Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/GqtAv_BuXbRPjKshxEHFb5Itkl0.roa
File: GqtAv_BuXbRPjKshxEHFb5Itkl0.roa (raw, json)
Hash identifier: zAxwEZuaHnGoxmpgPLKEa104VZbVYpZ2zpmLUtAi86U=
Subject key identifier: 1A:AB:40:BF:F0:6E:5D:B4:4F:8C:AB:21:C4:41:C5:6F:92:2D:92:5D
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 0194C5ECA1FA7EB5738BCFE76FE439DF61BC
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/GqtAv_BuXbRPjKshxEHFb5Itkl0.roa
Signing time: Sun 02 Feb 2025 09:10:06 +0000
ROA not before: Sun 02 Feb 2025 09:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9146
IP address blocks: 31.176.128.0/17 maxlen: 21
31.176.128.0/19 maxlen: 19
31.176.128.0/20 maxlen: 20
31.176.144.0/20 maxlen: 20
31.176.160.0/19 maxlen: 19
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
31.176.192.0/20 maxlen: 20
31.176.208.0/21 maxlen: 21
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
31.176.224.0/20 maxlen: 20
31.176.240.0/20 maxlen: 20
37.203.64.0/18 maxlen: 21
37.203.64.0/20 maxlen: 20
37.203.80.0/20 maxlen: 20
37.203.96.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
80.65.64.0/19 maxlen: 21
80.65.64.0/20 maxlen: 20
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.68.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.72.0/22 maxlen: 22
80.65.76.0/22 maxlen: 22
80.65.80.0/20 maxlen: 20
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
85.92.224.0/19 maxlen: 19
85.92.226.0/24 maxlen: 24
85.92.227.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
85.92.230.0/24 maxlen: 24
85.92.232.0/21 maxlen: 21
85.92.240.0/21 maxlen: 21
85.92.252.0/22 maxlen: 26
89.146.128.0/18 maxlen: 21
89.146.128.0/20 maxlen: 20
89.146.144.0/20 maxlen: 20
89.146.160.0/20 maxlen: 20
89.146.176.0/20 maxlen: 20
92.36.128.0/17 maxlen: 21
92.36.128.0/19 maxlen: 19
92.36.128.0/21 maxlen: 21
92.36.136.0/21 maxlen: 21
92.36.144.0/20 maxlen: 20
92.36.160.0/19 maxlen: 19
92.36.160.0/20 maxlen: 20
92.36.176.0/20 maxlen: 20
92.36.192.0/19 maxlen: 19
92.36.192.0/20 maxlen: 20
92.36.192.0/21 maxlen: 21
92.36.208.0/20 maxlen: 20
92.36.224.0/19 maxlen: 19
92.36.224.0/20 maxlen: 20
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.240.0/21 maxlen: 21
109.163.128.0/18 maxlen: 18
109.163.128.0/19 maxlen: 19
109.163.128.0/22 maxlen: 22
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
109.163.146.0/24 maxlen: 24
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.168.0/21 maxlen: 23
109.163.168.0/23 maxlen: 23
109.163.170.0/24 maxlen: 24
109.163.171.0/24 maxlen: 24
109.163.172.0/22 maxlen: 22
109.163.176.0/20 maxlen: 21
109.163.176.0/21 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.188.0/23 maxlen: 23
109.163.190.0/23 maxlen: 23
109.175.0.0/17 maxlen: 21
109.175.0.0/19 maxlen: 19
109.175.4.0/23 maxlen: 23
109.175.6.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
109.175.12.0/23 maxlen: 23
109.175.14.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
