Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/sKv-xxJWIf-ze1o76p9ODgsyw_s.roa
File: sKv-xxJWIf-ze1o76p9ODgsyw_s.roa (raw, json)
Hash identifier: XTZXnxiqn3mLJWXiIzP/to5Jbo52GHSSES09Obfm3Xk=
Subject key identifier: B0:AB:FE:C7:12:56:21:FF:B3:7B:5A:3B:EA:9F:4E:0E:0B:32:C3:FB
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01953D75A00B0EABE8B3E06DAEBEFC69F4B6
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/sKv-xxJWIf-ze1o76p9ODgsyw_s.roa
Signing time: Tue 25 Feb 2025 14:14:33 +0000
ROA not before: Tue 25 Feb 2025 14:14:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58224
IP address blocks: 37.148.64.0/21 maxlen: 24
37.148.72.0/22 maxlen: 24
37.148.76.0/22 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.88.0/21 maxlen: 24
37.148.96.0/22 maxlen: 24
37.148.100.0/22 maxlen: 24
37.148.104.0/21 maxlen: 24
37.148.112.0/22 maxlen: 24
37.148.116.0/22 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/22 maxlen: 22
37.202.132.0/22 maxlen: 22
37.202.136.0/22 maxlen: 22
37.202.140.0/22 maxlen: 22
37.202.152.0/22 maxlen: 22
37.202.156.0/22 maxlen: 22
37.202.160.0/22 maxlen: 22
37.202.164.0/22 maxlen: 22
37.202.188.0/22 maxlen: 22
37.202.232.0/22 maxlen: 22
37.202.236.0/22 maxlen: 22
37.202.240.0/24 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 22
37.202.248.0/22 maxlen: 22
37.202.252.0/22 maxlen: 22
94.182.10.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
151.239.120.0/22 maxlen: 24
151.239.124.0/22 maxlen: 24
151.239.128.0/22 maxlen: 24
151.239.132.0/22 maxlen: 24
151.239.136.0/22 maxlen: 24
151.239.140.0/22 maxlen: 24
151.239.144.0/22 maxlen: 24
151.239.148.0/22 maxlen: 24
151.239.152.0/22 maxlen: 24
151.239.156.0/22 maxlen: 24
151.239.160.0/21 maxlen: 24
151.239.168.0/22 maxlen: 24
151.239.172.0/22 maxlen: 24
151.239.176.0/22 maxlen: 24
151.239.180.0/22 maxlen: 24
151.239.184.0/22 maxlen: 24
151.239.188.0/22 maxlen: 24
151.239.192.0/21 maxlen: 24
151.239.200.0/21 maxlen: 24
151.239.208.0/20 maxlen: 24
151.239.224.0/20 maxlen: 24
151.239.240.0/20 maxlen: 24
151.246.0.0/22 maxlen: 22
151.246.4.0/22 maxlen: 22
151.246.8.0/22 maxlen: 22
151.246.12.0/22 maxlen: 22
151.246.16.0/22 maxlen: 22
151.246.20.0/22 maxlen: 22
151.246.24.0/22 maxlen: 22
151.246.28.0/22 maxlen: 22
151.246.32.0/22 maxlen: 22
151.246.36.0/22 maxlen: 22
151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.48.0/22 maxlen: 22
151.246.52.0/22 maxlen: 22
151.246.56.0/22 maxlen: 22
151.246.60.0/22 maxlen: 22
151.246.160.0/20 maxlen: 24
151.246.176.0/21 maxlen: 21
151.246.184.0/21 maxlen: 21
151.246.192.0/20 maxlen: 24
151.246.208.0/20 maxlen: 24
151.246.224.0/20 maxlen: 20
151.246.248.0/22 maxlen: 24
151.247.0.0/23 maxlen: 24
151.247.2.0/24 maxlen: 24
151.247.3.0/24 maxlen: 24
151.247.4.0/22 maxlen: 24
151.247.8.0/22 maxlen: 24
151.247.12.0/24 maxlen: 24
151.247.13.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.16.0/23 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.19.0/24 maxlen: 24
151.247.20.0/23 maxlen: 23
151.247.22.0/24 maxlen: 24
151.247.23.0/24 maxlen: 24
151.247.24.0/22 maxlen: 22
151.247.28.0/22 maxlen: 22
151.247.32.0/22 maxlen: 22
151.247.36.0/22 maxlen: 22
151.247.40.0/22 maxlen: 22
151.247.44.0/22 maxlen: 22
151.247.48.0/22 maxlen: 22
151.247.52.0/22 maxlen: 22
151.247.56.0/22 maxlen: 22
151.247.60.0/22 maxlen: 22
151.247.96.0/22 maxlen: 22
151.247.100.0/22 maxlen: 22
151.247.104.0/22 maxlen: 22
151.247.108.0/22 maxlen: 22
151.247.112.0/22 maxlen: 22
151.247.116.0/22 maxlen: 22
151.247.120.0/22 maxlen: 22
151.247.124.0/22 maxlen: 22
151.247.128.0/22 maxlen: 22
