Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/j51vgTDCax1tLhOyiZp4zqvzOKU.roa
File: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (raw, json)
Hash identifier: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=
Subject key identifier: 8F:9D:6F:81:30:C2:6B:1D:6D:2E:13:B2:89:9A:78:CE:AB:F3:38:A5
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 01954134A163621CB5C56C9EB104735AC57B
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/j51vgTDCax1tLhOyiZp4zqvzOKU.roa
Signing time: Wed 26 Feb 2025 07:42:02 +0000
ROA not before: Wed 26 Feb 2025 07:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201011
IP address blocks: 2.59.28.0/22 maxlen: 22
5.56.16.0/21 maxlen: 21
31.7.176.0/20 maxlen: 24
31.7.177.0/24 maxlen: 24
80.255.0.0/20 maxlen: 20
81.95.0.0/20 maxlen: 24
82.199.128.0/19 maxlen: 24
82.199.128.0/24 maxlen: 24
82.199.130.0/24 maxlen: 24
82.199.131.0/24 maxlen: 24
82.199.138.0/24 maxlen: 24
82.199.141.0/24 maxlen: 24
82.199.147.0/24 maxlen: 24
82.199.148.0/24 maxlen: 24
82.199.149.0/24 maxlen: 24
82.199.153.0/24 maxlen: 24
82.199.157.0/24 maxlen: 24
82.199.158.0/24 maxlen: 24
82.199.159.0/24 maxlen: 24
83.142.80.0/21 maxlen: 21
92.43.104.0/21 maxlen: 24
185.89.36.0/22 maxlen: 22
193.104.251.0/24 maxlen: 24
195.138.248.0/21 maxlen: 21
195.138.249.0/24 maxlen: 24
195.138.250.0/24 maxlen: 24
2a01:4a0::/29 maxlen: 48
2a01:4a0:b::/48 maxlen: 48
2a01:4a0:e::/48 maxlen: 48
2a01:4a0:12::/48 maxlen: 48
2a01:4a0:17::/48 maxlen: 48
2a01:4a0:30::/48 maxlen: 48
2a01:4a0:38::/48 maxlen: 48
2a01:4a0:42::/48 maxlen: 48
2a01:4a0:43::/48 maxlen: 48
2a01:4a0:45::/48 maxlen: 48
2a01:4a0:46::/48 maxlen: 48
2a01:4a0:47::/48 maxlen: 48
2a01:4a0:48::/48 maxlen: 48
2a01:4a0:50::/48 maxlen: 48
2a01:4a0:56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:34:a1:63:62:1c:b5:c5:6c:9e:b1:04:73:5a:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Feb 26 07:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f9d6f8130c26b1d6d2e13b2899a78ceabf338a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:01:4d:6b:57:8a:32:15:10:10:d7:e4:6a:
2d:c2:21:5f:32:e8:4c:36:60:7d:f7:ce:00:bb:60:
54:d8:c7:12:75:cb:8e:66:a8:60:01:cd:19:cb:55:
9a:a6:f8:24:26:69:69:ce:f1:3d:cb:5b:ce:f1:38:
2e:34:7d:b3:e9:8c:a4:0e:c7:4b:13:13:14:46:8f:
56:c5:81:eb:33:f3:a6:f5:70:f3:0d:32:49:f2:b8:
8a:15:38:e8:be:75:75:3b:d7:de:26:2e:dc:58:9f:
d3:49:f9:bc:f0:06:3e:2d:c1:6a:8f:61:d3:d9:b1:
44:08:35:df:98:a7:99:b7:56:b1:47:07:42:1a:6a:
c3:4e:c8:43:13:f8:5c:48:42:a3:69:23:73:b5:b5:
bf:f5:7f:f9:64:2c:9d:f1:8d:1a:e0:7d:0a:24:07:
1a:b3:14:2a:5d:48:09:c2:12:85:5f:33:8d:6d:cf:
79:88:8e:00:cf:85:ce:79:fc:50:77:de:3b:bd:71:
df:d2:a1:c7:98:84:cc:5e:3c:ab:02:a7:db:b0:af:
be:7e:13:ac:d1:30:e5:a0:99:2d:2f:35:c5:db:4b:
9a:81:74:1f:f3:28:28:6d:ae:00:b2:d1:46:65:28:
17:36:a6:53:79:83:ba:26:e3:d8:b1:93:13:9c:1f:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:6F:81:30:C2:6B:1D:6D:2E:13:B2:89:9A:78:CE:AB:F3:38:A5
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/j51vgTDCax1tLhOyiZp4zqvzOKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.28.0/22
5.56.16.0/21
31.7.176.0/20
80.255.0.0/20
81.95.0.0/20
82.199.128.0/19
83.142.80.0/21
92.43.104.0/21
185.89.36.0/22
193.104.251.0/24
195.138.248.0/21
IPv6:
2a01:4a0::/29
Signature Algorithm: sha256WithRSAEncryption
32:be:1f:3b:4b:1e:1d:e2:b1:8f:8a:11:b8:27:16:39:ad:7a:
16:34:89:dd:03:95:09:c3:e5:b6:e7:a6:86:89:a8:cb:90:c6:
4c:e6:4f:6c:44:ff:3d:cf:63:cc:55:f9:c9:27:81:ac:99:f6:
59:61:98:c3:70:fc:7c:f4:4e:cc:d2:cb:f8:5b:f4:7c:ca:e3:
95:a5:94:d9:71:0c:1a:1a:0c:8a:1f:e3:d4:c5:b0:53:99:18:
74:9b:58:fc:3c:0f:68:99:ea:31:4f:11:6f:08:23:33:94:54:
f9:e8:db:4c:5f:1e:31:17:0e:0a:77:3e:25:b8:72:ab:37:ee:
50:8c:cf:eb:cb:8d:b7:b2:7d:99:f3:97:3d:11:9b:e6:94:50:
5a:fc:9f:32:86:2f:a1:94:55:2d:4a:e3:c7:08:e4:08:e6:74:
14:40:45:34:0e:23:a3:d4:2d:b2:48:08:6c:ea:2f:87:e4:e9:
ae:30:12:e3:fa:5c:6b:d1:52:f0:e1:d0:d8:15:da:84:19:42:
01:5b:dc:92:7c:40:f0:38:92:98:5f:de:b7:4f:6a:a5:8e:11:
37:7b:77:42:5d:5d:c9:d6:55:7e:b9:c1:5e:26:d3:ff:8d:7e:
15:54:44:e4:b5:cb:f7:da:8e:60:6e:97:cd:f3:b1:cf:7b:77:
f1:0c:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:31:54 2025 by rpki-client