Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/G04lQHkrBdpuXzaWHZ8TU8JabhU.roa
File: G04lQHkrBdpuXzaWHZ8TU8JabhU.roa (raw, json)
Hash identifier: Pf3n2aY4cgJyph0KOBPCn/jMgorMxrNstlYjIBjVB/Q=
Subject key identifier: 1B:4E:25:40:79:2B:05:DA:6E:5F:36:96:1D:9F:13:53:C2:5A:6E:15
Certificate issuer: /CN=c037958083b641b773123ceada7bef27558e5940
Certificate serial: 019428279961882E614309DB78C93922BFAA
Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/G04lQHkrBdpuXzaWHZ8TU8JabhU.roa
Signing time: Thu 02 Jan 2025 17:54:31 +0000
ROA not before: Thu 02 Jan 2025 17:54:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25435
IP address blocks: 62.121.192.0/20 maxlen: 24
62.121.192.0/24 maxlen: 24
62.121.193.0/24 maxlen: 24
62.121.194.0/24 maxlen: 24
62.121.195.0/24 maxlen: 24
62.121.196.0/24 maxlen: 24
62.121.197.0/24 maxlen: 24
62.121.198.0/24 maxlen: 24
62.121.199.0/24 maxlen: 24
62.121.200.0/24 maxlen: 24
62.121.201.0/24 maxlen: 24
62.121.202.0/24 maxlen: 24
62.121.203.0/24 maxlen: 24
62.121.204.0/24 maxlen: 24
62.121.205.0/24 maxlen: 24
62.121.206.0/24 maxlen: 24
62.121.207.0/24 maxlen: 24
62.121.208.0/24 maxlen: 24
62.121.209.0/24 maxlen: 24
62.121.210.0/24 maxlen: 24
62.121.211.0/24 maxlen: 24
62.121.212.0/24 maxlen: 24
62.121.213.0/24 maxlen: 24
62.121.214.0/24 maxlen: 24
62.121.215.0/24 maxlen: 24
62.121.216.0/24 maxlen: 24
62.121.217.0/24 maxlen: 24
62.121.218.0/24 maxlen: 24
62.121.219.0/24 maxlen: 24
62.121.220.0/24 maxlen: 24
62.121.221.0/24 maxlen: 24
62.121.222.0/24 maxlen: 24
62.121.223.0/24 maxlen: 24
62.121.224.0/24 maxlen: 24
62.121.225.0/24 maxlen: 24
62.121.226.0/24 maxlen: 24
62.121.227.0/24 maxlen: 24
62.121.228.0/24 maxlen: 24
62.121.229.0/24 maxlen: 24
62.121.230.0/24 maxlen: 24
62.121.231.0/24 maxlen: 24
62.121.232.0/24 maxlen: 24
62.121.233.0/24 maxlen: 24
62.121.234.0/24 maxlen: 24
62.121.235.0/24 maxlen: 24
62.121.236.0/24 maxlen: 24
62.121.237.0/24 maxlen: 24
62.121.238.0/24 maxlen: 24
62.121.239.0/24 maxlen: 24
62.121.240.0/24 maxlen: 24
62.121.241.0/24 maxlen: 24
62.121.242.0/24 maxlen: 24
62.121.243.0/24 maxlen: 24
62.121.244.0/24 maxlen: 24
62.121.245.0/24 maxlen: 24
62.121.246.0/24 maxlen: 24
62.121.247.0/24 maxlen: 24
62.121.248.0/24 maxlen: 24
62.121.249.0/24 maxlen: 24
62.121.250.0/24 maxlen: 24
62.121.251.0/24 maxlen: 24
62.121.252.0/24 maxlen: 24
62.121.253.0/24 maxlen: 24
62.121.254.0/24 maxlen: 24
62.121.255.0/24 maxlen: 24
185.166.192.0/24 maxlen: 24
185.166.193.0/24 maxlen: 24
