Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/m4Tb3tk-45CAXKP3L6VZbEws4lU.roa
File: m4Tb3tk-45CAXKP3L6VZbEws4lU.roa (raw, json)
Hash identifier: T7EsY/Fbm9TWgfNHHqB6lauDJi72bJuLwv76cIuNuS0=
Subject key identifier: 9B:84:DB:DE:D9:3E:E3:90:80:5C:A3:F7:2F:A5:59:6C:4C:2C:E2:55
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019566B51B77E7D7247CDA7630FF8FFE7C5E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/m4Tb3tk-45CAXKP3L6VZbEws4lU.roa
Signing time: Wed 05 Mar 2025 14:28:19 +0000
ROA not before: Wed 05 Mar 2025 14:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43205
IP address blocks: 37.143.192.0/18 maxlen: 18
46.40.64.0/18 maxlen: 18
46.40.75.0/24 maxlen: 24
46.40.124.0/22 maxlen: 32
46.47.64.0/18 maxlen: 18
46.47.80.0/21 maxlen: 32
46.237.64.0/18 maxlen: 18
91.139.128.0/17 maxlen: 17
93.155.128.0/17 maxlen: 17
109.121.192.0/18 maxlen: 18
158.58.192.0/18 maxlen: 18
178.169.128.0/17 maxlen: 17
185.4.80.0/22 maxlen: 22
188.254.128.0/17 maxlen: 17
212.43.32.0/19 maxlen: 19
212.75.0.0/19 maxlen: 19
213.214.64.0/19 maxlen: 19
2a02:6800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:b5:1b:77:e7:d7:24:7c:da:76:30:ff:8f:fe:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Mar 5 14:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b84dbded93ee390805ca3f72fa5596c4c2ce255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:7e:d3:84:57:c5:8e:87:f3:12:0b:b6:91:
bb:e2:4d:f3:bc:72:2d:19:bb:0a:54:60:43:71:43:
77:c6:0d:a4:7e:77:44:dd:3b:a0:1b:0c:21:16:40:
94:6b:68:ad:26:49:36:35:81:93:55:0d:74:8e:23:
45:82:62:57:d5:27:85:83:55:2b:31:ba:6f:98:ae:
d7:0e:34:96:be:da:e9:3b:0f:d1:b7:40:92:fe:10:
73:2c:ad:2a:f5:50:9a:2f:e1:97:29:bc:ef:63:b7:
f4:a2:63:ab:f6:32:42:5b:78:94:e1:00:ec:66:bd:
97:6f:04:9c:c3:96:16:8c:76:07:0a:c6:18:1e:d8:
7f:83:01:04:85:7a:10:00:b3:b9:fa:9d:a4:50:e1:
af:cc:7a:13:c0:8d:89:fa:e3:9b:87:05:da:61:24:
f5:43:62:0d:79:bd:86:ab:3d:23:87:1e:a2:f7:dd:
3e:15:32:6d:95:1d:4b:6f:69:94:d7:8c:42:8f:7d:
f8:5d:44:bb:f8:a7:1c:5e:fb:e8:c8:bb:bb:4d:40:
66:f4:bb:38:f9:2d:68:f7:8f:a8:08:06:59:ef:93:
27:ff:a7:1a:53:eb:0c:32:af:b3:98:79:a7:82:fd:
96:03:9a:07:0b:04:36:44:71:1c:5e:e9:51:b2:9b:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:DB:DE:D9:3E:E3:90:80:5C:A3:F7:2F:A5:59:6C:4C:2C:E2:55
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/m4Tb3tk-45CAXKP3L6VZbEws4lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.192.0/18
46.40.64.0/18
46.47.64.0/18
46.237.64.0/18
91.139.128.0/17
93.155.128.0/17
109.121.192.0/18
158.58.192.0/18
178.169.128.0/17
185.4.80.0/22
188.254.128.0/17
212.43.32.0/19
212.75.0.0/19
213.214.64.0/19
IPv6:
2a02:6800::/32
Signature Algorithm: sha256WithRSAEncryption
a7:7b:33:e8:01:c3:58:0f:ad:97:a3:9b:5e:15:da:73:39:d8:
58:dc:60:5e:c8:5d:6b:ce:52:48:16:ef:de:1c:d5:a9:96:7c:
7f:99:ef:1b:45:35:d5:70:99:86:c6:85:55:bc:37:5c:97:92:
26:7a:e7:53:65:46:91:34:79:23:23:47:37:be:fa:1a:e1:41:
3d:03:81:4b:be:ec:37:7a:ef:ab:3c:9f:b0:e8:00:8b:84:ab:
07:d5:5f:08:95:67:de:b3:76:40:b6:4f:a5:db:6b:ac:bc:05:
80:56:5d:1b:5b:1e:1e:12:aa:c9:e6:47:fd:71:2c:73:62:34:
4a:76:31:0c:aa:bf:44:ef:7d:1d:80:84:c2:b1:77:0e:8b:5b:
9a:72:ed:af:0b:a5:17:7c:5c:7c:b3:39:ed:6f:75:18:f6:11:
7a:c0:5f:52:6c:7e:f6:18:f7:53:39:d2:cb:60:f7:35:2d:78:
1f:51:9f:49:eb:ad:46:21:33:0f:6a:c9:ec:69:4e:bf:a4:e1:
2c:84:d5:f2:8e:9d:00:72:b2:35:b0:0b:04:ff:a1:78:ee:af:
ea:f5:5e:93:f6:41:66:7a:0b:1a:18:28:4d:7f:7a:00:7a:3f:
b5:ae:f6:72:ca:fe:47:a7:84:1e:6f:87:0e:09:53:0c:35:0b:
2e:c4:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:42 2025 by rpki-client