Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/vHFMnuN7dlhtf_ph1ECCyCIiL1U.roa
File: vHFMnuN7dlhtf_ph1ECCyCIiL1U.roa (raw, json)
Hash identifier: 9sAJNvLQMY6XrrS2k8I+C2bMx47HQfrPSTeaDjyaik8=
Subject key identifier: BC:71:4C:9E:E3:7B:76:58:6D:7F:FA:61:D4:40:82:C8:22:22:2F:55
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019590B8435E16D93F94EDC896671DA9AC59
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/vHFMnuN7dlhtf_ph1ECCyCIiL1U.roa
Signing time: Thu 13 Mar 2025 18:15:49 +0000
ROA not before: Thu 13 Mar 2025 18:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0d:1180::/29 maxlen: 29
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:b8:43:5e:16:d9:3f:94:ed:c8:96:67:1d:a9:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Mar 13 18:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc714c9ee37b76586d7ffa61d44082c822222f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:33:aa:64:b2:e7:bc:76:2d:2a:7c:e0:f6:
e5:70:f3:b6:61:f8:b2:13:20:62:2d:f6:db:3b:fc:
8b:33:9a:a3:dd:29:c8:69:96:d9:60:29:34:e1:48:
16:e7:81:a9:32:2d:03:5c:ef:38:e6:27:6c:99:96:
0e:75:17:7d:ab:98:47:ab:d5:2b:44:95:3d:dd:3c:
f6:8e:9a:0e:01:82:20:f6:a8:7e:11:9d:88:84:15:
9d:0c:c8:aa:a1:3e:e0:80:a6:c0:69:41:e1:1a:ad:
da:dd:3d:eb:b5:92:53:ba:ef:47:0f:ed:fe:cb:42:
ec:df:da:ec:ec:2c:67:b6:e5:e4:26:a2:6f:e8:13:
ac:72:b4:59:b6:7f:4e:82:99:7d:91:be:37:91:78:
d9:d6:73:c1:a4:ab:40:52:38:bc:55:35:44:48:2e:
1d:6b:a5:c7:ad:3d:5f:56:53:d7:93:96:7f:61:ce:
ec:9a:d7:86:06:8f:b6:22:43:7d:65:fb:19:57:16:
ae:31:64:cf:a0:3e:5e:89:7e:2c:f2:71:61:58:69:
47:a9:2a:02:a0:07:f1:74:77:4c:cf:1c:f5:0a:52:
f3:03:54:25:86:60:67:2a:4c:92:f9:67:60:4e:f4:
f7:5b:98:f1:34:76:55:55:06:da:10:df:c4:e4:0b:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:4C:9E:E3:7B:76:58:6D:7F:FA:61:D4:40:82:C8:22:22:2F:55
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/vHFMnuN7dlhtf_ph1ECCyCIiL1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0::/29
2a0d:1180::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
94:31:ec:c2:cd:14:f1:77:e4:35:f4:68:9b:59:09:3f:80:60:
e0:fb:3b:a6:88:9b:82:0c:bf:5b:de:d4:64:61:f9:84:cd:01:
ee:86:d4:2f:58:5e:19:fb:38:2e:94:54:0e:a0:08:c1:64:fe:
d5:3d:20:c3:f9:a5:a8:f4:38:47:84:1b:fe:b1:c6:73:08:34:
c6:b6:91:b1:d1:05:de:38:8e:32:90:d3:fc:eb:4d:41:7f:42:
8a:35:46:c0:62:44:98:d3:55:95:36:c0:47:6b:03:e7:90:a4:
05:78:77:72:66:53:a6:e6:6e:c3:f8:b7:4c:45:80:04:9d:8a:
c3:d6:ea:aa:72:25:30:4d:96:bd:d8:a7:a5:18:13:91:2d:55:
17:c8:26:c4:68:bd:13:11:1b:2e:ec:79:f9:7e:29:82:06:1f:
70:48:34:59:a6:0e:e9:0f:81:ef:89:5c:98:96:80:91:5e:02:
8a:b9:96:bb:68:94:58:bd:45:51:dc:4d:34:2a:49:fe:5e:d5:
27:d9:06:d3:64:47:05:a0:32:9d:0d:27:77:7b:44:ac:2c:6d:
c5:3e:3f:eb:1f:0c:6c:a6:f0:b2:f5:4d:4b:5f:8a:76:71:d4:
49:93:43:66:17:91:43:7e:27:7b:fc:97:23:e1:a2:f0:17:05:
fa:06:10:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:41 2025 by rpki-client