Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/cu8YZEomM6yhTT6rKGZD0EswcrA.roa
File: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (raw, json)
Hash identifier: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=
Subject key identifier: 72:EF:18:64:4A:26:33:AC:A1:4D:3E:AB:28:66:43:D0:4B:30:72:B0
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01941F8C2BC583D2C7A924CBF63E5893A018
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/cu8YZEomM6yhTT6rKGZD0EswcrA.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57829
IP address blocks: 31.25.64.0/21 maxlen: 24
31.25.64.0/22 maxlen: 24
31.25.68.0/22 maxlen: 24
62.181.223.0/24 maxlen: 24
91.196.240.0/22 maxlen: 24
91.196.240.0/23 maxlen: 24
91.196.242.0/23 maxlen: 24
185.130.0.0/22 maxlen: 24
185.130.0.0/24 maxlen: 24
217.16.192.0/20 maxlen: 24
2a02:7720::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:c5:83:d2:c7:a9:24:cb:f6:3e:58:93:a0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72ef18644a2633aca14d3eab286643d04b3072b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:85:4c:be:ef:b3:26:0e:e5:a7:f0:db:43:
59:12:40:6e:c8:4d:1f:04:a3:8f:0d:f9:74:cc:85:
50:86:1d:fc:1b:4a:a1:5a:23:cb:cd:29:2c:bc:1a:
aa:d7:2e:72:fa:be:4a:0c:ff:50:10:07:92:dd:71:
d2:4e:dc:18:48:2f:48:6d:28:ce:48:0a:34:55:df:
9b:27:55:cc:bc:55:8a:fe:32:b6:29:e1:89:34:2d:
32:47:d6:31:a0:e3:21:a1:68:a2:fb:b8:33:de:7f:
25:11:a3:ea:87:6d:52:71:74:2c:77:66:2d:1a:54:
a3:d3:fe:5c:13:8d:18:2d:ef:f9:be:e6:14:e6:fd:
1f:19:01:50:0c:7a:5a:e0:c8:9a:a1:20:11:97:2d:
ec:e0:cb:82:fe:f0:bb:97:fa:5f:9b:da:72:0c:8a:
20:e0:f4:94:2a:eb:f6:66:54:da:13:5a:80:72:9a:
52:b9:06:5f:82:ed:62:ef:8e:df:c1:58:9a:90:01:
b4:f0:01:78:60:d9:b4:83:c6:5c:fd:91:9b:30:33:
53:37:26:cc:5f:b1:39:40:45:65:f1:4a:f4:7f:6d:
b3:97:e8:04:db:a8:d3:e1:f4:f6:2e:cb:b5:cf:4a:
9c:18:dc:64:05:a4:d3:06:a6:be:05:95:5f:6c:e7:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:18:64:4A:26:33:AC:A1:4D:3E:AB:28:66:43:D0:4B:30:72:B0
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/cu8YZEomM6yhTT6rKGZD0EswcrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.64.0/21
62.181.223.0/24
91.196.240.0/22
185.130.0.0/22
217.16.192.0/20
IPv6:
2a02:7720::/32
Signature Algorithm: sha256WithRSAEncryption
84:1e:4c:80:fd:6b:dc:d1:74:6d:8a:18:01:ee:21:8a:b1:42:
2d:4c:54:29:f5:3b:31:0c:18:f3:0a:5a:cd:6f:20:a4:2a:5c:
b5:c5:1c:61:99:05:c5:4e:39:7b:b2:6b:00:90:84:7b:cc:a9:
7f:08:a1:4c:e6:4a:0a:e2:57:7f:f3:19:45:ec:60:65:7a:28:
e8:b1:27:f2:ce:a2:e7:d4:1e:44:c4:ca:96:cd:f9:e7:19:5b:
6d:b8:94:34:c1:f2:c7:c1:e2:85:62:85:4a:8d:c0:fc:ce:71:
9d:48:73:c6:9e:44:39:ef:84:7b:71:56:ce:44:c0:48:fe:a1:
6d:9a:82:38:8d:64:54:03:90:64:97:2b:00:32:d6:32:69:c3:
b8:c4:ef:71:89:fc:54:d2:c8:9a:40:d7:7c:d8:bd:9c:1e:02:
af:8a:79:20:6b:57:9c:e4:78:25:6b:41:ec:5a:bf:8b:d3:f5:
66:7b:fa:f8:ce:cc:68:fd:cf:e0:2f:3c:51:f2:10:45:fa:fb:
69:c4:f6:cc:83:b2:c5:58:5c:d8:ef:5f:4a:4d:bb:19:3b:86:
c1:2e:86:23:1f:ce:8b:34:e4:42:07:0c:e5:1d:45:45:2b:61:
38:62:14:88:3c:d7:94:59:8e:78:e5:cd:e1:fd:ed:f4:5d:0e:
61:14:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:07 2025 by rpki-client