Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XTHOga4M1E9gRJps-AihFuqnmY8.roa
File: XTHOga4M1E9gRJps-AihFuqnmY8.roa (raw, json)
Hash identifier: UEbGDRsvpTE0yf6KBHOmoWfrQBFaPs53Pit0NdHPy1Y=
Subject key identifier: 5D:31:CE:81:AE:0C:D4:4F:60:44:9A:6C:F8:08:A1:16:EA:A7:99:8F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019619F55B1651C0A617B8604E35B64F4ED9
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XTHOga4M1E9gRJps-AihFuqnmY8.roa
Signing time: Wed 09 Apr 2025 09:50:32 +0000
ROA not before: Wed 09 Apr 2025 09:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/24 maxlen: 24
85.142.76.0/24 maxlen: 24
85.142.81.0/24 maxlen: 24
85.142.82.0/24 maxlen: 24
85.142.84.0/23 maxlen: 24
85.142.87.0/24 maxlen: 24
85.142.99.0/24 maxlen: 24
85.142.100.0/23 maxlen: 24
85.142.113.0/24 maxlen: 24
85.142.115.0/24 maxlen: 24
85.142.128.0/20 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/24 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.244.0/24 maxlen: 24
85.142.246.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.252.0/22 maxlen: 24
85.143.41.0/24 maxlen: 24
85.143.42.0/23 maxlen: 24
85.143.44.0/24 maxlen: 24
85.143.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:f5:5b:16:51:c0:a6:17:b8:60:4e:35:b6:4f:4e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 9 09:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d31ce81ae0cd44f60449a6cf808a116eaa7998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:88:2d:63:00:04:d4:1c:7e:da:45:83:40:
2c:54:3e:f5:53:9b:e8:4a:c5:94:70:51:8b:6d:aa:
29:1c:6e:e7:61:23:c5:83:21:35:f1:e5:3f:31:e7:
94:14:24:7c:c7:d8:30:31:11:5d:fc:d0:f5:95:ae:
68:bc:94:2d:89:19:38:92:f7:19:e6:71:76:7e:75:
5b:47:ed:b1:f0:45:78:11:e9:37:1a:15:fb:c6:6c:
11:c3:57:2b:b2:d4:13:d1:cc:69:d9:8b:22:12:98:
5e:cf:2d:57:91:2c:c3:fb:1f:1f:78:9c:d4:07:a4:
a6:51:df:b4:8e:9d:cf:ea:cb:22:48:65:18:16:c5:
0c:ae:bd:34:fd:5b:48:5d:0c:1e:94:d8:b0:9d:3e:
97:4b:ac:fb:7e:86:db:f5:56:a3:df:33:13:9f:84:
a7:b5:60:11:09:c9:b9:7a:7a:c5:8a:98:5c:49:ee:
3a:55:be:3e:a7:c5:37:82:d0:03:56:7d:de:bf:5e:
f9:bf:3d:ad:69:a2:50:f2:b1:06:b8:81:8d:7e:9d:
c6:2a:57:f2:da:26:cf:9a:7e:53:dc:47:91:bb:f1:
28:2f:2b:10:ad:77:cb:91:f3:55:d2:2d:46:9d:c4:
b3:41:fd:1e:00:76:e2:db:2c:d6:73:ea:67:e6:3d:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:31:CE:81:AE:0C:D4:4F:60:44:9A:6C:F8:08:A1:16:EA:A7:99:8F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XTHOga4M1E9gRJps-AihFuqnmY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0/24
85.142.76.0/24
85.142.81.0-85.142.82.255
85.142.84.0/23
85.142.87.0/24
85.142.99.0-85.142.101.255
85.142.113.0/24
85.142.115.0/24
85.142.128.0/20
85.142.212.0/23
85.142.215.0/24
85.142.240.0/24
85.142.242.0/24
85.142.244.0/24
85.142.246.0/24
85.142.250.0/24
85.142.252.0/22
85.143.41.0-85.143.44.255
85.143.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:14:27:00:88:27:f3:77:c6:2c:2c:f3:05:d8:ad:59:78:85:
2f:88:56:c8:10:38:60:42:7e:ec:e6:f7:16:55:13:e7:d5:e3:
f9:17:6b:62:21:5d:ec:58:87:3f:8d:4f:29:23:8b:e3:65:47:
fd:e8:71:0a:fb:ec:74:b1:d0:b1:52:ab:23:df:6e:35:dd:86:
23:06:8e:09:05:b9:9b:8c:57:82:1a:41:a5:5c:88:d5:da:60:
ec:8c:6b:47:74:91:c4:b3:e6:ba:4e:fd:09:e9:2d:60:2f:6a:
e2:3a:1a:55:c8:41:9c:a4:5a:21:3e:d9:6b:93:fc:55:f2:c7:
3e:d7:99:b4:4c:4c:32:09:93:29:74:dd:b3:e0:5a:dd:7e:94:
35:51:d2:77:cb:c8:3b:4b:45:2c:02:5a:04:dd:1c:87:e1:50:
f3:26:40:63:ec:39:2b:99:d6:44:24:c2:39:86:98:9e:ab:34:
6a:30:28:09:f9:48:62:22:52:3f:af:6d:58:7c:cd:b3:7b:c4:
2f:23:43:21:e1:50:73:a2:32:f8:ba:b6:a7:84:4a:f6:37:02:
52:30:a9:93:7b:c5:cc:35:dc:5f:d3:d1:e2:4b:bd:b0:40:34:
78:51:1d:e1:fe:38:55:7e:d8:93:30:32:83:26:ba:17:e3:2f:
2b:cf:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:34 2025 by rpki-client