Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/j1WrlYRscIZD27IjahZqID9Q-WM.roa
File: j1WrlYRscIZD27IjahZqID9Q-WM.roa (raw, json)
Hash identifier: rSz+1Z/F2LUK8cf0wmW734xW09s0lP7giUJjaOCVZ/c=
Subject key identifier: 8F:55:AB:95:84:6C:70:86:43:DB:B2:23:6A:16:6A:20:3F:50:F9:63
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4719F2B25DC9DB6CAF090F189EF3
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/j1WrlYRscIZD27IjahZqID9Q-WM.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 5.158.208.0/21 maxlen: 21
5.158.208.0/23 maxlen: 24
5.158.210.0/24 maxlen: 24
5.158.211.0/24 maxlen: 24
5.158.212.0/24 maxlen: 24
5.158.214.0/24 maxlen: 24
5.158.215.0/24 maxlen: 24
62.73.160.0/19 maxlen: 19
62.73.160.0/24 maxlen: 29
62.73.161.0/24 maxlen: 24
62.73.162.0/23 maxlen: 23
62.73.165.0/24 maxlen: 29
62.73.166.0/24 maxlen: 29
62.73.167.0/24 maxlen: 24
62.73.168.0/24 maxlen: 24
62.73.169.0/24 maxlen: 30
62.73.170.0/24 maxlen: 29
62.73.171.0/24 maxlen: 24
62.73.172.0/23 maxlen: 23
62.73.174.0/24 maxlen: 24
62.73.175.0/24 maxlen: 29
62.73.176.0/23 maxlen: 23
62.73.178.0/24 maxlen: 29
62.73.179.0/24 maxlen: 29
62.73.180.0/24 maxlen: 24
62.73.181.0/24 maxlen: 24
62.73.182.0/24 maxlen: 24
62.73.183.0/24 maxlen: 29
62.73.184.0/24 maxlen: 29
62.73.185.0/24 maxlen: 24
62.73.188.0/24 maxlen: 29
62.73.189.0/24 maxlen: 29
62.73.191.0/24 maxlen: 24
81.19.96.0/20 maxlen: 20
81.20.64.0/20 maxlen: 20
81.20.66.0/25 maxlen: 25
81.20.70.128/25 maxlen: 25
81.25.192.0/20 maxlen: 20
81.93.176.0/20 maxlen: 20
81.93.176.0/24 maxlen: 24
81.93.178.0/23 maxlen: 23
81.93.180.0/24 maxlen: 24
81.93.181.0/27 maxlen: 27
81.93.182.0/24 maxlen: 24
81.93.183.0/24 maxlen: 24
81.93.185.128/26 maxlen: 26
81.93.185.192/27 maxlen: 27
81.93.185.224/28 maxlen: 28
81.93.186.0/23 maxlen: 23
81.93.188.0/24 maxlen: 24
81.93.189.0/24 maxlen: 24
81.93.190.0/24 maxlen: 24
81.93.208.0/20 maxlen: 20
81.93.208.64/27 maxlen: 27
81.93.208.96/27 maxlen: 27
82.112.96.0/19 maxlen: 19
82.112.98.0/27 maxlen: 27
82.112.99.0/24 maxlen: 24
82.112.100.0/24 maxlen: 24
82.112.101.16/28 maxlen: 28
82.112.101.128/26 maxlen: 26
82.112.101.192/29 maxlen: 29
82.112.101.224/27 maxlen: 27
82.112.102.0/27 maxlen: 27
82.112.102.32/29 maxlen: 29
82.112.102.40/29 maxlen: 29
82.112.102.48/28 maxlen: 28
82.112.102.64/27 maxlen: 27
82.112.102.96/28 maxlen: 28
82.112.102.120/29 maxlen: 29
82.112.102.128/26 maxlen: 26
82.112.102.192/26 maxlen: 26
82.112.103.0/24 maxlen: 24
82.112.104.0/27 maxlen: 27
82.112.104.32/27 maxlen: 27
82.112.104.64/26 maxlen: 26
82.112.104.128/25 maxlen: 25
82.112.105.0/24 maxlen: 24
82.112.107.24/30 maxlen: 30
82.112.107.28/30 maxlen: 30
82.112.107.32/30 maxlen: 30
82.112.107.36/30 maxlen: 30
82.112.107.40/30 maxlen: 30
