Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/i0grs4Buy5MhlZe0dL3P8E7HTkM.roa
File: i0grs4Buy5MhlZe0dL3P8E7HTkM.roa (raw, json)
Hash identifier: 6zg6/yqW+/whpYc84QfU2yJPTdXhIktcl5Sh1NTG3eU=
Subject key identifier: 8B:48:2B:B3:80:6E:CB:93:21:95:97:B4:74:BD:CF:F0:4E:C7:4E:43
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451A8E4C5B19F5FE6226201F87C49D
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/i0grs4Buy5MhlZe0dL3P8E7HTkM.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.124.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.81.76.0/22 maxlen: 22
45.93.80.0/24 maxlen: 24
45.129.204.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.133.224.0/22 maxlen: 22
45.134.52.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.108.0/22 maxlen: 22
45.139.168.0/22 maxlen: 22
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.143.244.0/22 maxlen: 22
45.144.168.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
87.236.150.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1a:8e:4c:5b:19:f5:fe:62:26:20:1f:87:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b482bb3806ecb93219597b474bdcff04ec74e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:b5:d4:39:86:9a:d1:00:4e:42:9d:a0:bd:
b5:5c:61:7d:48:c5:57:ce:89:35:1b:30:25:10:c5:
3b:0b:c6:6d:21:1a:ff:8d:d6:6b:b4:d2:90:fc:48:
47:6f:35:c5:30:85:8c:28:17:76:5e:92:23:a6:2d:
30:e0:36:2f:af:e2:98:4d:7d:3a:19:b4:2a:95:5d:
68:f4:86:fd:33:8e:ee:ac:69:e1:f3:25:40:69:f1:
f6:80:d4:03:17:16:05:c8:5a:f2:eb:45:78:95:97:
06:bd:c9:c1:2e:22:53:bd:f5:70:51:c0:0f:33:76:
9e:3c:09:c7:91:2e:58:5a:de:60:55:1c:e8:48:db:
32:9e:12:dc:58:02:0a:d6:36:6e:cd:3b:e6:d0:80:
1f:ef:87:2c:4d:fe:df:df:47:5b:98:8f:a9:97:31:
a6:47:ba:77:ec:dc:14:3a:18:96:fc:1b:a0:52:57:
eb:09:ab:53:04:de:0d:cb:ae:40:a4:5d:cc:ca:8a:
0c:3c:f1:36:65:5a:0f:a9:d1:fd:62:6f:33:e8:f4:
5f:5a:22:6b:04:f0:5c:fe:c6:46:e0:7b:28:e9:41:
3b:7d:1c:c5:a3:fe:4a:82:05:a9:c9:c5:94:41:9f:
88:f8:69:8c:8d:1d:eb:10:6b:3a:f9:71:6c:79:54:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:2B:B3:80:6E:CB:93:21:95:97:B4:74:BD:CF:F0:4E:C7:4E:43
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/i0grs4Buy5MhlZe0dL3P8E7HTkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.124.0/22
45.11.196.0/24
45.15.238.0/24
45.81.76.0/22
45.93.80.0/24
45.129.204.0/22
45.132.20.0/22
45.132.38.0/24
45.132.128.0/23
45.133.224.0/22
45.134.52.0/22
45.135.28.0/22
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.139.108.0/22
45.139.168.0/22
45.140.64.0/24
45.140.72.0/22
45.143.244.0/22
45.144.168.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
84.246.110.0/24
87.236.150.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.157.111.0/24
93.190.120.0/23
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/24
176.116.28.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
192.109.91.0/24
192.109.100.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
193.187.97.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ed:85:f0:a0:15:d4:01:13:73:3f:eb:bc:ef:ad:7e:f1:58:
b4:d2:8d:e4:04:db:a5:d9:8b:b5:28:aa:fb:1f:33:f7:c6:10:
28:0b:e8:db:59:1d:41:0f:27:f1:82:52:24:65:64:94:ff:de:
7f:f8:80:33:76:ff:83:37:0a:6e:82:9e:47:1c:55:8f:d3:d5:
88:72:4f:c8:a4:0d:9e:39:db:75:8f:f2:2a:17:b4:ac:9a:8b:
7b:7b:3b:6f:bc:90:c2:f7:46:9f:86:65:36:da:3c:fb:ad:35:
3e:fd:20:78:7c:94:5a:3d:18:c9:c5:73:91:ca:a2:4d:c9:5c:
5f:3f:ff:fd:e9:98:ea:1d:10:ff:53:82:30:8d:f0:b6:3a:6d:
b8:8c:7c:d6:b7:63:8b:8b:4e:8e:63:d1:f9:37:73:52:9c:18:
f0:cd:d5:e9:bc:5e:eb:5d:95:7c:c6:db:47:2e:d3:b7:68:81:
2f:8c:c4:2d:02:ce:f5:ca:c2:d1:d3:19:1c:dc:2d:ca:c6:cf:
3a:c7:62:72:bd:7d:11:57:ac:a4:51:b3:0f:32:27:04:9e:1b:
3b:2a:cd:ba:36:ee:7b:83:3b:73:b4:76:a7:d7:06:54:7d:a9:
1d:47:63:5e:78:f1:10:d8:0a:72:66:ef:7c:3e:67:d6:0a:44:
c0:fb:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:42:01 2025 by rpki-client