Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa
File: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (raw, json)
Hash identifier: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=
Subject key identifier: BE:26:49:D4:82:EB:2B:E2:E1:BE:8E:84:A4:99:E1:1A:ED:A8:F5:0E
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01942825E378B36397A9D2C862D97A306BD6
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa
Signing time: Thu 02 Jan 2025 17:52:39 +0000
ROA not before: Thu 02 Jan 2025 17:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 2.59.144.0/22 maxlen: 24
5.10.128.0/21 maxlen: 24
5.183.248.0/22 maxlen: 24
23.90.192.0/18 maxlen: 24
31.204.80.0/21 maxlen: 24
45.80.252.0/22 maxlen: 24
45.86.96.0/22 maxlen: 24
45.89.76.0/22 maxlen: 24
45.92.180.0/22 maxlen: 24
45.129.216.0/24 maxlen: 24
45.129.217.0/24 maxlen: 24
45.129.218.0/24 maxlen: 24
45.133.68.0/22 maxlen: 24
45.142.108.0/22 maxlen: 24
45.152.16.0/22 maxlen: 24
46.18.120.0/22 maxlen: 24
46.18.124.0/24 maxlen: 24
46.18.125.0/24 maxlen: 24
46.18.126.0/23 maxlen: 24
62.192.156.0/22 maxlen: 24
79.99.160.0/21 maxlen: 24
88.86.224.0/19 maxlen: 19
88.218.12.0/22 maxlen: 24
92.119.232.0/22 maxlen: 24
94.154.4.0/24 maxlen: 24
94.187.128.0/19 maxlen: 24
168.220.128.0/19 maxlen: 24
185.20.16.0/22 maxlen: 24
185.48.252.0/22 maxlen: 24
185.86.88.0/22 maxlen: 24
185.87.100.0/22 maxlen: 24
185.98.116.0/22 maxlen: 24
185.132.64.0/22 maxlen: 24
185.133.80.0/22 maxlen: 24
185.134.156.0/22 maxlen: 24
185.135.176.0/22 maxlen: 24
185.138.116.0/22 maxlen: 24
185.163.136.0/22 maxlen: 24
185.163.212.0/22 maxlen: 24
185.163.220.0/22 maxlen: 24
185.163.228.0/22 maxlen: 24
185.169.156.0/22 maxlen: 24
185.186.88.0/22 maxlen: 24
185.191.36.0/22 maxlen: 24
185.197.108.0/22 maxlen: 24
185.241.140.0/22 maxlen: 24
185.254.8.0/22 maxlen: 24
192.214.192.0/19 maxlen: 24
195.216.140.0/22 maxlen: 24
2a00:41e0::/29 maxlen: 48
2a00:6780::/29 maxlen: 48
2a01:648::/29 maxlen: 48
2a05:b780::/29 maxlen: 48
2a05:c100::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e3:78:b3:63:97:a9:d2:c8:62:d9:7a:30:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jan 2 17:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be2649d482eb2be2e1be8e84a499e11aeda8f50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:31:3e:cd:29:26:d9:86:80:c2:c9:38:ae:
5a:8c:50:ed:44:05:25:39:35:fc:c2:8c:97:87:6e:
d0:c5:c8:90:25:24:30:b5:f3:e6:cc:42:6b:5c:97:
73:27:ad:07:f4:06:6a:f8:3e:e9:e6:b0:ce:96:0c:
