Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/OToS6J8sZcb-NOk0SLebRPhhIy8.roa
File: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (raw, json)
Hash identifier: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=
Subject key identifier: 39:3A:12:E8:9F:2C:65:C6:FE:34:E9:34:48:B7:9B:44:F8:61:23:2F
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01942521EB2218DA17E52D56A61F824554F5
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/OToS6J8sZcb-NOk0SLebRPhhIy8.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57829
IP address blocks: 45.83.60.0/22 maxlen: 22
45.137.208.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
84.19.128.0/20 maxlen: 24
84.19.144.0/21 maxlen: 24
91.192.252.0/22 maxlen: 24
91.223.51.0/24 maxlen: 24
91.224.36.0/23 maxlen: 24
185.56.212.0/22 maxlen: 24
185.57.168.0/22 maxlen: 24
185.114.104.0/22 maxlen: 24
185.224.56.0/22 maxlen: 24
188.65.152.0/21 maxlen: 24
193.41.118.0/23 maxlen: 24
193.138.74.0/24 maxlen: 24
193.254.192.0/23 maxlen: 24
195.78.36.0/24 maxlen: 24
195.78.37.0/24 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
2a0b:fd80::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
2a0b:fd87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:eb:22:18:da:17:e5:2d:56:a6:1f:82:45:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=393a12e89f2c65c6fe34e93448b79b44f861232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:79:cd:7e:38:a5:92:e7:99:a7:50:98:07:
01:bc:88:45:fa:63:fe:38:06:5f:cb:01:31:7a:17:
65:a7:b8:53:a1:e9:79:73:97:0f:57:d4:b6:ec:e8:
6a:5f:a8:43:48:ea:5e:2b:25:06:6f:6c:7f:2d:88:
99:de:75:02:39:1d:52:1b:19:1b:29:c8:02:6d:93:
7f:97:0d:8e:85:8e:bf:b5:ce:8c:87:a4:b4:e9:a3:
fd:ba:3a:ec:d9:39:e2:b3:b4:7e:f7:ca:9d:1b:00:
8c:8d:03:48:dc:e3:86:86:9f:d7:b6:9d:5a:a5:17:
21:23:61:75:ee:fd:bb:24:24:97:86:05:16:32:ae:
aa:9b:57:92:3a:78:b6:56:19:ff:25:5b:85:1e:93:
aa:2a:51:ea:8b:de:73:f3:94:f6:e5:3d:ec:7e:91:
0f:ed:ad:19:fb:9f:26:ba:d4:1a:46:07:6e:d3:01:
d0:d5:81:41:bb:2f:e7:b1:ba:ca:ac:2c:a4:92:71:
b4:8c:2a:1a:c9:1b:30:ea:bb:8c:ce:db:30:15:72:
d9:7c:ec:ae:a4:47:d6:ff:b9:65:c2:16:71:c7:96:
01:54:11:7d:99:de:dc:3d:c1:1f:7e:8f:b1:58:90:
f3:4b:6f:e0:1e:79:05:a7:0b:f5:d0:80:84:08:13:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:12:E8:9F:2C:65:C6:FE:34:E9:34:48:B7:9B:44:F8:61:23:2F
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/OToS6J8sZcb-NOk0SLebRPhhIy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.60.0/22
45.137.208.0/22
81.201.208.0/20
84.19.128.0-84.19.151.255
91.192.252.0/22
91.223.51.0/24
91.224.36.0/23
185.56.212.0/22
185.57.168.0/22
185.114.104.0/22
185.224.56.0/22
188.65.152.0/21
193.41.118.0/23
193.138.74.0/24
193.254.192.0/23
195.78.36.0/23
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd80::-2a0b:fd82:ffff:ffff:ffff:ffff:ffff:ffff
2a0b:fd87::/32
Signature Algorithm: sha256WithRSAEncryption
53:89:7b:e9:22:d0:98:98:00:8b:c0:ad:ba:50:5c:6f:be:55:
93:78:eb:ca:6f:8a:b2:0e:67:64:1f:1a:fc:9a:57:b4:f6:8d:
0d:d5:2d:15:bf:10:15:4b:78:3f:c2:03:57:dc:bb:67:66:c8:
b0:c7:13:e1:74:09:03:d9:ee:e7:03:b6:5f:16:17:66:c6:24:
e2:a5:f2:02:2c:2d:c2:da:0c:3e:03:51:15:2f:3a:8e:b5:df:
19:a1:6e:1e:3f:de:b0:15:83:2a:11:27:2a:6f:91:23:5b:d6:
09:3b:62:fc:d3:a1:ad:b2:fe:8a:57:e3:31:d2:48:1d:d0:ad:
1a:9d:0e:10:fb:7f:54:b5:c9:c3:68:c2:4d:d7:48:af:98:d5:
12:bd:e8:5d:4f:6d:e2:f3:3f:03:e3:77:a2:ca:d8:44:d0:47:
da:76:4e:cd:4e:7e:18:12:71:ab:cd:ff:14:9d:ce:1f:2d:95:
44:d3:7f:d6:c2:f3:66:de:0f:ca:63:9a:d6:24:a8:ca:3f:96:
0a:a4:f5:c4:53:a5:0a:69:82:dc:54:0a:08:ad:23:53:9b:f5:
e3:53:58:35:30:33:57:52:b3:30:9d:46:54:23:45:95:84:87:
5c:a8:e9:61:d3:93:7a:eb:a1:b3:b7:61:bf:37:bb:0c:f7:3a:
18:61:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:56:09 2025 by rpki-client