Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/8uredMj8h3YjqCz_3qhRUfcmpH8.roa
File: 8uredMj8h3YjqCz_3qhRUfcmpH8.roa (raw, json)
Hash identifier: 1sowdSGLgJiTPdLnVohTfhP5Vbailn5G+CpDuDGgJG8=
Subject key identifier: F2:EA:DE:74:C8:FC:87:76:23:A8:2C:FF:DE:A8:51:51:F7:26:A4:7F
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0196A5D85C5C265111F1B2D0A5066BBEEF17
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/8uredMj8h3YjqCz_3qhRUfcmpH8.roa
Signing time: Tue 06 May 2025 13:45:42 +0000
ROA not before: Tue 06 May 2025 13:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.21.0/24 maxlen: 24
94.131.22.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
2a01:d0::/29 maxlen: 48
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:d8:5c:5c:26:51:11:f1:b2:d0:a5:06:6b:be:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: May 6 13:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2eade74c8fc877623a82cffdea85151f726a47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:2d:3f:d1:ad:58:ff:4f:25:49:c3:45:08:
26:f2:c5:5a:1a:c5:2e:77:ae:b1:88:2c:8c:85:fa:
4f:fb:ae:b7:0c:cd:d2:3c:54:a9:1e:0f:6c:41:b1:
2d:7d:5e:20:97:02:08:9d:ef:b4:a0:85:17:8d:0a:
fa:43:47:7a:4e:86:32:bd:ff:9b:8f:bd:3c:75:cb:
64:49:8e:91:3c:d0:69:a0:3e:7b:ba:34:d3:8d:20:
79:40:b0:5d:d9:e2:52:df:f6:93:e1:d9:18:f4:1e:
7a:1c:bd:77:3d:d1:dd:bd:1e:78:bc:69:66:ee:b8:
ba:ae:d5:ea:1a:c4:41:e9:51:d6:f7:6c:b4:7b:9d:
0a:5d:88:b7:52:49:35:3e:46:8b:82:52:ca:29:ea:
c2:90:07:da:eb:4e:aa:00:6f:c7:58:92:ee:eb:15:
c0:93:ac:84:59:d9:fc:93:93:c5:31:ca:00:ce:9e:
d6:36:e1:15:82:73:69:b8:b2:b9:5a:64:45:11:bd:
3a:f2:cd:14:0a:67:8d:9b:85:1b:89:d2:67:a4:06:
4f:ed:71:ed:e6:aa:0b:9d:5f:ad:66:a5:a0:a0:cd:
49:d0:95:e8:f2:22:36:26:51:2c:98:20:74:c2:e7:
4a:6a:d4:e1:54:e0:c7:75:f7:24:52:44:11:39:ce:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:DE:74:C8:FC:87:76:23:A8:2C:FF:DE:A8:51:51:F7:26:A4:7F
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/8uredMj8h3YjqCz_3qhRUfcmpH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.21.0-94.131.22.255
94.131.124.0/24
94.131.127.0/24
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.120.0/22
95.164.170.0-95.164.175.255
195.214.212.0/22
IPv6:
2a01:d0::/29
Signature Algorithm: sha256WithRSAEncryption
44:5f:7f:bd:53:db:2c:26:6b:66:3b:08:61:c8:b6:52:3f:81:
34:8f:3d:ad:76:5e:0d:3d:39:17:62:f3:7d:c6:f7:76:ee:3a:
ca:47:5c:d9:3a:40:10:52:fe:3e:a8:11:e2:79:a1:4b:21:04:
cb:2f:b1:ed:2c:41:82:f4:69:17:4b:36:8e:04:da:e1:33:31:
92:8b:a4:ed:89:70:b9:a6:36:d5:64:46:eb:68:6c:91:f5:ba:
27:83:7c:75:66:c4:c7:cd:0a:b1:55:02:3e:d3:41:84:5d:4c:
a9:7d:1f:20:e5:c2:2a:7f:ad:41:79:28:31:7c:80:45:8f:66:
4e:8e:64:20:6e:9b:e5:77:f3:62:cf:99:38:de:71:21:9c:38:
3f:63:f6:2a:43:30:2f:27:f7:fc:bc:30:87:d0:7f:73:50:a1:
b3:df:cb:2f:60:36:fc:98:86:1c:8b:6d:9a:35:7b:dd:5d:a7:
b1:be:cf:d8:69:e4:69:38:77:f7:1e:d2:86:0e:59:42:94:68:
51:50:00:5f:b5:a2:d5:cb:ed:c0:1b:fc:7e:0e:c1:a9:d2:7d:
be:0f:27:9a:fd:2f:3b:16:33:8e:b5:a8:ba:6a:62:17:12:0d:
45:e5:02:23:d9:72:e8:21:b0:c6:51:62:a7:7d:09:8a:78:99:
45:42:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:44 2025 by rpki-client