Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa
File: nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa (raw, json)
Hash identifier: OwFYUlDkb/OofczMk6EkLbLKjgmPMmo8vCWYFs08jQ8=
Subject key identifier: 9D:75:DA:60:A0:FF:77:53:31:51:B7:BE:EB:F1:73:4E:C5:8F:28:88
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01942068760F66D6EE649D222ABE51CCA5E8
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 45.10.240.0/22 maxlen: 32
45.10.240.0/24 maxlen: 24
45.10.241.0/24 maxlen: 24
45.10.242.0/24 maxlen: 24
45.10.243.0/24 maxlen: 24
91.215.40.0/24 maxlen: 32
91.215.41.0/24 maxlen: 24
91.215.42.0/24 maxlen: 24
91.215.43.0/24 maxlen: 24
95.129.232.0/24 maxlen: 32
95.129.233.0/24 maxlen: 32
95.129.234.0/24 maxlen: 32
95.129.235.0/24 maxlen: 24
185.129.100.0/24 maxlen: 24
185.129.101.0/24 maxlen: 24
185.129.102.0/24 maxlen: 24
185.129.103.0/24 maxlen: 24
185.178.208.0/24 maxlen: 24
185.178.209.0/24 maxlen: 24
185.178.210.0/24 maxlen: 24
2a0a:4180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:76:0f:66:d6:ee:64:9d:22:2a:be:51:cc:a5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d75da60a0ff77533151b7beebf1734ec58f2888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:5c:b0:c0:c4:bb:47:9d:1f:c9:63:75:06:
1e:1e:1f:ea:95:33:a7:3c:15:77:59:7f:bf:28:82:
14:ad:2d:12:e9:37:54:69:26:c6:99:f1:10:13:ee:
0a:c9:65:4a:85:cb:c2:c3:9e:34:80:4e:d2:c3:18:
34:68:97:6a:7b:d7:e9:ca:ba:76:d6:0f:a9:5d:a4:
26:e8:7a:82:d4:be:b6:25:a7:62:c7:df:59:46:55:
cd:cf:3a:43:cf:1f:1f:32:01:7e:e2:25:4a:46:a6:
b1:8a:b0:d0:8e:5e:71:42:6d:60:ff:bc:38:dc:6d:
2e:c6:c7:ea:9c:1b:81:4a:1c:ac:0b:1a:f3:72:dd:
40:83:ed:90:c7:48:d6:87:3c:e8:a8:c0:2a:ea:4f:
a9:66:04:52:1e:e0:47:63:52:83:bc:60:b7:2d:e4:
87:23:b4:18:6a:02:d9:18:58:29:33:6b:38:48:b5:
1d:7f:e4:a3:e5:76:57:f3:ec:17:ab:31:f6:78:49:
12:10:51:bf:b1:bb:d0:e8:4f:cc:9a:2b:b9:81:11:
76:98:81:74:14:3d:02:c4:99:d7:c0:34:8b:2c:4e:
fa:e0:05:9e:da:1e:d8:8d:90:65:b2:bd:f2:5a:ae:
f0:de:9c:23:99:c4:e4:4c:bd:5b:ab:78:cd:af:e8:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:DA:60:A0:FF:77:53:31:51:B7:BE:EB:F1:73:4E:C5:8F:28:88
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.240.0/22
91.215.40.0/22
95.129.232.0/22
185.129.100.0/22
185.178.208.0-185.178.210.255
IPv6:
2a0a:4180::/48
Signature Algorithm: sha256WithRSAEncryption
30:9d:cd:f2:f9:5a:69:a3:e6:49:e2:d1:82:34:4b:06:ec:c8:
f0:82:32:0e:9e:1d:ea:37:3b:c0:0b:1a:49:d1:1f:db:f7:53:
71:86:be:cc:c4:f9:6f:74:48:c4:9c:6a:e7:63:d3:3c:6a:fc:
b8:44:89:f6:d2:c6:a8:97:5d:d3:85:15:4a:77:b0:6e:b5:f4:
35:50:49:2e:e2:98:2d:d7:dc:57:a2:8f:44:3b:2d:cc:c3:cc:
de:67:7e:70:5d:4c:42:8c:d3:ad:8f:3e:25:9f:d5:7a:af:1e:
69:e8:71:d1:97:57:84:d2:76:45:48:6a:3f:b2:c4:9e:05:a3:
6e:65:c5:62:35:2d:bc:35:28:83:83:ae:40:88:2d:17:86:c0:
42:5c:5d:fb:2a:aa:01:2c:b1:be:6e:2c:69:69:bd:5d:48:6c:
40:5b:dc:72:8e:b7:7c:36:da:d9:0c:75:6a:28:20:cc:fa:ec:
90:6d:49:c9:cf:28:f7:b3:a3:5f:17:f4:fe:9c:28:9c:c5:ef:
cb:eb:13:82:f4:90:f5:ac:91:13:04:46:d8:51:2a:11:5a:99:
67:46:22:75:41:c9:ac:50:df:80:da:9a:03:ad:c5:b1:95:82:
82:3f:e7:dd:9b:a5:34:7e:4e:5d:d0:0f:ae:7d:bc:ec:5a:1b:
a3:bf:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:20:45 2025 by rpki-client