Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Gq_xCZdEzAOLUGgbxCsiI12vGe0.roa
File: Gq_xCZdEzAOLUGgbxCsiI12vGe0.roa (raw, json)
Hash identifier: zD/DDfTlc7UMlvce/2TQOzHMx0TMXcX/Gj0yJXMu0iI=
Subject key identifier: 1A:AF:F1:09:97:44:CC:03:8B:50:68:1B:C4:2B:22:23:5D:AF:19:ED
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195B9674DF3112CEAE6F6BC4AB4A0568EB2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Gq_xCZdEzAOLUGgbxCsiI12vGe0.roa
Signing time: Fri 21 Mar 2025 15:51:49 +0000
ROA not before: Fri 21 Mar 2025 15:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:67:4d:f3:11:2c:ea:e6:f6:bc:4a:b4:a0:56:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 21 15:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aaff1099744cc038b50681bc42b22235daf19ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:12:5a:ff:be:28:46:77:da:9c:c2:ac:b1:
04:f3:c9:23:63:86:98:40:2d:0c:9c:cf:04:db:88:
3a:a3:a2:f4:7a:e2:90:81:5d:95:d1:82:d3:c2:5b:
ca:0d:98:af:c8:95:fd:df:0f:60:59:23:1d:de:ed:
b7:fc:a9:02:79:60:e8:af:c5:ba:fc:b5:26:10:ab:
0b:dd:19:ff:62:56:4b:96:d6:71:b8:02:47:f3:5f:
50:24:ba:23:96:1b:4a:e1:3f:06:45:80:7d:a6:9d:
3c:1c:20:dc:e6:e0:c1:53:e2:48:59:9f:42:5e:3a:
ee:cf:b3:69:64:20:54:9e:34:32:19:25:08:ce:48:
97:7b:ef:82:d7:b8:d6:2d:04:1b:e5:d7:7d:4f:49:
de:9c:fa:40:7e:de:d7:80:00:65:e7:a0:a0:87:e6:
b9:5e:37:d2:b7:c0:17:02:79:02:d2:e9:7e:87:3c:
36:68:b3:f0:84:6a:d3:ea:7a:1f:6d:73:a2:a5:d5:
66:73:e0:93:b3:0e:ae:3f:0b:df:9c:f5:aa:7a:e8:
c6:3a:50:24:75:54:1d:5d:0b:46:fe:bb:9d:a7:2a:
a5:b0:25:ff:f2:d1:68:e1:42:44:43:38:c2:43:24:
a9:fe:ff:99:13:fd:60:bf:6e:58:36:9b:b8:90:89:
c2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:F1:09:97:44:CC:03:8B:50:68:1B:C4:2B:22:23:5D:AF:19:ED
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Gq_xCZdEzAOLUGgbxCsiI12vGe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
83.137.156.0/24
83.137.158.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
88.209.247.0/24
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
27:ec:d1:ef:83:ce:b1:29:35:96:08:05:41:11:13:8d:0e:12:
41:67:df:b4:09:fd:5a:3e:a5:35:d1:bc:5d:6e:f6:6a:81:14:
6b:f1:12:ee:29:e2:fb:e3:b6:a0:8f:34:85:0a:c1:95:56:9f:
c3:3f:b2:25:df:ae:91:3f:95:a8:ee:7c:7b:77:cf:bc:58:86:
db:e1:3a:ea:80:8b:39:9a:49:49:82:4b:94:53:94:04:0b:a9:
e8:40:58:2c:36:50:8e:f3:11:07:c5:ed:e6:aa:44:ca:9a:3b:
b5:d5:3d:7f:4d:06:a7:c6:59:3c:59:53:d2:b5:25:25:a3:46:
e5:ce:11:ca:ea:4c:5c:29:1c:61:2c:af:16:2f:02:ef:b4:18:
5d:62:2e:a9:df:03:5e:84:ff:80:b2:39:95:c2:44:c3:a5:d3:
d3:57:d1:dc:db:0f:76:4d:37:e3:a7:a2:ba:38:1c:79:28:78:
40:90:7c:61:c0:67:7a:dd:ba:cc:58:8f:dd:3e:61:45:b7:b3:
e7:17:d4:4c:94:8f:bf:25:6f:45:7f:16:d6:6c:db:89:99:87:
3e:45:ae:92:5a:44:ea:a4:fc:6c:b1:1d:f0:75:98:29:9b:ba:
af:e9:f9:af:02:7b:1d:01:af:12:4c:9f:57:37:7c:19:bf:83:
da:dd:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:31 2025 by rpki-client