Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1-5Fi3WM50atp2DkB7673qszYGEU.roa
File: 1-5Fi3WM50atp2DkB7673qszYGEU.roa (raw, json)
Hash identifier: kN65NB/E7sHscyK55wK1hzazTC32+9Bs5gcTM4gjKMo=
Subject key identifier: FB:91:62:DD:63:39:D1:AB:69:D8:39:01:EF:AE:F7:AA:CC:D8:18:45
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0194214409DB2FEF96711CB9915C0530ED69
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1-5Fi3WM50atp2DkB7673qszYGEU.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48635
IP address blocks: 2.57.57.0/24 maxlen: 24
5.157.80.0/21 maxlen: 24
31.25.96.0/21 maxlen: 24
31.186.168.0/21 maxlen: 24
62.221.248.0/21 maxlen: 24
62.221.250.0/24 maxlen: 24
79.99.128.0/21 maxlen: 24
92.63.168.0/21 maxlen: 24
93.180.64.0/21 maxlen: 24
93.187.220.0/22 maxlen: 24
109.72.80.0/20 maxlen: 24
109.106.160.0/19 maxlen: 24
185.27.172.0/22 maxlen: 24
185.37.68.0/22 maxlen: 24
185.56.144.0/22 maxlen: 24
185.66.248.0/22 maxlen: 24
185.87.184.0/22 maxlen: 24
185.94.228.0/22 maxlen: 24
185.94.228.0/24 maxlen: 24
185.95.28.0/22 maxlen: 24
185.103.156.0/22 maxlen: 24
185.103.240.0/22 maxlen: 24
185.107.212.0/22 maxlen: 24
185.107.224.0/23 maxlen: 24
185.109.216.0/22 maxlen: 24
185.159.240.0/22 maxlen: 24
185.175.200.0/22 maxlen: 24
185.182.56.0/22 maxlen: 24
185.187.12.0/22 maxlen: 24
185.223.32.0/22 maxlen: 24
185.224.88.0/22 maxlen: 24
185.233.28.0/22 maxlen: 24
195.238.74.0/23 maxlen: 24
2a00:f10::/29 maxlen: 48
2a01:b940::/29 maxlen: 48
2a01:b942::/32 maxlen: 48
2a01:b944::/32 maxlen: 48
2a02:40c1::/32 maxlen: 48
2a03:3060::/29 maxlen: 48
2a04:6bc0::/36 maxlen: 48
2a05:1500::/29 maxlen: 48
2a05:1500:500::/40 maxlen: 40
2a0b:7280::/29 maxlen: 48
2a0b:8f80::/29 maxlen: 48
2a0b:8f80::/48 maxlen: 48
2a0c:84c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:db:2f:ef:96:71:1c:b9:91:5c:05:30:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9162dd6339d1ab69d83901efaef7aaccd81845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:24:c1:8c:88:8e:02:59:08:70:97:47:20:
ba:be:02:1d:73:97:15:46:86:12:0a:65:9a:87:a3:
36:18:15:d4:58:9b:14:9a:9a:a9:99:ec:dd:30:75:
3c:0b:c1:06:0c:9e:82:4e:17:85:d3:3a:ca:20:a5:
bb:91:1c:b5:84:b1:f9:07:ee:7a:41:43:6e:98:4d:
53:e1:95:d2:62:66:81:d8:ae:0a:fa:e1:f0:c0:f8:
60:83:25:aa:14:d3:37:03:57:0d:a8:f4:65:f1:da:
97:b0:ba:d6:63:45:3e:0a:49:f9:d9:fe:1f:96:3d:
68:04:7a:3d:71:33:02:af:de:ce:b9:19:02:4a:50:
b8:51:c8:59:7c:e2:5c:17:2f:fe:47:6b:7a:97:17:
07:1a:d1:53:17:4d:27:5b:0e:c7:20:0e:c6:1e:60:
00:28:d6:cf:c0:c2:cc:a3:d5:96:22:d9:68:f3:da:
56:42:38:79:ef:3f:1d:74:63:85:7d:e7:ae:03:18:
70:35:c2:a5:23:96:37:8f:87:4d:df:fd:ac:fb:68:
7c:a6:59:68:c1:1b:48:35:71:e6:63:d1:5c:d3:c5:
fa:55:26:b8:5b:95:db:8d:53:46:36:d1:dd:33:36:
f4:1a:92:3a:a3:c1:3b:b4:6d:c1:01:19:d8:b2:78:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:62:DD:63:39:D1:AB:69:D8:39:01:EF:AE:F7:AA:CC:D8:18:45
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1-5Fi3WM50atp2DkB7673qszYGEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.57.0/24
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
62.221.248.0/21
79.99.128.0/21
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.72.80.0/20
109.106.160.0/19
185.27.172.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.87.184.0/22
185.94.228.0/22
185.95.28.0/22
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.233.28.0/22
195.238.74.0/23
IPv6:
2a00:f10::/29
2a01:b940::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
69:b6:e4:11:cb:53:9d:ac:a8:4e:32:1a:f3:40:32:cb:f9:df:
a3:b7:79:9f:65:4e:6f:9e:94:f1:2b:fc:d7:e5:6d:94:3d:61:
cc:bb:e8:01:7c:2f:13:ab:34:77:f5:e6:d3:e4:44:b6:af:27:
b5:2c:86:6d:a9:93:7c:f9:75:a6:fa:fa:f0:e3:3a:c0:a1:1c:
32:31:0c:33:b7:79:51:e6:b0:00:21:b5:55:65:7b:8a:eb:f0:
c3:bd:21:0c:82:29:3e:ec:a4:4e:79:0b:46:df:24:56:f8:99:
1c:7a:74:8d:75:8f:fc:28:93:5b:34:cb:cd:93:b9:71:05:16:
04:1b:79:9f:4e:09:dd:fb:95:d8:0d:f3:34:72:f3:7d:e2:10:
55:ae:02:a8:06:2e:90:d1:2d:4a:1d:f5:6d:4a:4f:20:2c:f1:
a2:08:c8:89:2c:9d:f1:6c:e5:9d:62:46:39:b8:bf:53:c0:82:
94:4e:da:04:b0:65:09:bf:fb:04:fb:00:43:0a:f8:a4:04:5b:
b0:83:5f:0c:a6:77:d2:b5:ec:e6:8a:8e:87:89:c3:28:ca:78:
8f:a8:23:7e:4f:38:e2:7f:29:00:a5:da:a7:b3:f0:8b:7a:98:
e6:23:d5:3c:84:d2:f2:84:bf:e1:a4:74:16:72:ba:4a:ec:43:
b0:37:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:24 2025 by rpki-client