109.175.16.0/22 maxlen: 22
109.175.20.0/23 maxlen: 23
109.175.22.0/23 maxlen: 23
109.175.24.0/24 maxlen: 24
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
109.175.32.0/19 maxlen: 19
109.175.32.0/21 maxlen: 21
109.175.38.0/23 maxlen: 23
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
109.175.48.0/20 maxlen: 20
109.175.64.0/20 maxlen: 20
109.175.96.0/19 maxlen: 19
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.98.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.100.0/23 maxlen: 23
109.175.102.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.106.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
195.222.48.0/20 maxlen: 20
195.222.48.0/21 maxlen: 21
195.222.49.0/24 maxlen: 24
195.222.56.0/21 maxlen: 21
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:ec:a1:fa:7e:b5:73:8b:cf:e7:6f:e4:39:df:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Feb 2 09:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aab40bff06e5db44f8cab21c441c56f922d925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:fe:df:c2:f0:06:17:5e:94:3b:d0:92:cb:
40:a5:31:9a:1e:85:20:d1:df:f0:fe:d6:4f:d7:46:
b9:f3:d3:bc:2c:30:6a:b2:49:95:6f:52:91:24:b9:
f3:67:fa:73:cd:bc:c3:e8:3d:3a:8b:d2:fd:50:30:
13:0f:a4:44:08:84:92:05:a5:05:de:7e:7e:9b:f9:
5c:d7:a2:96:d2:20:95:7e:a5:13:19:eb:e7:46:75:
e3:99:5e:0a:21:d0:e4:e9:00:25:7f:ba:c1:0a:96:
99:70:c6:67:25:be:4a:a2:58:53:cb:85:2c:ae:95:
af:d8:78:f5:13:cc:cf:c4:1a:71:b0:e7:55:0a:fc:
18:17:7e:30:33:90:2b:b3:50:a1:61:02:80:1d:6e:
20:e3:76:9c:e3:94:08:dc:a7:a4:cd:20:dd:d3:22:
6c:7f:03:05:fd:35:52:e2:87:31:f9:f3:83:68:da:
4e:87:ad:fb:37:ba:c2:1a:4c:cc:77:37:ee:ed:fd:
20:12:cd:16:c0:c3:07:7c:4a:21:b9:a9:04:38:53:
73:ad:5b:e7:37:de:c3:97:32:74:4f:f4:d4:db:1a:
c1:86:1c:db:26:81:68:23:a7:3b:6b:43:05:b2:43:
07:a3:89:8b:63:82:d2:f3:0e:57:61:a8:64:2a:7c:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:40:BF:F0:6E:5D:B4:4F:8C:AB:21:C4:41:C5:6F:92:2D:92:5D
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/GqtAv_BuXbRPjKshxEHFb5Itkl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:0f:8f:ae:d0:0a:da:54:fb:c9:29:b0:92:fe:bd:78:22:8c:
4f:aa:62:e6:f9:a7:70:8c:0d:73:a3:e0:47:4b:46:ba:c3:89:
5e:06:e8:af:47:d2:25:38:47:26:7b:a5:91:13:e2:b7:9a:ca:
84:11:fb:d4:bd:45:33:af:df:67:a5:9a:d6:60:9d:76:dd:12:
e3:4f:a0:7e:96:54:e0:31:92:fd:b0:12:e3:06:2d:79:44:19:
58:aa:e6:7e:45:a0:fe:83:a4:f9:ed:5d:31:d6:06:bd:90:4f:
4d:a3:d9:ab:6f:a9:72:3e:f5:f3:40:15:3e:cf:22:3f:db:17:
41:51:5d:82:84:70:b1:5d:10:33:a3:c4:b6:c8:75:1a:82:e0:
3d:b4:a4:18:c2:a7:e5:3e:f2:d2:56:2f:23:cf:6c:79:62:29:
a0:16:5b:81:3f:90:2e:92:09:30:16:0d:31:1a:d3:9c:d3:c9:
78:19:af:1a:13:07:19:94:09:61:df:16:d5:07:11:79:28:72:
45:fb:91:29:3b:e8:32:f9:02:cc:17:13:13:c5:e1:c7:c6:d9:
14:ae:7a:3a:b1:e2:e0:4e:18:1d:8a:e2:12:71:40:78:f3:a2:
d4:fb:cc:6e:6b:da:12:b8:6a:17:87:0b:a2:19:c8:e6:37:4d:
3e:65:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:58 2025 by rpki-client