82.112.107.112/28 maxlen: 28
82.112.108.0/23 maxlen: 23
82.112.110.0/23 maxlen: 24
82.112.112.0/23 maxlen: 24
82.112.114.0/24 maxlen: 24
82.112.116.0/23 maxlen: 24
82.112.120.0/23 maxlen: 24
82.112.123.64/28 maxlen: 28
82.112.123.208/28 maxlen: 28
82.112.124.0/23 maxlen: 24
82.112.126.0/24 maxlen: 24
82.112.127.0/24 maxlen: 24
83.217.224.0/19 maxlen: 19
83.217.224.0/23 maxlen: 23
83.217.228.0/23 maxlen: 24
83.217.230.0/24 maxlen: 24
83.217.234.0/23 maxlen: 24
83.217.236.0/23 maxlen: 24
83.217.237.32/28 maxlen: 28
83.217.239.0/27 maxlen: 27
83.217.239.32/27 maxlen: 27
83.217.239.64/26 maxlen: 26
83.217.239.128/28 maxlen: 28
83.217.240.0/24 maxlen: 24
83.217.241.0/27 maxlen: 27
83.217.241.128/25 maxlen: 25
83.217.242.0/23 maxlen: 24
83.217.244.0/23 maxlen: 24
83.217.246.0/23 maxlen: 24
83.217.248.0/23 maxlen: 24
83.217.250.0/24 maxlen: 24
83.217.251.0/24 maxlen: 24
83.217.251.160/27 maxlen: 27
83.231.128.0/17 maxlen: 17
83.231.183.64/27 maxlen: 27
83.231.233.240/28 maxlen: 28
91.186.160.0/19 maxlen: 19
91.186.176.0/24 maxlen: 24
91.186.176.208/28 maxlen: 28
91.186.177.0/24 maxlen: 24
91.186.177.176/29 maxlen: 29
91.186.177.184/29 maxlen: 29
91.186.178.0/24 maxlen: 24
91.186.179.0/24 maxlen: 24
91.186.180.0/23 maxlen: 24
91.186.182.0/24 maxlen: 24
91.186.183.0/24 maxlen: 24
91.186.186.0/23 maxlen: 23
91.186.188.0/23 maxlen: 24
91.186.190.0/25 maxlen: 25
91.186.190.128/25 maxlen: 25
91.186.191.0/24 maxlen: 24
158.181.56.0/21 maxlen: 21
185.84.16.0/22 maxlen: 22
212.119.0.0/19 maxlen: 19
213.130.32.0/19 maxlen: 19
213.198.0.0/17 maxlen: 17
213.198.0.0/24 maxlen: 24
213.198.1.0/27 maxlen: 27
213.198.1.32/27 maxlen: 27
213.198.2.0/24 maxlen: 24
213.198.3.0/24 maxlen: 24
213.198.4.0/24 maxlen: 24
213.198.8.0/23 maxlen: 24
213.198.26.0/29 maxlen: 29
213.198.26.8/29 maxlen: 29
213.198.26.16/29 maxlen: 29
213.198.28.0/24 maxlen: 24
213.198.30.0/24 maxlen: 24
213.198.31.0/24 maxlen: 24
213.198.54.0/23 maxlen: 24
213.198.65.0/24 maxlen: 24
213.198.70.0/24 maxlen: 24
213.198.71.0/24 maxlen: 24
213.198.73.128/25 maxlen: 25
213.198.74.0/24 maxlen: 24
213.198.75.0/24 maxlen: 24
213.198.78.0/24 maxlen: 24
213.198.79.0/24 maxlen: 24
213.198.82.0/25 maxlen: 25
213.198.83.0/25 maxlen: 25
213.198.84.0/24 maxlen: 24
213.198.85.0/24 maxlen: 24
213.198.86.0/26 maxlen: 26
213.198.86.64/26 maxlen: 26
213.198.86.128/27 maxlen: 27
213.198.86.160/27 maxlen: 27
213.198.86.192/26 maxlen: 26
213.198.88.0/24 maxlen: 24
213.198.90.0/24 maxlen: 24
213.198.91.0/24 maxlen: 24
213.198.93.0/24 maxlen: 24
213.198.94.96/27 maxlen: 27
213.198.95.64/26 maxlen: 26
213.198.96.0/24 maxlen: 24
213.198.97.0/24 maxlen: 24
213.198.98.0/24 maxlen: 24
213.198.99.0/24 maxlen: 24
2001:728::/32 maxlen: 32