185.166.194.0/24 maxlen: 24
185.166.195.0/24 maxlen: 24
2a07:2d40::/29 maxlen: 29
2a07:2d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:99:61:88:2e:61:43:09:db:78:c9:39:22:bf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c037958083b641b773123ceada7bef27558e5940
Validity
Not Before: Jan 2 17:54:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4e2540792b05da6e5f36961d9f1353c25a6e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:32:cf:3d:ed:c2:86:63:dc:10:39:5e:5a:
d1:f5:5d:4c:ac:5c:9a:a4:f0:66:5e:cf:f4:4d:ed:
81:76:8d:cc:a0:8e:99:86:3d:c6:ef:71:49:61:e4:
16:56:eb:7c:b4:d8:6c:c2:46:db:4b:97:ce:cd:92:
6c:0c:f8:53:d5:83:8c:07:83:08:e5:c4:75:82:bc:
55:dd:99:f3:d6:9c:cc:b1:df:32:6c:5d:8b:db:ab:
fc:51:a2:40:48:61:dc:e5:7c:d6:5e:01:68:49:6b:
ce:b6:d2:4c:07:57:fe:9b:89:24:28:ec:56:ef:60:
79:44:ae:7d:a5:7c:37:ab:5d:24:aa:d6:c6:d1:fa:
55:2e:43:78:ba:f0:a7:3c:5c:61:d2:08:bd:6c:36:
b4:11:59:e1:db:3d:09:9a:1c:74:1b:3d:4e:79:cb:
17:78:9b:a9:95:2e:f8:ed:6c:2b:c7:8f:7a:69:50:
ea:32:42:5c:d6:37:16:d5:78:55:35:b3:05:d6:3d:
2e:b4:c9:ae:2a:15:c7:3b:80:67:af:9a:76:c5:bc:
d4:9b:de:d3:f2:f7:63:dd:9c:d5:73:63:4d:5b:a3:
d7:c2:1a:ce:f3:48:f2:26:b2:56:e3:50:e9:87:3a:
85:3b:d0:b1:7b:6b:80:f0:a7:82:34:7a:90:06:09:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:25:40:79:2B:05:DA:6E:5F:36:96:1D:9F:13:53:C2:5A:6E:15
X509v3 Authority Key Identifier:
keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/G04lQHkrBdpuXzaWHZ8TU8JabhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.192.0/18
185.166.192.0/22
IPv6:
2a07:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
32:51:81:f9:d6:dd:36:05:02:e0:b1:da:d9:0d:24:77:f1:10:
38:de:88:33:d9:33:2c:d4:cc:a2:dd:c7:51:e1:2e:13:c6:9e:
d4:da:5e:61:c9:ca:1d:98:c8:69:71:b8:a1:68:7f:89:91:53:
8d:16:49:76:e3:0a:65:cf:95:b6:ba:f3:27:12:16:3d:4b:0e:
d9:3e:58:82:45:1b:6a:21:3a:6c:d6:54:28:f7:9f:bc:0c:b4:
e4:2f:c8:1f:e1:28:5c:95:b8:3c:19:41:3e:01:58:19:93:18:
55:d2:e9:03:b8:71:5a:58:16:75:19:e1:47:10:85:87:c8:c2:
f5:9d:4b:23:14:bf:38:fd:d1:24:4c:53:bd:16:ce:d4:b4:d5:
c6:64:22:e5:ea:3d:c4:65:4e:c4:8c:01:3b:a6:6e:0e:81:92:
87:e5:57:0d:f9:dc:a0:b6:ce:ed:a7:19:99:ce:38:94:c2:13:
a2:95:ef:64:84:c6:00:43:fb:60:a9:93:04:6a:31:b1:2c:f5:
1c:df:a9:92:1f:37:34:13:3a:30:72:6c:0d:f9:f9:b9:ec:82:
dc:fa:18:cc:f0:59:3a:3c:9c:4a:76:90:70:09:8b:86:9e:96:
69:0e:9e:5d:37:fe:b2:b0:54:db:50:03:b3:b8:98:13:9d:c0:
c3:70:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:29:12 2025 by rpki-client