Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa
File: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (raw, json)
Hash identifier: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=
Subject key identifier: 85:53:FB:CF:B9:66:5A:88:F9:4E:56:31:3C:48:7B:0E:75:4A:F5:50
Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial: 0194221FCA06A9C03DA85B1466871006C420
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12997
IP address blocks: 31.29.0.0/19 maxlen: 19
31.29.0.0/20 maxlen: 20
31.29.16.0/20 maxlen: 20
37.218.128.0/18 maxlen: 18
37.218.128.0/19 maxlen: 19
37.218.160.0/19 maxlen: 19
80.72.176.0/20 maxlen: 20
80.72.176.0/21 maxlen: 21
80.72.184.0/21 maxlen: 21
85.113.0.0/19 maxlen: 19
85.113.0.0/20 maxlen: 20
85.113.16.0/20 maxlen: 20
89.237.192.0/18 maxlen: 18
89.237.192.0/19 maxlen: 19
89.237.224.0/19 maxlen: 19
185.66.252.0/22 maxlen: 22
185.66.252.0/23 maxlen: 23
185.66.254.0/23 maxlen: 23
195.114.240.0/20 maxlen: 20
195.114.240.0/21 maxlen: 21
195.114.248.0/21 maxlen: 21
212.97.0.0/19 maxlen: 19
212.97.0.0/20 maxlen: 20
212.97.16.0/20 maxlen: 20
212.241.0.0/19 maxlen: 19
212.241.0.0/20 maxlen: 20
212.241.16.0/20 maxlen: 20
213.145.128.0/19 maxlen: 19
213.145.128.0/20 maxlen: 20
213.145.128.0/24 maxlen: 24
213.145.129.0/24 maxlen: 24
213.145.130.0/24 maxlen: 24
213.145.140.0/24 maxlen: 24
213.145.144.0/20 maxlen: 20
2a01:9d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:06:a9:c0:3d:a8:5b:14:66:87:10:06:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8553fbcfb9665a88f94e56313c487b0e754af550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7a:2b:63:91:ee:d1:69:d6:10:fe:08:ef:b5:
1b:5b:63:5b:f9:01:43:d9:15:c6:32:c3:10:0d:b3:
46:19:1f:d5:eb:7e:98:d6:ce:17:c0:63:9c:57:7f:
9f:f8:ef:fa:72:99:f1:2c:0f:be:9c:cd:55:9b:51:
15:1a:e6:d1:43:05:5b:0c:5a:05:6a:fe:0a:9e:6d:
f8:00:31:4c:12:7c:be:bb:99:78:38:de:32:e7:e4:
35:21:3b:73:a7:47:60:4b:ac:12:d5:b4:53:40:63:
ea:cd:50:4f:3c:68:07:03:48:6d:67:96:82:61:99:
f1:1c:ab:51:6b:c4:14:62:e2:cb:1c:29:c8:9d:ad:
38:09:98:0b:35:61:bc:12:ca:71:30:f8:87:85:48:
42:a7:ae:4d:d8:ea:aa:a0:a0:24:da:de:bb:23:b8:
b3:78:3c:3e:c0:e9:27:98:2a:96:8c:d4:89:cf:cf:
1c:d1:a6:95:72:f6:b4:ac:8b:7a:8c:d3:31:8e:02:
3e:57:97:a5:af:f1:5a:b6:91:12:cb:4a:0b:18:dc:
8f:44:2f:23:90:ee:ab:0b:d3:f2:f4:76:a6:5d:04:
d5:d6:5e:6c:80:c0:f6:22:31:2d:2e:b5:df:36:75:
c3:5b:0f:69:b0:9c:34:e5:78:08:9c:a7:f8:53:7b:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:FB:CF:B9:66:5A:88:F9:4E:56:31:3C:48:7B:0E:75:4A:F5:50
X509v3 Authority Key Identifier:
keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.29.0.0/19
37.218.128.0/18
80.72.176.0/20
85.113.0.0/19
89.237.192.0/18
185.66.252.0/22
195.114.240.0/20
212.97.0.0/19
212.241.0.0/19
213.145.128.0/19
IPv6:
2a01:9d00::/32
Signature Algorithm: sha256WithRSAEncryption
24:00:3b:6d:4b:a7:e5:b4:cd:83:77:d6:5c:01:99:13:a2:a6:
de:b4:7a:93:94:64:b7:bc:f1:04:24:d9:7c:21:f5:7e:d7:96:
a6:b0:5c:05:06:65:c8:cc:2c:1c:d9:93:e3:3b:e3:c5:27:ac:
90:71:bb:57:ee:f0:57:82:34:7e:3f:cf:da:9f:b3:dd:fb:d0:
9d:e8:5b:17:ad:f8:bf:f8:79:96:8f:c5:a3:20:dc:a3:8f:fa:
86:84:a6:fe:66:c3:c8:00:cf:8b:e1:f9:04:c0:bc:7e:d1:90:
7f:14:d9:c2:e5:c2:70:de:09:17:c3:36:5b:e1:b0:59:dd:92:
bb:ed:b7:73:b0:94:a7:6a:0b:4e:4a:25:c1:e6:ef:56:fc:f6:
78:ea:49:27:64:0f:7e:11:66:51:50:0d:f8:7a:ad:1c:f7:b2:
39:a9:d2:24:c8:44:1d:2c:d8:4d:4a:c6:b8:37:e4:cf:39:00:
1f:b7:42:38:b5:25:53:85:c7:64:7c:9d:0c:1b:04:da:67:e8:
9b:05:c2:7c:75:4b:d3:22:58:0f:bd:76:35:26:3d:e5:29:1a:
02:f7:d6:68:82:18:af:80:45:0d:8f:80:01:12:83:5f:a5:41:
07:a1:6f:89:16:a1:d9:45:56:95:73:e8:b3:e5:2f:65:5c:6c:
d2:10:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:19 2025 by rpki-client