Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/BiH4T1QItrDeKmbSQQD10MbyJM0.roa
File: BiH4T1QItrDeKmbSQQD10MbyJM0.roa (raw, json)
Hash identifier: 1DccZm+wbtnRwvwFHLQW36Ec7g4Qt5rsBnmXwCd1CCk=
Subject key identifier: 06:21:F8:4F:54:08:B6:B0:DE:2A:66:D2:41:00:F5:D0:C6:F2:24:CD
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01953D76FC59561E046CBA59BA9E3F20CDF5
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/BiH4T1QItrDeKmbSQQD10MbyJM0.roa
Signing time: Tue 25 Feb 2025 14:16:02 +0000
ROA not before: Tue 25 Feb 2025 14:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 2.59.68.0/22 maxlen: 24
2.59.72.0/22 maxlen: 24
5.252.60.0/22 maxlen: 24
5.252.88.0/22 maxlen: 24
45.11.148.0/22 maxlen: 24
45.65.104.0/21 maxlen: 24
45.85.176.0/22 maxlen: 24
45.90.224.0/22 maxlen: 24
45.129.48.0/22 maxlen: 24
45.152.184.0/22 maxlen: 24
80.240.176.0/21 maxlen: 24
80.240.184.0/21 maxlen: 24
91.92.18.0/23 maxlen: 24
95.214.44.0/22 maxlen: 24
109.70.16.0/21 maxlen: 24
128.127.16.0/21 maxlen: 24
185.13.180.0/22 maxlen: 24
185.61.144.0/22 maxlen: 24
185.107.84.0/22 maxlen: 24
185.128.140.0/22 maxlen: 24
185.163.60.0/22 maxlen: 24
185.189.20.0/22 maxlen: 24
185.203.180.0/22 maxlen: 24
185.229.176.0/22 maxlen: 24
185.253.36.0/22 maxlen: 24
188.92.64.0/21 maxlen: 24
193.8.116.0/22 maxlen: 24
193.56.168.0/22 maxlen: 24
194.36.137.0/24 maxlen: 24
194.36.167.0/24 maxlen: 24
194.36.169.0/24 maxlen: 24
194.36.221.0/24 maxlen: 24
194.182.112.0/20 maxlen: 24
212.104.240.0/20 maxlen: 24
2a02:79e0::/32 maxlen: 48
2a02:cfc0::/29 maxlen: 48
2a06:4280::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:76:fc:59:56:1e:04:6c:ba:59:ba:9e:3f:20:cd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Feb 25 14:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0621f84f5408b6b0de2a66d24100f5d0c6f224cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:2c:7a:c9:45:66:c2:ec:d2:2f:31:97:be:
6f:7a:ce:d8:41:31:82:cb:f3:35:9b:25:1b:ea:2b:
02:e4:ba:95:0d:53:85:9f:d3:79:f9:f2:01:0e:81:
4b:b1:b3:a4:73:e1:3b:70:3d:5a:23:ce:34:05:a1:
e5:65:3b:d4:1e:c6:8d:6b:41:5c:5f:dc:10:b2:99:
ea:21:75:27:85:80:1c:16:3a:6c:11:d4:25:86:ec:
e2:13:db:9c:82:22:08:e6:42:f8:5a:d4:4f:e8:c2:
f2:0c:4d:f5:1a:e5:e7:08:2e:c3:c3:33:18:16:5d:
9c:9d:61:d8:63:c4:57:2b:ec:22:81:8f:5c:df:ff:
b0:4a:67:7f:7f:2f:0a:8d:60:5f:99:b3:9c:b1:cc:
db:29:5b:74:3c:3e:8c:9c:2e:3a:bc:fa:80:99:d2:
e7:2a:8b:8f:60:7c:ca:68:82:27:0f:3e:97:b6:a1:
43:90:4b:a6:91:bc:f3:bb:a9:0d:dc:09:3e:82:52:
e5:52:f4:bc:77:b0:90:f4:3f:81:34:00:a1:2c:e7:
87:b1:eb:4c:8d:13:d3:48:86:5e:9f:a1:95:85:16:
92:7b:9c:98:6b:37:1a:01:25:bc:4e:a8:21:5e:57:
cc:22:0d:94:1c:1e:fd:83:56:f4:1c:82:29:3f:4b:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:F8:4F:54:08:B6:B0:DE:2A:66:D2:41:00:F5:D0:C6:F2:24:CD
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/BiH4T1QItrDeKmbSQQD10MbyJM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.68.0-2.59.75.255
5.252.60.0/22
5.252.88.0/22
45.11.148.0/22
45.65.104.0/21
45.85.176.0/22
45.90.224.0/22
45.129.48.0/22
45.152.184.0/22
80.240.176.0/20
91.92.18.0/23
95.214.44.0/22
109.70.16.0/21
128.127.16.0/21
185.13.180.0/22
185.61.144.0/22
185.107.84.0/22
185.128.140.0/22
185.163.60.0/22
185.189.20.0/22
185.203.180.0/22
185.229.176.0/22
185.253.36.0/22
188.92.64.0/21
193.8.116.0/22
193.56.168.0/22
194.36.137.0/24
194.36.167.0/24
194.36.169.0/24
194.36.221.0/24
194.182.112.0/20
212.104.240.0/20
IPv6:
2a02:79e0::/32
2a02:cfc0::/29
2a06:4280::/29
Signature Algorithm: sha256WithRSAEncryption
97:71:f1:ee:ad:aa:f8:21:c5:6a:1d:88:f1:ef:fd:39:a6:93:
92:b4:7d:5f:0e:60:76:0f:58:c0:0c:92:92:cf:11:44:dd:a0:
ac:5c:01:4d:7b:d5:4c:8c:41:79:24:87:61:eb:20:6c:86:a3:
75:cb:9b:4d:4a:d5:8e:6b:4b:53:d9:78:7a:c6:09:c9:8e:f7:
7b:bf:24:ea:62:78:af:f5:1e:5e:e6:17:7a:80:bc:ca:61:e2:
aa:e8:26:1d:ec:d6:dd:1a:71:b8:80:6b:cf:ae:7b:87:a2:92:
6f:02:77:57:8f:41:84:cb:35:ab:34:c6:e4:76:3c:a8:9b:41:
43:3d:2b:de:d0:ab:27:43:89:a3:b8:bb:dc:bf:d2:1d:69:19:
af:37:69:17:fd:4d:68:af:85:c5:2b:c6:ad:e1:bb:af:4f:e8:
96:10:a5:67:62:1a:52:38:85:ff:f0:0a:f6:69:ed:9c:7a:82:
da:57:f1:31:b8:86:d8:d7:83:24:c4:cc:63:ce:0e:e2:46:47:
81:d4:25:b4:2c:17:e0:3a:b7:3f:19:87:bf:a5:74:22:dd:3c:
91:ba:da:db:44:3e:7b:3b:52:40:d9:b8:b6:27:6c:1c:76:f5:
45:0e:46:58:69:93:2d:a2:f7:e9:63:ef:aa:25:17:8c:02:92:
52:fd:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:36 2025 by rpki-client