Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RazJIaEDZjrTzJYtgc84EOBOTWU.roa
File: RazJIaEDZjrTzJYtgc84EOBOTWU.roa (raw, json)
Hash identifier: gAilQIT3Ahtwy9Jl9Yt4pIh0Fan9cVG0C8KEJtrIVNQ=
Subject key identifier: 45:AC:C9:21:A1:03:66:3A:D3:CC:96:2D:81:CF:38:10:E0:4E:4D:65
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440373F1CEBD487EE042BFDC218DD3
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RazJIaEDZjrTzJYtgc84EOBOTWU.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 5.172.179.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.10.248.0/22 maxlen: 22
45.87.255.0/24 maxlen: 24
45.93.12.0/24 maxlen: 24
45.93.14.0/24 maxlen: 24
45.93.15.0/24 maxlen: 24
45.94.228.0/22 maxlen: 22
45.95.28.0/24 maxlen: 24
45.95.148.0/22 maxlen: 22
45.128.129.0/24 maxlen: 24
45.129.4.0/22 maxlen: 22
45.142.254.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
93.190.123.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.222.214.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
193.201.9.0/24 maxlen: 24
194.50.73.0/24 maxlen: 24
194.104.232.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
217.8.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:03:73:f1:ce:bd:48:7e:e0:42:bf:dc:21:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45acc921a103663ad3cc962d81cf3810e04e4d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:66:b7:51:18:09:97:25:e7:5b:ea:e4:7d:
57:ed:2c:a5:22:7f:15:01:12:cd:c4:d5:af:8d:87:
23:34:7a:ef:aa:41:fd:c6:1b:31:3d:6e:b5:ae:ff:
16:5c:1b:05:5f:66:a1:58:d6:2d:f2:11:02:98:2a:
69:e6:69:dc:ca:d3:a3:79:f8:51:95:50:a6:d9:d2:
b1:d0:40:cd:a2:e0:8c:78:2a:2c:8f:32:69:88:56:
e7:bb:96:5a:3e:3f:b5:72:04:30:1c:77:56:1f:22:
45:6c:ea:2c:68:22:d4:fb:f4:aa:97:c3:b5:4d:36:
16:f8:0c:54:eb:6d:66:c9:5c:82:36:4b:d3:a7:77:
e5:5d:ac:9c:83:83:14:75:c9:7f:e7:13:03:b9:01:
d7:38:11:4e:af:c5:53:36:46:0e:eb:d3:0b:a6:79:
64:68:c2:43:a5:2a:32:96:0a:fc:35:1a:30:a0:4a:
93:db:84:cd:f4:7b:cd:32:db:82:7f:35:b3:32:38:
41:03:6f:a6:5c:04:98:33:20:dc:ce:51:4a:a5:46:
98:f7:d4:c9:8f:e5:9a:f8:74:2e:c7:8a:df:02:19:
0f:0f:bf:e9:22:21:4e:c0:7e:9b:71:7b:db:40:71:
3a:22:05:00:c7:cf:20:b2:af:55:d5:15:16:19:2b:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:C9:21:A1:03:66:3A:D3:CC:96:2D:81:CF:38:10:E0:4E:4D:65
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RazJIaEDZjrTzJYtgc84EOBOTWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.179.0/24
31.41.253.0/24
45.10.248.0/22
45.87.255.0/24
45.93.12.0/24
45.93.14.0/23
45.94.228.0/22
45.95.28.0/24
45.95.148.0/22
45.128.129.0/24
45.129.4.0/22
45.142.254.0/24
88.151.11.0/24
91.190.158.0/24
93.190.123.0/24
94.154.188.0/23
94.154.191.0/24
176.116.17.0/24
176.126.98.0/24
176.126.102.0/24
185.222.214.0/24
193.187.106.0/24
193.201.9.0/24
194.50.73.0/24
194.104.232.0/24
212.60.7.0/24
217.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:19:45:2f:4c:3e:1a:57:61:e6:60:1d:ce:d1:28:31:de:a3:
72:a7:e7:3e:5d:2a:04:f1:02:9c:6a:ed:7a:ba:68:e5:2c:0d:
90:23:b8:c9:b1:1e:43:3f:e0:12:6b:f1:6f:b8:f9:58:cc:74:
84:96:80:2e:08:4f:e5:9b:f4:75:c5:8b:94:e9:92:c0:da:b4:
f9:ca:31:2f:8e:de:ef:95:cc:a7:c8:d2:e5:87:fa:84:5b:da:
de:71:bd:6a:74:11:99:9e:e0:43:30:54:56:c2:5f:c0:d4:6f:
39:18:5c:da:b9:7e:a5:78:a6:91:12:6a:ea:80:93:a5:b8:13:
cb:b7:89:f6:ec:e9:b7:bd:49:25:4e:a7:31:b3:0b:73:b3:6a:
fd:d3:88:bb:33:7d:3e:9f:2c:2a:13:37:9f:42:51:ae:b5:cd:
e8:46:6d:d4:6a:f3:a5:c6:a2:85:0b:b5:90:b9:cd:5b:ca:71:
93:90:f3:28:df:0e:61:6a:f0:29:ae:9e:a4:33:53:31:5a:34:
e8:26:b6:3c:39:51:df:b6:02:1c:a2:2f:29:49:05:39:ea:5e:
1b:4d:bd:39:4d:d9:4a:f4:63:7f:41:3e:ae:54:5f:0f:80:50:
0f:37:1d:a7:98:34:1e:3e:bc:ab:6d:e6:cf:69:f6:6e:ff:95:
77:a8:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:56:53 2025 by rpki-client