e8:70:b3:e8:97:1b:41:e7:05:03:df:9e:8d:15:49:
f6:d0:a9:cd:cb:aa:9e:de:7c:37:9b:14:e2:2a:87:
e1:67:94:56:03:4a:3f:ce:65:cd:02:56:71:e1:2c:
17:3a:83:7c:fa:14:ee:f3:43:f5:91:56:d1:63:64:
68:1b:08:f2:e0:90:77:ad:0a:41:3b:4d:e5:dd:e2:
ab:ff:f2:90:7a:6d:a6:b9:20:c2:cd:3a:6d:47:92:
29:cc:81:6b:82:e8:92:10:73:21:0c:7e:9d:c8:1b:
bf:d4:71:be:2c:0b:8d:0a:f9:70:31:0f:19:aa:b8:
90:a6:9e:c1:3e:76:7b:d0:cd:08:01:3c:03:fc:03:
87:7f:92:e3:ae:cf:b9:f1:78:c9:f1:8b:63:5a:f6:
1c:22:bb:6f:c7:05:99:d7:a2:5a:5e:9b:10:14:de:
9e:0b:86:33:e4:c6:c7:83:1e:43:fd:68:76:b1:fb:
9d:9c:6a:50:21:75:c3:a2:07:26:68:29:e9:7b:25:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:49:D4:82:EB:2B:E2:E1:BE:8E:84:A4:99:E1:1A:ED:A8:F5:0E
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.144.0/22
5.10.128.0/21
5.183.248.0/22
23.90.192.0/18
31.204.80.0/21
45.80.252.0/22
45.86.96.0/22
45.89.76.0/22
45.92.180.0/22
45.129.216.0-45.129.218.255
45.133.68.0/22
45.142.108.0/22
45.152.16.0/22
46.18.120.0/21
62.192.156.0/22
79.99.160.0/21
88.86.224.0/19
88.218.12.0/22
92.119.232.0/22
94.154.4.0/24
94.187.128.0/19
168.220.128.0/19
185.20.16.0/22
185.48.252.0/22
185.86.88.0/22
185.87.100.0/22
185.98.116.0/22
185.132.64.0/22
185.133.80.0/22
185.134.156.0/22
185.135.176.0/22
185.138.116.0/22
185.163.136.0/22
185.163.212.0/22
185.163.220.0/22
185.163.228.0/22
185.169.156.0/22
185.186.88.0/22
185.191.36.0/22
185.197.108.0/22
185.241.140.0/22
185.254.8.0/22
192.214.192.0/19
195.216.140.0/22
IPv6:
2a00:41e0::/29
2a00:6780::/29
2a01:648::/29
2a05:b780::/29
2a05:c100::/29
Signature Algorithm: sha256WithRSAEncryption
85:e9:12:2c:bc:8c:e1:fb:c4:d6:d7:3f:28:12:ef:d7:0a:91:
f8:ec:23:d9:96:ae:41:b2:18:23:53:1d:46:e3:10:e5:ee:c8:
15:17:e4:fa:bb:87:b4:f2:4e:3d:1a:91:5e:01:e6:5a:ee:d3:
98:b3:1d:cf:55:dc:53:be:76:54:89:0c:65:bc:c6:93:e9:6b:
73:bc:56:8a:fa:f8:ba:36:88:7a:a4:30:3f:fc:71:7c:bb:2e:
43:7c:fc:37:1d:db:5e:29:92:da:a5:14:c6:56:4d:0b:5d:74:
e4:dc:fb:c7:5f:8f:a1:04:eb:a1:fb:a9:de:86:bc:b2:4b:7a:
3e:48:fc:f9:c3:fa:90:86:c7:db:18:ed:f1:0d:86:75:6a:02:
df:fb:78:32:2c:7f:2a:54:fd:b2:09:86:87:f7:de:ee:37:a8:
27:74:b0:74:6d:46:7c:6e:42:27:57:db:f9:05:d6:96:a8:58:
e0:44:b2:de:92:ee:20:8e:6e:3e:8e:9d:40:1f:2c:ae:f6:dc:
9f:00:f4:5a:ff:ef:1b:d8:a9:b4:d7:45:1d:a5:29:59:e0:c6:
1b:6c:9d:3f:77:2f:c4:e8:9b:18:57:11:37:2a:18:0e:be:22:
eb:c1:45:f5:8a:7f:9a:35:1d:aa:df:a8:50:c6:bd:88:b1:11:
05:fe:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:05 2025 by rpki-client