Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BaSPDYM6MErqXQc7hbonxO3hOP4.roa
File: BaSPDYM6MErqXQc7hbonxO3hOP4.roa (raw, json)
Hash identifier: AgREuMxC9LWBmMGpuhqiDAzwfQdn2bSFaeGwQAYr9Ig=
Subject key identifier: 05:A4:8F:0D:83:3A:30:4A:EA:5D:07:3B:85:BA:27:C4:ED:E1:38:FE
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0195DB42994FDAD92D3140312DFF0476633D
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BaSPDYM6MErqXQc7hbonxO3hOP4.roa
Signing time: Fri 28 Mar 2025 05:38:49 +0000
ROA not before: Fri 28 Mar 2025 05:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
45.248.52.0/24 maxlen: 24
45.248.55.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
94.154.182.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
162.218.90.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:42:99:4f:da:d9:2d:31:40:31:2d:ff:04:76:63:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Mar 28 05:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a48f0d833a304aea5d073b85ba27c4ede138fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:4f:7b:06:59:16:3f:8b:6c:71:8c:f4:41:
c7:c4:d2:97:9f:0b:14:50:c2:16:03:36:8d:db:3a:
cb:2a:55:c5:db:c6:d3:16:38:86:4a:3e:04:3d:10:
0c:77:c0:4c:59:0b:f5:b0:28:cd:91:2f:a3:d2:8a:
f7:77:49:8b:f4:85:4a:2a:83:96:63:08:64:03:7a:
92:c9:43:44:7d:25:fa:51:b0:c3:8f:2b:3a:05:22:
29:39:57:28:c3:70:90:b0:4b:95:d0:31:71:54:72:
af:3e:fc:cb:e1:9e:2a:49:8d:e9:6e:fc:1d:93:e1:
2b:94:cb:d9:75:bc:08:62:8a:6e:69:62:8c:18:a5:
d7:58:3a:36:95:61:21:58:85:08:29:4f:3f:cb:69:
2e:ab:1e:9a:c7:9f:6d:80:f2:f0:33:c7:af:17:18:
e1:68:fc:a4:5e:e5:b7:48:6b:c5:0e:ed:01:85:6a:
71:c8:2b:f1:4c:b8:e8:2c:92:8c:ef:c6:84:82:7a:
c7:c0:0f:8f:93:5c:94:3d:03:18:48:f6:69:10:9f:
01:ec:55:5b:a3:f8:ea:40:bf:f7:5b:0f:a5:f8:70:
93:2b:57:62:3d:99:b2:94:81:d0:5f:4c:39:06:d9:
26:b7:3c:b9:46:b0:78:48:2b:d0:be:2b:44:b3:d3:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:8F:0D:83:3A:30:4A:EA:5D:07:3B:85:BA:27:C4:ED:E1:38:FE
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BaSPDYM6MErqXQc7hbonxO3hOP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.248.52.0/24
45.248.55.0/24
92.249.31.0/24
94.154.182.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
185.187.212.0/24
185.205.205.0/24
185.253.122.0/24
192.145.71.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
08:77:ed:06:40:61:ee:c8:4a:ac:4d:71:14:9c:70:ce:04:e5:
17:03:e8:6f:9e:cf:2b:de:29:ac:8d:65:8a:95:23:98:c5:f9:
97:f6:45:2c:00:58:b2:04:73:10:7e:f0:1b:01:b2:b2:e3:23:
1a:cb:66:ea:5a:15:11:8c:66:ea:92:74:dc:28:53:36:c1:3f:
39:9e:40:6a:98:de:d2:a2:f0:5e:7d:90:27:e0:30:0b:96:15:
10:f7:65:1a:fe:7b:79:e1:46:c3:3d:9f:b6:96:0d:6a:2f:e3:
20:43:04:07:c1:5a:de:70:91:9c:7a:03:19:b7:aa:3d:35:b4:
9e:64:20:bd:8a:62:bc:02:4e:58:a4:da:7b:a0:53:2e:36:62:
97:fb:ba:89:4f:80:7b:97:35:04:0d:84:95:3c:98:63:d4:83:
b3:7a:da:e7:6b:98:e8:c5:97:b9:95:b9:93:05:25:df:b4:61:
50:7e:76:db:82:21:d2:4d:8e:6a:1a:53:e9:1a:a2:03:85:84:
5a:16:9e:ca:f8:1e:45:22:e9:48:50:5c:6f:a3:91:c4:85:e6:
f0:61:bf:ec:36:a7:9a:de:25:a4:7c:e5:45:a0:7b:47:63:b1:
34:e9:e7:16:f9:63:dc:56:fa:30:38:0c:34:02:8e:18:59:26:
d7:00:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:25 2025 by rpki-client