Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/96CIMKKoqN02QJYrluNPvEhoHEk.roa
File: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (raw, json)
Hash identifier: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=
Subject key identifier: F7:A0:88:30:A2:A8:A8:DD:36:40:96:2B:96:E3:4F:BC:48:68:1C:49
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019643E82895C2476A63473488FDBCEAFBB4
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/96CIMKKoqN02QJYrluNPvEhoHEk.roa
Signing time: Thu 17 Apr 2025 13:20:10 +0000
ROA not before: Thu 17 Apr 2025 13:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 2.56.63.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:e8:28:95:c2:47:6a:63:47:34:88:fd:bc:ea:fb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Apr 17 13:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a08830a2a8a8dd3640962b96e34fbc48681c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:67:36:a6:9c:7e:99:8e:cd:3f:71:34:61:
ec:bd:03:4d:a2:af:a2:42:45:76:40:6b:03:75:13:
ed:88:37:b6:72:7a:77:59:77:b4:3b:ea:1c:38:23:
88:bd:42:4b:d5:2b:1a:ce:c0:ad:cf:7c:45:17:0c:
ed:74:a6:48:1d:6e:b1:60:0b:95:b8:44:58:1f:58:
21:4d:74:9c:38:10:78:4c:18:cb:65:8a:f8:84:4d:
d1:fd:56:46:6a:2f:ec:5d:e5:be:8c:39:d6:de:d8:
40:ff:8a:4b:bf:59:dc:e5:e0:68:13:4f:0a:e7:09:
bf:c3:f2:62:fa:ff:a7:61:5d:61:10:32:c9:86:b6:
a1:84:f3:7b:9f:0e:9a:0d:e3:c3:e4:bf:dc:68:c5:
24:a3:f3:2c:1d:68:90:0d:75:33:b4:08:cc:c4:b6:
16:b7:e0:6e:32:8f:07:d8:0e:5d:2f:2e:14:ec:2d:
0b:e3:ec:4f:5f:72:f5:db:7b:44:68:b4:8d:35:cc:
20:41:d4:d3:ed:1d:bc:6d:1c:87:0e:a7:28:f8:cb:
51:c0:1e:5f:c6:5f:0b:4e:d5:d8:55:87:1d:df:f0:
d7:8e:10:6e:5a:4e:05:0d:8b:a9:c6:34:fd:fd:0e:
1f:d5:75:4a:67:d9:c3:8c:23:4d:b9:fd:c5:16:32:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A0:88:30:A2:A8:A8:DD:36:40:96:2B:96:E3:4F:BC:48:68:1C:49
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/96CIMKKoqN02QJYrluNPvEhoHEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.63.0/24
31.210.152.0/21
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
c4:18:5c:fc:ae:0d:11:51:ce:0e:6d:bf:61:02:72:7e:f2:0e:
a9:61:63:00:f8:bc:2e:da:66:cf:3b:10:0c:d3:85:da:04:21:
c0:79:89:fb:21:06:8d:9b:d9:4e:54:f1:a7:61:6d:73:a0:3c:
21:94:58:a2:2f:3e:08:b4:a8:c2:b5:16:b2:97:b1:35:a8:64:
b4:26:91:4a:42:38:8a:6e:3d:de:40:3b:cd:a2:7b:af:9e:4c:
5d:e0:b0:02:f8:a7:78:e9:74:97:53:95:08:38:78:b0:ab:a3:
08:df:b2:8e:66:05:64:e8:a0:60:1d:ab:4c:a4:b0:45:e0:9a:
1e:29:db:35:b6:5f:70:55:77:5f:dd:5f:95:64:e1:93:16:24:
f7:b1:5d:34:9c:bc:37:66:7b:f5:ae:8c:f8:43:99:5e:54:15:
6a:ee:25:5a:bb:bf:f3:cb:6c:95:53:78:83:5d:85:3e:aa:e2:
c9:73:65:5f:fa:2f:d5:f3:59:88:32:9f:9e:1c:3c:b6:b0:0b:
43:52:01:7a:b3:ae:62:b6:b7:da:d9:ed:0f:51:9d:85:5c:2e:
84:b7:75:7e:7c:b5:32:7b:5a:de:8c:f1:b5:58:65:dc:1c:af:
36:34:2d:44:14:37:05:61:de:ba:e0:c2:ce:67:ef:2b:c4:e7:
cd:ec:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:20:57 2025 by rpki-client