Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YNmypkOIYHfeuNeZKFMW0MBVj3s.roa
File: YNmypkOIYHfeuNeZKFMW0MBVj3s.roa (raw, json)
Hash identifier: c+ersNPrqiOYIXyw9KrJl9Xlk+msoZgcfUz7dTkeQMk=
Subject key identifier: 60:D9:B2:A6:43:88:60:77:DE:B8:D7:99:28:53:16:D0:C0:55:8F:7B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019445E4F308932253E19F23D7A9BE71BE9E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YNmypkOIYHfeuNeZKFMW0MBVj3s.roa
Signing time: Wed 08 Jan 2025 12:30:19 +0000
ROA not before: Wed 08 Jan 2025 12:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202636
IP address blocks: 37.32.96.0/23 maxlen: 23
45.90.238.0/24 maxlen: 24
45.134.87.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.121.0/24 maxlen: 24
93.189.122.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.150.77.0/24 maxlen: 24
185.150.78.0/23 maxlen: 23
185.179.233.0/24 maxlen: 24
185.179.235.0/24 maxlen: 24
185.191.44.0/22 maxlen: 22
185.199.55.0/24 maxlen: 24
185.218.18.0/24 maxlen: 24
185.224.36.0/22 maxlen: 24
185.227.205.0/24 maxlen: 24
185.239.254.0/24 maxlen: 24
185.248.200.0/22 maxlen: 24
185.252.44.0/22 maxlen: 22
194.35.41.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/23 maxlen: 23
194.41.118.0/23 maxlen: 23
212.80.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:e4:f3:08:93:22:53:e1:9f:23:d7:a9:be:71:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 8 12:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60d9b2a643886077deb8d799285316d0c0558f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:9d:3e:8b:e2:99:66:56:a3:ac:ca:23:d7:
62:cf:96:60:f4:64:fd:f9:01:34:59:9c:28:52:69:
c0:5b:9f:5c:2f:85:c6:f4:c5:c5:b3:fd:ad:d3:61:
db:16:5c:21:2e:28:6e:54:89:3c:31:34:ae:fb:10:
85:89:c9:ea:b5:c0:90:01:0d:f7:f5:b8:7d:bb:75:
30:b5:87:b1:92:7f:cd:b8:ea:34:27:e1:6f:60:16:
99:38:6d:4f:92:31:02:1d:b5:27:54:d1:14:50:97:
2c:0f:56:b0:40:a3:51:30:60:36:cd:97:b2:05:33:
b0:c2:60:7c:8e:5f:41:70:14:e7:bc:35:77:2f:9b:
4e:c3:e5:c6:c8:e5:0a:8c:7b:a9:eb:3f:aa:c8:f1:
de:34:75:83:d3:50:57:1a:b5:f7:07:5f:7e:d4:71:
68:f2:15:6a:2b:fc:a8:c7:c8:47:5d:34:3f:5b:e5:
f2:7b:a0:31:7c:29:86:59:a3:93:9b:86:54:85:82:
67:0d:29:5f:0f:ca:31:91:3a:31:c9:9b:2d:a1:77:
a7:50:5b:b8:1a:14:12:1c:f8:64:09:5f:0d:e3:19:
16:18:dd:b8:24:9f:a1:5b:5d:38:7d:3c:22:e8:6b:
a1:00:97:68:26:f6:7c:5a:f5:7e:f9:10:c5:b7:9d:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:B2:A6:43:88:60:77:DE:B8:D7:99:28:53:16:D0:C0:55:8F:7B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YNmypkOIYHfeuNeZKFMW0MBVj3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.96.0/23
45.90.238.0/24
45.134.87.0/24
93.92.228.0/22
93.189.121.0-93.189.122.255
95.214.144.0/22
185.150.77.0-185.150.79.255
185.179.233.0/24
185.179.235.0/24
185.191.44.0/22
185.199.55.0/24
185.218.18.0/24
185.224.36.0/22
185.227.205.0/24
185.239.254.0/24
185.248.200.0/22
185.252.44.0/22
194.35.41.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:e0:24:0e:d7:e4:ad:61:d1:42:6f:3f:8e:36:76:4e:f5:80:
70:bc:81:bc:af:4b:5c:f5:3f:86:3c:65:17:72:63:77:90:ad:
ed:72:4a:07:10:c4:e0:93:35:e8:b7:5c:13:cd:1c:5c:ce:94:
db:50:75:0a:4e:7e:8f:3c:21:b6:ef:bb:b2:c0:78:8a:98:b3:
4c:a0:22:7d:b9:bc:bc:b8:61:b9:d0:54:26:16:57:38:0e:02:
1d:21:ed:d9:95:21:12:d4:30:59:96:89:0f:b7:87:79:bf:8b:
aa:37:9a:11:e2:89:bc:08:74:1e:dd:71:02:fc:9a:1e:ea:3d:
27:06:f3:3e:4c:e2:54:86:cc:56:17:07:3f:1a:fd:b8:a7:58:
25:b5:7e:b7:9d:17:bf:39:9f:53:18:9e:ab:27:5a:1e:51:a2:
91:22:f9:22:41:df:6d:09:ec:2f:40:28:7f:59:5f:54:a1:f7:
6c:43:4e:22:5d:71:2c:98:77:1f:59:c6:1b:b2:3f:ee:03:01:
ca:f3:f5:d0:58:8d:59:3c:df:65:46:20:c3:25:3c:4f:de:0b:
9c:d4:19:24:1b:2a:7a:d3:dd:5c:13:1e:6a:d7:9d:38:5d:86:
e6:4f:6a:32:26:4a:5d:17:00:d3:63:21:88:7a:ab:8c:71:d8:
99:b9:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:40 2025 by rpki-client