Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/F8CkVi3Azk4IP8l0xbj9A7utWT4.roa
File: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (raw, json)
Hash identifier: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=
Subject key identifier: 17:C0:A4:56:2D:C0:CE:4E:08:3F:C9:74:C5:B8:FD:03:BB:AD:59:3E
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0196B2DC64D8CF0F296F678274A73143A300
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/F8CkVi3Azk4IP8l0xbj9A7utWT4.roa
Signing time: Fri 09 May 2025 02:25:10 +0000
ROA not before: Fri 09 May 2025 02:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48093
IP address blocks: 37.26.152.0/21 maxlen: 21
37.26.152.0/22 maxlen: 22
37.26.156.0/23 maxlen: 23
37.26.158.0/23 maxlen: 23
91.207.112.0/23 maxlen: 23
2a03:28e0::/29 maxlen: 29
2a03:28e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:dc:64:d8:cf:0f:29:6f:67:82:74:a7:31:43:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: May 9 02:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17c0a4562dc0ce4e083fc974c5b8fd03bbad593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:cc:6f:01:ec:f3:e9:8c:7c:f0:b7:bc:34:
92:0e:93:92:c1:7d:0f:cd:59:3b:ef:92:de:7d:c1:
1f:55:00:ef:a9:65:54:42:ad:6e:8f:c7:32:e4:f7:
82:68:e1:29:42:07:3b:55:f3:cf:22:28:31:b5:fa:
b2:2d:a4:7c:d5:90:b6:d7:72:18:e9:f7:d7:b9:d2:
9e:22:d1:35:b6:02:57:60:32:92:52:e9:65:35:1c:
d3:55:cf:e6:aa:39:00:bb:35:01:14:59:58:2d:13:
7a:70:fb:66:e2:ee:bb:5a:d7:b8:bf:12:6e:a3:ed:
de:72:21:af:16:0d:d1:90:df:c7:02:62:b3:b7:6d:
ea:7f:52:af:83:0d:f8:ab:80:bb:06:c0:5e:60:17:
a8:a9:33:0b:32:bf:e3:66:ca:a4:7e:74:27:45:3c:
e0:c4:cc:db:c5:6a:a4:d0:b9:41:ad:a6:77:9c:43:
98:3d:54:0e:61:ba:6a:c5:d0:28:d6:2b:98:08:5b:
6c:06:51:d0:54:11:cc:b2:e9:80:28:42:21:d3:e5:
a2:1f:95:97:30:51:20:4e:49:c5:ba:ae:83:63:b0:
ea:76:d9:1c:89:2f:88:ed:99:0b:c9:aa:80:fa:d6:
3e:b2:90:d2:39:f6:52:a7:99:11:c6:6a:a2:ef:6a:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:A4:56:2D:C0:CE:4E:08:3F:C9:74:C5:B8:FD:03:BB:AD:59:3E
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/F8CkVi3Azk4IP8l0xbj9A7utWT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.152.0/21
91.207.112.0/23
IPv6:
2a03:28e0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:75:dd:7e:2d:9d:38:d2:13:5c:8e:21:6c:82:df:6c:88:fb:
57:f0:a4:a2:4f:15:dd:68:cf:1d:92:4f:b2:b8:2c:73:f5:46:
cd:ed:a6:51:b5:eb:3a:03:aa:63:50:0d:f8:98:4f:fc:71:8e:
79:75:9f:4a:b3:a1:4b:4a:17:75:6e:37:3a:42:67:d3:6a:44:
c1:66:dd:2f:38:4e:a5:be:f2:cc:47:a9:8b:31:3c:f8:e7:ba:
c3:1f:90:08:29:c8:d5:50:cc:00:39:0e:a6:8d:be:71:79:a3:
ff:8d:46:cb:f6:ce:d3:93:34:ce:06:bb:90:98:73:b2:7e:c4:
d3:f3:fe:80:be:1d:d4:95:f5:8d:d4:88:a3:f8:e4:61:c9:79:
19:cf:7d:28:24:60:d4:e4:4b:aa:41:a1:4d:9a:24:9e:25:90:
7a:3d:84:00:33:86:2a:11:5e:fe:81:ad:a9:57:50:96:73:17:
60:bf:b8:8e:d3:91:d9:94:82:be:46:52:87:22:d4:5b:34:fc:
7f:32:7f:6d:18:68:1d:79:7e:cb:6c:c4:ab:9a:72:39:29:f0:
39:1d:61:28:c4:6b:f4:d0:2d:31:6b:f7:da:09:33:ec:9f:fc:
63:9d:fa:9f:0e:8a:66:bf:75:42:04:48:74:f2:60:87:37:3a:
a5:fa:e6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:21:29 2025 by rpki-client