Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/IC2VX1jV_Dwi9TgKflm59IYMQeg.roa
File: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (raw, json)
Hash identifier: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=
Subject key identifier: 20:2D:95:5F:58:D5:FC:3C:22:F5:38:0A:7E:59:B9:F4:86:0C:41:E8
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 01946974BFE1998B146DB70B03E0E7033008
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/IC2VX1jV_Dwi9TgKflm59IYMQeg.roa
Signing time: Wed 15 Jan 2025 10:14:06 +0000
ROA not before: Wed 15 Jan 2025 10:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23764
IP address blocks: 5.10.136.0/24 maxlen: 24
5.10.136.112/29 maxlen: 29
5.10.136.208/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.10.141.136/30 maxlen: 30
5.10.142.0/24 maxlen: 24
5.154.128.0/24 maxlen: 24
5.154.129.0/24 maxlen: 24
5.154.144.0/24 maxlen: 24
5.154.145.0/24 maxlen: 24
5.154.146.0/24 maxlen: 24
5.154.147.0/24 maxlen: 24
5.154.154.0/24 maxlen: 24
5.154.155.0/24 maxlen: 24
5.154.156.0/24 maxlen: 24
5.154.157.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
79.139.0.0/24 maxlen: 24
79.139.1.0/24 maxlen: 24
79.139.2.0/24 maxlen: 24
79.139.3.0/24 maxlen: 24
79.139.4.0/24 maxlen: 24
79.139.5.0/24 maxlen: 24
79.139.6.0/24 maxlen: 24
79.139.7.0/24 maxlen: 24
79.139.8.0/24 maxlen: 24
79.139.9.0/24 maxlen: 24
79.139.10.0/24 maxlen: 24
79.139.11.0/24 maxlen: 24
79.139.12.0/24 maxlen: 24
79.139.13.0/24 maxlen: 24
79.139.14.0/24 maxlen: 24
79.139.15.0/24 maxlen: 24
87.120.16.0/24 maxlen: 24
87.120.17.0/24 maxlen: 24
87.120.18.0/24 maxlen: 24
87.120.19.0/24 maxlen: 24
87.120.20.0/24 maxlen: 24
87.120.21.0/24 maxlen: 24
87.120.22.0/24 maxlen: 24
87.120.23.0/24 maxlen: 24
87.120.24.0/24 maxlen: 24
87.120.25.0/24 maxlen: 24
87.120.26.0/24 maxlen: 24
87.120.27.0/24 maxlen: 24
95.130.192.0/24 maxlen: 24
95.130.194.0/24 maxlen: 24
95.130.199.0/24 maxlen: 24
145.14.64.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.69.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
185.75.172.0/24 maxlen: 24
2a04:f580:9001::/48 maxlen: 48
2a04:f580:9030:100::/56 maxlen: 56
2a04:f580:9210::/48 maxlen: 48
2a04:f581:110a::/48 maxlen: 48
2a04:f581:110b::/48 maxlen: 48
2a04:f581:8040::/48 maxlen: 48
2a04:f581:8070::/48 maxlen: 48
2a04:f581:8090::/48 maxlen: 48
2a04:f581:80b0::/48 maxlen: 48
2a04:f581:8140::/48 maxlen: 48
2a04:f581:8170::/48 maxlen: 48
2a04:f581:8190::/48 maxlen: 48
2a04:f581:81b0::/48 maxlen: 48
2a04:f581:8240::/48 maxlen: 48
2a04:f581:8270::/48 maxlen: 48
2a04:f581:8290::/48 maxlen: 48
2a04:f581:82b0::/48 maxlen: 48
2a04:f581:a00e:a001::/64 maxlen: 64
2a04:f581:a00e:a002::/64 maxlen: 64
2a04:f581:a00e:a003::/64 maxlen: 64
2a04:f581:a00e:a004::/64 maxlen: 64
2a04:f581:a00f::/48 maxlen: 48
2a04:f581:a111::/48 maxlen: 48
2a04:f581:a123::/48 maxlen: 48
