Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/fRuZqnM9bu9aFuMAbNUnnejAy3E.roa
File: fRuZqnM9bu9aFuMAbNUnnejAy3E.roa (raw, json)
Hash identifier: 0Pw20JeeLvEf3W3rAxbHJOJ0+O4OMpDfQqbFAkyf380=
Subject key identifier: 7D:1B:99:AA:73:3D:6E:EF:5A:16:E3:00:6C:D5:27:9D:E8:C0:CB:71
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019424447DED57641306E3C60C8D9D1A6131
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/fRuZqnM9bu9aFuMAbNUnnejAy3E.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.0.0/18 maxlen: 18
83.132.64.0/18 maxlen: 18
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.134.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
212.113.160.0/19 maxlen: 19
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7d:ed:57:64:13:06:e3:c6:0c:8d:9d:1a:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d1b99aa733d6eef5a16e3006cd5279de8c0cb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:5b:5a:ce:81:6f:66:22:18:d5:cc:c1:5a:
bc:b3:80:5c:9c:78:f6:37:d6:19:9f:c2:6b:f7:b3:
eb:c0:e9:b6:6b:b8:a8:1f:c6:95:63:de:e1:71:47:
e9:55:74:b9:86:ce:ab:5f:07:99:d0:91:90:2e:8c:
15:6e:ce:b2:38:da:07:aa:30:82:4e:d1:de:a2:26:
37:27:c2:31:8d:41:d6:14:48:8f:d8:8f:35:eb:48:
4a:1a:0d:0d:9c:4a:98:3c:ea:1f:ca:b3:b9:92:63:
4b:62:2a:4d:b5:56:2d:ee:92:3e:6a:2e:59:16:b4:
01:5d:90:7c:a1:c7:ed:70:2c:e1:8f:ab:e1:f3:ea:
a4:77:88:bf:7d:24:f6:eb:9f:b3:f8:bd:7d:03:2d:
9b:bb:4d:a9:f2:69:b2:a6:7a:9d:f9:b1:46:25:98:
ac:35:82:89:68:df:0d:62:c2:5b:ee:91:8a:6f:41:
ae:03:25:fa:a9:78:37:84:1f:57:64:41:2c:e7:5e:
48:67:5a:5a:7f:9e:d8:78:fa:d5:f6:e8:ae:27:cf:
b7:c0:b7:1a:b4:80:25:13:3b:ea:eb:dc:44:16:87:
94:ea:51:9c:b7:d8:56:c3:37:1e:16:0c:41:7d:17:
b5:68:15:c8:0e:1b:4e:a9:db:f2:8c:7f:c4:bb:f4:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:99:AA:73:3D:6E:EF:5A:16:E3:00:6C:D5:27:9D:E8:C0:CB:71
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/fRuZqnM9bu9aFuMAbNUnnejAy3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.134.0/24
88.157.230.0/23
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
212.113.160.0/19
213.22.0.0/16
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:42:19:c2:0d:ab:62:e1:f2:ee:e1:1a:38:fe:60:15:23:b3:
47:68:b9:29:e1:ca:9b:d1:ca:fb:84:75:e3:87:5b:fa:39:4c:
b5:b3:88:e5:1b:3e:7d:bf:9b:3d:29:a8:55:ef:a5:f3:68:f8:
f2:89:5c:c7:c8:c3:3f:30:7b:3b:aa:bb:2f:48:38:94:aa:8e:
37:ed:87:fa:77:6a:3d:c3:82:1a:ed:b0:3f:3e:72:7e:84:22:
ed:d7:f2:f1:3e:ed:e7:f9:6f:f1:c9:8b:d6:24:d7:07:92:ec:
06:7b:ae:32:bc:40:38:58:00:65:1e:cd:2c:2c:b5:74:5a:ab:
bc:06:cb:88:91:59:2b:6e:05:88:08:54:a0:96:79:51:e7:fc:
53:ef:56:9c:30:e0:c8:44:cc:36:19:c6:bf:af:2f:64:ee:9e:
bb:c6:86:fd:5e:a0:95:93:cf:78:46:e8:a1:8a:a0:54:a6:9b:
3e:5b:45:08:b8:df:50:bb:d0:98:11:3e:19:d2:8e:f5:33:62:
f7:37:9c:98:39:d5:24:93:58:98:96:4f:51:b3:f3:38:41:6c:
25:3a:c4:ca:d0:cb:34:f2:92:30:06:3b:36:2e:42:9f:cf:64:
7a:90:47:eb:4b:33:1f:35:b6:b1:33:93:f2:d3:c3:5b:52:af:
7d:c3:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:10 2025 by rpki-client