Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa
File: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (raw, json)
Hash identifier: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=
Subject key identifier: 9A:5B:0D:E4:93:68:C1:A7:35:77:B6:69:40:3D:41:67:E0:D9:A3:22
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019420D6517885AE0FDFA8B4A60769D689B4
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 5.178.72.0/21 maxlen: 21
31.192.224.0/21 maxlen: 24
31.192.228.0/24 maxlen: 24
37.152.56.0/21 maxlen: 24
46.21.96.0/20 maxlen: 24
46.21.100.0/24 maxlen: 24
46.246.0.0/17 maxlen: 24
79.99.0.0/21 maxlen: 24
80.67.0.0/20 maxlen: 24
91.213.246.0/24 maxlen: 24
91.217.189.0/24 maxlen: 24
91.223.232.0/24 maxlen: 24
91.228.193.0/24 maxlen: 24
91.228.194.0/23 maxlen: 24
94.247.168.0/21 maxlen: 24
109.74.0.0/20 maxlen: 24
159.253.24.0/21 maxlen: 24
159.253.28.0/24 maxlen: 24
159.253.29.0/24 maxlen: 24
178.73.192.0/18 maxlen: 24
178.73.224.0/19 maxlen: 19
185.11.96.0/22 maxlen: 22
185.21.88.0/22 maxlen: 22
185.39.144.0/22 maxlen: 24
185.118.36.0/22 maxlen: 22
185.157.220.0/22 maxlen: 24
188.126.64.0/19 maxlen: 24
193.108.196.0/24 maxlen: 24
193.201.96.0/24 maxlen: 24
194.54.164.0/22 maxlen: 24
195.20.206.0/23 maxlen: 24
195.149.101.0/24 maxlen: 24
195.238.76.0/23 maxlen: 24
195.246.120.0/23 maxlen: 24
212.112.0.0/19 maxlen: 24
2a00:1a28::/32 maxlen: 48
2a02:750::/29 maxlen: 48
2a02:750:8::/48 maxlen: 48
2a02:750:10::/48 maxlen: 48
2a02:750:14::/48 maxlen: 48
2a02:e400::/29 maxlen: 29
2a03:5e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:51:78:85:ae:0f:df:a8:b4:a6:07:69:d6:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5b0de49368c1a73577b669403d4167e0d9a322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:bd:24:34:58:55:07:6a:b4:6b:8e:9d:7d:
31:12:af:0f:8c:92:1c:01:05:ae:56:23:b3:27:6e:
c0:60:60:19:b7:29:c3:02:c7:59:dd:ec:4a:4d:3c:
03:70:55:81:51:c8:14:29:63:18:13:8b:bd:54:ec:
ec:c5:23:29:ba:78:13:8f:00:91:89:29:9a:fd:1d:
19:5b:1a:cb:0d:ef:d3:c3:d8:85:c4:aa:ef:f0:19:
58:8c:09:7c:66:7b:3f:55:b3:57:ab:7c:db:7e:41:
3a:2f:83:fa:be:ce:aa:30:a0:af:91:ba:66:8f:d0:
74:3d:92:f4:ec:5f:f2:5a:dc:48:66:57:62:a4:6b:
c4:bd:1b:0e:ca:3a:e5:c5:fe:dd:d6:71:20:e8:69:
31:3c:79:98:c2:1d:30:80:dd:07:03:3a:f7:35:7b:
e0:19:e2:c0:8e:c4:11:fd:0c:54:20:07:6d:e2:15:
3d:5e:e4:b7:fd:bf:fe:f0:96:6f:f3:75:be:d2:4a:
53:42:03:10:1a:2d:b3:0c:1a:57:9e:5b:14:9c:b3:
2f:9e:89:54:1e:f5:fa:46:3a:2e:fb:24:18:ff:02:
8b:4c:97:84:fd:be:ba:53:e1:46:9f:2a:d1:2b:40:
4c:d5:bc:e8:6b:4b:ca:16:74:70:9a:05:77:d8:77:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:0D:E4:93:68:C1:A7:35:77:B6:69:40:3D:41:67:E0:D9:A3:22
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.72.0/21
31.192.224.0/21
37.152.56.0/21
46.21.96.0/20
46.246.0.0/17
79.99.0.0/21
80.67.0.0/20
91.213.246.0/24
91.217.189.0/24
91.223.232.0/24
91.228.193.0-91.228.195.255
94.247.168.0/21
109.74.0.0/20
159.253.24.0/21
178.73.192.0/18
185.11.96.0/22
185.21.88.0/22
185.39.144.0/22
185.118.36.0/22
185.157.220.0/22
188.126.64.0/19
193.108.196.0/24
193.201.96.0/24
194.54.164.0/22
195.20.206.0/23
195.149.101.0/24
195.238.76.0/23
195.246.120.0/23
212.112.0.0/19
IPv6:
2a00:1a28::/32
2a02:750::/29
2a02:e400::/29
2a03:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
43:93:c8:c9:43:86:54:93:40:a9:9d:f6:dd:13:27:c5:cf:4b:
53:eb:80:ff:ae:fb:7d:c3:db:c3:7b:52:c7:fc:62:b5:9a:05:
aa:82:75:cb:1d:b0:d1:87:5c:01:ef:8a:aa:22:d7:ee:3c:c6:
84:7a:1c:57:8f:26:ab:87:ce:82:67:de:a4:d5:9f:a8:5a:82:
0e:d4:3f:5f:87:8e:b3:b2:cb:c9:e2:3a:57:99:bb:1b:46:41:
d9:59:da:d5:a2:95:56:b0:d0:5d:80:46:ab:68:94:c7:c5:46:
c3:10:51:e4:f4:c1:7c:ad:62:41:08:c4:cc:14:63:06:c7:20:
0c:e7:c1:3b:85:12:3d:32:9b:42:1b:0a:4a:9e:c6:64:1f:4c:
f8:a2:05:20:5a:57:d8:43:05:4e:e5:de:40:61:26:70:e5:dd:
be:b6:7a:e9:49:84:93:80:4c:e0:03:8f:94:49:07:9e:91:8c:
21:c5:c5:6a:4b:83:a0:d4:b1:78:f2:e6:a7:37:01:70:20:dd:
90:99:ab:cd:b3:da:6c:57:77:14:ea:1a:fc:3b:f3:9a:99:63:
45:38:4b:ad:53:83:84:44:15:bb:0b:c2:82:16:3e:9e:6b:84:
a0:0e:46:46:52:e0:ab:b5:b1:c4:c3:5b:90:58:11:06:0f:3a:
7b:25:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:51 2025 by rpki-client