Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/T2NYSsfGqFnffI0f8jKLnjwwKg8.roa
File: T2NYSsfGqFnffI0f8jKLnjwwKg8.roa (raw, json)
Hash identifier: PPdslMwMywcJMnSaDihwFRfEbRYFLGQfPyojh5iF6/8=
Subject key identifier: 4F:63:58:4A:C7:C6:A8:59:DF:7C:8D:1F:F2:32:8B:9E:3C:30:2A:0F
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01968165BC271B62FD842DD52D611D36BDB2
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/T2NYSsfGqFnffI0f8jKLnjwwKg8.roa
Signing time: Tue 29 Apr 2025 11:54:10 +0000
ROA not before: Tue 29 Apr 2025 11:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:65:bc:27:1b:62:fd:84:2d:d5:2d:61:1d:36:bd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Apr 29 11:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f63584ac7c6a859df7c8d1ff2328b9e3c302a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:b8:f6:66:f4:d5:81:a5:c1:4c:d6:39:f5:
fd:63:59:79:00:80:e1:5d:76:f0:7d:e9:93:e1:be:
42:45:36:fa:90:c5:9e:df:22:cc:b0:a2:af:e9:92:
27:d9:21:70:7b:33:bc:07:6c:66:0a:a8:07:9a:a2:
b5:6c:53:de:4c:4e:87:6d:97:e0:a9:24:f3:04:52:
29:0e:cc:e2:d7:e9:20:f1:55:2a:8c:dc:cc:ea:10:
16:a6:90:ea:ba:a4:49:fb:40:c8:81:d4:3a:88:63:
d1:cb:1e:7a:f7:ef:38:9f:1b:27:ec:83:a8:20:a6:
ca:7b:e9:f2:b9:57:b3:19:d7:25:a2:7c:d7:f6:93:
40:84:b2:32:81:49:b9:27:ff:b2:6b:61:ff:d0:3b:
73:43:95:32:dc:c2:55:ce:75:94:3f:5e:7e:f5:4c:
c9:1f:09:de:ac:20:d6:99:c6:33:c4:67:d2:b4:fb:
6f:34:6b:37:45:76:9d:a2:1e:bc:26:59:b0:c0:04:
d4:39:0e:8f:82:82:d5:d2:2e:95:76:2d:df:f4:09:
b3:86:7e:a2:93:15:35:d6:11:02:0c:83:18:97:de:
c4:a7:e3:75:56:04:e3:63:e6:40:88:bb:2a:d8:5c:
cd:94:7a:b6:b8:52:f8:e9:52:52:ac:d3:76:94:f1:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:58:4A:C7:C6:A8:59:DF:7C:8D:1F:F2:32:8B:9E:3C:30:2A:0F
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/T2NYSsfGqFnffI0f8jKLnjwwKg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.8.0-31.97.71.255
69.62.64.0/18
103.199.184.0/22
148.222.52.0/24
148.222.54.0/23
168.231.64.0/18
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:8e:b6:f1:2d:98:73:aa:81:de:34:ef:db:1d:13:52:ce:bd:
69:4a:1a:82:d6:fa:37:f9:42:39:39:da:00:0d:b9:f1:b2:c0:
5d:6f:61:48:1c:b7:0c:f6:64:75:cc:0a:31:ec:65:b4:3a:6d:
0d:40:9a:a0:f8:9e:c7:00:14:d0:11:75:07:51:98:87:ee:ba:
c9:1c:89:d8:74:e6:2c:8e:87:1d:dd:37:eb:1a:c0:a2:a6:17:
3d:84:b5:4e:4b:1a:c4:82:67:83:d1:99:50:75:20:e9:5a:29:
3f:e3:4f:f9:82:c6:19:12:4d:c8:de:ae:54:92:4c:e1:25:bd:
3b:5a:04:17:e7:65:df:7a:f8:2d:9f:dc:37:07:12:75:94:56:
d8:f5:b3:b6:77:50:70:ca:28:08:83:a0:c1:30:3d:3e:fc:1b:
2d:da:0e:06:f3:bf:ac:d9:08:ca:35:84:f7:c6:2c:9c:18:96:
c2:06:c6:05:f7:05:64:fd:a5:03:35:e1:82:bd:0c:e3:c8:e2:
f0:7a:31:07:f8:3e:20:5d:64:ab:be:dc:f9:89:c6:66:91:a0:
f8:c4:4d:01:d7:2a:a7:e1:a7:68:30:80:da:70:47:a1:9e:9e:
7f:ba:a6:80:1f:8a:0e:25:79:cc:bd:48:18:69:4d:95:8c:1f:
c5:f4:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:37:28 2025 by rpki-client