Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa
File: xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa (raw, json)
Hash identifier: 43WOZICTIxPYcL8p7aD3gmAQjRkX3uJE7dpL5l+yfxk=
Subject key identifier: C4:C5:74:6D:34:D7:A2:64:D5:6B:CC:5C:D2:20:A7:D2:C0:FB:83:F4
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019615593CD6792A6386073522744A37BEE9
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa
Signing time: Tue 08 Apr 2025 12:21:31 +0000
ROA not before: Tue 08 Apr 2025 12:21:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214996
IP address blocks: 152.53.31.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.52.0/22 maxlen: 22
152.53.68.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.164.0/22 maxlen: 22
152.53.168.0/22 maxlen: 22
152.53.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:59:3c:d6:79:2a:63:86:07:35:22:74:4a:37:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Apr 8 12:21:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4c5746d34d7a264d56bcc5cd220a7d2c0fb83f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:c2:90:3c:68:a5:f3:45:bd:f2:0e:be:96:
c7:7d:2c:32:2d:64:98:72:47:fb:39:7a:d8:f9:f6:
d2:4e:19:93:4b:a3:f9:7f:19:22:6b:69:6b:0b:3e:
66:b2:a4:54:df:2e:6d:7d:5d:60:f8:a8:9e:cb:5d:
35:5d:b5:86:a0:95:94:4d:3c:05:63:2b:09:bd:7b:
a6:b6:3a:e6:9b:ec:a9:f0:02:e5:b3:fd:4b:52:a5:
2e:1e:86:ae:88:aa:7e:4d:49:e8:6d:82:c3:d6:13:
b1:d1:c7:ce:ee:50:21:2d:89:ec:f7:88:07:83:34:
db:f3:96:ae:08:fe:df:64:d6:92:4c:d4:5d:80:3a:
ff:d1:d8:48:65:ea:40:e4:eb:68:9e:45:98:ec:b4:
93:99:11:fa:64:e0:b9:c1:61:71:d9:59:32:56:03:
7a:99:7e:39:b5:a5:1f:03:12:c5:7e:bb:dd:82:89:
c0:0a:1a:cd:9f:46:a3:7c:dd:6d:66:06:05:28:bf:
50:7d:39:82:1b:3d:de:95:1f:ac:e5:5e:5e:09:70:
09:af:a3:27:b7:22:ef:bf:5c:c7:6f:f3:6b:87:01:
bb:30:a6:6b:9a:35:97:ae:c7:3b:87:f0:21:c1:aa:
a9:ea:1d:bd:f7:55:61:52:2a:e9:be:9e:32:04:47:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:74:6D:34:D7:A2:64:D5:6B:CC:5C:D2:20:A7:D2:C0:FB:83:F4
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.31.0/24
152.53.36.0/22
152.53.52.0/22
152.53.68.0/24
152.53.80.0/22
152.53.88.0/22
152.53.164.0-152.53.171.255
152.53.240.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:b9:b9:18:59:b1:0d:04:35:06:17:21:0d:b7:ae:15:6c:e8:
fd:83:f2:86:d0:56:6d:b3:4e:71:ae:d7:2c:39:07:1e:dc:b0:
8d:c8:5c:bd:8e:2e:7d:19:c9:8b:6b:84:82:c9:35:e7:d5:c3:
c7:be:d6:5d:e6:1d:c4:1c:d1:2c:09:03:2a:97:be:50:1e:8b:
29:ea:49:eb:7d:1f:e8:28:12:2e:0b:f2:8d:e0:02:0f:4e:c4:
b2:e7:3a:cf:d4:81:f6:fd:c1:e4:9c:e3:61:53:93:ea:af:96:
35:64:01:71:fd:1f:35:28:0e:f8:bf:1f:ad:aa:3e:8a:80:bb:
0f:b5:5d:46:bb:da:9f:54:c7:35:ed:52:5a:b4:ff:3c:7a:6b:
98:2d:9e:32:a2:89:00:cb:b1:ba:01:73:49:1a:54:80:54:28:
05:c1:e9:22:7c:d0:99:28:2d:2b:ff:fb:b1:47:cc:c8:e4:f8:
d4:62:f4:0f:06:f2:c0:df:a2:49:1f:90:02:67:44:06:c9:e4:
9a:2e:25:9c:71:0d:06:8b:fd:6c:ac:cf:a9:bf:05:06:9d:32:
7b:da:8d:36:c7:47:1b:0c:8d:1d:e3:b0:3d:c3:41:d2:0d:d0:
81:1e:b7:a3:f9:22:cd:1e:a1:d7:e5:23:b9:20:6d:f1:ca:d4:
fc:7a:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:49:27 2025 by rpki-client