Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v1PhGzvowzZYQbO9QCGajIpniLE.roa
File: v1PhGzvowzZYQbO9QCGajIpniLE.roa (raw, json)
Hash identifier: RAijyO1hBvjTWjwc6gf9ZfRu/IH2JcH+4bCfLxUSJzE=
Subject key identifier: BF:53:E1:1B:3B:E8:C3:36:58:41:B3:BD:40:21:9A:8C:8A:67:88:B1
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01958037C7C9B8553A994C3158383893BAEA
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v1PhGzvowzZYQbO9QCGajIpniLE.roa
Signing time: Mon 10 Mar 2025 13:21:34 +0000
ROA not before: Mon 10 Mar 2025 13:21:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.21.0/24 maxlen: 24
94.131.22.0/24 maxlen: 24
94.131.23.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
2a01:d0::/29 maxlen: 48
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:37:c7:c9:b8:55:3a:99:4c:31:58:38:38:93:ba:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 10 13:21:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf53e11b3be8c3365841b3bd40219a8c8a6788b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:f5:af:a4:9e:7e:00:35:b9:59:b6:a8:f4:
6e:74:ef:da:9e:b9:69:04:88:8c:06:55:40:a9:37:
16:41:bf:7a:b8:40:a8:0b:c8:2d:40:48:2c:19:10:
5c:d4:6b:5b:d4:31:19:ad:b9:ed:88:c6:a8:d6:f3:
35:c0:e2:3f:d0:84:e7:54:3e:db:bf:07:81:ff:35:
83:20:f8:f0:03:08:3b:8b:82:ea:6b:18:05:8e:0a:
66:6f:63:89:80:08:57:91:61:21:e1:75:42:ab:bc:
e0:29:b6:20:70:61:a1:41:b5:16:3e:d2:de:ed:9c:
02:ff:a2:e1:19:ab:64:43:be:f4:ac:6a:6b:62:6f:
b0:69:e1:ea:6e:9c:2d:03:c2:52:ab:8b:8f:b0:36:
cc:b5:21:f3:7e:3a:db:36:c6:a1:89:1a:49:7a:35:
14:43:4a:f8:fe:fb:18:b2:b0:8c:29:1c:b4:f7:6f:
dc:9b:65:67:80:98:5c:7f:fa:21:02:51:96:d4:61:
70:db:8e:25:c6:f5:b8:03:8a:1c:15:7e:f3:5b:38:
2b:e3:bd:c9:43:1e:e1:42:e3:16:4d:9d:10:48:a7:
f9:cd:78:c5:25:d6:f6:77:47:6c:0a:31:8c:7e:6f:
95:3f:52:e3:ff:47:fa:5d:19:60:0f:8f:ce:6a:77:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:E1:1B:3B:E8:C3:36:58:41:B3:BD:40:21:9A:8C:8A:67:88:B1
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v1PhGzvowzZYQbO9QCGajIpniLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.21.0-94.131.23.255
94.131.124.0/24
94.131.127.0/24
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.120.0/22
95.164.170.0-95.164.175.255
195.214.212.0/22
IPv6:
2a01:d0::/29
Signature Algorithm: sha256WithRSAEncryption
48:1c:92:76:a5:13:32:5b:fd:92:69:99:23:36:d8:96:3b:0a:
37:69:b9:91:73:2f:2f:88:38:75:8c:04:5f:17:6a:e1:dd:ae:
6e:b1:e8:8a:1f:26:a0:7b:92:d3:74:50:58:69:5f:75:5a:5f:
53:35:2e:40:a4:9e:1b:2f:ce:bd:88:f6:6f:ec:8c:4b:71:72:
7b:05:b1:26:50:12:8e:0a:0b:98:4e:35:10:37:03:19:b1:e6:
48:a8:46:c0:93:ce:7b:6b:e2:76:5a:1b:e1:54:0f:74:20:09:
99:b8:31:7e:3c:dd:1c:78:c0:c7:e3:c8:b6:81:ae:c0:23:24:
11:c3:ae:67:e7:69:02:b1:d4:f2:94:d2:ef:34:13:71:86:34:
36:c5:5a:29:19:15:40:5c:9f:1e:cf:a0:d8:14:a4:97:e9:c3:
f5:00:8d:87:04:aa:4c:46:b5:85:22:71:6c:6d:f4:3e:08:29:
67:f8:7c:b7:81:28:68:59:b1:c6:51:a3:08:90:50:55:de:2b:
f8:18:f5:63:8c:9a:8a:8d:4f:5e:db:6f:56:ca:bf:3e:5b:35:
60:4c:90:bf:34:e9:76:0a:77:fb:c7:32:56:6f:1f:38:76:ce:
53:16:01:b2:83:52:92:9d:e5:01:7c:c6:45:0a:ff:47:cb:43:
4f:20:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:35:03 2025 by rpki-client