Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LIt7wghYAS_foV1Bn5QVX3su3wg.roa
File: LIt7wghYAS_foV1Bn5QVX3su3wg.roa (raw, json)
Hash identifier: A/qIhWNVGe4qjnhSYtAkZlT2yFAM9s6qYf/sY24NEO0=
Subject key identifier: 2C:8B:7B:C2:08:58:01:2F:DF:A1:5D:41:9F:94:15:5F:7B:2E:DF:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01955B9B51C36BA3F5402378ED9DF8D3EFD4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LIt7wghYAS_foV1Bn5QVX3su3wg.roa
Signing time: Mon 03 Mar 2025 10:44:20 +0000
ROA not before: Mon 03 Mar 2025 10:44:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.120.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.37.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:9b:51:c3:6b:a3:f5:40:23:78:ed:9d:f8:d3:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 3 10:44:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c8b7bc20858012fdfa15d419f94155f7b2edf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:e6:14:0f:f8:f7:81:3d:10:fd:d8:96:76:
c2:ee:38:88:fb:1d:c1:30:30:23:3a:91:3c:d1:82:
54:02:c9:30:f3:4e:46:99:f4:ba:32:b5:d4:b9:1b:
d7:c0:8b:d7:2e:66:e4:a7:e3:47:75:0a:08:ed:6d:
1c:5c:13:4d:31:9c:48:83:dd:78:15:83:ad:23:f5:
01:64:e6:e2:af:1c:b0:1c:72:55:e8:ba:f0:5a:11:
6b:41:fb:de:7e:3f:f7:16:5e:3d:4e:89:74:a7:38:
cd:35:ea:b1:73:3b:ac:8f:61:2d:67:c6:7a:d3:cd:
f0:6d:96:16:0a:44:f0:7c:ba:36:51:52:9b:83:19:
af:10:41:f8:d7:b5:79:dc:92:9b:bc:e2:c2:60:10:
43:bb:9f:41:95:67:82:32:e8:a7:9a:ff:27:bd:dd:
cd:f2:2a:29:f6:f2:ce:6e:40:0d:5a:5e:2f:23:8e:
7d:26:60:d7:c3:cf:75:ef:5b:9e:5c:ea:55:a4:44:
ac:49:b5:36:6a:3e:15:a4:67:37:dd:90:72:cc:43:
4d:8d:b3:00:07:a7:2c:b1:48:ca:01:5f:d9:ce:64:
83:b1:c7:e1:bf:7f:1a:da:0a:f4:11:bf:11:31:cc:
d7:38:74:f7:85:5e:98:99:66:79:85:fb:60:6b:46:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:7B:C2:08:58:01:2F:DF:A1:5D:41:9F:94:15:5F:7B:2E:DF:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LIt7wghYAS_foV1Bn5QVX3su3wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.120.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.34.0/24
82.153.37.0/24
82.153.72.0/24
82.153.132.0/24
89.213.4.0/24
89.213.7.0/24
89.213.130.0/24
89.213.190.0/24
89.213.215.0/24
109.176.247.0/24
109.176.251.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c0:4c:45:cd:3c:67:26:26:03:02:a4:be:ab:20:62:fe:9d:
9a:ba:ce:9b:9d:c6:35:c4:cf:a0:19:40:98:8e:5b:22:5a:5c:
e3:44:4d:84:b3:6d:4d:69:74:22:41:37:4d:89:9c:00:3f:57:
ad:a1:a3:9a:71:22:35:33:f7:87:61:6d:23:3a:42:52:56:5c:
48:ef:f0:90:bc:42:b9:76:cc:17:14:5d:eb:2f:ec:5a:f4:c0:
f4:43:c2:96:b6:e8:6c:76:db:e9:b9:b8:29:14:91:b2:cb:15:
32:62:cb:9f:ab:e3:6c:df:6e:5d:99:3f:87:40:aa:63:33:3e:
62:83:40:a9:be:97:7b:89:fa:cf:13:c0:f2:86:54:db:e1:3d:
e3:fd:09:99:cb:2e:8a:c6:78:6d:45:c1:49:e9:d4:f9:83:70:
d7:da:69:66:e1:b9:e4:8b:cb:3f:d4:48:ab:07:a3:77:04:4b:
41:fe:e6:5c:f9:d0:3f:16:d1:43:7a:4c:e8:f0:de:28:7c:80:
9c:6d:86:73:af:ce:b6:c1:92:93:9b:6a:22:ae:bd:92:31:5e:
44:9c:3c:e9:5b:b0:25:86:3c:aa:58:96:2e:46:89:4f:0b:f8:
f4:bc:2b:f6:3d:7a:d5:dc:cb:a2:f2:ba:44:8f:d6:76:4e:06:
0f:a5:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:57 2025 by rpki-client