Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/fxHh2bKEKw_Gg7EpZjkd7FLUjkc.roa
File: fxHh2bKEKw_Gg7EpZjkd7FLUjkc.roa (raw, json)
Hash identifier: E+quNN1BJ/hQcQ6Z1pwE4dT1ydHEeGWyU6fLylcVO6w=
Subject key identifier: 7F:11:E1:D9:B2:84:2B:0F:C6:83:B1:29:66:39:1D:EC:52:D4:8E:47
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019633850CF7CC97D287C96399929F9B1373
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/fxHh2bKEKw_Gg7EpZjkd7FLUjkc.roa
Signing time: Mon 14 Apr 2025 08:57:59 +0000
ROA not before: Mon 14 Apr 2025 08:57:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204666
IP address blocks: 37.221.240.0/20 maxlen: 24
45.153.192.0/22 maxlen: 24
45.153.194.0/24 maxlen: 24
45.153.195.0/24 maxlen: 24
85.255.88.0/22 maxlen: 24
185.19.0.0/22 maxlen: 24
185.52.172.0/23 maxlen: 24
185.64.220.0/22 maxlen: 24
185.74.60.0/23 maxlen: 24
185.97.24.0/22 maxlen: 24
185.97.24.0/24 maxlen: 24
185.97.25.0/24 maxlen: 24
185.97.26.0/24 maxlen: 24
185.188.100.0/22 maxlen: 24
185.188.101.0/24 maxlen: 24
185.188.103.0/24 maxlen: 24
195.12.39.0/24 maxlen: 24
213.108.162.0/23 maxlen: 24
213.108.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:85:0c:f7:cc:97:d2:87:c9:63:99:92:9f:9b:13:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Apr 14 08:57:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f11e1d9b2842b0fc683b12966391dec52d48e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:25:24:d5:4a:50:42:b2:26:04:9a:e7:45:
6c:b6:7d:af:3e:da:eb:bc:c8:0b:a8:4c:8d:fd:06:
91:33:53:6e:4a:27:d5:31:5a:2a:df:57:97:2c:e9:
43:08:b4:d7:e1:72:81:46:a2:cd:01:1e:46:86:23:
b9:27:f6:83:e0:00:86:ea:8c:63:79:da:0f:7b:59:
ce:90:18:c6:9c:6a:cc:56:2a:70:0c:ea:02:c3:15:
38:d0:aa:75:fd:69:1c:dd:96:80:39:3b:62:e7:03:
4c:1e:25:8a:7c:93:a7:5f:33:a1:83:21:27:93:d1:
d9:25:f5:80:24:05:a0:d1:39:aa:7f:b5:e7:26:65:
35:78:f9:fc:d3:7d:8e:ce:22:f2:7e:32:20:3c:6b:
09:9e:08:d9:bf:bb:de:3b:08:ed:5a:0f:4a:f9:83:
04:17:54:5a:dd:bc:9c:50:eb:2b:89:da:f3:6d:65:
bc:6c:8e:c3:81:69:92:ff:ab:58:6b:22:d5:c5:c5:
f4:7b:61:34:16:fb:04:ab:0e:6d:7a:17:3c:e3:2f:
c9:88:17:8d:86:c7:18:b8:b5:bb:d2:a6:60:af:b4:
2d:d0:27:29:3a:41:3a:ce:b5:eb:64:c5:0a:4b:60:
c7:bb:10:0b:af:74:b9:ac:c4:9f:5e:57:61:a8:3f:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:E1:D9:B2:84:2B:0F:C6:83:B1:29:66:39:1D:EC:52:D4:8E:47
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/fxHh2bKEKw_Gg7EpZjkd7FLUjkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.52.172.0/23
185.64.220.0/22
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
195.12.39.0/24
213.108.162.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:60:32:69:a4:37:55:4c:08:88:6b:71:a2:03:d6:64:5b:de:
99:86:1f:4b:58:e8:05:f4:a0:5c:ae:02:ed:3f:17:02:d1:61:
ee:1b:de:49:49:7c:c5:82:b7:f5:e9:21:9e:82:94:05:78:f7:
16:80:42:7f:db:28:21:2e:f2:d7:58:36:f3:c7:de:cb:f8:7f:
00:08:2b:1a:45:30:f8:2c:d4:40:a7:3d:99:ea:c6:fa:06:ce:
f3:33:8b:34:70:b6:06:fb:c6:a9:22:ec:69:20:65:54:6d:ff:
67:7b:58:5d:42:fa:03:8f:cc:6c:67:aa:2c:40:0c:4c:32:cc:
58:79:6c:f2:a4:99:35:0f:a0:03:61:bd:b4:ea:22:a5:e8:16:
c1:b6:1c:b8:a6:b3:f0:ba:2d:b8:8f:e9:3a:2a:91:62:85:f3:
6d:19:15:49:a6:c5:a2:d8:9a:48:0d:dd:f2:5e:4f:2f:64:55:
fd:09:58:dd:7e:a2:4c:14:1c:34:bc:23:fa:d4:d6:af:4b:84:
cc:4f:b4:ae:a9:30:fb:08:51:93:6d:05:16:48:7b:2d:e7:cf:
4a:8f:08:b1:45:e9:50:36:d5:57:eb:e1:29:c3:da:a1:00:c4:
f4:e6:dd:bb:71:05:cd:9b:b6:ec:65:58:ff:ce:09:53:53:ab:
ea:c7:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:49 2025 by rpki-client