Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa
File: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (raw, json)
Hash identifier: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=
Subject key identifier: BF:53:F0:AF:9C:6F:75:B6:E6:A6:78:A1:C7:67:02:2B:D7:34:FA:99
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0194266BD104340F0762E1E3B6250654B48D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
45.82.64.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
62.112.8.0/22 maxlen: 24
62.112.8.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
89.38.96.0/22 maxlen: 22
89.38.96.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.136.0/21 maxlen: 22
93.190.136.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.0.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.196.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.2.80.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.21.60.0/22 maxlen: 22
185.21.60.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.88.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.160.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
185.180.220.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.223.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.32.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.0.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
194.88.104.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.242.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.248.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
217.23.0.0/20 maxlen: 20
217.23.0.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d1:04:34:0f:07:62:e1:e3:b6:25:06:54:b4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf53f0af9c6f75b6e6a678a1c767022bd734fa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:1e:b7:bc:60:f4:ff:da:11:67:77:c3:22:
ae:f2:70:60:d9:94:ed:9a:41:35:d1:1a:c6:24:64:
1e:fa:76:08:fb:fe:35:d4:6b:2a:6e:ec:84:c4:4e:
50:db:1b:0f:5f:60:24:18:0a:f9:e8:b5:79:4b:6a:
a6:b7:3a:45:cd:93:74:33:29:43:02:ea:2c:62:66:
2d:54:cb:57:6c:20:9a:57:06:a7:b7:5c:a3:ac:c8:
4c:0f:7d:07:72:b0:ca:e3:4b:c2:f8:97:31:db:39:
e8:ae:f1:03:e8:ad:de:0c:68:a3:7c:34:52:95:64:
b2:6a:b4:b0:f2:7b:15:ee:4c:ef:fd:a9:d4:5b:be:
31:16:b0:c9:fd:ef:e3:f1:53:1d:48:91:63:85:28:
aa:6a:fe:bb:2e:a7:b6:5f:e5:e9:ff:0a:1e:e6:85:
1d:f6:79:93:92:85:80:6c:ac:32:57:57:48:8f:88:
65:fe:25:ae:08:5c:76:67:14:49:69:c5:31:5e:8b:
b2:ca:48:bc:9d:a5:d6:02:e7:92:b1:4f:78:7b:b8:
ff:a6:ac:21:a0:1a:79:10:d5:13:ed:4f:44:92:9d:
fb:df:64:ac:6c:58:53:0d:ab:43:5c:e6:4b:d2:90:
6b:e8:e3:76:c6:b7:4d:79:73:43:1f:92:e3:52:64:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:F0:AF:9C:6F:75:B6:E6:A6:78:A1:C7:67:02:2B:D7:34:FA:99
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
217.23.0.0/20
IPv6:
2a00:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:bf:ee:a3:d4:a6:65:b5:5a:5c:f4:92:92:ef:37:f1:b9:ce:
4e:cd:1c:8d:a3:55:1d:17:e5:b1:d2:52:11:be:91:1b:7f:25:
c5:3a:7d:6d:17:76:87:d5:08:0c:8d:8f:78:89:d9:c0:fd:b6:
fd:62:33:62:b6:49:98:25:54:95:4d:ae:8a:d4:f3:13:eb:35:
c6:74:6b:60:5e:87:39:e7:77:e5:0b:b7:15:54:04:9b:0e:96:
69:6b:c3:4c:0b:61:a2:40:d5:61:f2:0f:9d:5d:57:e8:b7:97:
54:c2:ba:a5:e2:35:e7:ef:f2:e2:b2:57:36:c2:99:3b:42:a3:
b2:f6:3f:6c:f7:d5:b8:9f:0b:af:16:9f:75:2e:ce:79:03:0c:
10:63:dc:63:5a:e2:6f:80:39:04:4c:c9:04:41:ed:93:81:91:
b0:4b:34:18:a6:92:83:e9:b0:0a:9f:b9:71:32:82:f8:48:0b:
b9:22:2d:0b:43:27:3c:50:7b:68:34:eb:b1:cc:90:3d:16:fe:
30:91:90:89:46:b3:bd:7c:27:0d:00:a6:bf:e6:29:28:39:ff:
94:29:a2:9f:75:46:0e:f1:1c:49:45:89:6a:22:b8:01:30:d9:
91:03:e8:36:e7:12:d1:74:50:b0:d7:a6:59:b3:9b:ac:f5:36:
66:37:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:06 2025 by rpki-client