Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa
File: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (raw, json)
Hash identifier: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=
Subject key identifier: B4:47:E5:CD:C7:FC:E1:87:88:43:BC:10:84:05:35:29:48:0B:F9:5C
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0196359F6152121427FD624B7AF9C820B0DA
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa
Signing time: Mon 14 Apr 2025 18:45:59 +0000
ROA not before: Mon 14 Apr 2025 18:45:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48847
IP address blocks: 109.233.16.0/21 maxlen: 21
109.233.16.0/24 maxlen: 24
109.233.17.0/24 maxlen: 24
109.233.18.0/24 maxlen: 24
109.233.19.0/24 maxlen: 24
109.233.19.56/29 maxlen: 29
109.233.19.128/25 maxlen: 25
109.233.19.128/30 maxlen: 30
109.233.20.0/24 maxlen: 24
109.233.20.196/30 maxlen: 30
109.233.21.0/24 maxlen: 24
109.233.21.92/30 maxlen: 30
109.233.21.100/30 maxlen: 30
109.233.22.0/24 maxlen: 24
109.233.22.200/30 maxlen: 30
109.233.23.0/24 maxlen: 24
109.233.23.0/30 maxlen: 30
109.233.23.152/29 maxlen: 29
185.12.220.0/22 maxlen: 22
185.12.221.0/24 maxlen: 24
185.12.221.152/29 maxlen: 29
185.12.222.0/24 maxlen: 24
185.12.223.0/24 maxlen: 24
2a03:6900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:9f:61:52:12:14:27:fd:62:4b:7a:f9:c8:20:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Apr 14 18:45:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b447e5cdc7fce1878843bc1084053529480bf95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:68:74:ac:a5:10:5d:f5:fa:01:a6:19:2d:
5c:65:3e:2f:7d:4d:9f:e2:6c:35:b3:ea:90:61:60:
5e:1a:d5:72:23:18:ca:53:93:b8:cc:38:a4:a9:65:
19:56:1a:96:4b:f9:cf:07:2a:18:5e:a0:cb:f6:fc:
af:7c:28:7d:46:cd:27:b4:96:19:92:20:92:72:da:
da:ef:8b:bc:f6:57:2b:ac:8f:15:76:6e:c6:cc:cb:
e0:af:96:54:79:f5:f2:3e:e5:36:ad:22:76:d3:b1:
95:7f:8f:67:83:f0:67:6f:88:87:9a:5c:b1:6e:07:
95:cd:43:8b:3e:c7:86:59:56:4e:05:c7:f8:22:76:
82:5a:50:74:df:3a:7b:b9:ff:a6:dd:0b:27:69:b5:
80:2a:ee:c6:0b:4b:82:91:ab:ce:6b:7e:03:30:65:
35:c6:43:1a:cf:a9:b6:cc:7f:6a:fa:64:93:79:e0:
40:06:69:40:3c:6f:25:92:49:b3:7d:f0:63:73:9f:
a4:cd:a5:b5:c2:e1:0f:4e:c0:5e:a3:f7:fd:e4:b2:
4d:b2:70:a8:41:3c:a3:3b:1c:16:c2:48:12:61:34:
a4:77:a7:8f:bb:bf:0e:b5:13:10:47:03:b8:c7:9a:
66:09:1e:80:af:22:fb:f7:89:9b:56:c3:fa:d9:04:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:E5:CD:C7:FC:E1:87:88:43:BC:10:84:05:35:29:48:0B:F9:5C
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.16.0/21
185.12.220.0/22
IPv6:
2a03:6900::/32
Signature Algorithm: sha256WithRSAEncryption
46:d8:ec:c3:c5:63:8f:7c:6d:9e:07:44:4c:f4:20:26:9f:29:
84:09:24:2b:fe:30:85:1b:05:58:02:e9:48:7c:63:56:39:51:
23:05:b2:e6:cd:d8:94:5c:a3:c0:aa:6f:30:d3:77:5d:f0:d6:
1f:51:44:99:03:1f:db:d6:0b:f8:00:01:26:5b:03:26:70:9e:
b4:f9:df:22:ed:dd:7e:74:af:dd:fd:60:a8:2a:0e:82:4a:4a:
d6:41:a3:cf:9b:ee:f2:e5:8a:0b:d5:08:91:26:6e:98:10:86:
cf:04:ba:b2:c2:67:a2:ba:e2:7e:40:52:50:f3:35:da:40:d4:
ec:7f:21:1b:ce:24:8b:d8:99:a0:3c:51:94:a9:d7:9a:e0:10:
be:d9:db:dd:38:63:10:3e:a2:8c:81:b6:7f:b4:14:a8:f8:b8:
59:ce:d3:ce:3c:a7:d1:88:fe:0c:a2:9d:22:ae:7d:84:9d:0f:
f2:66:b8:d1:82:6a:c0:c5:e5:02:dc:b8:d6:34:1f:64:6f:a5:
3b:8e:a9:79:a7:d1:cc:2a:93:de:e1:8e:ef:bc:3f:70:93:2c:
73:fa:de:80:41:17:e3:74:89:2c:47:7f:41:bc:b9:38:bf:87:
b9:6e:58:4e:cd:d0:f3:50:41:5c:65:1e:bd:51:18:dd:79:de:
0d:c5:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:12:59 2025 by rpki-client