Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa
File: m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa (raw, json)
Hash identifier: 2qoTzI6foljMw6Ah++0pgV/FdR6MO3DvTBVmA5i5Ook=
Subject key identifier: 9B:5C:C6:8E:96:AA:54:87:EC:D0:54:FD:4C:56:27:55:5D:18:AA:E8
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0194252235D88CED10154B39AFF26826E4FE
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:d8:8c:ed:10:15:4b:39:af:f2:68:26:e4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5cc68e96aa5487ecd054fd4c5627555d18aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:25:cd:b6:2f:c2:f6:76:94:79:df:1d:f3:
40:c0:ba:91:55:84:bc:80:cf:00:3a:a9:3e:31:ec:
30:74:5c:13:e0:7d:22:1a:a5:dc:5a:3a:c8:b2:21:
6e:8f:cc:16:8e:f3:4b:3f:8e:db:4c:7b:b1:c2:12:
a9:77:fc:b1:79:d4:02:88:11:c8:90:54:0b:da:3b:
ce:e8:a8:e6:3d:7a:27:c1:a0:1e:29:89:7a:ce:db:
be:33:df:d7:34:d4:5d:20:d4:17:ca:04:2d:6c:e9:
b3:e0:42:3b:f8:22:00:c7:79:43:da:03:a5:61:a5:
09:02:64:f1:6d:99:ec:e0:a6:23:dd:dc:72:2b:91:
d1:c3:14:d5:f7:6a:ee:67:70:83:eb:1c:7c:9c:66:
4d:d9:4c:94:3f:42:5c:a4:21:a3:4f:ba:68:4d:de:
ac:cf:0f:1a:b9:a4:00:0e:bd:40:a5:ba:0f:d2:36:
90:cb:87:ad:15:f0:02:a3:c1:86:e5:68:4d:1a:60:
b3:4f:a5:46:e4:be:9f:40:9a:db:8f:d3:c8:50:9c:
51:3d:dd:1f:be:53:b9:c0:6d:90:f1:92:a9:66:f8:
de:77:fa:25:59:dd:0b:d2:fb:cd:ad:82:d3:19:5e:
4b:b8:70:49:4b:ce:ab:64:40:e6:fa:69:08:5d:9f:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:C6:8E:96:AA:54:87:EC:D0:54:FD:4C:56:27:55:5D:18:AA:E8
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.96.0-212.126.98.255
212.126.100.0-212.126.102.255
212.126.104.0/21
212.126.113.0/24
212.126.116.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
11:c5:af:0d:8e:ea:94:e6:ee:47:b8:38:32:17:c3:0e:e7:7b:
5d:21:29:2e:fb:97:90:49:2a:a9:5a:56:f4:af:41:ef:e7:db:
75:ef:61:a7:e5:52:39:95:ea:04:55:26:23:4c:d0:6f:c1:9c:
6b:5e:6c:12:cc:ad:dd:85:34:c3:e1:2c:54:c7:46:63:cc:3d:
6a:c1:22:6b:db:6a:ee:30:bf:b4:4a:dc:9e:e6:d3:39:0b:0e:
c3:ad:12:4b:7d:74:e5:fb:ad:e6:31:b5:91:20:44:67:2a:a8:
81:18:f7:d1:39:1a:18:59:73:31:b9:78:74:ec:eb:8f:50:62:
37:08:f3:97:3c:87:1f:3e:60:47:49:85:83:ca:14:c6:0f:98:
10:46:38:88:0f:63:80:79:91:36:d0:e1:2a:b0:4f:d2:da:b0:
00:79:a4:98:93:d0:74:20:5f:36:da:ab:2f:a8:c9:ed:e4:dc:
e6:d6:87:85:97:ec:72:77:38:69:6c:40:a5:86:d6:5c:a1:60:
62:bb:11:96:ad:e5:0e:b6:20:87:86:d8:df:d8:dd:62:42:b2:
4c:4e:e5:64:b3:78:0a:23:00:33:fc:45:2e:e8:83:e5:31:d2:
b0:fe:70:7a:7a:70:d6:1a:b9:d2:7c:2a:1f:ef:17:08:4a:c4:
6d:5d:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:45:47 2025 by rpki-client