Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/O7r63uTdFaICg1i90uf5cyEl-h4.roa
File: O7r63uTdFaICg1i90uf5cyEl-h4.roa (raw, json)
Hash identifier: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=
Subject key identifier: 3B:BA:FA:DE:E4:DD:15:A2:02:83:58:BD:D2:E7:F9:73:21:25:FA:1E
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 0194258EBA3F0123E4ABDF3D0CEDFB7EDFB1
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/O7r63uTdFaICg1i90uf5cyEl-h4.roa
Signing time: Thu 02 Jan 2025 05:48:18 +0000
ROA not before: Thu 02 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61430
IP address blocks: 91.213.252.0/24 maxlen: 24
91.228.190.0/23 maxlen: 23
91.228.190.0/24 maxlen: 24
91.228.191.0/24 maxlen: 24
185.126.100.0/22 maxlen: 22
185.126.100.0/24 maxlen: 24
185.126.101.0/24 maxlen: 24
185.126.102.0/24 maxlen: 24
185.126.103.0/24 maxlen: 24
185.237.208.0/23 maxlen: 23
185.237.210.0/24 maxlen: 24
185.237.211.0/24 maxlen: 24
2001:67c:1944::/48 maxlen: 48
2001:67c:2ad4::/48 maxlen: 49
2a06:c040::/32 maxlen: 33
2a06:c041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ba:3f:01:23:e4:ab:df:3d:0c:ed:fb:7e:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Jan 2 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bbafadee4dd15a2028358bdd2e7f9732125fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:86:6f:9a:e7:48:cc:07:99:4a:4f:1f:fd:
f6:fd:12:79:d7:c1:c4:d4:f1:1c:33:ca:36:09:83:
22:b8:71:94:45:a9:d7:63:a1:2d:f3:cb:50:f5:cd:
cc:80:cb:24:4b:eb:34:e3:57:36:b8:c5:08:a9:3a:
cb:4d:f5:ab:ae:72:e3:f6:4b:e1:ca:d9:3d:31:1d:
e2:55:e1:4c:fd:3b:25:f1:e4:55:34:ac:9d:66:63:
07:6c:2d:fd:fc:cc:68:04:1d:4f:e2:08:ba:bc:70:
c4:c9:3c:f3:4d:40:30:ed:ca:24:cd:ff:1a:d0:f5:
2e:cc:5a:e9:1a:bc:2b:f8:1e:41:0c:e3:e5:6f:5a:
f1:d4:75:d6:25:c9:66:ae:eb:81:65:91:c0:eb:be:
a6:43:9e:12:20:1b:02:4d:54:8d:d3:b8:be:b0:ed:
70:95:8a:d3:30:aa:32:b7:b5:06:dc:5c:3d:da:4f:
3e:24:61:58:2d:3b:43:d2:8d:21:db:27:52:8c:78:
a1:90:4b:95:78:66:2f:38:c7:97:04:59:d0:6d:ef:
7b:72:0d:a4:fe:5d:66:63:0f:20:26:83:51:8f:8d:
6d:de:bb:30:26:80:4c:d7:7b:80:09:7e:7f:dc:21:
6e:d8:72:b5:48:9f:a0:fb:7d:fb:a3:2f:1b:d9:0a:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:FA:DE:E4:DD:15:A2:02:83:58:BD:D2:E7:F9:73:21:25:FA:1E
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/O7r63uTdFaICg1i90uf5cyEl-h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.252.0/24
91.228.190.0/23
185.126.100.0/22
185.237.208.0/22
IPv6:
2001:67c:1944::/48
2001:67c:2ad4::/48
2a06:c040::/31
Signature Algorithm: sha256WithRSAEncryption
0a:00:96:6a:40:12:4b:a4:38:19:86:6d:6d:71:78:1d:fc:6e:
e3:3f:f4:0e:45:69:52:df:0a:c6:05:aa:ea:d9:d1:fc:fc:0a:
b0:fd:e5:ad:e8:16:e2:c7:a4:f5:d1:8c:fe:fa:f8:65:1c:cf:
71:ad:44:f8:7e:91:f1:81:8c:ed:bf:f2:e6:80:e4:d0:8b:f0:
77:34:4b:a5:46:21:bc:84:34:f1:a0:df:d2:b7:1e:56:00:27:
fa:00:b1:bc:17:ac:2d:84:36:f6:c9:ed:d6:d3:dd:67:dd:70:
50:0d:13:56:36:e7:c3:d1:5b:e4:7b:39:6f:ea:e0:e6:a4:3d:
cd:4f:b9:3f:6f:d5:b5:c0:8d:36:45:e6:73:da:eb:f4:4f:f9:
80:a3:48:f1:4a:1c:4b:63:76:c7:40:44:41:94:17:99:9a:b5:
0b:f2:a2:bd:a5:d6:b0:9d:f3:66:13:0e:03:18:db:e2:c8:5c:
71:1b:83:46:cb:3b:14:a7:5f:6c:f4:31:2a:bb:d2:64:b2:ca:
38:86:7c:da:da:58:7a:3c:5a:5a:17:1c:3d:dd:c2:84:b8:95:
6f:83:ef:76:18:3c:b5:81:c1:a4:ee:fa:fb:c2:3b:2a:b2:d7:
b8:b4:97:a5:4e:ef:36:b2:db:9a:4d:f3:0b:dc:27:bb:c8:c7:
32:b8:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:53:31 2025 by rpki-client