Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/AWMfWviNywiou7vcfcntqdl-hKo.roa
File: AWMfWviNywiou7vcfcntqdl-hKo.roa (raw, json)
Hash identifier: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=
Subject key identifier: 01:63:1F:5A:F8:8D:CB:08:A8:BB:BB:DC:7D:C9:ED:A9:D9:7E:84:AA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01948C6CC6CFA0713C545CD5ACB64338C192
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/AWMfWviNywiou7vcfcntqdl-hKo.roa
Signing time: Wed 22 Jan 2025 05:12:06 +0000
ROA not before: Wed 22 Jan 2025 05:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35104
IP address blocks: 37.228.64.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.84.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.104.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.108.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.26.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.136.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.47.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
188.127.49.0/24 maxlen: 24
188.127.52.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
2a03:a300::/32 maxlen: 32
2a03:a300:800::/37 maxlen: 37
2a03:a300:1000::/48 maxlen: 48
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:4000::/44 maxlen: 44
2a03:a300:4100::/48 maxlen: 48
2a03:a300:5000::/36 maxlen: 36
2a03:a300:5000::/42 maxlen: 42
2a03:a300:5000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:6c:c6:cf:a0:71:3c:54:5c:d5:ac:b6:43:38:c1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 22 05:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01631f5af88dcb08a8bbbbdc7dc9eda9d97e84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:b6:08:32:e8:24:12:07:29:67:ba:50:62:
16:89:1b:f0:b5:1e:a3:f0:aa:12:77:e0:11:24:a0:
2b:b9:c3:23:77:fa:58:8b:32:60:d9:fe:b2:07:32:
41:6d:de:5d:17:b2:bc:fe:4b:e4:d0:5e:64:a9:00:
62:28:a0:bb:92:a0:b8:0d:50:51:75:d8:26:77:2c:
7f:db:91:92:84:bf:ff:21:aa:ff:28:44:00:5b:c5:
82:5e:b6:10:d4:c5:ea:39:7a:f3:11:5f:12:aa:eb:
98:28:26:62:c8:cb:b0:5e:b4:af:33:4a:48:82:82:
48:3e:48:84:c0:42:d0:74:5b:29:31:d5:ad:a1:52:
7f:6f:56:22:a0:a4:6e:b8:f7:b4:d9:47:a7:88:a0:
64:9f:0b:40:d5:80:91:79:82:d4:0c:f6:91:23:b6:
ca:9c:87:d1:ab:7b:25:48:9f:a4:9d:e3:66:f3:ba:
6c:d4:a2:f9:d6:96:48:a9:8f:d5:5f:c5:57:2d:19:
02:06:84:31:45:e8:ad:8b:f4:8e:a8:a5:03:e2:7e:
24:00:ec:b4:3c:1a:a0:87:4e:12:6c:73:e7:b5:e1:
3f:fd:02:55:d2:96:6f:f7:c8:a0:0d:f4:35:cf:f8:
99:48:f2:6f:ff:51:66:a5:b1:f9:4d:59:1f:1f:62:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:1F:5A:F8:8D:CB:08:A8:BB:BB:DC:7D:C9:ED:A9:D9:7E:84:AA
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/AWMfWviNywiou7vcfcntqdl-hKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/22
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
188.127.47.0-188.127.49.255
188.127.52.0/24
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300::/32
Signature Algorithm: sha256WithRSAEncryption
29:76:76:58:a7:60:3c:61:e4:81:53:29:db:8f:27:29:af:68:
0e:89:04:19:f3:33:15:48:f2:1e:61:6a:fa:eb:cd:71:93:9e:
4f:7b:69:72:a5:74:5b:00:b7:24:86:94:d4:d8:eb:ee:2f:ea:
69:cb:fc:58:b6:15:54:05:2d:01:b3:f6:00:e8:ef:98:c7:c7:
b3:62:99:af:5b:42:b0:c9:94:56:ac:dd:a0:ad:64:96:24:04:
db:e8:18:79:d8:ca:eb:57:4b:f7:63:c1:4f:c4:e3:81:5d:43:
23:01:ae:5a:91:e6:69:4f:90:cf:6c:f2:3b:02:dc:c3:40:b4:
e9:44:c6:42:52:79:d8:02:4a:8e:f4:55:67:ea:29:fc:66:d2:
27:d9:02:8e:59:a3:da:19:a5:61:7b:fd:5f:ce:1e:e6:18:32:
57:a7:97:9e:d9:fd:21:35:d4:8b:1e:c3:ae:c3:22:9d:47:6e:
6c:1e:de:56:ad:e3:0a:ef:48:2e:d0:69:c3:19:fe:f6:60:c0:
73:58:d5:90:8d:a3:b6:76:71:88:0e:6c:58:a9:d0:8d:b5:e2:
17:62:8a:05:6f:ad:47:15:73:d5:6f:b5:b9:64:18:78:7c:90:
a7:04:39:8d:2d:99:55:c7:16:eb:7d:f9:d9:e6:ce:71:b6:be:
25:ef:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:29 2025 by rpki-client