Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/AMzNvjmZwk2houvOqkqFV0cvo5A.roa
File: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (raw, json)
Hash identifier: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=
Subject key identifier: 00:CC:CD:BE:39:99:C2:4D:A1:A2:EB:CE:AA:4A:85:57:47:2F:A3:90
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 019425FC52B61A792A2CC5E4B3F9E35621F4
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/AMzNvjmZwk2houvOqkqFV0cvo5A.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51395
IP address blocks: 91.192.100.0/22 maxlen: 22
91.192.102.0/24 maxlen: 24
91.201.56.0/22 maxlen: 22
176.10.96.0/19 maxlen: 24
176.10.97.0/25 maxlen: 25
176.10.104.240/32 maxlen: 32
176.10.111.0/24 maxlen: 24
176.10.118.128/25 maxlen: 25
176.10.119.0/24 maxlen: 24
176.10.124.128/26 maxlen: 26
176.10.125.0/25 maxlen: 25
185.32.220.0/22 maxlen: 22
185.32.221.0/24 maxlen: 24
185.32.223.0/24 maxlen: 24
185.85.108.0/22 maxlen: 22
185.189.148.0/22 maxlen: 22
185.189.149.128/25 maxlen: 25
185.189.151.0/24 maxlen: 24
185.195.68.0/23 maxlen: 23
185.195.68.0/24 maxlen: 24
185.195.69.0/24 maxlen: 24
195.225.117.0/24 maxlen: 24
195.225.118.0/23 maxlen: 23
2a00:bd80::/32 maxlen: 32
2a00:bd80:a176:10::/64 maxlen: 64
2a0a:5dc0::/29 maxlen: 29
2a0b:ee80::/29 maxlen: 29
2a0b:ee80:0:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:52:b6:1a:79:2a:2c:c5:e4:b3:f9:e3:56:21:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00cccdbe3999c24da1a2ebceaa4a8557472fa390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:82:db:62:00:13:ae:5a:ef:b8:60:06:66:
a9:4d:36:ea:88:9a:b6:59:49:e0:76:3a:7b:a1:14:
1c:16:a9:ec:2e:2f:99:b7:9d:ba:b3:30:4d:57:55:
b5:be:be:b1:90:41:81:c4:19:6d:34:d0:84:f1:ab:
54:ee:eb:75:0c:62:84:28:f8:1f:85:e6:26:27:95:
25:c8:a5:eb:f7:ca:d1:a5:61:cc:c2:67:6d:fa:e2:
9d:81:b6:c9:71:a5:7b:ae:c2:60:94:a0:11:06:d3:
bc:66:62:ce:af:c3:6c:0c:06:cc:87:73:ac:b3:c4:
9e:38:37:49:fd:fc:cf:c8:25:88:49:7a:e5:23:99:
d3:17:0c:e3:7a:7c:63:25:87:81:88:17:7d:0d:21:
36:f0:37:5f:f6:c6:48:b0:67:a2:b6:11:5e:5f:95:
49:a2:cd:2b:35:d9:92:95:c6:73:69:83:4b:aa:ec:
21:23:92:a2:a8:89:b7:b7:39:a0:c5:bc:5d:ad:fe:
f1:a1:e6:05:35:5d:4c:6c:84:fb:4e:9d:b7:6c:d8:
58:4e:7e:f5:6c:09:44:5c:c2:cf:7e:9b:42:17:18:
ed:07:aa:dc:fb:d8:36:12:8e:0b:29:b8:5c:82:ea:
d4:71:ae:fe:f0:ba:60:e7:6f:36:07:71:68:5f:09:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:CD:BE:39:99:C2:4D:A1:A2:EB:CE:AA:4A:85:57:47:2F:A3:90
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/AMzNvjmZwk2houvOqkqFV0cvo5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.100.0/22
91.201.56.0/22
176.10.96.0/19
185.32.220.0/22
185.85.108.0/22
185.189.148.0/22
185.195.68.0/23
195.225.117.0-195.225.119.255
IPv6:
2a00:bd80::/32
2a0a:5dc0::/29
2a0b:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:b6:89:3b:ac:68:13:2b:d7:df:e3:70:75:8b:a7:9b:ac:7d:
d8:c9:80:2a:26:4d:88:ab:0b:8e:19:83:cf:1e:59:c9:a6:3f:
92:3c:e8:f1:c8:02:a8:cd:96:2f:bd:b3:0a:7a:88:9d:c0:25:
ab:b3:a6:62:b6:ec:ae:4e:87:ff:4f:af:77:80:76:d8:fd:5e:
6c:21:e7:43:04:46:dd:e3:01:7c:aa:e5:a7:5f:fd:77:d4:1c:
47:27:dc:17:e9:ad:57:be:18:ad:eb:21:8e:18:b1:f6:07:96:
3d:0e:b0:60:99:58:2b:64:a7:e5:83:49:21:0c:cd:ac:dc:dc:
78:03:39:aa:2c:75:0e:f5:23:7f:25:3c:b4:9a:98:23:3d:14:
e9:02:47:5c:7f:98:85:ea:da:cf:ab:cc:40:10:97:e2:7a:02:
55:49:c1:ec:d5:f9:97:08:5d:6e:d8:e4:a5:b3:f6:b1:37:62:
cf:e7:45:73:6d:b1:82:7d:e2:60:70:42:a2:9c:5d:da:48:4d:
82:3f:09:5c:07:3d:6a:d5:1c:96:44:f9:63:07:2f:79:8c:9a:
cf:b4:35:7d:9e:dd:4a:1f:5f:73:a4:46:73:99:01:4d:67:c4:
21:8b:61:37:6c:24:3a:75:3a:9d:6a:ce:4d:97:a9:2c:dd:ec:
6c:98:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:55:00 2025 by rpki-client