Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa
File: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (raw, json)
Hash identifier: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=
Subject key identifier: 65:D1:DB:C8:0B:95:3B:65:A0:A6:39:A0:11:45:7F:61:7A:47:04:11
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 019420D5F95241EB58D6E572F315EC4B8C92
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20911
IP address blocks: 46.229.192.0/20 maxlen: 20
46.229.192.0/23 maxlen: 23
46.229.192.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.194.0/24 maxlen: 24
46.229.195.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.196.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/23 maxlen: 24
46.229.200.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.206.0/24 maxlen: 24
46.229.206.128/25 maxlen: 25
46.229.207.0/24 maxlen: 24
46.229.207.128/25 maxlen: 25
93.152.228.0/23 maxlen: 23
93.152.228.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.248.0/21 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.248.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.253.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
93.152.254.0/24 maxlen: 24
93.152.255.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.194.0/23 maxlen: 23
178.254.194.0/24 maxlen: 24
178.254.195.0/24 maxlen: 24
178.254.196.0/23 maxlen: 23
178.254.196.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.200.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.207.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.208.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.212.0/23 maxlen: 23
178.254.212.0/24 maxlen: 24
178.254.213.0/24 maxlen: 24
178.254.214.0/24 maxlen: 24
178.254.215.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.216.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.226.0/24 maxlen: 24
178.254.227.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.228.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.231.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.232.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.240.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.246.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.248.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f9:52:41:eb:58:d6:e5:72:f3:15:ec:4b:8c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65d1dbc80b953b65a0a639a011457f617a470411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:da:02:c2:24:69:28:96:cc:a5:19:97:08:
4a:c9:3f:d6:23:15:05:83:be:49:46:af:9f:ee:d6:
ca:99:bf:5d:66:91:45:c3:f7:74:e0:17:1d:15:6f:
74:7f:fa:ce:69:86:9c:93:9a:8f:b1:2a:46:2c:91:
99:f6:7d:f1:69:da:d3:24:de:fa:4d:74:be:37:9b:
8a:a5:1f:a7:c3:27:80:79:d9:79:6d:c9:40:f3:7d:
83:5f:ed:77:7e:c1:db:b9:cf:73:c5:35:3a:90:15:
a3:b4:3a:ab:fe:8e:c5:ee:e1:05:1d:a9:28:c3:f2:
04:00:12:e8:a2:6e:29:07:f7:42:e8:56:ef:f0:22:
41:81:f2:2b:54:e2:21:c0:ff:18:5f:ac:0f:27:0c:
ec:fb:76:ef:d4:71:ad:dd:7c:bb:58:55:ef:a5:79:
1e:26:9f:91:79:a7:f3:50:15:ea:fb:01:23:bb:23:
79:ea:4c:b3:a0:5f:87:3a:80:ee:73:64:8b:30:1b:
d0:9b:43:d8:f2:a0:7c:d6:04:39:14:e8:ba:41:82:
24:d7:f1:48:1f:0e:2a:a0:34:a8:39:c7:e6:34:7c:
31:4b:3c:11:5d:82:b4:3d:0a:86:9c:94:01:27:60:
28:3c:92:46:4a:27:29:6f:83:0f:21:49:d3:35:fd:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:DB:C8:0B:95:3B:65:A0:A6:39:A0:11:45:7F:61:7A:47:04:11
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/18
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
96:71:ad:d3:1b:69:08:f1:53:79:6e:bf:49:2c:e2:69:20:4b:
62:82:a4:54:4f:73:b6:5d:5e:8e:ac:18:64:bb:b2:b0:83:66:
37:9c:af:19:a6:e6:c6:ec:15:ee:ca:c5:44:63:f6:0d:d8:38:
88:84:fa:8d:e1:0e:7e:f4:38:02:08:f3:11:bf:e2:a6:c8:6b:
a1:8b:a4:85:ae:2d:4f:e5:c9:bc:31:b1:c7:87:71:ee:d6:2e:
2a:a2:2a:91:e5:1f:24:40:83:b5:98:58:a0:7d:3d:bb:7f:c6:
3a:9d:03:57:42:f2:6b:7a:27:04:cb:db:7f:38:d7:6d:95:a5:
c2:a5:7c:79:41:68:d9:7a:9a:57:d3:00:aa:8a:ad:f5:0e:e2:
fc:b3:0e:21:66:cf:7d:c6:56:e4:8e:33:22:3e:de:f7:61:97:
d0:01:ba:7c:c8:43:f2:8b:33:2d:f0:fd:26:88:84:48:4b:06:
fe:ba:e2:bb:2f:04:f3:1d:f8:9b:6e:2e:1d:2a:a2:43:52:b2:
ac:f3:c5:82:dc:e6:ce:11:46:3d:5f:1f:ee:7c:ca:09:d6:9e:
8b:8c:42:b2:c8:1d:c9:99:54:fd:b7:32:27:27:27:e1:e9:7d:
5e:16:cb:cc:be:83:ee:7a:e4:ae:10:f9:15:5b:47:ac:ee:d7:
d6:a3:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:42 2025 by rpki-client