2a04:f581:a125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:74:bf:e1:99:8b:14:6d:b7:0b:03:e0:e7:03:30:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 15 10:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=202d955f58d5fc3c22f5380a7e59b9f4860c41e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:18:5e:86:57:98:46:90:85:59:43:c6:f2:
39:34:72:1e:b2:f2:3a:79:e0:86:94:d1:a0:10:64:
87:da:4c:bf:91:1b:09:7b:ee:69:39:0b:2c:b7:1e:
e2:a8:71:5f:ed:6d:9e:24:7d:c3:eb:fa:5b:df:d0:
b4:3e:c8:43:b6:b2:a9:44:ac:1c:a8:cb:e7:2f:b2:
37:e7:91:e5:67:b5:3f:eb:88:06:fc:5c:8a:a3:a1:
80:43:f2:65:91:c2:31:e0:ff:38:33:d8:44:52:6e:
0a:c1:48:3e:11:24:aa:10:0a:e8:8c:70:15:b6:49:
4b:9e:6e:06:58:30:7a:c5:1e:45:c9:92:38:38:01:
54:ce:1f:1e:87:9c:ab:67:b7:8c:3d:b4:01:4c:58:
fe:1a:f2:66:ee:76:6f:f8:51:e0:24:0b:26:3b:3f:
65:b2:c6:d7:a6:62:b2:7b:de:a7:1f:47:0d:89:26:
71:d2:2e:12:31:2f:19:ac:f5:ec:b9:83:5c:ee:78:
43:98:b3:8a:2d:a0:96:0d:9b:6a:98:c4:43:bf:86:
3b:98:3b:83:33:e9:90:a7:e4:9a:f1:66:c0:0b:62:
12:59:4c:be:91:1c:bc:ed:f8:61:af:3b:ed:e9:ef:
c3:b2:6d:64:5b:3b:56:71:80:a1:55:62:29:b7:dd:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2D:95:5F:58:D5:FC:3C:22:F5:38:0A:7E:59:B9:F4:86:0C:41:E8
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/IC2VX1jV_Dwi9TgKflm59IYMQeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.0/24
5.10.141.8/30
5.10.141.136/30
5.10.142.0/24
5.154.128.0/23
5.154.144.0/22
5.154.154.0-5.154.159.255
79.139.0.0/20
87.120.16.0-87.120.27.255
95.130.192.0/24
95.130.194.0/24
95.130.199.0/24
145.14.64.0/24
145.14.66.0/24
145.14.68.0-145.14.70.255
145.14.73.0/24
145.14.76.0-145.14.78.255
145.14.80.0/24
145.14.83.0/24
145.14.85.0/24
145.14.87.0/24
145.14.89.0/24
145.14.91.0-145.14.93.255
185.75.172.0/24
IPv6:
2a04:f580:9001::/48
2a04:f580:9030:100::/56
2a04:f580:9210::/48
2a04:f581:110a::/47
2a04:f581:8040::/48
2a04:f581:8070::/48
2a04:f581:8090::/48
2a04:f581:80b0::/48
2a04:f581:8140::/48
2a04:f581:8170::/48
2a04:f581:8190::/48
2a04:f581:81b0::/48
2a04:f581:8240::/48
2a04:f581:8270::/48
2a04:f581:8290::/48
2a04:f581:82b0::/48
2a04:f581:a00e:a001::-2a04:f581:a00e:a004:ffff:ffff:ffff:ffff
2a04:f581:a00f::/48
2a04:f581:a111::/48
2a04:f581:a123::/48
2a04:f581:a125::/48
Signature Algorithm: sha256WithRSAEncryption
46:7a:9b:a8:d4:1e:84:ac:9c:f8:d7:af:e3:2d:b4:7f:58:64:
65:75:c6:4c:d1:ea:ee:60:75:e5:ec:26:e4:d2:31:c6:d0:23:
d7:9e:28:19:74:48:e9:77:94:4d:26:4d:b7:0c:3c:e5:ee:44:
7b:bd:08:53:ce:8e:19:54:06:15:3d:15:f0:60:f1:09:38:23:
98:20:d6:71:19:20:84:37:41:96:b4:35:df:1a:fb:35:f0:c7:
2a:11:99:6b:fb:31:1b:97:d0:39:e9:f9:03:a2:ce:68:f9:4c:
4d:65:55:84:66:98:9b:2d:36:ee:14:4e:0b:0f:de:a5:99:10:
5a:72:3d:d9:8c:45:c4:ba:d3:01:5c:29:55:71:81:af:85:c8:
98:0e:43:cc:41:f1:4a:af:9e:b3:50:b0:14:1d:1d:7e:57:79:
c9:42:ac:db:78:f6:31:be:5e:73:06:1f:53:cc:40:41:46:28:
8f:68:82:cf:ef:41:42:96:90:a1:0f:ce:d5:3a:b0:55:a9:27:
4f:c5:54:33:2c:41:ee:ee:b1:d8:93:29:ac:e0:cc:e2:03:b0:
09:04:74:48:71:a6:1a:87:9f:f8:ee:21:3e:cb:a5:7a:ff:d4:
4a:1d:6b:4e:c5:53:a9:00:ad:ee:96:1f:87:cf:ff:04:79:1f:
96:65:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:18 2025 by rpki-client