2001:728:c00::/38 maxlen: 64
2001:728:1010:300::/56 maxlen: 64
2001:728:2400::/38 maxlen: 64
2001:728:2806::/48 maxlen: 64
2001:728:2807::/48 maxlen: 64
2001:728:2808::/48 maxlen: 64
2001:728:2809::/48 maxlen: 64
2001:728:2c00::/38 maxlen: 64
2001:728:4000::/38 maxlen: 64
2001:728:4400::/38 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:47:19:f2:b2:5d:c9:db:6c:af:09:0f:18:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f55ab95846c708643dbb2236a166a203f50f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:2a:32:bc:0e:1d:aa:c5:ad:bd:bf:29:03:
5f:d4:0c:ae:75:6d:a8:25:dd:e5:20:23:0c:84:54:
ae:23:8a:88:62:98:ee:d9:fa:7f:8f:42:a5:f2:1d:
88:e9:e8:80:57:ca:92:ff:60:e7:53:ad:45:ce:f0:
50:24:9b:3f:be:1f:de:60:14:b4:01:60:cc:b8:30:
cc:08:20:bb:22:2b:e6:0e:2b:97:b5:fe:80:d6:33:
8a:68:17:21:b1:65:0f:34:11:f8:45:0d:c7:b2:90:
e9:39:6e:d8:6a:59:32:59:b6:e1:3d:5c:83:e2:be:
7c:ba:28:f0:e9:35:ad:70:78:5b:47:d6:07:ef:47:
af:c2:f5:ec:d0:da:e3:74:27:f3:b8:1e:21:f4:2e:
1d:80:98:81:7d:bb:6c:e6:64:60:54:c8:02:64:77:
4f:05:8a:16:d1:07:09:18:00:d4:35:cd:f1:02:09:
0c:02:3c:45:9a:43:a3:02:90:0f:21:7f:da:4b:32:
7c:7d:d7:0c:35:48:15:50:9d:9e:95:a7:8e:55:79:
20:55:d0:50:6f:e0:36:e9:49:bc:4d:33:b9:fc:db:
29:1d:9d:52:57:8a:ca:7f:ae:25:11:60:3b:4f:08:
2f:20:6f:58:9c:92:2a:1e:47:58:88:fc:29:7b:2b:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:AB:95:84:6C:70:86:43:DB:B2:23:6A:16:6A:20:3F:50:F9:63
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/j1WrlYRscIZD27IjahZqID9Q-WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.208.0/21
62.73.160.0/19
81.19.96.0/20
81.20.64.0/20
81.25.192.0/20
81.93.176.0/20
81.93.208.0/20
82.112.96.0/19
83.217.224.0/19
83.231.128.0/17
91.186.160.0/19
158.181.56.0/21
185.84.16.0/22
212.119.0.0/19
213.130.32.0/19
213.198.0.0/17
IPv6:
2001:728::/32
Signature Algorithm: sha256WithRSAEncryption
79:ab:34:c6:ab:9f:f7:a8:c6:e2:2b:95:8c:11:d2:68:72:0d:
9c:c1:ea:3e:5a:69:55:a3:f1:d1:1a:74:5e:b1:33:75:51:fb:
b7:97:17:92:e5:09:f9:6c:03:4a:8f:38:2d:04:e3:87:c0:66:
9d:b1:0d:3b:01:01:40:bd:5b:7e:a6:5b:4a:85:f3:21:e7:57:
8e:c2:88:d8:6d:93:ec:26:e6:75:fd:dd:7c:69:eb:c1:20:66:
c0:1b:b9:43:38:1e:25:4c:53:b1:4d:3d:04:80:dd:80:be:0c:
53:a9:fe:d6:e2:a7:9f:f4:17:08:33:68:fa:18:27:33:44:88:
7d:7a:23:19:d2:fe:71:f9:6e:02:db:0f:07:61:97:88:8e:df:
4e:9a:38:0a:05:19:af:eb:fc:47:ba:54:c1:4e:3f:e8:8f:d9:
d2:1a:66:2b:22:0d:cb:e6:26:c6:d5:9d:eb:cb:b5:ba:3d:3f:
8c:74:6d:7c:0d:6b:4a:21:6f:ab:ff:96:8c:1c:c9:56:19:0e:
2e:16:9d:af:c7:69:a6:b0:bf:b9:36:e1:21:42:db:96:02:c4:
b8:5c:ac:b3:51:3f:5c:32:f8:cf:16:1a:16:ef:87:de:41:34:
5d:cf:7f:46:24:6f:86:f5:54:4f:f7:d7:e0:a5:ec:ab:41:93:
f0:a1:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:42 2025 by rpki-client