151.247.132.0/22 maxlen: 22
151.247.136.0/22 maxlen: 22
151.247.140.0/22 maxlen: 22
151.247.144.0/22 maxlen: 22
151.247.148.0/22 maxlen: 22
151.247.148.0/23 maxlen: 23
151.247.150.0/23 maxlen: 23
151.247.152.0/22 maxlen: 22
151.247.156.0/22 maxlen: 22
151.247.160.0/22 maxlen: 22
151.247.164.0/22 maxlen: 22
151.247.168.0/22 maxlen: 22
151.247.172.0/22 maxlen: 22
151.247.176.0/22 maxlen: 22
151.247.180.0/22 maxlen: 22
151.247.184.0/22 maxlen: 22
151.247.188.0/22 maxlen: 24
151.247.192.0/22 maxlen: 22
151.247.196.0/22 maxlen: 22
151.247.200.0/22 maxlen: 22
151.247.204.0/22 maxlen: 22
151.247.204.0/23 maxlen: 23
151.247.206.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
151.247.208.0/22 maxlen: 22
151.247.212.0/23 maxlen: 23
151.247.228.0/23 maxlen: 24
151.247.230.0/23 maxlen: 24
151.247.232.0/22 maxlen: 22
151.247.236.0/23 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
151.247.240.0/23 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
151.247.244.0/22 maxlen: 24
151.247.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:75:a0:0b:0e:ab:e8:b3:e0:6d:ae:be:fc:69:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 25 14:14:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0abfec7125621ffb37b5a3bea9f4e0e0b32c3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:53:b9:51:e0:a5:54:e8:8d:90:58:8b:81:
ec:10:4d:ce:3e:02:84:92:fb:e9:4f:42:be:ee:9a:
58:f6:e1:7e:5e:c6:42:75:e2:ff:a4:e9:23:3e:03:
af:d2:ae:5a:50:57:9a:5f:00:92:da:42:2b:1a:35:
e8:72:78:45:3c:05:79:02:0b:f8:9c:5f:96:97:5c:
1d:7c:0d:61:d8:89:79:92:f8:87:fd:2b:28:3e:71:
c5:77:61:5d:52:d3:a6:8b:16:30:11:c6:a9:0d:38:
31:80:0f:c3:6f:35:84:6f:dd:5b:b8:d8:cf:62:67:
8e:59:fa:a1:33:9f:3e:6a:75:32:2a:8e:d6:04:04:
15:b0:ce:5b:bb:59:b8:fb:4d:37:a1:f1:72:30:64:
fc:d3:3d:db:3d:76:2d:4e:0d:9a:5d:2e:48:16:82:
fe:d9:4f:04:ac:39:20:96:e7:a4:b9:3d:2e:67:02:
74:3e:6a:a6:d5:78:e8:d3:07:3a:cf:0d:6d:54:32:
cc:7b:d0:84:db:a6:27:83:3b:f3:90:53:86:9c:90:
5a:52:4b:49:cd:77:80:33:a0:7c:11:c4:4d:c3:fb:
15:74:b5:d2:8a:c7:f6:4c:7f:9d:b0:55:0b:da:2f:
5c:6b:6d:36:d5:35:4a:40:eb:55:66:90:86:af:96:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:FE:C7:12:56:21:FF:B3:7B:5A:3B:EA:9F:4E:0E:0B:32:C3:FB
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/sKv-xxJWIf-ze1o76p9ODgsyw_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.64.0/18
37.202.128.0/20
37.202.152.0-37.202.167.255
37.202.188.0/22
37.202.232.0-37.202.242.255
37.202.244.0-37.202.255.255
94.182.10.0/24
94.182.204.0/22
151.239.120.0-151.239.255.255
151.246.0.0/18
151.246.160.0-151.246.239.255
151.246.248.0/22
151.247.0.0/18
151.247.96.0-151.247.213.255
151.247.228.0-151.247.247.255
151.247.252.0/22
Signature Algorithm: sha256WithRSAEncryption
06:43:63:be:65:7b:15:8d:26:6f:7a:1b:53:c2:a0:a8:c1:f7:
e9:80:ee:06:0c:7a:b9:91:4a:19:a9:46:37:b2:ac:0b:6d:83:
82:22:db:37:cb:bf:ac:e6:e5:86:91:97:a0:1a:76:26:53:0a:
9e:0e:69:e7:57:9b:f5:cf:ba:43:f5:dd:7e:dc:7c:a3:87:78:
4c:99:f7:ad:4c:3f:ad:0e:b9:e8:f6:e8:d5:d6:78:63:5e:3c:
9d:15:4f:18:fa:26:e9:1c:7b:6b:32:ff:31:aa:02:99:43:09:
0f:e7:d9:f9:db:ef:80:1e:b1:fb:49:18:7f:69:cf:9b:66:10:
62:5c:62:30:cd:85:14:d7:61:69:87:bd:d0:9f:45:51:37:cd:
7c:30:b0:76:a3:93:de:77:9f:f3:fd:1b:d6:0e:1b:43:f1:c2:
19:2c:2b:db:6b:64:69:99:73:02:46:f0:73:55:32:87:08:23:
d7:0f:e9:6b:2a:14:a5:9c:68:3a:88:93:0e:b8:fd:e2:76:48:
29:9c:00:12:ea:ab:8e:c6:fa:54:49:a7:d7:cc:f6:27:e2:08:
57:8c:a5:80:4f:b8:63:57:e0:fa:07:4f:08:e0:21:f5:8d:50:
cc:f0:f8:a5:a1:19:a1:88:8a:d3:0f:ab:34:f6:88:82:75:63:
8d:9e:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:07 2025 by rpki-client