Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/jq2ROJQEklFg1qQcuXVZSg9rwTs.roa
File: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (raw, json)
Hash identifier: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=
Subject key identifier: 8E:AD:91:38:94:04:92:51:60:D6:A4:1C:B9:75:59:4A:0F:6B:C1:3B
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 0194266C3D49DF7D33154B5F8566A0414F5E
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/jq2ROJQEklFg1qQcuXVZSg9rwTs.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57763
IP address blocks: 37.75.136.0/21 maxlen: 21
37.75.136.0/22 maxlen: 22
37.75.140.0/24 maxlen: 24
37.75.141.0/24 maxlen: 24
37.75.142.0/23 maxlen: 23
91.224.66.0/23 maxlen: 23
185.63.0.0/22 maxlen: 22
185.63.0.0/24 maxlen: 24
185.63.1.0/24 maxlen: 24
185.63.2.0/24 maxlen: 24
185.63.3.0/24 maxlen: 24
2001:67c:2074::/48 maxlen: 48
2a01:5740::/32 maxlen: 32
2a01:5740::/48 maxlen: 48
2a01:5741::/32 maxlen: 32
2a01:5741::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3d:49:df:7d:33:15:4b:5f:85:66:a0:41:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ead91389404925160d6a41cb975594a0f6bc13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:32:fc:c3:82:db:33:d9:c0:1d:31:f7:f9:
27:a5:aa:36:97:af:23:08:8f:dc:bc:8c:3e:03:17:
f3:dd:76:10:88:c8:f4:7e:96:9d:8b:e9:2e:e8:8b:
1b:d4:4b:cc:2f:2a:d1:f0:60:46:2e:3e:2c:84:f5:
0a:8a:31:7a:dd:ce:bb:e7:f1:9c:b3:16:e2:ae:9c:
2c:f6:d8:43:d4:d4:28:47:5f:12:47:0f:45:37:6b:
dd:49:bf:40:82:5c:49:c5:ef:5b:79:d1:2a:82:06:
72:dc:24:1d:a9:19:33:77:f8:bb:25:83:2f:9a:87:
be:8b:c3:45:1b:f5:63:92:9f:8b:74:48:7a:c8:1a:
ce:21:c7:12:f4:a7:02:63:ce:58:76:f7:35:a5:33:
cf:e0:e4:75:c8:42:5c:a9:c3:e8:22:32:ff:b5:33:
7b:3a:c7:02:40:4c:20:df:a3:9d:a5:2f:a0:4f:d1:
86:b6:af:30:dd:b5:a3:a2:d8:a1:72:ae:7b:5e:f6:
2c:98:b2:7d:c7:10:04:85:10:0a:b0:67:5c:e6:f2:
ba:1f:33:4f:22:f6:c6:a2:33:09:03:68:04:f3:98:
56:bc:32:68:cb:02:8a:cb:0a:9f:40:84:88:15:17:
39:2d:19:56:27:14:6f:b9:9d:d0:e5:94:fd:e8:b0:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:91:38:94:04:92:51:60:D6:A4:1C:B9:75:59:4A:0F:6B:C1:3B
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/jq2ROJQEklFg1qQcuXVZSg9rwTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.136.0/21
91.224.66.0/23
185.63.0.0/22
IPv6:
2001:67c:2074::/48
2a01:5740::/31
Signature Algorithm: sha256WithRSAEncryption
76:8f:53:f3:95:8e:e3:ef:1b:7c:bb:cd:bb:fb:d8:0e:81:74:
1b:cf:f5:fd:2f:e7:10:00:e5:f2:28:ad:98:10:11:f3:ac:45:
7a:28:2b:54:46:e6:de:eb:1c:61:e8:12:dd:64:60:85:59:47:
78:00:d8:60:2c:a3:10:fe:5c:2d:1a:3e:ce:15:93:b1:0a:0c:
46:e2:8f:a1:ba:57:83:c1:7d:0f:8f:0c:e3:3c:09:db:19:27:
25:4a:f5:eb:ed:1c:3a:6a:30:08:ec:d0:9d:80:5c:72:b7:95:
9a:ae:ab:05:a6:69:92:4d:16:e0:93:78:7b:8d:b7:bf:68:91:
70:f3:08:10:86:31:83:6f:85:ab:52:c6:f3:6c:b9:7c:26:5d:
7f:c4:0f:47:41:a6:c3:8b:6d:a4:4d:57:dc:43:68:88:19:ad:
59:ae:1a:d8:0f:52:8e:8b:82:b6:d0:d7:8d:db:8b:9a:2c:21:
b9:16:08:f2:e9:b3:bc:1c:43:a1:20:9e:eb:00:0b:0b:9e:1b:
5a:95:23:df:1b:27:c8:2f:e8:c1:1a:3f:6f:2b:21:a8:54:1a:
13:98:4a:7a:64:ce:62:4e:af:91:74:47:75:ac:28:ea:91:00:
24:b3:65:68:ca:fb:7b:8e:15:ba:d8:69:6d:90:f5:8c:d3:84:
5e:8e:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:08:44 2025 by rpki-client