Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/pBaxgCqTyeze3hcIp2M83HQrP4U.roa
File: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (raw, json)
Hash identifier: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=
Subject key identifier: A4:16:B1:80:2A:93:C9:EC:DE:DE:17:08:A7:63:3C:DC:74:2B:3F:85
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 0194274745CF5FC3C4034D59D3BB3CBE9751
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/pBaxgCqTyeze3hcIp2M83HQrP4U.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196745
IP address blocks: 37.143.136.0/21 maxlen: 24
37.143.136.0/24 maxlen: 24
37.143.138.0/24 maxlen: 24
37.143.139.0/24 maxlen: 24
37.143.140.0/24 maxlen: 24
37.143.141.0/24 maxlen: 24
37.143.142.0/24 maxlen: 24
37.143.143.0/24 maxlen: 24
2a00:b340:10::/48 maxlen: 48
2a00:b340:20::/48 maxlen: 48
2a00:b340:30::/48 maxlen: 48
2a00:b340:31::/48 maxlen: 48
2a00:b340:32::/48 maxlen: 48
2a00:b340:33::/48 maxlen: 48
2a00:b340:34::/48 maxlen: 48
2a00:b340:35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:45:cf:5f:c3:c4:03:4d:59:d3:bb:3c:be:97:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a416b1802a93c9ecdede1708a7633cdc742b3f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:8d:06:0b:16:0e:e5:32:78:6e:35:84:14:
aa:dc:18:25:f2:4c:3d:f4:b1:b0:78:79:39:62:50:
77:c7:30:2a:95:d5:5b:cf:07:41:2f:65:29:38:a8:
b3:88:3a:9f:7c:aa:71:2a:ac:d0:ac:33:5e:a5:68:
27:2d:e5:e2:ab:2d:e9:a7:cc:84:76:0e:d3:94:c8:
9a:a6:57:20:6e:47:1d:78:19:96:7c:69:05:36:e8:
10:e7:ee:83:76:7e:e1:91:82:09:d6:f2:93:77:02:
5b:97:7e:55:e2:b6:0f:5a:85:d0:0d:11:f0:68:e6:
7a:a1:44:59:28:7b:5f:93:52:12:90:91:24:7b:3d:
a5:aa:3b:1d:84:e9:6e:fe:75:08:e2:b0:98:ac:5d:
d9:2c:f3:ee:64:96:c9:bb:23:b4:38:20:73:b0:83:
03:5d:29:eb:3b:e0:1f:95:cd:60:04:25:e4:69:c9:
60:e2:8c:6a:cf:6b:b6:29:08:b2:b9:32:41:64:87:
5c:8c:f7:a1:3a:3d:c1:02:6f:23:b6:9e:6d:9d:a5:
45:d1:c5:5c:97:e6:66:61:ca:51:c3:84:37:6a:d7:
91:90:74:ec:e8:dd:b1:9e:5a:73:f1:a5:6f:f7:cf:
66:07:6d:11:56:0e:51:cd:a6:45:4e:e5:0a:ce:c7:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:B1:80:2A:93:C9:EC:DE:DE:17:08:A7:63:3C:DC:74:2B:3F:85
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/pBaxgCqTyeze3hcIp2M83HQrP4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.136.0/21
IPv6:
2a00:b340:10::/48
2a00:b340:20::/48
2a00:b340:30::-2a00:b340:35:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:0d:df:c5:3c:46:6d:66:76:d3:16:ec:bf:5b:c4:48:10:61:
b9:74:ea:e7:c4:db:3e:c3:5b:2a:38:c8:47:44:c0:eb:8b:e1:
3c:5d:e4:a9:58:2d:9f:91:e9:1a:29:f2:cf:ec:35:34:c6:75:
ad:55:70:c8:37:08:c6:1c:57:6c:04:5b:f7:20:31:8a:12:c3:
65:2e:8d:79:b8:85:ea:ff:c5:12:33:7c:2d:b2:d2:b5:8b:cf:
7e:28:99:3e:d0:ca:09:a1:f0:66:56:7a:fd:63:01:9f:32:3b:
6e:8e:a0:6d:73:a8:9e:24:f8:06:b8:54:f2:53:7b:1d:42:77:
32:34:48:bc:93:fc:dd:6a:44:c3:a2:18:ca:0f:f6:7f:95:7d:
09:4b:99:99:17:42:d7:5e:3e:c2:a5:eb:0f:51:65:9d:19:df:
5d:1c:01:1c:c7:6e:bb:a1:c2:1d:db:e1:76:43:83:18:98:37:
6e:95:58:01:b1:e4:89:9f:67:91:4f:cd:f4:55:fc:8c:82:e2:
3d:36:09:d6:bd:4c:75:7b:c9:01:61:cf:3f:00:0a:cc:d4:a0:
ef:21:46:25:d4:e2:17:a9:52:71:52:b9:0a:60:c3:7f:5e:86:
47:8e:4e:23:e6:4d:a4:2e:23:72:fb:d9:52:42:b9:e6:bd:8f:
a5:78:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:20:14 2025 by rpki-client