Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/aLZQhetZPScjmzF_3TV-b7UX2aQ.roa
File: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (raw, json)
Hash identifier: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=
Subject key identifier: 68:B6:50:85:EB:59:3D:27:23:9B:31:7F:DD:35:7E:6F:B5:17:D9:A4
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0195F117E5225AEC4ED238EF931A4CCBF078
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/aLZQhetZPScjmzF_3TV-b7UX2aQ.roa
Signing time: Tue 01 Apr 2025 11:23:49 +0000
ROA not before: Tue 01 Apr 2025 11:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
195.5.64.0/24 maxlen: 24
195.5.65.0/24 maxlen: 24
195.5.66.0/24 maxlen: 24
195.5.67.0/24 maxlen: 24
212.49.128.0/18 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 24
212.66.164.0/22 maxlen: 24
212.66.168.0/21 maxlen: 24
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.192.192.0/18 maxlen: 24
213.192.203.0/24 maxlen: 24
2001:ac0::/29 maxlen: 48
2001:ac0::/32 maxlen: 48
2a0d:59c1::/32 maxlen: 32
2a0d:59c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:17:e5:22:5a:ec:4e:d2:38:ef:93:1a:4c:cb:f0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Apr 1 11:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b65085eb593d27239b317fdd357e6fb517d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:a5:50:f7:97:44:16:6a:76:c0:58:60:cb:
cc:65:d6:19:d0:d4:31:66:0c:6a:d5:2d:fe:a4:d5:
dc:b4:b8:b4:a9:ba:a4:c0:2e:11:c2:a5:d6:19:4a:
91:d0:5e:31:c1:3e:16:27:92:2b:18:19:80:60:1a:
a0:83:24:ca:9d:b0:36:9e:2f:ef:ae:93:9c:2f:9f:
19:15:c4:9e:84:28:05:5a:8e:d3:95:f1:31:82:93:
7c:40:54:63:af:38:f1:49:a5:41:a9:55:f2:77:ee:
2b:38:76:57:b2:96:1b:47:d7:37:14:46:91:f9:15:
af:d6:a8:1b:cb:de:cf:17:21:d2:5f:ca:9e:ec:61:
f8:ba:5c:b8:9f:3a:0f:36:65:44:37:18:d7:57:0b:
ae:04:8f:47:e2:b3:ca:8f:62:c6:9e:fd:b4:87:8c:
21:4d:e0:2b:22:d1:bd:49:8f:df:26:4f:56:e3:f8:
57:d7:c8:0a:f7:b9:24:84:9c:11:ae:b7:95:e4:0c:
11:19:cd:0e:05:a0:09:e7:bd:9c:15:88:6b:d2:9b:
90:17:14:46:ec:d3:8b:e6:1f:12:5a:0a:d0:12:28:
96:63:5d:b1:a6:91:a8:4a:6f:d6:4f:6c:1e:c0:8a:
88:44:5e:14:92:e3:e9:50:0f:18:12:5e:fe:e0:ce:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B6:50:85:EB:59:3D:27:23:9B:31:7F:DD:35:7E:6F:B5:17:D9:A4
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/aLZQhetZPScjmzF_3TV-b7UX2aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
2a0d:59c1::/32
2a0d:59c7::/32
Signature Algorithm: sha256WithRSAEncryption
ed:09:02:b3:58:40:6c:c1:3e:cc:59:40:5f:2c:f0:5c:15:84:
3f:5d:9c:7c:fa:ea:90:0b:2d:39:4c:f7:4b:35:9e:92:ff:cd:
5f:99:c5:74:3e:43:79:e0:e7:63:4a:5f:bd:03:73:bf:1a:93:
f6:bd:e1:50:c0:4e:b3:6c:46:bd:13:c7:4a:df:bd:cf:8f:d3:
9d:d9:a0:29:07:23:8b:1f:f6:fb:75:93:b3:79:21:a9:30:ae:
61:2b:68:c3:73:ad:80:f9:93:6d:74:bf:58:0f:37:5f:1d:ac:
68:49:91:bb:66:c6:ba:a5:82:65:22:a5:1e:d9:6d:6d:bf:7f:
bf:62:16:66:eb:43:94:2e:22:c9:cf:a3:60:33:7c:4a:60:72:
b7:4b:dd:ff:df:89:a2:c1:0c:f4:15:45:e2:47:60:bc:65:47:
e0:e6:44:d6:13:ac:94:fb:c9:e3:b3:88:be:74:84:e4:f9:90:
63:74:22:80:10:f9:cd:b5:f6:04:48:2d:df:2b:29:c0:aa:26:
e6:0c:66:32:a8:7c:b2:a9:fe:48:d4:2f:81:c8:25:52:cb:c9:
45:d1:86:a4:be:5d:08:5f:c7:dc:ae:9f:df:5a:40:6a:c7:cd:
7a:a5:d3:7f:ee:c7:65:55:02:4d:d7:67:7a:6d:8d:04:3c:07:
1c:3c:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:36:15 2025 by rpki-client