Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uryfXZAlMokUnH2Nz7tGXigVj0A.roa
File: uryfXZAlMokUnH2Nz7tGXigVj0A.roa (raw, json)
Hash identifier: IprJ1PfNDKDl1cUwAoqoADcueG+gFD1j+hjWbn9z2A0=
Subject key identifier: BA:BC:9F:5D:90:25:32:89:14:9C:7D:8D:CF:BB:46:5E:28:15:8F:40
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214F0DB7FED6D030AFDF46553200E8
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uryfXZAlMokUnH2Nz7tGXigVj0A.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50261
IP address blocks: 37.220.128.0/20 maxlen: 20
77.111.112.0/22 maxlen: 22
77.111.124.0/22 maxlen: 22
77.111.124.0/24 maxlen: 24
77.111.127.0/24 maxlen: 24
80.64.64.0/21 maxlen: 21
80.64.72.0/21 maxlen: 21
109.74.48.0/20 maxlen: 20
194.152.130.0/24 maxlen: 24
194.152.131.0/24 maxlen: 24
194.152.133.0/24 maxlen: 24
194.152.134.0/24 maxlen: 24
194.152.135.0/24 maxlen: 24
194.152.136.0/24 maxlen: 24
194.152.138.0/24 maxlen: 24
194.152.143.0/24 maxlen: 24
194.152.144.0/24 maxlen: 24
194.152.145.0/24 maxlen: 24
194.152.146.0/24 maxlen: 24
194.152.149.0/24 maxlen: 24
194.152.152.0/24 maxlen: 24
2a02:d400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4f:0d:b7:fe:d6:d0:30:af:df:46:55:32:00:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=babc9f5d90253289149c7d8dcfbb465e28158f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:2c:41:0f:a0:e8:e0:f9:f6:56:88:96:fc:
4b:ff:3c:f5:35:c3:dd:66:6a:94:58:70:b3:ed:8b:
cb:ac:25:f5:9f:3a:08:b7:eb:6f:d4:04:17:59:f9:
d8:66:5e:e4:cf:bc:99:2c:5d:da:bf:92:d7:2c:71:
c2:fe:c0:e9:07:29:18:d3:75:59:a5:39:6c:b0:17:
0b:01:5a:b3:02:69:99:14:cd:7d:d9:68:d4:e5:f8:
3a:70:34:a8:72:c9:7f:d6:b2:cc:b5:62:f3:a9:1e:
d0:a9:d8:dd:21:85:64:fe:8a:db:c0:df:3c:05:79:
cd:ef:a1:be:7d:2f:23:14:76:8e:8b:d5:26:4e:ba:
11:d5:e9:aa:f5:7b:3c:6f:2b:d8:36:d0:73:84:36:
9f:4c:16:73:dc:93:a3:b0:d3:e3:db:05:3c:e4:fe:
e4:73:09:1e:c6:0a:16:f7:2a:4c:06:f5:79:90:5c:
bd:b5:a3:a7:4a:71:67:85:c9:3b:5f:16:54:62:24:
43:f3:6f:80:85:83:54:aa:a4:6a:27:e4:1d:4d:5c:
65:b0:ae:f2:2d:8e:8f:5a:83:c8:aa:cf:0c:7e:fa:
81:a5:5d:45:8d:53:97:75:4f:df:e4:53:f9:a3:76:
d4:83:29:04:bb:f4:c0:6f:7c:f7:4f:f0:44:f1:f2:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:9F:5D:90:25:32:89:14:9C:7D:8D:CF:BB:46:5E:28:15:8F:40
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uryfXZAlMokUnH2Nz7tGXigVj0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.128.0/20
77.111.112.0/22
77.111.124.0/22
80.64.64.0/20
109.74.48.0/20
194.152.130.0/23
194.152.133.0-194.152.136.255
194.152.138.0/24
194.152.143.0-194.152.146.255
194.152.149.0/24
194.152.152.0/24
IPv6:
2a02:d400::/29
Signature Algorithm: sha256WithRSAEncryption
ca:1d:6d:0d:85:b5:60:d3:93:a1:df:ce:a1:3e:ee:90:17:ee:
78:e6:b5:51:b1:da:8c:1b:57:68:c5:d8:71:e6:9d:c8:ba:82:
93:00:54:9e:7e:87:28:0c:0c:db:51:d6:70:ae:2f:e0:26:c4:
30:55:0e:5e:a2:b4:86:3c:6e:02:86:43:c0:cb:95:91:cc:e3:
b4:99:76:97:d5:69:2a:44:84:31:92:1c:d2:32:a8:e7:28:26:
fe:3b:2d:41:d6:e6:c4:a5:d4:72:98:e9:9a:2f:40:e7:3f:1d:
83:22:80:30:13:4d:48:71:87:17:51:c5:75:93:a5:b5:95:8a:
71:a5:2a:83:2e:4d:a6:a1:fa:98:fe:ee:61:0e:f8:6e:44:a2:
38:2a:f2:61:af:1e:01:fb:97:6a:fd:1f:35:98:50:6f:86:42:
e6:49:7b:aa:bc:a7:5c:5b:6a:6b:e6:a9:fb:ab:fb:cc:d6:21:
de:2d:ef:1a:e3:1e:e6:c4:f9:ae:13:cc:83:33:67:07:ac:92:
7c:91:c7:8d:07:eb:32:88:16:86:72:12:8c:15:65:7d:7f:86:
f1:c1:a1:97:e2:f2:1a:6c:a1:b6:1a:b9:e1:37:bb:f3:74:ea:
af:15:bd:06:2e:1b:35:28:cb:e3:db:73:99:14:98:e9:c0:e1:
5a:89:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:29 2025 by rpki-client