Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa
File: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (raw, json)
Hash identifier: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=
Subject key identifier: E8:B6:C8:80:52:70:CE:91:F6:41:FD:2C:8A:BC:DF:1D:8B:B0:FD:AE
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01941F8C8F59000F8BFD43C8543F7175E0B8
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39637
IP address blocks: 37.203.56.0/21 maxlen: 21
91.201.164.0/22 maxlen: 22
94.124.136.0/21 maxlen: 21
185.215.252.0/22 maxlen: 22
195.246.236.0/23 maxlen: 23
2a00:dc8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8f:59:00:0f:8b:fd:43:c8:54:3f:71:75:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b6c8805270ce91f641fd2c8abcdf1d8bb0fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:a1:02:1c:35:4d:81:b1:e2:e7:de:17:fd:
12:1b:8e:dd:c4:f5:bd:6e:49:3f:a9:94:ae:57:82:
d8:ef:10:23:e9:e9:14:19:ac:18:79:56:e3:ec:2f:
2a:cd:01:73:b9:ab:d4:f0:5c:5b:1e:fc:74:09:88:
5e:14:ce:e0:64:e7:a0:da:72:69:71:cd:b9:de:d3:
10:25:43:c0:3d:c7:ad:c3:a3:e3:90:2e:8f:18:02:
3d:bb:13:34:1f:ec:b7:98:eb:9f:78:0d:f3:2c:ea:
f8:70:1f:12:48:9f:e1:a6:cb:d5:03:35:4d:6a:d8:
60:d9:e5:ff:25:85:30:24:c3:71:76:3c:fd:bc:fd:
f9:2a:d3:cf:8c:57:59:db:80:e6:c2:bc:2a:60:50:
e9:b4:3a:3f:2f:25:3d:6c:60:6d:c9:f4:e5:65:a7:
33:fb:ad:e7:1e:53:22:93:b7:b7:9d:c6:b3:78:5c:
d5:e0:cc:57:06:2d:ef:89:0f:d7:d7:38:47:8d:6f:
97:0a:d0:5b:c7:93:b0:48:c1:af:4d:ad:15:ad:6d:
5a:ff:0a:77:39:f7:c6:3a:a8:70:fa:5b:00:9e:3b:
cf:8f:71:b1:ae:79:70:31:b8:0e:c9:a1:7a:07:c1:
9b:1b:a2:03:6e:ac:49:d6:f7:15:18:81:5b:54:56:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:C8:80:52:70:CE:91:F6:41:FD:2C:8A:BC:DF:1D:8B:B0:FD:AE
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.56.0/21
91.201.164.0/22
94.124.136.0/21
185.215.252.0/22
195.246.236.0/23
IPv6:
2a00:dc8::/32
Signature Algorithm: sha256WithRSAEncryption
47:a6:93:40:ff:d6:29:06:ba:91:0e:f3:44:c8:18:0d:81:46:
b5:13:01:a2:b4:dd:c2:bd:f6:0e:14:0c:ce:65:b7:e9:d6:76:
23:6b:da:37:48:33:fb:31:44:bd:5f:b4:96:15:81:9b:28:e1:
64:7b:01:c3:d0:d2:ec:81:f2:85:df:c5:de:4d:0a:4b:f1:a3:
d0:98:5b:ec:88:e0:54:c2:3b:1d:9f:3c:bc:bf:ce:8e:30:ed:
6f:ee:82:a4:3b:1d:d5:62:24:b9:a6:34:d3:6c:ec:95:45:69:
87:be:aa:7f:5b:ea:58:d4:32:55:08:db:87:73:f2:96:4d:68:
db:5f:ed:46:9e:84:44:21:fb:65:8e:a0:3a:19:1b:f8:83:f6:
e9:4a:d7:a9:fe:95:9c:07:8b:eb:d5:17:e6:a7:2c:39:73:0d:
a7:66:68:53:79:e6:15:df:de:35:13:0e:c8:90:d7:c6:6f:e6:
94:52:e7:44:56:e5:1c:3b:af:dd:56:ae:96:25:ad:92:06:7e:
7a:aa:1d:90:85:d9:ac:b3:e2:01:d3:f1:1f:d0:9d:6f:d8:aa:
27:4c:e5:2f:51:7e:ca:22:a1:4c:93:58:51:c4:0a:ae:3a:18:
90:72:6b:6e:07:f1:11:ec:b7:84:e2:d3:75:15:6a:1f:90:a4:
42:45:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:38:55 2025 by rpki-client