Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa
File: CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa (raw, json)
Hash identifier: 5ONFhg1QF43WPksHVSGaT4R+hEeMibeNW7Yj6pnVbKM=
Subject key identifier: 08:6A:F9:C8:73:6B:F9:72:3E:E0:21:D6:FA:C6:73:0A:F2:22:77:D4
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0196155DD0715952B71906B1A440FA982B42
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa
Signing time: Tue 08 Apr 2025 12:26:31 +0000
ROA not before: Tue 08 Apr 2025 12:26:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.6.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.8.0/24 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.25.0/24 maxlen: 24
152.53.26.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.41.0/24 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.58.0/24 maxlen: 24
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.74.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.79.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.160.0/22 maxlen: 22
152.53.164.0/22 maxlen: 22
152.53.168.0/22 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
152.53.240.0/22 maxlen: 22
152.53.244.0/22 maxlen: 22
152.53.248.0/22 maxlen: 22
152.53.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:5d:d0:71:59:52:b7:19:06:b1:a4:40:fa:98:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Apr 8 12:26:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=086af9c8736bf9723ee021d6fac6730af22277d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:c7:68:a5:c4:7b:83:df:12:ea:54:32:42:
a8:3e:f2:2e:47:e0:17:c2:3b:d2:d1:bc:64:30:9a:
11:70:50:b5:2e:6b:ee:a1:f2:16:d6:65:bc:7c:d5:
76:38:a4:b4:54:b9:74:d6:c9:7b:7a:af:f1:43:8a:
7f:dd:f7:9d:5c:fb:97:5b:25:09:71:bb:39:5d:bb:
30:85:94:95:bc:75:68:2f:56:84:cf:41:a2:f0:e1:
de:cf:8d:2b:65:e2:81:1f:77:d0:9c:05:5e:40:a7:
4c:61:01:2b:d0:2b:d8:77:2b:90:09:21:2d:d7:a2:
ca:43:b7:ee:a1:a2:2d:53:63:ca:fe:f3:70:5c:1e:
ed:f2:42:a4:72:e0:a8:ef:a3:c1:a1:7a:2f:d2:62:
70:9e:bf:42:a8:33:55:c7:f2:24:73:90:2c:e6:c3:
7d:a9:28:b3:8d:c2:e4:72:a7:71:dc:88:19:ae:66:
19:54:c2:5b:6f:e7:79:a8:f8:61:99:4a:17:37:f8:
6f:bc:37:ac:a0:60:ab:27:67:c0:4c:d1:92:4a:b4:
b8:05:b2:e4:8a:2c:1e:e9:e2:66:bb:99:32:7a:b2:
83:b4:8a:da:76:a5:68:20:b0:88:9b:ee:ca:50:57:
3d:f8:53:13:ab:2d:98:5e:f1:75:95:6f:6b:ca:17:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:F9:C8:73:6B:F9:72:3E:E0:21:D6:FA:C6:73:0A:F2:22:77:D4
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:6f:53:49:12:95:60:c6:4e:96:e9:ab:48:f9:da:4b:cf:e6:
57:b2:e4:9e:f9:0c:38:3b:9f:61:b0:61:52:8a:57:12:ef:bb:
56:b8:37:fd:ec:77:c3:4b:7a:44:2c:98:ba:69:d5:e8:45:5d:
c8:21:70:29:b0:42:a2:50:fb:e4:3e:e5:3f:c5:18:d8:43:02:
b0:c6:b7:09:8a:e6:2a:34:f8:eb:7b:5a:97:a9:61:d7:92:24:
45:37:9d:e5:b6:ba:c4:e2:03:32:c3:5f:59:dc:a2:36:eb:a0:
af:a9:3d:73:07:91:9f:0c:70:2b:ea:95:f5:2b:2c:0e:1e:7b:
b6:5a:7e:de:25:3c:2b:88:4f:55:b1:d3:59:7f:6d:1e:78:0b:
cd:c0:17:7a:3a:fe:c1:57:ed:92:4f:e4:19:3d:72:21:b9:57:
92:a6:b5:df:1e:3e:ca:79:29:22:d8:df:1a:87:85:9a:4a:2d:
e1:88:2d:dd:85:31:0b:82:62:a8:e8:08:36:f1:5b:c0:5b:18:
e4:e0:23:ed:11:7c:6e:dc:13:86:89:cf:5b:d1:80:96:f7:34:
a3:96:10:2e:47:6d:f1:2a:71:e7:20:73:02:74:4f:f8:e9:7f:
59:68:42:4c:44:b1:83:2e:fe:99:65:94:80:a7:36:c4:ca:2b:
7f:a9:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:54:28 2025 by rpki-client