Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/6OxWOof5RPwR-dHEi_VKB34xPSQ.roa
File: 6OxWOof5RPwR-dHEi_VKB34xPSQ.roa (raw, json)
Hash identifier: 4Bi3uRHuPwAszP4ZsAGHh2LAK/LAgGmZN5E2aAvbKGE=
Subject key identifier: E8:EC:56:3A:87:F9:44:FC:11:F9:D1:C4:8B:F5:4A:07:7E:31:3D:24
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019421440639F423A8A812D33BC009992825
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/6OxWOof5RPwR-dHEi_VKB34xPSQ.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:39:f4:23:a8:a8:12:d3:3b:c0:09:99:28:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ec563a87f944fc11f9d1c48bf54a077e313d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:7a:d2:ee:30:f7:b0:d0:27:16:d3:58:67:
0b:9a:e4:55:27:2a:f8:3b:f4:db:6a:e7:c6:cf:6a:
ca:52:2c:1f:0e:c8:3d:98:e1:62:c4:2a:3e:a7:91:
0e:e1:bb:a3:b9:df:36:e1:e5:56:73:bd:bb:f0:93:
26:3c:93:9f:a0:79:75:a7:e6:f8:7a:e4:f6:b9:92:
5a:aa:c3:22:af:01:80:36:d4:d0:1f:74:b8:0d:75:
fa:53:b8:7f:77:56:6e:09:e8:3a:70:2e:d2:a8:0e:
97:d8:6b:8b:b0:1c:30:9f:c4:1c:08:a0:b5:5c:1d:
1e:f8:c2:d4:8e:19:73:0b:1d:56:cd:c6:2b:2e:c2:
e6:50:58:45:af:74:d6:98:8a:6f:a5:ec:fe:83:50:
d1:fd:f9:52:1d:11:ec:8b:6f:d7:de:c8:ff:c3:5d:
17:c4:12:b4:8e:2d:df:ef:36:65:86:ef:fb:40:e6:
66:d3:7d:93:48:2b:e1:fe:87:f5:ec:e6:c5:b3:89:
b1:58:35:d7:ed:05:d7:c1:0d:f5:d0:90:83:83:c1:
07:bc:17:e0:f9:6a:9a:a6:de:ef:72:1b:e8:3c:97:
75:39:90:83:07:cd:d2:4e:48:0f:2d:c0:89:83:ab:
ff:f6:e9:1c:fd:6f:9a:ce:1a:6c:2c:d6:39:f0:01:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:56:3A:87:F9:44:FC:11:F9:D1:C4:8B:F5:4A:07:7E:31:3D:24
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/6OxWOof5RPwR-dHEi_VKB34xPSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
91.194.52.0/24
91.194.54.0/24
185.82.220.0/22
185.126.177.0-185.126.179.255
185.201.212.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
95:10:ab:50:03:7a:25:15:9d:1c:12:42:26:bc:07:14:82:9d:
7e:68:b7:fe:66:70:a8:57:4d:34:75:23:79:7a:cf:f3:fb:7c:
c7:d8:46:54:c6:77:0f:55:94:04:a8:e6:a9:cc:8a:18:6c:89:
f7:8a:ff:9c:77:8d:55:e7:a2:70:b0:b3:14:96:14:5f:66:e9:
b5:24:91:98:f0:66:1b:33:d4:7e:c2:76:d9:1f:60:1d:9b:db:
c2:05:45:1e:65:ac:7a:76:f7:28:64:1e:34:3c:46:d5:d8:7b:
e3:84:ac:9f:9e:bf:2c:c6:b1:13:5b:39:49:52:c0:a9:02:70:
46:4e:2c:13:d4:5f:08:89:c2:c8:b1:de:9c:83:99:79:7a:78:
7d:86:53:d3:67:af:d6:98:08:02:33:1e:9e:d6:82:61:b4:c5:
ae:ca:7b:32:0f:0b:2b:ee:13:83:e8:c1:fa:ff:48:ec:35:cf:
73:9c:30:a3:02:15:4a:4c:4e:7b:0b:97:a5:4e:db:3c:71:5b:
12:0c:ee:cf:23:47:25:98:58:e6:1e:de:f8:87:cf:b7:e1:50:
e3:80:5c:de:e5:24:fd:74:b4:90:6f:9e:d7:52:98:5b:1d:2e:
46:a9:09:03:29:8d:4e:6b:f0:21:d2:d7:0b:7b:6b:4e:9a:dc:
b3:53:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:33 2025 by rpki-client