Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/49Fsu12Fj492gJ1KszGOf97nJnI.roa
File: 49Fsu12Fj492gJ1KszGOf97nJnI.roa (raw, json)
Hash identifier: oKBHLdbt+fBL0mLzOJpTeuV/P3L3pNbkJdk4d/MuTbw=
Subject key identifier: E3:D1:6C:BB:5D:85:8F:8F:76:80:9D:4A:B3:31:8E:7F:DE:E7:26:72
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01965CC2295724D8006B07CBF3A42E011D0E
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/49Fsu12Fj492gJ1KszGOf97nJnI.roa
Signing time: Tue 22 Apr 2025 09:09:10 +0000
ROA not before: Tue 22 Apr 2025 09:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215597
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
212.95.142.0/24 maxlen: 24
212.95.148.0/24 maxlen: 24
212.95.156.0/24 maxlen: 24
2a12:f680:200::/48 maxlen: 48
2a12:f680:201::/48 maxlen: 48
2a12:f680:204::/48 maxlen: 48
2a12:f680:205::/48 maxlen: 48
2a12:f680:206::/48 maxlen: 48
2a12:f680:600::/48 maxlen: 48
2a12:f680:601::/48 maxlen: 48
2a12:f680:604::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:c2:29:57:24:d8:00:6b:07:cb:f3:a4:2e:01:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Apr 22 09:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3d16cbb5d858f8f76809d4ab3318e7fdee72672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:14:f8:29:7b:19:b1:31:d9:20:9e:a0:20:
d1:ad:ee:67:34:e6:00:9c:e7:3f:6d:1d:95:00:f3:
7a:75:45:14:be:2c:9c:b3:1e:a8:ab:10:3c:f5:f7:
08:f9:5e:6f:98:cf:9a:a2:df:bd:74:23:ff:28:ab:
dc:31:3a:27:c6:ff:e6:57:39:ba:47:72:29:46:b0:
2e:b1:8f:23:20:75:ac:32:c0:3e:44:4c:ce:ae:c2:
24:8f:36:7f:17:60:92:96:cb:bb:2b:7e:8c:0d:59:
d0:58:54:19:a6:b3:6a:a3:6f:9d:24:1b:35:d4:1a:
be:11:84:42:7d:95:e9:52:05:ad:77:c6:4c:b3:1f:
21:b6:cd:81:89:91:ad:7a:4a:d0:a1:be:e0:a6:0f:
5c:3c:e5:d4:5e:c7:a3:54:a6:15:b3:2f:c4:08:c1:
f9:53:e8:51:b9:d1:68:20:ed:19:36:c0:4b:1c:0a:
73:7a:21:f4:f0:4c:14:d9:29:ac:31:47:45:9b:0d:
4c:75:00:b4:bd:1f:65:4d:7e:55:84:17:61:49:50:
3f:2c:91:68:97:fe:72:27:3a:f2:4e:87:9d:0b:f2:
85:01:31:f7:f7:b6:97:e6:f0:ec:b4:c3:c2:b3:36:
57:f2:e1:94:19:31:21:51:ee:fc:a3:bd:fa:e3:ac:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:6C:BB:5D:85:8F:8F:76:80:9D:4A:B3:31:8E:7F:DE:E7:26:72
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/49Fsu12Fj492gJ1KszGOf97nJnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/23
82.199.222.0/23
91.213.191.0/24
91.217.185.0/24
185.95.206.0/23
212.95.142.0/24
212.95.148.0/24
212.95.156.0/24
IPv6:
2a12:f680:200::/47
2a12:f680:204::-2a12:f680:206:ffff:ffff:ffff:ffff:ffff
2a12:f680:600::/47
2a12:f680:604::/48
Signature Algorithm: sha256WithRSAEncryption
9e:33:fc:6a:4e:74:11:c7:1c:90:49:cc:03:6b:95:fa:2f:4f:
d3:58:7d:22:ad:9c:80:c2:a6:ef:ee:30:f5:cd:06:69:e6:ec:
7f:44:9f:58:17:d6:53:a5:97:35:82:54:f4:bd:b2:2e:a2:39:
e1:a1:78:67:33:93:3e:94:62:a9:8b:6e:43:f9:de:82:2d:b5:
91:25:02:5b:5d:77:af:f2:1a:e3:e3:e4:7e:32:ad:8e:42:86:
bd:cd:ee:47:1a:86:93:b8:37:60:82:58:c1:fc:9b:7d:32:37:
7e:fd:c6:bd:c5:a9:c7:90:85:d3:97:36:d0:4d:ef:4f:9f:f7:
28:f2:0d:b7:22:b9:97:ee:72:27:b6:fc:56:b7:12:c0:8b:f4:
31:be:75:b1:83:b3:77:ad:52:9d:5c:b7:70:d6:fb:4a:f2:7b:
36:e2:21:ce:8f:e1:43:14:4d:b5:b0:66:58:37:9f:49:1e:03:
40:2d:4a:bc:e7:3c:24:01:71:27:3f:f7:00:e4:7c:c1:2b:ee:
6b:ee:04:bd:d3:50:f0:5d:f0:fe:d7:51:cd:e4:3e:f2:d0:32:
d9:c4:84:bc:eb:af:ad:02:c0:bf:31:13:86:63:69:fc:5f:e9:
53:4b:53:64:71:bd:72:ed:54:fa:45:63:27:87:c4:b3:e4:e6:
d9:53:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:18:27 2025 by rpki-client