Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa
File: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (raw, json)
Hash identifier: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=
Subject key identifier: 0C:D1:4A:2A:A3:F3:63:6B:53:C7:2A:B8:64:5F:9E:E8:44:B0:58:19
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C965DD144883BFD7D94F31915C1FD
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50926
IP address blocks: 37.252.96.0/24 maxlen: 24
89.44.32.0/24 maxlen: 24
158.255.238.0/24 maxlen: 24
185.66.175.0/24 maxlen: 24
185.76.77.0/24 maxlen: 24
185.86.210.0/24 maxlen: 24
185.104.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:5d:d1:44:88:3b:fd:7d:94:f3:19:15:c1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd14a2aa3f3636b53c72ab8645f9ee844b05819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:07:ee:b2:38:97:3f:c8:4a:6b:e0:5c:69:
bc:42:7f:20:3e:a3:8e:3e:0e:0e:a9:70:e1:68:96:
2c:fe:dd:61:6c:d3:a9:c4:c9:e7:0b:d9:6d:8c:f6:
5e:a6:99:5a:75:af:f3:7b:25:a6:2b:13:f7:56:8d:
d4:5d:c0:29:a0:19:54:d6:bd:31:0b:9f:ac:e7:3f:
77:4b:ba:f7:83:50:d4:18:be:9c:22:51:ec:ec:17:
9c:10:04:1d:50:44:13:f9:01:53:26:9b:b3:10:42:
77:c5:11:c2:87:3c:b9:4f:11:57:91:1e:a1:0c:71:
11:ae:a4:db:b5:25:bb:3f:ce:91:5f:f2:b0:4c:5f:
fd:21:1a:35:25:9a:8f:fd:fa:b9:8e:7c:d2:9b:60:
6c:b8:b2:a3:5c:0e:d3:7e:5e:71:92:7a:38:d7:a9:
3b:76:6b:a4:78:65:1a:af:01:ac:97:21:84:ac:55:
45:44:a6:1b:4e:7f:b0:ef:06:ec:46:08:be:6b:cd:
fa:8d:89:23:72:0b:25:fc:99:2f:eb:17:2f:79:f3:
90:c0:22:67:6e:0a:41:2b:54:a5:b5:36:6b:21:5b:
72:26:e1:7c:27:06:02:42:fb:6c:01:df:61:8e:d0:
cb:71:8b:24:d1:da:d5:ae:e2:db:d5:0f:f6:b2:cb:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:4A:2A:A3:F3:63:6B:53:C7:2A:B8:64:5F:9E:E8:44:B0:58:19
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.96.0/24
89.44.32.0/24
158.255.238.0/24
185.66.175.0/24
185.76.77.0/24
185.86.210.0/24
185.104.152.0/24
Signature Algorithm: sha256WithRSAEncryption
74:de:1f:a6:c4:c7:1b:a0:e8:de:4a:b6:b6:aa:2c:ef:5f:c5:
5a:85:7d:cb:34:f6:fa:a3:2c:3e:89:73:b2:38:4a:16:16:ca:
d9:37:6b:1a:ef:22:78:44:a9:26:71:cd:ad:1d:ff:00:6b:34:
37:f8:69:71:fe:5b:6b:e0:ef:35:b0:5a:96:5d:ae:5a:e0:7a:
a9:da:b8:c2:04:30:84:a4:39:8a:62:d4:fa:4b:8b:e8:44:ae:
65:6b:29:6e:a7:c5:90:d2:5f:02:f0:33:b7:53:aa:cb:ac:aa:
76:92:be:3c:7e:de:31:74:35:9f:b8:8a:3b:b0:4d:01:89:34:
c0:99:78:0d:7d:0d:52:65:da:9a:3a:2d:60:0f:fd:c5:6b:ff:
cf:0e:f9:85:c3:81:c7:c9:a3:fa:ac:a6:11:34:d1:6b:f9:fc:
ae:99:a5:37:91:3f:8e:71:e0:7b:18:29:a5:e8:19:d1:3c:64:
13:95:ae:a4:c6:2d:2e:d6:b3:80:0a:e2:ef:f8:53:31:48:df:
7a:2f:27:d2:6d:49:dd:5a:22:d2:0a:37:2a:a1:05:d9:43:26:
11:af:72:27:83:ed:b2:2b:29:01:e2:e9:cf:54:f0:73:f6:48:
4e:ef:fb:8c:ca:3d:1f:f7:da:fa:7d:59:10:d1:f6:92:64:0d:
23:d5:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:15 2025 by rpki-client