Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/phbXQYwJCQjuQ5dKxd5byinNiNQ.roa
File: phbXQYwJCQjuQ5dKxd5byinNiNQ.roa (raw, json)
Hash identifier: kHOoH2iIMj11c3Wy2E0Dsfj63b+DkqvcxB6hcxTgJsc=
Subject key identifier: A6:16:D7:41:8C:09:09:08:EE:43:97:4A:C5:DE:5B:CA:29:CD:88:D4
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0194244561B20B9E05F81B90444120E6BC4E
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/phbXQYwJCQjuQ5dKxd5byinNiNQ.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.168.0/21 maxlen: 21
31.214.168.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.175.0/24 maxlen: 24
31.214.248.0/21 maxlen: 21
31.214.248.0/24 maxlen: 24
31.214.249.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.253.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
37.10.64.0/24 maxlen: 24
37.10.65.0/24 maxlen: 24
37.10.66.0/24 maxlen: 24
37.10.67.0/24 maxlen: 24
37.10.109.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
37.228.136.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
82.99.215.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.216.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.219.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.252.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
95.156.255.0/24 maxlen: 24
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.204.0/24 maxlen: 24
109.230.205.0/24 maxlen: 24
109.230.206.0/24 maxlen: 24
109.230.207.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
109.230.223.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
109.230.251.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.200.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.206.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
185.10.71.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
185.13.228.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:b2:0b:9e:05:f8:1b:90:44:41:20:e6:bc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a616d7418c090908ee43974ac5de5bca29cd88d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:61:6b:3b:22:b7:ec:5c:a1:79:3a:7f:df:
88:9d:8a:e5:dc:5f:de:3c:fe:45:88:09:da:dc:2f:
c9:55:a6:85:0a:62:83:82:6b:77:97:ad:dc:33:28:
5d:a3:7e:2b:57:83:80:9d:2c:ad:12:d1:83:bf:e2:
44:b2:90:5c:c6:05:8a:12:bb:a1:33:1f:92:05:96:
8e:0f:66:b8:d4:88:23:2a:b9:ad:51:0f:4e:a3:6e:
1d:6a:19:c2:3c:2b:36:30:bc:a2:06:13:4b:a2:53:
e5:8a:35:7d:f9:f4:8f:8a:a9:05:3d:00:f8:cd:aa:
21:f9:80:bd:ad:4e:cb:ab:12:e8:59:46:a3:c4:c6:
da:ed:50:ef:67:08:9e:06:5e:1a:fd:eb:7f:dc:4f:
5f:9f:51:09:05:bc:a3:5d:cc:b9:cd:79:1b:64:5d:
6b:77:62:e8:f1:43:86:f7:ef:77:57:94:3f:89:09:
a3:52:bf:42:98:d6:3c:5e:86:01:75:0c:21:be:6f:
4c:7a:82:f2:c3:10:9f:d0:b2:a8:71:32:0d:44:f0:
70:20:73:36:c0:17:0f:00:93:4a:cf:4a:d8:da:16:
3b:eb:03:06:0c:05:dd:96:78:f4:59:6b:0e:75:b2:
62:8b:59:47:06:2e:5d:f7:6d:91:a7:04:7d:1b:66:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:D7:41:8C:09:09:08:EE:43:97:4A:C5:DE:5B:CA:29:CD:88:D4
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/phbXQYwJCQjuQ5dKxd5byinNiNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
95.156.236.0/23
95.156.252.0/22
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.251.0/24
134.255.200.0/21
185.10.71.0/24
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
20:32:09:7a:d9:7b:82:8e:42:ae:4e:d1:59:66:3b:d3:fa:07:
c1:14:90:41:90:1b:57:7f:de:f5:af:0c:26:3b:84:2e:9e:7d:
e5:85:8c:d0:bc:b7:f0:8f:52:cb:6a:ae:e7:d8:dc:49:18:1e:
47:aa:e2:5e:47:cf:eb:d8:6a:06:62:29:d1:73:5a:bf:ee:e0:
8a:07:c7:59:bb:3d:bc:c7:68:82:06:6c:b8:53:19:9f:66:3b:
a7:3e:b7:a3:86:e1:d5:67:83:ed:41:c0:d6:a6:5a:08:09:75:
5a:76:f2:80:c2:fb:9c:57:91:29:ba:23:6c:f4:91:16:c9:78:
67:29:3f:2f:e8:6d:cf:f2:5c:58:20:b5:1a:f6:f0:e1:08:ce:
06:54:cc:3e:73:f0:c6:8b:26:86:e1:8e:8d:d6:20:0c:5a:14:
09:d8:f6:7b:4b:7c:a3:48:e3:0e:9e:5c:01:57:fd:17:b3:42:
ec:ad:86:4c:e8:24:15:d0:7b:08:79:78:a1:fa:8b:34:aa:3d:
5d:a6:1f:70:5f:7c:6b:c7:ab:f7:e4:ab:29:ae:91:c0:03:e3:
d2:3d:cd:4a:be:ca:85:fe:8b:72:60:c2:2b:d2:62:ca:c5:7b:
33:01:86:eb:33:a4:a5:58:20:e2:5c:a5:5c:ac:88:db:11:c9:
f1:bd:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:32:27 2025 by rpki-client