Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/D6tj7JT1P0jiEOVSthEhCTE5wmk.roa
File: D6tj7JT1P0jiEOVSthEhCTE5wmk.roa (raw, json)
Hash identifier: uOBUARGoP6eXuPcaSTgozIdLNVRwgpXpaylajpzEpjY=
Subject key identifier: 0F:AB:63:EC:94:F5:3F:48:E2:10:E5:52:B6:11:21:09:31:39:C2:69
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0194252236056EADCB21A9325209F249A4E5
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/D6tj7JT1P0jiEOVSthEhCTE5wmk.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/21 maxlen: 21
212.126.96.0/22 maxlen: 22
212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:36:05:6e:ad:cb:21:a9:32:52:09:f2:49:a4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fab63ec94f53f48e210e552b61121093139c269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:12:b2:18:23:7f:21:35:65:73:1a:6a:29:
75:e3:b7:5a:37:b5:23:1c:a2:de:cc:33:93:18:07:
a8:3b:67:a6:ef:38:c7:99:ab:04:7c:04:a5:e3:57:
9a:d3:79:70:01:ed:f6:4c:0d:e1:c8:32:30:72:74:
9d:cc:6d:47:47:73:3d:c2:bb:09:6d:83:b7:44:21:
90:10:d7:71:55:6d:b1:72:ed:de:e8:62:77:00:5d:
40:9e:19:74:91:90:a1:e8:15:dc:23:a5:b8:f5:9f:
fb:25:00:e5:69:40:1b:c8:79:33:27:ad:37:13:cc:
b8:77:19:f0:fa:42:6c:6c:e1:a7:ba:fe:65:b9:5e:
20:5f:eb:c6:89:84:52:7d:b7:3c:9c:f7:8d:2c:17:
df:67:54:99:32:42:09:00:9e:3b:67:13:98:0b:c1:
a8:1a:88:84:ec:57:1c:07:dd:bf:6a:64:54:ec:82:
bd:c4:13:3c:37:af:8b:cd:c0:b2:e4:b1:8a:5f:41:
36:87:38:5a:83:a7:13:70:f7:a9:a0:7b:fc:91:95:
49:f0:27:15:1c:7c:5e:85:0a:e9:c6:20:78:9f:a2:
5c:75:5b:be:90:f6:6b:37:23:c4:4a:90:5b:ea:b0:
9b:2b:b9:c0:8f:5c:fb:a2:6d:3c:55:bd:bb:3d:53:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:63:EC:94:F5:3F:48:E2:10:E5:52:B6:11:21:09:31:39:C2:69
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/D6tj7JT1P0jiEOVSthEhCTE5wmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
d8:45:44:1a:f5:2d:5b:fb:71:7d:e6:68:02:dd:e4:a9:29:26:
d4:e4:10:86:16:f5:7f:14:2b:48:97:fc:98:bb:ff:5b:e9:0a:
79:12:d0:a2:ee:3c:e3:ad:1d:15:c3:c2:f2:1c:cc:d5:d5:bf:
34:b4:4e:21:6e:5a:2d:c5:e9:88:8d:b2:dc:0a:29:a8:b0:43:
60:d5:72:33:cc:c2:54:ce:a5:e9:e7:0e:0d:79:d5:66:16:a0:
d6:01:63:b6:85:a3:b1:04:12:08:25:d3:bf:3e:9a:6c:f8:49:
9d:98:8e:ec:c1:5f:9f:82:7d:f0:b5:ee:fa:7b:c0:55:bf:43:
67:09:1d:2c:4d:23:24:96:03:3a:36:c6:ba:4c:ab:00:24:24:
5b:be:ce:5b:c5:c6:f9:e3:f7:7f:5f:9d:21:67:78:d7:16:3b:
4e:d2:b6:d3:73:eb:f9:b1:fe:85:8a:66:cf:64:db:c7:9c:a2:
b9:bb:8d:ce:13:6d:50:de:d6:8d:9a:dc:36:04:d8:0f:e2:26:
fc:f3:5e:54:2f:d2:1d:64:88:57:9b:cf:7f:55:ec:fd:fc:47:
34:33:7d:5e:dc:bd:df:83:07:9b:d9:fc:3d:37:be:59:c2:9f:
2e:38:fb:16:a1:56:86:96:00:3e:06:05:f7:61:3d:e4:0e:e4:
65:3b:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:09:16 2025 by rpki-client