Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/lIuOj0AnftPW8n1hGje2-_p95sU.roa
File: lIuOj0AnftPW8n1hGje2-_p95sU.roa (raw, json)
Hash identifier: GQvUoJQQ5KD124Ec+QFcU1fE8s5FkdB2MthVeKXOr7Y=
Subject key identifier: 94:8B:8E:8F:40:27:7E:D3:D6:F2:7D:61:1A:37:B6:FB:FA:7D:E6:C5
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 01946E2D3EEB669511BD9EA3AE46EEC2E956
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/lIuOj0AnftPW8n1hGje2-_p95sU.roa
Signing time: Thu 16 Jan 2025 08:14:06 +0000
ROA not before: Thu 16 Jan 2025 08:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 46.248.128.0/19 maxlen: 19
57.133.0.0/16 maxlen: 16
58.0.0.0/16 maxlen: 16
58.1.128.0/17 maxlen: 17
62.23.0.0/16 maxlen: 16
62.23.14.0/24 maxlen: 24
62.23.23.0/24 maxlen: 24
62.23.43.0/24 maxlen: 24
62.23.61.0/24 maxlen: 24
62.23.70.0/24 maxlen: 24
62.23.254.0/24 maxlen: 24
62.23.255.0/24 maxlen: 24
62.72.96.0/19 maxlen: 19
62.84.192.0/19 maxlen: 19
62.96.0.0/16 maxlen: 16
62.97.64.0/18 maxlen: 18
62.152.96.0/19 maxlen: 19
62.192.0.0/19 maxlen: 19
78.143.0.0/18 maxlen: 18
78.156.64.0/19 maxlen: 19
78.156.64.0/20 maxlen: 20
78.156.80.0/21 maxlen: 21
80.80.0.0/19 maxlen: 19
80.169.0.0/16 maxlen: 16
80.251.160.0/19 maxlen: 19
82.112.192.0/19 maxlen: 19
84.14.0.0/16 maxlen: 16
84.14.63.0/24 maxlen: 24
84.14.217.0/24 maxlen: 24
84.16.160.0/19 maxlen: 19
85.88.128.0/19 maxlen: 19
87.241.0.0/18 maxlen: 18
116.83.0.0/17 maxlen: 17
118.67.224.0/19 maxlen: 19
134.128.128.0/18 maxlen: 18
136.225.0.0/16 maxlen: 16
157.120.224.0/21 maxlen: 21
157.120.236.0/22 maxlen: 22
157.120.240.0/20 maxlen: 20
178.159.176.0/20 maxlen: 20
193.82.32.0/19 maxlen: 19
193.93.80.0/22 maxlen: 22
193.114.160.0/19 maxlen: 19
193.118.160.0/19 maxlen: 19
193.118.224.0/19 maxlen: 19
193.188.132.0/23 maxlen: 23
194.223.128.0/21 maxlen: 21
194.223.136.0/22 maxlen: 22
195.68.0.0/17 maxlen: 17
195.68.74.0/24 maxlen: 24
195.110.64.0/19 maxlen: 19
212.0.96.0/19 maxlen: 19
212.23.224.0/19 maxlen: 19
212.31.224.0/19 maxlen: 19
212.35.96.0/19 maxlen: 19
212.36.128.0/18 maxlen: 18
212.36.144.0/20 maxlen: 20
212.36.160.0/20 maxlen: 20
212.36.184.0/21 maxlen: 21
212.74.64.0/19 maxlen: 19
212.74.64.0/24 maxlen: 24
212.74.77.0/24 maxlen: 24
212.74.78.0/24 maxlen: 24
212.74.79.0/24 maxlen: 24
212.78.160.0/19 maxlen: 19
212.121.128.0/19 maxlen: 19
212.123.192.0/18 maxlen: 18
212.161.0.0/17 maxlen: 17
212.203.64.0/18 maxlen: 18
213.27.128.0/17 maxlen: 17
213.41.0.0/17 maxlen: 17
213.61.0.0/16 maxlen: 16
213.86.0.0/16 maxlen: 16
213.164.0.0/19 maxlen: 19
213.173.160.0/19 maxlen: 19
213.185.160.0/19 maxlen: 19
213.208.192.0/18 maxlen: 18
213.215.128.0/17 maxlen: 17
213.229.128.0/18 maxlen: 18
213.246.192.0/18 maxlen: 18
217.110.0.0/15 maxlen: 15
217.173.96.0/20 maxlen: 20
2001:920::/29 maxlen: 29
2001:920::/32 maxlen: 32
2001:921::/32 maxlen: 32
2001:924::/32 maxlen: 32
2001:925::/32 maxlen: 32
2001:926::/32 maxlen: 32
