Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/dseWtJsRtgXWG8ryLs-7XWYSHjA.roa
File: dseWtJsRtgXWG8ryLs-7XWYSHjA.roa (raw, json)
Hash identifier: dzJOgY0aN/2fDxN/Ny4dZY7HYiCJ2uahfS7o6nx3vAk=
Subject key identifier: 76:C7:96:B4:9B:11:B6:05:D6:1B:CA:F2:2E:CF:BB:5D:66:12:1E:30
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 0194258FC218C2233248603EA4B4CB1A116C
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/dseWtJsRtgXWG8ryLs-7XWYSHjA.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50597
IP address blocks: 37.98.224.0/21 maxlen: 21
37.98.224.0/24 maxlen: 24
37.98.225.0/24 maxlen: 24
37.98.226.0/24 maxlen: 24
37.98.227.0/24 maxlen: 24
37.98.228.0/24 maxlen: 24
37.98.229.0/24 maxlen: 24
37.98.230.0/24 maxlen: 24
37.98.231.0/24 maxlen: 24
85.113.90.0/23 maxlen: 23
85.113.90.0/24 maxlen: 24
85.113.91.0/24 maxlen: 24
85.194.196.0/22 maxlen: 22
85.194.196.0/24 maxlen: 24
85.194.197.0/24 maxlen: 24
85.194.198.0/24 maxlen: 24
85.194.199.0/24 maxlen: 24
109.205.112.0/21 maxlen: 24
185.76.32.0/22 maxlen: 22
185.76.32.0/24 maxlen: 24
185.76.33.0/24 maxlen: 24
185.76.34.0/24 maxlen: 24
185.76.35.0/24 maxlen: 24
2a05:55c0::/29 maxlen: 29
2a05:55c1:1::/48 maxlen: 48
2a05:55c1:2::/48 maxlen: 48
2a05:55c1:3::/48 maxlen: 48
2a05:55c1:4::/48 maxlen: 48
2a05:55c1:5::/48 maxlen: 48
2a05:55c1:6::/48 maxlen: 48
2a05:55c1:7::/48 maxlen: 48
2a05:55c1:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c2:18:c2:23:32:48:60:3e:a4:b4:cb:1a:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76c796b49b11b605d61bcaf22ecfbb5d66121e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:3d:a6:14:58:75:95:b3:10:92:e8:23:9f:
f9:48:ce:1e:9a:69:7b:30:97:b4:6c:36:28:03:a1:
58:a8:11:83:93:ca:66:5f:b2:9f:ec:b2:c2:f0:a4:
60:3e:b5:63:28:9b:1b:29:a7:c7:2b:67:4b:30:75:
70:87:1b:be:ca:8c:64:59:d6:92:e5:bd:67:ca:a5:
00:b2:96:b9:84:ba:97:27:49:b6:74:d4:f2:8d:e7:
08:30:db:6b:e8:41:c1:23:c9:0e:8e:81:6d:17:48:
5b:f6:89:3d:d3:86:4a:a7:db:9a:dc:82:0a:2a:0d:
39:0d:2b:ee:13:bf:fc:43:f9:8e:cd:5a:6b:c9:89:
67:0c:48:ac:46:97:e6:06:8b:97:92:6b:cf:15:5e:
4c:19:b5:12:1e:f6:d8:cf:1c:b0:38:01:4f:89:3c:
2c:4a:ce:85:46:c1:87:4b:44:b6:13:27:94:e7:11:
03:27:08:0b:93:c4:10:8e:06:ab:4c:00:48:12:d3:
cc:65:c1:fe:97:66:ea:e8:3f:0f:f5:67:de:6a:8e:
89:69:2c:bc:70:f0:a6:4b:51:f4:b4:4c:b0:be:25:
0d:fa:7c:19:2b:de:bd:7b:26:5c:b9:1b:94:9c:46:
c8:18:27:a8:7d:64:96:fa:9b:d5:58:a6:46:7f:4d:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:96:B4:9B:11:B6:05:D6:1B:CA:F2:2E:CF:BB:5D:66:12:1E:30
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/dseWtJsRtgXWG8ryLs-7XWYSHjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
185.76.32.0/22
IPv6:
2a05:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:67:10:13:8f:82:22:61:30:74:e4:24:5d:49:13:88:c6:41:
dd:da:31:28:c1:66:9e:89:ff:73:07:70:1f:0e:c3:00:1b:b0:
57:75:0c:71:49:d0:cf:90:b3:b4:3b:2c:16:0a:61:b2:d2:ad:
c2:4f:f0:8d:5b:d9:25:e4:54:8e:13:38:64:c4:77:4c:38:a9:
e9:83:29:68:b7:cb:05:ce:7f:ee:f4:26:d4:8f:d3:bc:db:d7:
fd:ac:d7:c1:f8:91:7a:15:b4:8e:74:c6:2c:bd:83:ce:25:96:
98:1a:87:bb:4a:88:0f:88:0c:cc:5d:a6:53:26:74:d5:0b:9c:
43:c5:17:f2:6b:3a:20:e6:85:61:f1:35:85:59:c6:e0:77:39:
bf:f5:c2:62:a4:23:fb:98:51:bf:94:7f:ee:a2:f9:41:e5:7e:
9b:30:44:74:02:a3:f7:06:65:2d:7e:01:43:fa:f0:32:bf:e3:
48:c7:d8:dc:f0:f8:c2:a4:3d:ab:4c:9b:b0:93:07:a6:1e:01:
c2:6f:e2:d8:64:49:17:d3:46:c4:8d:a6:27:ee:ed:8f:07:fe:
82:2f:a5:d4:48:94:1a:d0:58:d5:8e:73:33:15:40:f1:03:44:
16:21:97:9e:a9:8d:3b:3f:6a:e3:69:e7:26:78:c1:04:d4:da:
15:75:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:41:58 2025 by rpki-client