Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/n-CxE-sLgsFeR17bn7XmAKrCNq0.roa
File: n-CxE-sLgsFeR17bn7XmAKrCNq0.roa (raw, json)
Hash identifier: mwly/ao+vXEKbQeJ+XNXv81dFwjdgRZmDPnXBYLigws=
Subject key identifier: 9F:E0:B1:13:EB:0B:82:C1:5E:47:5E:DB:9F:B5:E6:00:AA:C2:36:AD
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0196424B431121BF3A20BA30E8DF4BE54809
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/n-CxE-sLgsFeR17bn7XmAKrCNq0.roa
Signing time: Thu 17 Apr 2025 05:49:10 +0000
ROA not before: Thu 17 Apr 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31365
IP address blocks: 85.115.206.0/24 maxlen: 24
85.153.1.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.56.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.80.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:4b:43:11:21:bf:3a:20:ba:30:e8:df:4b:e5:48:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Apr 17 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe0b113eb0b82c15e475edb9fb5e600aac236ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:3c:07:3f:fc:f0:0e:09:f2:52:c4:b0:06:
10:4d:df:52:f4:54:ba:f9:e6:c0:32:43:12:ed:3f:
92:dc:6f:10:56:7e:bc:c5:dd:70:f9:bd:62:7a:c5:
a1:bf:3a:c7:03:f3:bf:fb:c6:04:26:a2:ce:e4:27:
ff:b9:55:13:bd:61:57:e3:e9:29:3f:3d:6b:88:74:
27:b5:31:25:25:09:81:eb:9e:d6:3b:9b:dd:87:aa:
fe:56:79:dd:4e:90:74:4d:91:8c:6d:90:0d:07:68:
83:b6:73:cc:15:15:c9:04:ff:14:9b:7b:99:c5:39:
3a:3a:22:7b:4f:dd:48:44:44:93:b9:f9:5a:a1:a2:
dd:b0:f2:a6:c4:e2:db:f5:82:62:20:2c:c9:23:72:
8b:a7:25:8e:18:20:37:75:42:53:d2:c9:de:85:11:
64:12:f5:ac:0b:dc:a5:33:a4:d3:f1:aa:53:1d:fb:
90:3d:89:fc:61:16:82:ff:87:79:1a:35:6e:45:e1:
02:fa:03:27:15:23:a7:c7:3d:09:4f:15:49:1d:79:
33:b8:ef:2c:c7:41:73:3e:17:6b:e9:cb:ea:25:c4:
57:06:23:fe:6a:96:78:c0:71:66:76:d3:27:21:9d:
36:e8:4c:9e:b8:e6:f4:82:47:75:8a:61:0e:42:ab:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:B1:13:EB:0B:82:C1:5E:47:5E:DB:9F:B5:E6:00:AA:C2:36:AD
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/n-CxE-sLgsFeR17bn7XmAKrCNq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.206.0/24
85.153.1.0-85.153.3.255
85.153.5.0-85.153.8.255
85.153.10.0/24
85.153.33.0/24
85.153.43.0/24
85.153.47.0/24
85.153.56.0/24
85.153.58.0/24
85.153.65.0/24
85.153.74.0/23
85.153.80.0/24
85.153.93.0/24
85.153.117.0/24
85.153.120.0/22
Signature Algorithm: sha256WithRSAEncryption
55:92:fa:ac:80:9e:ff:2e:aa:36:7b:1a:cf:26:79:7b:e5:0d:
ef:5c:54:e5:a7:4d:3f:74:a5:6f:47:72:4e:21:73:cc:4e:7b:
8e:dd:ed:dc:5f:d3:14:c9:44:3f:bc:a1:f8:54:54:50:46:5f:
3e:38:c7:3a:5d:07:8a:1e:5b:3d:42:c8:15:86:ed:a5:6c:b5:
c2:d1:96:73:bc:97:e0:02:c0:05:96:15:bb:f6:e1:7e:63:70:
70:35:5c:d2:07:2a:93:a5:3e:18:20:08:8e:d8:24:85:4e:10:
37:00:ac:c5:32:5e:20:14:8e:60:52:e5:93:56:f3:f6:aa:d9:
12:95:f2:d3:3e:40:0b:ad:ae:b4:c2:51:dc:01:f3:95:cd:2d:
99:2b:dd:18:fb:85:69:f9:b6:e9:74:18:58:29:dc:64:d0:7c:
f1:b2:43:3a:28:ca:75:8e:d7:a7:07:f1:f2:b9:37:0e:a6:8c:
85:b4:8c:6e:7f:7b:8d:83:fb:11:f7:2b:9f:0f:df:12:81:cc:
61:63:45:c9:c6:5c:c0:5c:84:e7:99:be:bc:bd:db:ff:fd:4c:
88:e7:a4:05:fa:b6:07:9d:63:f4:27:ed:55:78:28:0b:c9:72:
b6:eb:f9:3c:64:2c:0f:ff:95:a4:05:43:88:50:ac:6d:54:95:
e6:03:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:24 2025 by rpki-client