Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa
File: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (raw, json)
Hash identifier: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=
Subject key identifier: BF:56:13:4A:63:94:1D:D9:2D:16:A1:59:FA:12:3B:B7:A5:8D:D9:F5
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019423D6EF9DA213B3E96AF1C4C13A3BA427
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198569
IP address blocks: 37.152.160.0/24 maxlen: 24
37.152.161.0/24 maxlen: 24
37.152.162.0/24 maxlen: 24
37.152.163.0/24 maxlen: 24
37.152.164.0/24 maxlen: 24
37.152.167.0/24 maxlen: 24
37.152.168.0/24 maxlen: 24
37.152.169.0/24 maxlen: 24
37.152.170.0/24 maxlen: 24
37.152.171.0/24 maxlen: 24
37.152.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ef:9d:a2:13:b3:e9:6a:f1:c4:c1:3a:3b:a4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf56134a63941dd92d16a159fa123bb7a58dd9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:15:b1:f9:64:2e:16:12:73:cb:b2:5a:b4:
e8:9a:9b:41:c2:57:a1:2a:9e:7a:17:ee:92:6b:7e:
17:c3:0f:7a:1f:ac:b1:48:42:06:ba:15:7d:9b:b2:
f2:49:05:34:60:63:15:ce:78:96:90:1b:c5:cb:04:
2b:32:80:d6:3a:99:2b:9c:33:d3:a9:a7:4b:59:e0:
ff:5a:b5:a5:9c:1d:3c:db:c2:7b:ba:b7:aa:39:54:
cc:22:b0:35:b4:73:f0:16:59:c0:c2:39:4b:66:2a:
14:81:70:ab:be:cd:10:eb:c9:bb:85:03:f9:54:a7:
7c:08:0e:b8:4c:dd:be:1f:f1:86:41:1f:20:b2:a0:
b4:80:9d:5c:e9:a5:bd:8e:6c:d6:9e:15:12:c6:2d:
22:fb:11:23:d4:17:29:e5:6e:fb:ea:1c:86:77:18:
e8:52:cd:e9:02:a0:3f:1e:0a:f3:8c:87:23:7e:44:
66:ca:a9:a2:1d:a3:3d:d0:ac:34:cd:50:95:0d:6d:
4f:34:f6:ed:dc:6a:66:0f:e4:55:58:8b:4a:1e:71:
9e:e7:9e:ba:3c:76:d5:65:9a:ce:89:a4:9e:8e:63:
b0:2d:46:10:59:51:30:92:15:e7:f7:95:cb:48:74:
c2:85:e7:78:d1:83:27:61:53:af:38:67:a1:05:2e:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:13:4A:63:94:1D:D9:2D:16:A1:59:FA:12:3B:B7:A5:8D:D9:F5
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.160.0-37.152.164.255
37.152.167.0-37.152.172.255
Signature Algorithm: sha256WithRSAEncryption
1a:f9:9e:66:df:89:38:09:53:d3:14:76:35:fc:02:c9:86:52:
51:0d:b5:b9:21:b0:e7:a8:45:f5:9b:fe:f4:4c:09:5c:b8:79:
ea:04:10:01:96:70:2e:57:d4:b7:1d:19:19:b6:20:40:8e:5e:
29:b1:71:02:f2:cb:b2:c3:0e:98:f7:04:41:08:b2:dd:3f:2e:
d1:4c:96:61:67:60:e8:2b:fd:5a:d1:3c:0a:ed:d1:35:63:2e:
3d:ec:0d:55:17:fa:8b:fc:17:60:bc:03:82:eb:45:17:99:e3:
ba:78:24:c2:03:7f:d5:50:0b:1b:52:8b:53:e2:a3:92:f3:33:
57:ed:e7:11:3e:75:fe:82:f1:83:f0:35:20:d2:4a:be:24:73:
02:7f:c5:04:b9:85:33:a6:07:48:83:3e:65:9c:94:fb:dd:68:
d7:b6:09:70:db:76:34:ca:a1:59:fc:61:9b:44:b1:f4:fc:8c:
f0:99:8e:61:b4:90:d2:fc:39:5b:ad:4c:da:01:bb:0a:7f:db:
49:48:b7:78:99:53:20:d6:f6:c0:1a:7b:cd:8c:92:04:09:eb:
41:e9:28:10:32:8e:8d:b3:18:6d:83:d5:b2:4d:42:82:b5:22:
71:a4:23:30:92:05:20:cb:55:53:6e:32:32:7a:5f:26:e5:9b:
7f:68:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:33:42 2025 by rpki-client