Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/d8mFLNhZassFfsIT0V6Pg-FoNgA.roa
File: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (raw, json)
Hash identifier: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=
Subject key identifier: 77:C9:85:2C:D8:59:6A:CB:05:7E:C2:13:D1:5E:8F:83:E1:68:36:00
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01942369052E3DC15F6093C0021BB08A2486
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/d8mFLNhZassFfsIT0V6Pg-FoNgA.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25252
IP address blocks: 79.170.16.0/24 maxlen: 24
79.170.17.0/24 maxlen: 24
79.170.18.0/24 maxlen: 24
79.170.19.0/24 maxlen: 24
79.170.20.0/24 maxlen: 24
79.170.21.0/24 maxlen: 24
79.170.22.0/24 maxlen: 24
79.170.23.0/24 maxlen: 24
153.112.132.0/22 maxlen: 22
153.112.139.0/24 maxlen: 24
153.112.149.0/24 maxlen: 24
153.112.150.0/23 maxlen: 23
153.112.160.0/21 maxlen: 21
153.112.173.0/24 maxlen: 24
153.112.176.0/20 maxlen: 20
153.112.208.0/23 maxlen: 23
153.112.240.0/24 maxlen: 24
153.112.241.0/24 maxlen: 24
192.138.109.0/24 maxlen: 24
192.138.110.0/23 maxlen: 23
192.138.116.0/23 maxlen: 23
192.157.8.0/23 maxlen: 23
192.157.8.0/24 maxlen: 24
192.157.9.0/24 maxlen: 24
192.157.10.0/24 maxlen: 24
192.157.11.0/24 maxlen: 24
193.53.25.0/24 maxlen: 24
2a02:f784:20::/48 maxlen: 48
2a02:f784:30::/48 maxlen: 48
2a02:f784:8000::/48 maxlen: 48
2a02:f784:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:05:2e:3d:c1:5f:60:93:c0:02:1b:b0:8a:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77c9852cd8596acb057ec213d15e8f83e1683600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:b6:7a:ea:b3:ef:1f:8d:2f:0e:7f:17:da:
49:54:d8:0a:ca:a4:fe:d3:b2:40:d1:23:c1:7d:b6:
37:1c:e4:1b:e3:29:06:5b:80:ca:51:c3:51:3c:7c:
32:11:07:99:74:cd:bc:9e:66:28:cb:45:54:2c:ad:
c7:f3:a3:72:ad:6a:b8:70:3d:6b:4c:c2:47:01:1a:
16:6a:d2:46:83:17:fb:0c:c8:86:75:44:01:91:0e:
0d:69:63:d9:5a:26:f2:c0:7f:0f:33:70:02:76:8d:
57:47:28:ea:38:52:1a:4a:ed:43:1e:cd:d2:6d:fe:
00:cd:17:e3:7f:4d:b6:98:7a:d7:5c:a7:6e:83:34:
2b:c9:fd:4d:0c:8b:f9:55:03:1d:dd:49:97:6d:c6:
e2:76:d5:6d:1d:fa:02:0e:f6:c3:05:da:56:c7:74:
55:68:03:f1:12:32:5d:b9:c1:71:3f:47:89:49:45:
fe:14:f8:58:25:a9:de:4c:58:ae:f6:ff:4c:d5:ba:
27:c4:86:55:b5:77:2f:1c:d1:98:d7:7c:10:82:68:
fc:44:60:f5:92:ab:29:c0:70:65:ea:f8:5c:4c:0a:
41:1c:fb:a9:52:ac:05:58:19:ce:04:c4:09:3a:7d:
93:9a:d7:e8:f2:4c:86:6a:da:24:06:1d:79:32:7e:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:85:2C:D8:59:6A:CB:05:7E:C2:13:D1:5E:8F:83:E1:68:36:00
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/d8mFLNhZassFfsIT0V6Pg-FoNgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.16.0/21
153.112.132.0/22
153.112.139.0/24
153.112.149.0-153.112.151.255
153.112.160.0/21
153.112.173.0/24
153.112.176.0/20
153.112.208.0/23
153.112.240.0/23
192.138.109.0-192.138.111.255
192.138.116.0/23
192.157.8.0/22
193.53.25.0/24
IPv6:
2a02:f784:20::/48
2a02:f784:30::/48
2a02:f784:8000::/47
Signature Algorithm: sha256WithRSAEncryption
8b:b0:a9:d7:ab:67:4b:7b:34:ae:6f:13:14:e7:4d:90:f6:8f:
70:ac:c6:55:bf:97:cd:e8:98:40:cd:e1:9f:35:ac:4c:7b:35:
e6:05:15:3d:50:c2:03:81:b8:b8:26:17:45:8d:77:c3:7b:1a:
ef:a8:d3:df:05:02:9d:e2:7a:e2:7d:87:d1:71:85:cc:22:17:
0d:ea:02:2e:53:5b:c2:d3:4b:8c:46:56:62:66:a3:07:32:6a:
1d:25:25:8b:dd:57:58:48:05:d2:df:99:6d:11:2d:d0:79:74:
d6:8e:46:21:9f:7d:48:7f:4f:30:9e:10:b5:89:df:5d:5a:34:
89:78:dd:cb:c0:3d:4d:51:ed:6c:7a:f2:b9:ad:14:47:19:62:
d6:34:32:11:eb:0e:ef:e2:80:b6:09:84:9e:b1:8b:87:f2:93:
a1:82:b2:99:61:73:a7:bd:f2:78:65:eb:cf:67:3b:6a:7f:e6:
3a:44:5d:10:00:0b:40:08:41:03:fd:ca:46:64:16:d6:92:90:
fc:3b:b6:ff:08:ff:7c:df:91:84:f4:f7:90:b3:21:aa:34:6b:
20:b5:00:06:bd:85:b1:64:af:b2:dd:67:31:7f:02:9e:9f:a6:
64:e2:da:b2:06:f6:1c:15:00:2a:de:69:0a:6e:da:a5:44:fe:
4f:3c:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:12 2025 by rpki-client