Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/shF1G42LQitQPvZfxehzohMRUrU.roa
File: shF1G42LQitQPvZfxehzohMRUrU.roa (raw, json)
Hash identifier: g2S5jc6HR4fQzCYw/zOiH9jd1mhIq7ZtkSDHMtrwc4E=
Subject key identifier: B2:11:75:1B:8D:8B:42:2B:50:3E:F6:5F:C5:E8:73:A2:13:11:52:B5
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0195A8825A3994A8E15952CB17F071476A93
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/shF1G42LQitQPvZfxehzohMRUrU.roa
Signing time: Tue 18 Mar 2025 09:07:49 +0000
ROA not before: Tue 18 Mar 2025 09:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 37.75.8.0/21 maxlen: 24
185.28.0.0/22 maxlen: 24
185.81.236.0/22 maxlen: 24
185.153.248.0/22 maxlen: 22
185.153.248.0/24 maxlen: 24
185.153.249.0/24 maxlen: 24
185.153.250.0/24 maxlen: 24
185.153.251.0/24 maxlen: 24
185.155.148.0/24 maxlen: 24
185.155.149.0/24 maxlen: 24
195.142.0.0/22 maxlen: 24
195.142.104.0/21 maxlen: 24
195.142.132.0/22 maxlen: 24
2a03:c040::/48 maxlen: 48
2a07:89c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:82:5a:39:94:a8:e1:59:52:cb:17:f0:71:47:6a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Mar 18 09:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b211751b8d8b422b503ef65fc5e873a2131152b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:3c:05:ed:fd:0e:b8:f8:ef:86:53:0f:01:
e9:20:4e:0c:76:db:f2:4e:9a:07:a0:9a:2a:ee:f5:
a6:78:1d:65:e1:86:fa:76:57:cf:2a:eb:91:26:25:
5e:fa:45:70:ff:d2:a8:c2:41:bc:1b:16:df:e7:18:
7d:1a:29:63:36:e0:05:15:30:2a:4a:9a:f9:21:3c:
ea:8e:89:82:89:46:aa:e9:97:98:2e:a1:a6:c3:bc:
2d:3a:2f:be:4b:99:81:92:b0:e6:8f:0c:c9:bb:0f:
8e:dd:cd:5d:f7:87:37:ee:2b:b9:c8:82:ee:23:bf:
7b:85:9a:c9:62:67:b0:0d:a8:d1:9a:38:b2:af:45:
fd:40:84:88:75:4f:fd:2c:65:96:81:e3:ac:cb:31:
7f:a9:e0:1c:b6:b1:4e:ff:d1:82:57:60:be:81:5a:
7f:ae:aa:e3:8c:f5:7b:26:dc:6b:e5:bd:09:c0:ae:
be:b0:3f:b9:21:09:bb:51:e6:68:31:e4:d3:fa:d2:
98:13:c5:c0:51:d6:d6:b0:b0:d2:8a:17:b2:d0:f7:
1a:a5:a9:df:43:fe:c0:35:3b:71:ca:94:3d:fc:3f:
ad:94:4c:ac:03:cd:71:a3:12:52:89:77:a6:32:22:
9f:35:ee:c9:08:a7:a6:83:0d:58:28:7b:d3:13:73:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:75:1B:8D:8B:42:2B:50:3E:F6:5F:C5:E8:73:A2:13:11:52:B5
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/shF1G42LQitQPvZfxehzohMRUrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
185.81.236.0/22
185.153.248.0/22
185.155.148.0/23
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a03:c040::/48
2a07:89c0::/48
Signature Algorithm: sha256WithRSAEncryption
15:f7:fe:d3:e3:d1:d5:33:7f:66:07:00:18:ae:2b:3e:b5:30:
5e:5e:78:b3:e2:6d:9e:4e:1e:6e:d7:04:ac:9d:0d:1b:0c:66:
d6:c3:a7:77:d7:3d:fc:c3:ef:2e:fb:3f:12:c1:9f:30:41:5b:
55:e3:36:a8:be:c1:3d:5e:97:8f:af:6a:01:63:08:e7:6e:29:
99:da:0e:3b:74:3b:ca:2e:1b:5e:69:7d:75:2d:d7:d1:31:b0:
5e:48:bf:f6:b1:6b:68:f6:7f:a1:ea:4a:27:79:ee:41:29:83:
31:b1:2d:78:08:d5:4a:a1:38:22:78:e6:d5:9f:a5:cf:41:2a:
4c:a4:f3:a4:f0:7d:12:22:97:cc:8a:18:f8:fc:10:4a:be:d8:
21:3c:09:02:1c:de:6d:1c:13:cc:93:f4:b7:96:7a:31:56:91:
6c:cb:ea:9e:4f:7f:1b:9f:04:2a:28:0a:1e:86:3c:f0:d6:6c:
ea:ac:e0:5a:c6:e6:22:6c:cd:9a:6a:eb:a5:41:95:69:e8:6d:
de:5b:9a:55:5d:7e:1e:70:48:38:d9:94:5c:46:86:8e:39:77:
cd:16:d0:39:31:fb:8c:55:3b:bb:38:62:49:45:c2:98:e0:54:
cf:20:bf:1d:26:72:90:ea:f0:f3:13:7f:91:f7:68:bd:98:fa:
b7:9d:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:39 2025 by rpki-client