d1:7e:60:f7:b9:32:0d:e5:a6:
14:d2:e1:b7:ba:fa:cf:d6:63:71:c6:f7:76:db:c0:
f0:d4:6a:da:e5:50:93:ea:89:b7:84:2f:ba:aa:c1:
67:40:93:ca:d5:1d:92:ad:49:72:4c:a6:38:b7:a4:
05:44:ff:79:ab:04:09:9f:3a:30:8e:60:4d:03:dd:
fc:6e:dd:22:5e:16:bb:86:9f:27:db:ad:b2:26:b8:
6c:05:48:65:f3:ac:87:b6:c4:3a:54:87:72:83:95:
90:16:5a:44:16:23:85:df:5a:53:e7:48:62:71:86:
65:82:8a:8e:fb:f9:a5:f6:2c:ea:36:bb:11:07:0b:
51:cd:bc:34:11:10:2b:26:08:90:2a:a5:2a:5a:47:
4a:16:4c:0f:6e:1f:37:7c:72:55:64:5e:c8:6e:49:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:38:BF:07:09:6F:DC:98:F8:20:1E:01:A7:22:95:34:01:5C:FE:43
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/ATi_Bwlv3Jj4IB4BpyKVNAFc_kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.64.0/20
77.247.232.0/21
92.241.0.0/19
IPv6:
2a00:c9c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:be:7c:44:3f:e3:20:0f:83:ae:2f:94:be:30:58:2e:23:8e:
5f:2f:87:df:b7:88:e3:be:21:2d:d1:a1:f0:35:85:ab:c2:8f:
aa:ea:81:97:08:2f:7f:e4:60:67:7f:5a:1d:6b:18:f6:3e:78:
09:aa:f4:de:a6:ec:fc:85:d7:65:20:cd:b8:85:f5:c9:b2:24:
5d:51:84:74:68:f4:bd:ce:a1:ac:da:66:97:e2:67:aa:b5:f9:
42:a2:0a:5c:46:5b:f3:fb:95:e0:bd:f6:41:8b:4d:5e:99:4c:
f4:b3:1d:c7:51:bb:40:b6:75:4e:e5:e8:be:2f:da:51:27:6d:
10:ce:08:98:db:84:c1:02:71:f8:1f:bf:63:32:db:18:b1:5a:
17:d9:fc:14:f7:0a:c0:c1:ab:f2:9b:2e:e0:27:23:75:a7:69:
95:03:97:1e:88:2f:45:6e:34:96:40:fe:37:26:c6:d9:da:43:
ae:f3:61:3c:56:c0:7e:6c:d9:2d:29:28:bb:02:18:b4:72:69:
57:65:c5:8f:21:28:4e:5d:98:7d:f8:c9:74:03:56:99:f3:43:
ce:da:de:d6:56:dd:37:0c:0e:f1:df:58:56:e0:60:52:bc:ae:
eb:89:0a:48:15:56:a9:3b:92:8e:89:d2:94:26:bd:65:33:b8:
92:94:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:20:04 2025 by rpki-client