Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/07yaacsySgTMi_XzVuj-ojKJvLc.roa
File: 07yaacsySgTMi_XzVuj-ojKJvLc.roa (raw, json)
Hash identifier: SsF2CCJUZjpsJ7ohenvdPiWs2OAOiZYfJdB6rd0Q0Z4=
Subject key identifier: D3:BC:9A:69:CB:32:4A:04:CC:8B:F5:F3:56:E8:FE:A2:32:89:BC:B7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01963ED41DDF0E73B49D3F70D62F2D40FD17
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/07yaacsySgTMi_XzVuj-ojKJvLc.roa
Signing time: Wed 16 Apr 2025 13:40:10 +0000
ROA not before: Wed 16 Apr 2025 13:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.137.154.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.195.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:d4:1d:df:0e:73:b4:9d:3f:70:d6:2f:2d:40:fd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 16 13:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3bc9a69cb324a04cc8bf5f356e8fea23289bcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:8d:a6:ff:3e:b4:2d:ba:35:de:10:08:1e:
70:0c:3f:5d:a2:81:62:58:db:ca:9b:ad:5c:ec:32:
75:c9:7d:58:1a:94:ea:7b:68:6f:8f:d3:72:30:58:
fa:00:c5:f1:c7:4a:c3:7a:bd:75:3d:21:92:ef:5c:
6e:b1:0f:8a:63:67:e7:43:c3:7b:65:89:b5:16:21:
86:d3:6e:93:34:41:8d:12:48:7b:5f:17:d1:92:da:
93:35:cf:7a:68:38:09:02:4b:c9:d8:0e:37:48:5a:
c0:78:fb:c5:b9:73:95:bc:ea:07:13:e3:1c:7e:41:
ba:54:89:5c:08:0f:6c:48:4b:1d:b9:7c:36:4f:f8:
53:0d:72:b7:17:fc:41:18:72:8d:dc:5a:3c:4d:dd:
94:3d:cf:80:f5:44:24:11:7f:86:8a:e2:da:d1:94:
d3:b4:5e:ec:e0:e8:54:76:dd:94:0f:ac:4c:e7:f2:
88:e5:5b:42:e3:98:7e:62:ac:69:83:9c:28:5f:4e:
a3:9e:35:4b:01:6e:05:f6:c7:ee:a9:37:86:57:ec:
a5:4c:e9:bb:01:2b:44:62:32:0d:e9:da:bd:f9:ad:
03:18:17:ba:8f:97:5e:81:41:75:08:08:bd:bb:5a:
8b:b2:16:1b:98:2c:98:23:14:38:99:a1:8d:d8:00:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BC:9A:69:CB:32:4A:04:CC:8B:F5:F3:56:E8:FE:A2:32:89:BC:B7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/07yaacsySgTMi_XzVuj-ojKJvLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.151.56.0/23
88.209.195.0/24
88.209.201.0/24
88.209.224.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
06:4a:e7:09:09:35:ea:0a:d4:89:5f:f9:ac:4d:f9:0e:3d:ea:
3c:7e:84:2d:2b:89:60:22:b8:59:3a:f1:4c:fb:72:00:3d:2e:
48:ba:59:39:39:99:b8:ac:db:9f:4b:4a:e7:57:b7:a6:fe:3d:
38:e9:d6:c0:10:a9:7e:f1:25:5f:c1:a9:e5:f4:0a:39:aa:db:
da:1f:6a:e3:55:9d:4e:aa:4d:c4:7f:99:d6:4b:44:bc:f4:2b:
c4:ff:de:33:48:fa:61:01:92:24:76:eb:fb:e9:ae:8a:dc:13:
46:1d:05:fa:b3:7a:46:46:29:f0:f9:08:66:c9:c1:2f:fe:69:
61:00:4f:a9:73:0e:56:52:d4:39:dc:fb:10:6f:a3:37:f4:39:
41:f8:6d:a0:ff:53:67:e1:49:0d:ba:3d:b1:b0:cc:b3:b4:cb:
b7:ff:2d:6a:e0:02:fd:a9:ef:3f:ce:68:f0:1b:f8:15:30:79:
f3:16:1e:d6:d4:6b:93:2b:65:4c:ba:31:9a:ce:ca:d5:6f:64:
2b:46:22:2a:9a:b5:89:11:30:81:ae:68:0b:2e:a0:8b:24:7c:
b1:03:46:35:75:4a:ad:25:74:a1:21:7a:de:03:ac:23:c1:26:
05:b0:76:93:2d:ae:80:5a:56:91:60:45:18:71:88:13:7a:24:
28:ae:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:47 2025 by rpki-client