Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/tk_qFAvrX29-uLNm_lSuN6AijA8.roa
File: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (raw, json)
Hash identifier: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=
Subject key identifier: B6:4F:EA:14:0B:EB:5F:6F:7E:B8:B3:66:FE:54:AE:37:A0:22:8C:0F
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0194B0B1231B0B6AEA12DF968F6CD8840855
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/tk_qFAvrX29-uLNm_lSuN6AijA8.roa
Signing time: Wed 29 Jan 2025 06:13:06 +0000
ROA not before: Wed 29 Jan 2025 06:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 5.159.216.0/24 maxlen: 24
5.159.217.0/24 maxlen: 24
5.159.218.0/24 maxlen: 24
5.159.219.0/24 maxlen: 24
93.93.50.0/24 maxlen: 24
93.93.51.0/24 maxlen: 24
93.93.53.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.122.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
95.128.127.0/24 maxlen: 24
109.71.160.0/24 maxlen: 24
109.71.161.0/24 maxlen: 24
109.71.162.0/24 maxlen: 24
109.71.163.0/24 maxlen: 24
109.71.164.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
185.13.88.0/24 maxlen: 24
185.13.89.0/24 maxlen: 24
185.13.90.0/24 maxlen: 24
185.13.91.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:b1:23:1b:0b:6a:ea:12:df:96:8f:6c:d8:84:08:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jan 29 06:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b64fea140beb5f6f7eb8b366fe54ae37a0228c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:e4:88:b6:7f:01:7e:eb:52:b1:60:5b:82:
32:2a:4c:9a:da:7b:a8:26:bf:32:ff:40:98:e1:0d:
bd:22:ce:63:81:fc:19:8e:3e:5b:84:fd:6b:dd:07:
f7:fc:e7:31:78:24:13:fa:7a:30:91:a7:1e:15:21:
2b:91:4f:d5:82:e2:24:f5:2b:1f:64:48:e0:1f:04:
69:f0:72:8d:37:4d:74:0e:5e:3a:ca:87:15:9f:d2:
a0:a1:c3:d6:98:f9:d9:df:78:01:8a:33:f3:97:86:
81:a4:ca:6f:65:37:94:65:74:e5:89:69:b1:81:0a:
04:05:6e:8c:8c:0f:e0:a5:5a:e3:6a:da:81:e3:68:
74:4b:fb:4b:d7:1e:8d:79:d3:c2:58:37:83:3f:13:
cb:40:8b:a2:91:0c:f5:a6:61:2c:00:a0:04:52:87:
99:6d:be:7e:2a:a7:8d:8a:4c:52:89:89:78:dd:15:
2d:eb:07:74:ee:73:79:bd:00:9f:28:2f:d4:9e:49:
0b:d4:3b:a2:eb:ce:7f:0f:8d:2c:e3:b6:27:6c:36:
8f:60:f2:ce:39:ed:c6:03:be:1b:a9:81:2c:94:6b:
7f:11:1c:a7:5f:8b:7e:9f:ff:9b:50:cf:97:05:71:
2c:d6:b9:e5:a9:9b:fe:4a:e3:2f:7c:a0:a7:ee:fa:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:EA:14:0B:EB:5F:6F:7E:B8:B3:66:FE:54:AE:37:A0:22:8C:0F
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/tk_qFAvrX29-uLNm_lSuN6AijA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0/22
93.93.50.0/23
93.93.53.0-93.93.54.255
95.128.120.0/21
109.71.160.0/21
185.13.88.0/22
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
2a03:9c40:1000::/48
Signature Algorithm: sha256WithRSAEncryption
46:e2:51:85:49:04:b6:04:45:40:e1:d9:5d:72:5f:ca:f9:fe:
94:5b:84:74:df:45:e1:ab:5d:d0:86:96:05:7e:19:e8:7f:1c:
55:93:ff:79:2c:16:1a:ee:93:9b:01:8f:de:92:23:53:5f:a0:
c9:ec:80:70:92:02:21:29:11:49:b5:f0:bb:8a:ce:4c:1d:42:
12:95:08:b6:bc:de:2d:d2:af:58:7e:c5:75:26:4c:38:52:89:
1f:5b:46:b1:52:2a:01:bb:d7:98:d7:b8:37:60:cb:0c:e0:5f:
f3:ce:00:ff:00:b4:f1:1d:79:ed:03:60:83:5b:6c:06:f1:f7:
cf:39:75:60:3c:59:d4:60:0c:4c:95:aa:0b:f1:2e:e0:3d:b2:
bc:da:96:35:e5:a1:ef:ee:e0:72:19:2a:40:93:04:78:45:a6:
8c:66:c3:92:56:d5:ae:51:32:53:aa:ab:b1:4d:f7:9b:04:13:
81:43:25:61:2d:fb:92:28:a4:da:4f:ed:18:b1:41:fd:41:9e:
e9:8f:75:db:db:25:03:09:13:64:0a:a2:13:be:84:c1:21:bf:
79:da:12:1e:42:af:71:0c:4c:e9:24:59:de:78:4b:0b:d9:fe:
27:da:f9:28:df:cb:08:f3:9e:c9:40:4a:8e:70:f0:ad:b2:bf:
00:17:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:44 2025 by rpki-client