Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/7qgBk_4RUI1MPuqUIAwp1I5WNpI.roa
File: 7qgBk_4RUI1MPuqUIAwp1I5WNpI.roa (raw, json)
Hash identifier: CqCYQkxSgRHLg2aJogxlDFvCDM48HenYHcuqXlXw1zo=
Subject key identifier: EE:A8:01:93:FE:11:50:8D:4C:3E:EA:94:20:0C:29:D4:8E:56:36:92
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 0196913F5B98FF267AB098E4D173CC5B8CF1
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/7qgBk_4RUI1MPuqUIAwp1I5WNpI.roa
Signing time: Fri 02 May 2025 13:46:10 +0000
ROA not before: Fri 02 May 2025 13:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.117.52.0/24 maxlen: 24
45.117.54.0/24 maxlen: 24
45.123.144.0/24 maxlen: 24
103.4.248.0/24 maxlen: 24
103.4.249.0/24 maxlen: 24
103.4.250.0/24 maxlen: 24
103.4.251.0/24 maxlen: 24
103.49.152.0/23 maxlen: 23
103.49.155.0/24 maxlen: 24
103.196.8.0/24 maxlen: 24
103.196.9.0/24 maxlen: 24
103.216.0.0/24 maxlen: 24
103.216.1.0/24 maxlen: 24
103.216.2.0/24 maxlen: 24
103.216.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:3f:5b:98:ff:26:7a:b0:98:e4:d1:73:cc:5b:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 2 13:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea80193fe11508d4c3eea94200c29d48e563692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:43:60:14:25:94:bb:36:e6:0f:b9:b4:86:
4c:53:f4:08:b0:e5:f3:1a:df:9b:6f:70:38:fa:81:
b0:15:8e:5d:6a:a8:cb:5f:fd:5d:3f:26:36:88:1e:
b4:65:a4:52:5e:d5:17:f3:30:79:f2:6f:0d:a7:38:
ad:8b:e1:63:f6:64:08:7d:f0:74:52:fd:7a:0c:72:
e8:7b:44:e6:22:7c:16:7e:b5:21:bc:a1:9b:3b:c8:
77:43:d1:0e:96:a7:a6:44:29:81:23:d1:29:c2:2d:
dd:f0:55:88:ec:e9:1f:d7:28:2a:11:ee:82:d2:7f:
a1:e4:4b:58:3e:96:07:d4:a1:d4:12:64:e8:e1:f5:
ff:84:9a:ba:45:40:d0:9a:5d:fb:65:13:2d:8f:96:
6c:8a:ee:9f:c9:29:d4:5c:9c:3c:a8:0d:f9:eb:e3:
9a:b0:df:72:98:1c:60:95:1d:73:8d:d0:d1:b3:4c:
d8:51:8c:0f:10:e8:99:ba:88:2f:0d:4b:79:4f:2a:
56:5b:02:8c:8f:29:d5:f2:60:ca:7b:fb:12:29:46:
60:5b:54:a0:84:e2:b3:58:93:a5:2b:07:56:75:45:
8e:0a:1d:01:c8:a7:59:74:61:e9:90:3a:e3:78:b1:
18:2b:67:cf:9c:7b:a2:c3:a4:f9:35:9e:0f:9c:76:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:01:93:FE:11:50:8D:4C:3E:EA:94:20:0C:29:D4:8E:56:36:92
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/7qgBk_4RUI1MPuqUIAwp1I5WNpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.52.0/24
45.117.54.0/24
45.123.144.0/24
103.4.248.0/22
103.49.152.0/23
103.49.155.0/24
103.196.8.0/23
103.216.0.0/22
Signature Algorithm: sha256WithRSAEncryption
47:7d:83:d7:c3:af:ef:75:eb:e6:03:6e:f0:ed:2d:42:fd:1f:
d6:79:08:b2:30:f6:bd:a4:fa:35:77:ee:fe:6b:02:d6:94:06:
6d:63:5d:b6:83:69:9e:43:a8:a1:50:67:bb:61:b5:bf:73:67:
ce:01:d7:c0:48:20:d4:c9:25:40:a8:d1:e5:44:33:23:74:17:
46:d6:77:5e:9b:44:da:1c:f4:7d:de:0a:d3:a4:3f:4d:c7:2a:
d9:de:23:6d:01:4a:9c:f0:1e:02:ba:bf:08:a0:a4:cb:b6:17:
5a:66:02:95:ea:b7:fb:75:64:12:e0:f6:1f:e8:5b:48:e2:db:
6f:f7:5c:cd:8a:c3:93:62:95:28:63:a4:7d:66:86:5c:bb:84:
16:31:f3:1e:d9:b5:8e:af:2b:58:cc:4c:5b:cc:44:24:a7:d4:
96:50:42:73:04:33:94:df:f3:c3:9d:05:6a:31:b8:0b:19:24:
08:6e:34:d7:a6:61:ee:d9:9c:02:0b:24:b5:bf:5d:59:c2:e9:
51:72:0b:bb:5e:4d:e2:8b:ed:3b:c6:f8:9c:65:bf:86:4d:97:
c5:6a:7c:aa:fe:61:03:b5:3f:0c:40:a3:a3:68:9a:b4:92:f4:
0f:02:f6:d0:68:59:bd:c1:98:9e:60:48:c4:57:81:23:e0:6a:
8c:eb:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:38:31 2025 by rpki-client