Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/q6SfOAJA_U5fatrDjn-9fFYG--I.roa
File: q6SfOAJA_U5fatrDjn-9fFYG--I.roa (raw, json)
Hash identifier: l3WkOofpVoiRviPwnmseR5QRVlk7108nGPfSpcLJ5Ik=
Subject key identifier: AB:A4:9F:38:02:40:FD:4E:5F:6A:DA:C3:8E:7F:BD:7C:56:06:FB:E2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0195B873C5B6690C5FFA3A9F8D9F50A5D910
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/q6SfOAJA_U5fatrDjn-9fFYG--I.roa
Signing time: Fri 21 Mar 2025 11:25:49 +0000
ROA not before: Fri 21 Mar 2025 11:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8903
IP address blocks: 45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
85.209.72.0/22 maxlen: 22
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.45.208.0/24 maxlen: 24
91.132.28.0/23 maxlen: 23
91.132.31.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.46.0/23 maxlen: 23
178.19.47.0/24 maxlen: 24
185.71.28.0/24 maxlen: 24
185.203.20.0/22 maxlen: 22
185.203.20.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.140.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.182.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:73:c5:b6:69:0c:5f:fa:3a:9f:8d:9f:50:a5:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 21 11:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba49f380240fd4e5f6adac38e7fbd7c5606fbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:30:21:82:d1:36:b9:93:7f:ef:90:63:d8:
c4:86:f1:d7:36:81:8e:e2:e2:10:54:f4:ed:a1:3c:
7c:01:d3:22:d8:bd:53:d9:7f:e7:e1:3f:60:eb:3d:
cb:c7:ef:78:26:1a:4e:f4:06:ad:09:cb:f7:2e:ef:
f1:ca:dd:16:b0:c4:5f:e1:62:e8:4b:cb:c1:44:8e:
c8:46:c6:09:e2:cf:9b:eb:0f:b6:b9:dd:1d:37:0a:
a3:78:2e:4f:8e:e3:db:77:99:99:eb:8c:0a:31:84:
a5:c2:8e:a1:9e:7f:9a:b7:7a:6c:8d:18:cd:57:98:
34:6c:0d:b5:0b:65:c8:5f:01:f4:29:d7:0d:61:a3:
91:71:d1:6d:1a:5d:11:a9:3d:a6:7d:8c:0c:a2:7d:
18:a1:e7:2e:c7:a3:f8:62:a8:ab:90:b5:e0:0c:11:
f0:e7:cb:b6:09:42:95:a9:6d:89:f8:99:fa:7b:f0:
e4:0a:57:cf:2e:a1:c1:96:b3:8f:f4:0d:5c:38:a1:
46:50:9c:25:be:39:e4:82:1d:9d:9a:73:4d:7c:1a:
23:e6:0f:3d:04:2e:aa:03:a7:97:9a:77:6d:ff:2c:
70:0b:75:26:70:b5:5e:8b:26:1c:61:9e:d0:8c:dc:
08:df:1d:27:38:73:87:11:ac:3a:55:1b:96:6e:fc:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:9F:38:02:40:FD:4E:5F:6A:DA:C3:8E:7F:BD:7C:56:06:FB:E2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/q6SfOAJA_U5fatrDjn-9fFYG--I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.50.0/23
80.66.112.0/22
80.66.117.0-80.66.127.255
85.209.72.0/22
89.42.70.0/24
89.44.150.0/23
89.45.208.0/24
91.132.28.0/23
91.132.31.0/24
94.198.47.0/24
178.19.34.0/23
178.19.44.0/22
185.71.28.0/24
185.203.20.0/22
185.229.215.0/24
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.140.0/24
194.15.146.0/24
194.15.182.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
99:31:88:2a:d8:a0:9a:cc:81:c0:e2:22:e4:34:6d:14:63:2e:
cf:c6:49:70:54:a5:ba:1d:58:93:26:18:ec:3b:2f:c1:56:8e:
81:a4:7b:8c:e6:88:39:bc:77:44:18:9f:2c:de:2e:0d:9d:28:
f2:bd:2c:18:5d:26:82:ad:41:33:67:b2:93:9f:c3:52:33:e9:
a0:05:f2:a4:b2:bc:f1:e9:96:1b:c6:0c:a8:2a:60:d7:2f:e8:
82:fa:ca:91:4e:2c:99:74:7f:f6:c7:85:a1:10:ae:14:3a:45:
8a:ef:c3:42:9b:90:65:45:14:eb:5c:28:e4:cf:0a:94:66:ce:
df:06:f6:d2:ed:14:5b:4f:d9:7a:2f:99:89:e3:4d:25:80:5e:
9b:f5:09:d0:a6:8f:89:df:c3:9d:a0:34:e2:e4:06:62:bf:aa:
9f:8f:27:5b:f0:15:c4:ed:75:10:0c:82:d5:3d:b6:38:14:fb:
6c:a6:1c:3d:8d:9d:c8:77:c8:18:33:e4:d0:d3:e7:8a:8f:5a:
7a:6e:be:f5:d7:af:0d:fc:42:bb:bc:de:8f:d5:c9:1a:96:e2:
e4:f8:aa:bb:be:0e:b6:5f:f2:65:27:3a:8d:61:5e:16:33:81:
3c:f5:95:76:60:ac:a9:70:45:5d:b6:f0:e5:25:a4:12:08:df:
76:a4:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:27:04 2025 by rpki-client