Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e4UqODXZkQ-CucZolEzNHpFmqH8.roa
File: e4UqODXZkQ-CucZolEzNHpFmqH8.roa (raw, json)
Hash identifier: bHtx8nYkQIpfbpNsUZ6Al6k+UDvn5Cz7fQxf3+TbUFk=
Subject key identifier: 7B:85:2A:38:35:D9:91:0F:82:B9:C6:68:94:4C:CD:1E:91:66:A8:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195511FE6971785FBB1A26888B6DA5C0D21
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e4UqODXZkQ-CucZolEzNHpFmqH8.roa
Signing time: Sat 01 Mar 2025 09:53:19 +0000
ROA not before: Sat 01 Mar 2025 09:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.54.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:1f:e6:97:17:85:fb:b1:a2:68:88:b6:da:5c:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 1 09:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b852a3835d9910f82b9c668944ccd1e9166a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:6f:13:62:d6:5b:9d:eb:60:b8:f1:82:01:
da:6a:a0:cb:aa:ff:1b:0a:de:08:be:15:06:1f:50:
23:fa:24:e1:1a:ab:6c:e1:97:7e:e6:84:59:07:c5:
11:cd:5b:48:11:cd:10:9f:73:ec:a9:61:ba:ba:29:
32:88:d0:7f:7f:fe:88:39:48:af:6a:e0:4c:c3:ea:
4c:36:66:b4:e9:2a:ea:1d:42:3a:a1:2a:b7:de:59:
45:e4:20:5c:76:8f:fa:03:15:25:7b:16:6e:58:f0:
91:94:32:c0:44:72:95:39:6f:2b:51:f6:5f:02:80:
36:c1:d6:2e:00:34:d1:5a:c5:64:5e:a2:a5:dc:24:
4a:18:f6:c5:f1:7b:ee:59:27:75:56:79:91:bb:96:
9c:94:8e:e6:a3:36:9e:11:a5:8f:97:42:b4:e4:92:
98:f0:92:5e:cd:02:54:a2:24:29:ea:46:55:7c:d8:
4c:c3:df:f8:68:64:8f:8e:c3:d8:18:4d:0e:12:2e:
c8:c9:e7:aa:05:d1:d8:6d:18:f6:39:47:b0:43:c5:
1e:60:2b:3f:77:16:8f:d3:17:d2:bd:4d:5c:8f:79:
9f:80:71:26:9b:bb:2e:04:c5:4f:6d:2e:66:33:f5:
70:76:80:07:bd:3e:ec:df:32:46:3a:69:ed:3c:90:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:2A:38:35:D9:91:0F:82:B9:C6:68:94:4C:CD:1E:91:66:A8:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e4UqODXZkQ-CucZolEzNHpFmqH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.16.0/20
151.243.54.0/24
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
55:9a:43:6c:60:1e:52:be:f3:de:09:d0:ca:49:86:de:8f:ae:
cb:98:6e:af:40:c6:fd:01:77:da:18:58:6e:e5:f2:c7:12:ca:
24:43:44:b4:fa:8d:3c:d2:ae:be:e5:d1:dc:47:93:f6:dd:e0:
46:26:19:29:43:9c:59:d8:4b:22:b9:1a:b6:ec:82:eb:09:d6:
cc:81:1e:69:c1:7d:10:e3:18:55:f4:0f:83:07:25:22:92:76:
1d:aa:1f:2e:4b:09:ca:e6:29:bd:18:1a:d3:16:30:76:ad:2e:
97:90:1b:2e:44:f3:a3:36:d4:24:8c:50:10:c5:2b:c7:d0:d2:
0d:96:fc:7a:3e:60:92:4d:01:83:b5:0c:98:1e:87:73:50:6c:
da:d9:27:17:44:cf:c0:50:aa:e6:a8:72:02:92:d0:2c:ca:2f:
17:01:b7:d5:bc:99:fc:41:a9:cf:dc:99:70:30:f5:10:e3:b2:
d6:f1:2e:04:cb:7e:a3:fe:9c:28:d6:4a:34:29:c1:5c:68:30:
c2:68:38:61:06:f2:d5:d0:65:5c:1f:59:96:fb:ec:f4:8e:14:
44:82:08:47:7b:7c:ac:54:c4:ca:90:7c:57:70:30:a6:9d:64:
bc:bd:0c:29:b9:6b:b7:d6:37:22:96:61:9c:a7:4b:f0:3c:15:
2c:c3:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client