Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/JLmy4TR8RrUtQURM0_SunkucXNg.roa
File: JLmy4TR8RrUtQURM0_SunkucXNg.roa (raw, json)
Hash identifier: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=
Subject key identifier: 24:B9:B2:E1:34:7C:46:B5:2D:41:44:4C:D3:F4:AE:9E:4B:9C:5C:D8
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0196668CDF348F6251FFA56E32A441C8A54E
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/JLmy4TR8RrUtQURM0_SunkucXNg.roa
Signing time: Thu 24 Apr 2025 06:47:10 +0000
ROA not before: Thu 24 Apr 2025 06:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49683
IP address blocks: 31.25.234.0/24 maxlen: 24
31.25.235.0/24 maxlen: 24
31.25.236.0/22 maxlen: 24
31.25.236.0/24 maxlen: 24
31.25.237.0/24 maxlen: 24
171.22.172.0/24 maxlen: 24
171.22.173.0/24 maxlen: 24
171.22.174.0/24 maxlen: 24
171.22.175.0/24 maxlen: 24
185.44.64.0/24 maxlen: 24
185.44.65.0/24 maxlen: 24
185.44.66.0/24 maxlen: 24
185.44.67.0/24 maxlen: 24
185.85.240.0/24 maxlen: 24
185.85.241.0/24 maxlen: 24
185.85.242.0/24 maxlen: 24
185.85.243.0/24 maxlen: 24
185.116.236.0/24 maxlen: 24
185.116.237.0/24 maxlen: 24
185.116.238.0/24 maxlen: 24
185.116.239.0/24 maxlen: 24
185.122.164.0/24 maxlen: 24
185.122.165.0/24 maxlen: 24
185.122.166.0/24 maxlen: 24
185.122.167.0/24 maxlen: 24
185.168.192.0/24 maxlen: 24
185.168.193.0/24 maxlen: 24
185.168.194.0/24 maxlen: 24
185.168.195.0/24 maxlen: 24
185.184.68.0/24 maxlen: 24
185.184.69.0/24 maxlen: 24
185.184.70.0/24 maxlen: 24
185.184.71.0/24 maxlen: 24
185.189.56.0/24 maxlen: 24
185.189.57.0/24 maxlen: 24
185.189.58.0/24 maxlen: 24
185.189.59.0/24 maxlen: 24
2a0a:2f00:1::/48 maxlen: 48
2a0a:2f00:2::/48 maxlen: 48
2a0a:2f00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:8c:df:34:8f:62:51:ff:a5:6e:32:a4:41:c8:a5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Apr 24 06:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24b9b2e1347c46b52d41444cd3f4ae9e4b9c5cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:80:0d:ac:50:cc:1c:91:35:9b:23:8c:ab:
f6:ce:a6:f7:4b:e3:0c:f8:fa:ad:7d:ca:c1:d5:86:
ba:17:93:b2:0a:6f:19:5c:b0:56:a9:0b:8e:f9:1d:
71:5b:6a:d6:02:e7:fd:04:d5:1f:27:e9:21:ba:79:
57:fb:9b:be:b6:39:5b:19:78:79:b4:fa:33:c4:0d:
26:84:6b:34:86:c5:98:b4:35:01:ac:38:ba:99:a6:
31:ac:1f:eb:94:0b:b0:4a:78:49:ab:11:5e:16:80:
8b:f0:4c:bb:12:aa:93:74:38:9e:fc:52:bd:35:8c:
0f:3c:d4:88:85:73:50:01:ba:00:5a:68:3e:08:5c:
22:e6:ab:6a:15:a4:ee:94:7e:89:a4:db:16:ed:38:
eb:07:d7:8a:1d:02:05:01:a6:de:6a:73:ec:fc:5b:
39:70:38:01:96:0b:12:ef:86:98:8b:1b:4a:51:b4:
3a:72:a5:1d:8d:35:5a:9d:6d:9c:34:4b:56:0a:22:
1f:0d:45:e9:78:9b:5d:5f:f4:b5:9c:ba:a1:35:d5:
b0:fb:bb:9c:5d:55:77:13:a4:46:17:28:e9:f4:d6:
32:c8:d6:a0:22:d5:62:bf:5b:06:bd:a0:97:8e:30:
6e:af:54:ef:84:f0:5b:83:5b:7a:78:85:f8:1c:3f:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:B2:E1:34:7C:46:B5:2D:41:44:4C:D3:F4:AE:9E:4B:9C:5C:D8
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/JLmy4TR8RrUtQURM0_SunkucXNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.234.0-31.25.239.255
171.22.172.0/22
185.44.64.0/22
185.85.240.0/22
185.116.236.0/22
185.122.164.0/22
185.168.192.0/22
185.184.68.0/22
185.189.56.0/22
IPv6:
2a0a:2f00:1::-2a0a:2f00:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:4d:b0:d5:3d:7c:fe:ed:8a:2a:fb:36:8c:e8:bb:04:c5:47:
e6:ec:48:81:21:5c:f5:dc:0f:c2:2f:9e:5c:ed:3c:f8:05:4b:
ef:8c:f3:1e:63:5a:fa:27:97:40:c2:24:be:cd:72:fc:69:f7:
72:19:71:c4:d7:2d:9c:7a:b8:33:a3:20:07:af:56:1e:76:78:
a8:15:4c:5c:80:b7:86:82:2f:06:40:b2:5b:06:fc:4c:8d:76:
fb:24:ae:db:27:cf:90:ec:80:ba:64:65:de:78:98:f7:32:3f:
8d:e9:25:e1:42:b5:b6:28:ad:f3:66:16:23:8e:d0:d5:7c:a5:
63:7c:05:6a:a8:9b:70:91:c8:88:46:d8:20:c8:11:77:b9:cb:
4e:ec:f6:d1:c6:c6:ea:d9:43:74:17:0c:6e:4d:60:3b:bb:ad:
9f:6a:38:be:36:c1:68:90:23:57:17:a0:5f:68:8c:fa:ff:0b:
0a:65:ba:f2:4d:38:05:40:11:2c:75:77:47:79:06:93:ef:2c:
bb:a8:4e:dc:13:a0:b0:13:37:a7:37:e4:5c:ad:82:01:74:12:
f7:95:a5:cf:df:0c:0f:0a:96:59:df:a0:a7:d3:bc:cd:ec:6e:
10:32:83:b7:df:62:b1:48:a3:d0:ca:30:2b:2e:27:19:68:51:
1b:be:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:44:24 2025 by rpki-client