Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/iTy_X9TtImKrzgXqe4cqSrG2SNU.roa
File: iTy_X9TtImKrzgXqe4cqSrG2SNU.roa (raw, json)
Hash identifier: WJMhiVIQXlrVC/AnP0/l5Ke5sRxMHtV475kTEbILnQo=
Subject key identifier: 89:3C:BF:5F:D4:ED:22:62:AB:CE:05:EA:7B:87:2A:4A:B1:B6:48:D5
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01942521C89849459FCD79EBA1D2135A0C58
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/iTy_X9TtImKrzgXqe4cqSrG2SNU.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210756
IP address blocks: 5.8.42.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.3.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
31.184.200.0/24 maxlen: 24
31.184.201.0/24 maxlen: 24
31.184.202.0/24 maxlen: 24
31.184.203.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.35.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
95.181.176.0/24 maxlen: 24
95.181.177.0/24 maxlen: 24
95.181.178.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
2a11:27c0::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:20::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:210::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c8:98:49:45:9f:cd:79:eb:a1:d2:13:5a:0c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893cbf5fd4ed2262abce05ea7b872a4ab1b648d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:50:09:7e:bc:f7:30:0b:52:47:b8:c1:b1:
09:31:54:15:1c:b2:db:aa:f2:8b:e5:c1:ce:f4:bf:
d9:a1:f0:c4:d6:15:e6:7d:34:cb:67:26:c0:a5:c4:
07:c4:d0:14:61:2f:e8:56:1e:9a:c3:4b:9f:26:e0:
fc:c7:67:dd:0f:5b:b9:cd:34:aa:de:78:97:1f:cd:
6a:82:b8:23:e0:2d:45:47:45:11:3a:6b:01:91:71:
61:c5:1e:aa:29:75:cb:25:0b:43:3f:de:ff:2a:af:
d2:19:c7:9c:a3:ab:a0:c0:29:4b:13:f4:6a:c5:ce:
2f:d7:1e:61:cd:c8:8b:79:39:88:41:7b:84:fe:8f:
aa:51:8f:b8:0d:ad:bc:83:be:06:b7:c0:59:05:04:
5f:8e:e1:cf:b5:11:2a:0d:15:07:62:f7:30:bb:cc:
3b:1f:39:82:9a:49:22:67:9d:67:f1:ef:6a:0c:d1:
f7:7a:a3:f4:2e:32:e9:06:10:b1:a5:94:f5:91:7e:
7e:26:d5:5e:0c:21:16:6f:c6:b0:0b:37:95:bd:11:
9c:f5:4d:20:99:2b:05:cf:7f:f9:de:58:e8:c3:76:
d3:40:3b:e1:df:ef:93:9d:a1:fa:39:71:20:e6:d0:
fc:7c:4b:94:16:3f:0c:0f:36:f0:88:2c:d7:c6:76:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:BF:5F:D4:ED:22:62:AB:CE:05:EA:7B:87:2A:4A:B1:B6:48:D5
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/iTy_X9TtImKrzgXqe4cqSrG2SNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.200.0-31.184.205.255
37.9.36.0/22
37.9.52.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.36.255
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.176.0/21
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:100::/40
2a11:27c0:210::/44
2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:e3:7f:66:cf:0e:aa:8d:5b:eb:55:a5:85:d9:11:e9:60:45:
7f:f3:95:01:bf:d2:9c:68:c5:b2:0f:22:d7:fd:a7:47:c6:0c:
67:db:5c:6c:c4:b9:64:c1:86:98:e8:10:95:85:7b:b6:17:15:
95:14:1f:6f:f2:62:a6:c3:76:d6:ef:ea:12:7d:13:6b:e6:85:
66:88:f1:9e:29:f8:d7:14:0b:2a:96:22:c6:a7:2a:3c:57:44:
39:dc:7c:b9:84:fb:25:75:ad:46:db:cf:3f:29:2d:b3:78:d6:
5d:88:8d:1d:c2:a2:c2:49:7d:31:34:0f:d4:bb:60:16:d7:02:
27:e0:3f:26:42:b3:c2:4f:b5:41:2b:8c:38:dd:c3:4e:c4:98:
93:6c:f9:a6:33:77:ca:ec:7a:da:e9:da:9c:34:8e:2d:9a:62:
92:ce:c4:c4:05:9b:2b:ba:7b:cf:2c:c8:4b:02:7e:78:44:c5:
0f:47:04:3b:98:e7:f1:63:e1:42:9e:56:74:a0:db:fc:11:37:
97:91:f1:84:c0:d2:fc:1e:56:08:d9:75:91:b4:d3:ac:7e:dc:
15:58:b0:a0:1f:37:b5:01:63:5b:5c:ee:28:32:f0:e7:f6:e2:
e6:3f:75:bf:93:90:41:b5:b5:1a:11:bf:9f:77:85:13:59:90:
ee:fe:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:48 2025 by rpki-client