Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa
File: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (raw, json)
Hash identifier: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=
Subject key identifier: 4B:71:D6:FB:4C:59:76:6E:2E:97:52:26:FC:67:53:6C:6C:D1:C0:D6
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C38E3B0508036B88AD065BD41714
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa
Signing time: Thu 02 Jan 2025 17:52:31 +0000
ROA not before: Thu 02 Jan 2025 17:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31376
IP address blocks: 80.73.192.0/20 maxlen: 20
80.79.240.0/21 maxlen: 21
80.79.248.0/22 maxlen: 22
80.79.252.0/23 maxlen: 23
80.249.176.0/20 maxlen: 28
91.190.80.0/21 maxlen: 21
91.198.130.0/24 maxlen: 24
91.215.252.0/23 maxlen: 23
91.215.254.0/24 maxlen: 24
91.219.180.0/22 maxlen: 22
93.92.192.0/21 maxlen: 28
93.190.224.0/21 maxlen: 28
94.125.8.0/21 maxlen: 21
109.71.176.0/21 maxlen: 28
185.42.60.0/22 maxlen: 28
185.155.112.0/22 maxlen: 22
188.93.240.0/21 maxlen: 28
193.26.214.0/24 maxlen: 24
193.46.2.0/24 maxlen: 24
193.110.236.0/22 maxlen: 22
193.110.237.0/24 maxlen: 24
194.153.158.128/25 maxlen: 25
195.93.206.0/23 maxlen: 23
195.191.146.0/23 maxlen: 23
213.108.32.0/21 maxlen: 21
217.119.16.0/20 maxlen: 28
2a02:16e8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c3:8e:3b:05:08:03:6b:88:ad:06:5b:d4:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b71d6fb4c59766e2e975226fc67536c6cd1c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:a5:5e:d2:eb:4f:d8:cb:ca:0c:45:38:4d:
e4:a1:87:ad:13:2d:cd:1b:b1:a4:c0:6a:b9:8d:f4:
1c:32:17:3f:42:f3:a2:e8:35:5f:95:7a:1d:22:f2:
e3:fb:b5:29:df:a0:2a:4e:f9:df:f6:4e:79:70:fb:
88:86:ff:2a:e3:32:f6:50:20:ab:56:1d:02:8e:3c:
84:c9:ae:34:34:67:05:25:2d:07:92:05:dc:d3:58:
44:ca:26:08:67:7a:cb:f4:d5:b7:2e:45:72:d8:f0:
14:ec:60:9c:f7:d4:37:bc:a8:65:21:a6:3a:ae:5c:
b8:a0:2e:f3:96:85:b2:00:a2:02:81:c5:8c:21:55:
86:e3:0d:3e:24:ce:4d:2f:d9:41:19:bf:0e:44:01:
ac:3b:02:3d:f1:af:ef:13:ca:a2:36:43:15:b4:ab:
02:8a:cb:92:da:04:78:6d:a6:97:d3:25:6e:2f:63:
44:69:3d:7c:ab:09:ad:43:de:f2:bd:e3:3a:52:8e:
af:da:8d:84:32:bb:7e:cb:fa:7f:c3:75:5a:ab:5c:
b1:fd:d8:ab:49:70:03:88:5c:b0:42:bf:26:2d:47:
02:11:34:f0:5a:11:ed:2a:5c:73:ae:89:c1:ce:90:
3a:73:55:3c:b7:23:d1:19:6c:70:7a:1f:16:f8:9d:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:D6:FB:4C:59:76:6E:2E:97:52:26:FC:67:53:6C:6C:D1:C0:D6
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.192.0/20
80.79.240.0-80.79.253.255
80.249.176.0/20
91.190.80.0/21
91.198.130.0/24
91.215.252.0-91.215.254.255
91.219.180.0/22
93.92.192.0/21
93.190.224.0/21
94.125.8.0/21
109.71.176.0/21
185.42.60.0/22
185.155.112.0/22
188.93.240.0/21
193.26.214.0/24
193.46.2.0/24
193.110.236.0/22
194.153.158.128/25
195.93.206.0/23
195.191.146.0/23
213.108.32.0/21
217.119.16.0/20
IPv6:
2a02:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
90:c8:a6:45:72:67:f0:bf:58:df:b6:72:21:c2:5d:6f:3b:00:
fb:36:ec:fc:57:33:26:87:88:0f:dd:df:13:8a:c3:8c:de:44:
2e:05:8a:58:a6:2d:64:3b:74:1f:3b:56:6d:53:af:65:e3:83:
ea:6e:01:1d:85:cf:fc:3a:34:a2:6b:6a:82:a1:cc:72:7d:6d:
f8:d5:ae:7f:c1:ba:36:82:0b:53:e1:20:06:4b:04:cd:9d:a5:
8c:95:49:38:95:6a:f4:74:3a:8f:92:cd:01:a5:fd:6b:4e:ac:
98:9c:44:f5:b4:2b:17:a7:ec:1a:34:70:03:cc:1b:dd:bf:fa:
db:66:f1:29:a2:a1:03:4c:2c:92:ec:32:54:04:56:3c:c0:48:
b0:47:26:c2:5a:48:3e:a7:04:68:43:b3:6b:fb:3b:3d:06:df:
0d:43:56:1c:58:45:0a:76:89:70:c6:19:28:e4:88:95:ce:15:
a4:74:34:9c:96:20:f2:3e:74:3a:5e:26:63:3d:48:d2:af:34:
e6:14:b1:f3:31:e2:dc:14:f9:f5:a9:03:1e:87:2f:da:3b:49:
65:ea:97:97:81:68:7c:35:62:c4:49:1c:b4:27:d0:70:5c:37:
c4:65:c7:e0:8f:0c:1c:2e:d0:ad:25:54:11:13:73:01:02:5e:
bd:47:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:29:50 2025 by rpki-client