Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dw6FBN4Ym2z4rGXAgJD4UGXnoQo.roa
File: dw6FBN4Ym2z4rGXAgJD4UGXnoQo.roa (raw, json)
Hash identifier: iywkTbtbejtl8HSZKtPr2oWPVgUGcjP+wa4kvBJ3T14=
Subject key identifier: 77:0E:85:04:DE:18:9B:6C:F8:AC:65:C0:80:90:F8:50:65:E7:A1:0A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019731B55AE434A597C99AA85F2B412C836F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dw6FBN4Ym2z4rGXAgJD4UGXnoQo.roa
Signing time: Mon 02 Jun 2025 17:34:18 +0000
ROA not before: Mon 02 Jun 2025 17:34:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.72.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
151.244.101.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:b5:5a:e4:34:a5:97:c9:9a:a8:5f:2b:41:2c:83:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 2 17:34:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=770e8504de189b6cf8ac65c08090f85065e7a10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:4c:22:b6:48:6b:9e:ba:40:11:d5:1a:be:
1f:a9:a4:52:41:49:77:33:68:b4:5e:94:13:19:28:
28:63:15:a4:68:4a:3b:3e:d1:b9:e0:25:f7:18:80:
b1:04:62:75:dd:3d:20:c4:0c:f6:f6:ae:81:21:00:
02:61:5f:e1:a2:e1:a1:02:50:32:53:3e:9e:42:fa:
2a:31:ac:66:21:b4:a2:b0:00:43:2d:6c:87:a1:53:
1c:dc:d8:19:57:58:68:b3:1f:8b:ab:b7:b1:03:68:
89:12:30:94:cb:1d:d9:96:5f:91:18:03:5e:2c:58:
2e:5c:75:ff:4d:b1:69:aa:8b:1b:43:64:3a:2f:85:
b3:82:8c:46:45:0c:cc:95:ec:8c:54:35:4c:e6:76:
67:1a:49:eb:46:fc:75:b7:c6:79:f3:a3:3b:ec:d1:
e9:da:68:08:06:c5:85:88:3b:9e:99:6d:e1:5c:b3:
d5:9f:56:f6:62:f4:05:ee:89:b1:bc:2f:fb:77:68:
9d:56:f6:76:ef:dd:2b:bd:43:17:0b:ec:6e:1c:a0:
d3:9e:7e:60:8a:2b:ba:ba:8f:c9:65:30:53:ac:6e:
97:9b:16:bb:ca:dd:6f:21:f3:59:8a:aa:0e:98:78:
28:f2:dd:e6:0a:d8:8b:47:52:29:13:88:52:d5:2d:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0E:85:04:DE:18:9B:6C:F8:AC:65:C0:80:90:F8:50:65:E7:A1:0A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dw6FBN4Ym2z4rGXAgJD4UGXnoQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0-151.242.72.255
151.243.107.0-151.243.110.255
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.97.0/24
151.244.101.0/24
151.244.105.0/24
151.244.110.0/24
151.244.114.0/24
151.244.118.0/24
151.244.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7d:5f:39:54:56:65:93:d2:67:79:e9:5a:01:f5:d2:53:af:
24:aa:a4:62:e1:18:3a:2e:94:12:d1:d9:06:65:68:7a:b8:9f:
70:2f:e0:f3:3f:ef:01:12:69:83:0c:fe:6a:f9:51:c8:2b:ae:
39:e1:fc:06:a1:ef:dc:f5:c1:c1:46:78:69:21:99:f3:fd:aa:
2b:12:e4:1b:d6:c8:ac:8b:00:23:e4:b0:15:2e:4a:b6:bb:4d:
bc:7a:36:22:d5:88:5b:0d:2b:fa:d7:9b:58:0e:02:cb:15:b3:
09:6e:ab:38:ab:76:84:36:80:6f:09:a9:f4:3b:b1:60:39:26:
a6:e1:0c:a7:8e:86:a4:9e:b6:63:fd:8d:0f:40:0a:b9:df:cb:
8b:35:32:55:e8:88:65:19:31:b0:2f:6c:45:c0:68:0b:d4:39:
55:f8:2a:70:39:bc:ec:07:76:8a:c8:a8:83:f3:77:59:a9:fd:
f9:cb:66:41:a8:12:36:5f:06:a4:11:67:de:11:ef:72:bd:1d:
e0:0d:c0:93:3d:37:ad:26:86:96:30:e9:55:b5:9c:a6:75:7e:
c2:67:ac:3e:ca:74:93:77:d6:4f:93:0a:b7:42:61:29:04:92:
a3:e5:83:99:79:6f:52:94:d8:d8:42:82:5b:22:aa:d0:b5:1b:
89:d9:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:19:31 2025 by rpki-client