2001:926:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:2d:3e:eb:66:95:11:bd:9e:a3:ae:46:ee:c2:e9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 16 08:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948b8e8f40277ed3d6f27d611a37b6fbfa7de6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:f4:ba:d5:0a:f5:e9:40:c7:a1:0e:88:c1:
6f:b1:b5:93:60:10:f9:c3:cd:70:83:0e:99:40:99:
83:c7:eb:57:2a:43:1b:34:59:ad:02:82:1c:99:f0:
f5:44:3f:b0:e9:b3:98:c4:d2:33:4c:88:af:88:dc:
65:39:1d:32:ab:bd:f8:a6:48:44:c2:c6:c3:6c:de:
dc:93:55:77:c4:19:ac:64:f8:60:06:5e:ab:d9:b1:
6f:2c:e5:5f:d9:89:7b:73:15:26:ee:0c:11:f6:ff:
ab:b3:65:d2:c3:59:ac:43:72:d1:1c:79:27:6a:f0:
db:0f:39:72:38:72:17:1b:38:36:56:3d:b4:6c:07:
8d:f1:46:d9:3a:bb:e0:cc:a0:7b:53:63:23:06:04:
fe:b8:ea:e4:30:82:9d:15:30:a9:c3:1a:d4:9f:84:
57:a4:6a:87:e0:00:2c:cb:a1:70:e1:8a:0a:6a:de:
48:d6:a2:4e:cd:fc:4b:ed:33:c9:24:9f:07:b7:e6:
ce:21:f4:07:19:47:8f:8d:c1:e1:8b:63:3d:ae:68:
bd:e5:19:e1:8a:01:89:d1:fd:b3:70:9f:b9:a9:f2:
74:c0:b7:2d:31:87:bd:88:36:f5:0a:37:d4:80:22:
60:3d:e3:08:2c:7b:71:82:ba:03:18:21:73:e3:a5:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:8E:8F:40:27:7E:D3:D6:F2:7D:61:1A:37:B6:FB:FA:7D:E6:C5
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/lIuOj0AnftPW8n1hGje2-_p95sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.128.0/19
57.133.0.0/16
58.0.0.0/16
58.1.128.0/17
62.23.0.0/16
62.72.96.0/19
62.84.192.0/19
62.96.0.0/16
62.97.64.0/18
62.152.96.0/19
62.192.0.0/19
78.143.0.0/18
78.156.64.0/19
80.80.0.0/19
80.169.0.0/16
80.251.160.0/19
82.112.192.0/19
84.14.0.0/16
84.16.160.0/19
85.88.128.0/19
87.241.0.0/18
116.83.0.0/17
118.67.224.0/19
134.128.128.0/18
136.225.0.0/16
157.120.224.0/21
157.120.236.0-157.120.255.255
178.159.176.0/20
193.82.32.0/19
193.93.80.0/22
193.114.160.0/19
193.118.160.0/19
193.118.224.0/19
193.188.132.0/23
194.223.128.0-194.223.139.255
195.68.0.0/17
195.110.64.0/19
212.0.96.0/19
212.23.224.0/19
212.31.224.0/19
212.35.96.0/19
212.36.128.0/18
212.74.64.0/19
212.78.160.0/19
212.121.128.0/19
212.123.192.0/18
212.161.0.0/17
212.203.64.0/18
213.27.128.0/17
213.41.0.0/17
213.61.0.0/16
213.86.0.0/16
213.164.0.0/19
213.173.160.0/19
213.185.160.0/19
213.208.192.0/18
213.215.128.0/17
213.229.128.0/18
213.246.192.0/18
217.110.0.0/15
217.173.96.0/20
IPv6:
2001:920::/29
Signature Algorithm: sha256WithRSAEncryption
48:2b:7d:03:d5:ee:0e:6f:43:8a:d7:0d:2f:93:4a:f1:15:b2:
9b:b5:7d:f2:9a:40:cc:4a:65:ad:41:16:7d:26:ec:1e:1f:7a:
0f:ad:e9:c8:cd:8d:7a:29:ec:2e:fb:10:26:74:75:72:95:84:
54:4a:e2:61:f0:34:8e:ba:90:b2:1e:a4:5c:a7:87:f2:22:23:
23:f9:0a:62:13:2b:26:d9:2b:aa:21:35:e2:ee:35:5d:0e:ce:
34:99:38:07:d4:15:5e:da:c3:5b:38:13:6c:0c:09:27:8e:42:
96:4e:aa:97:ca:c9:dc:72:1d:74:d9:e0:68:80:32:ca:fa:58:
b8:f0:fa:d1:f4:7d:a6:f0:f1:fd:62:26:26:91:21:c2:ac:ac:
69:83:09:41:a3:9d:d1:8d:e9:4e:8f:cf:d4:d8:42:7e:41:81:
3a:67:45:d9:5d:12:15:9f:7c:2c:39:96:31:52:3a:45:1b:47:
96:42:f9:59:bd:61:ff:52:e5:3f:ca:11:02:67:30:c3:8e:c4:
18:6e:60:37:8a:07:82:28:19:7c:48:45:d2:b3:7d:ab:24:1c:
d4:91:1e:13:1b:41:9e:a2:45:96:f7:52:9d:3a:8b:68:0f:30:
0e:fb:7c:10:7f:8a:06:f9:ae:f0:ef:33:4d:6e:b8:70:19:9a:
cd:33:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:41:00 2025 by rpki-client