Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/rq4z53nTY235oXOYEJGf8J9hSBk.roa
File: rq4z53nTY235oXOYEJGf8J9hSBk.roa (raw, json)
Hash identifier: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=
Subject key identifier: AE:AE:33:E7:79:D3:63:6D:F9:A1:73:98:10:91:9F:F0:9F:61:48:19
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D395DD5B1B9450EDBAA11B7FC1FB1
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/rq4z53nTY235oXOYEJGf8J9hSBk.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21219
IP address blocks: 5.1.0.0/19 maxlen: 24
31.3.192.0/20 maxlen: 24
31.128.64.0/23 maxlen: 24
31.128.68.0/22 maxlen: 24
31.128.72.0/21 maxlen: 24
31.128.80.0/20 maxlen: 24
46.164.128.0/18 maxlen: 24
77.88.200.0/21 maxlen: 24
77.88.208.0/20 maxlen: 24
77.88.214.0/23 maxlen: 23
77.88.240.0/20 maxlen: 24
77.222.128.0/19 maxlen: 24
80.77.32.0/20 maxlen: 24
80.91.160.0/20 maxlen: 24
80.91.176.0/20 maxlen: 24
80.249.224.0/20 maxlen: 24
85.159.0.0/21 maxlen: 24
88.81.224.0/19 maxlen: 24
91.193.68.0/22 maxlen: 24
91.197.220.0/22 maxlen: 24
91.204.92.0/22 maxlen: 24
91.237.152.0/24 maxlen: 24
93.183.192.0/18 maxlen: 24
94.232.72.0/21 maxlen: 24
109.206.32.0/19 maxlen: 24
176.102.32.0/19 maxlen: 24
176.112.0.0/19 maxlen: 24
176.241.104.0/21 maxlen: 24
176.241.128.0/19 maxlen: 24
178.213.168.0/21 maxlen: 24
185.8.40.0/22 maxlen: 24
185.46.248.0/22 maxlen: 24
188.0.64.0/19 maxlen: 24
188.247.96.0/19 maxlen: 24
193.41.48.0/22 maxlen: 24
193.108.48.0/22 maxlen: 24
193.108.128.0/23 maxlen: 24
193.109.80.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
193.238.96.0/22 maxlen: 24
194.29.60.0/22 maxlen: 24
194.110.79.0/24 maxlen: 24
194.146.196.0/22 maxlen: 24
195.69.176.0/22 maxlen: 24
195.114.128.0/19 maxlen: 24
195.114.133.0/24 maxlen: 24
195.225.52.0/23 maxlen: 24
213.111.192.0/18 maxlen: 24
217.112.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:5d:d5:b1:b9:45:0e:db:aa:11:b7:fc:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeae33e779d3636df9a1739810919ff09f614819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:79:fa:a5:f7:cf:09:68:da:d4:85:aa:68:
3f:dc:92:35:fc:80:3a:b3:e0:5c:b6:86:2f:55:c2:
4b:3d:f0:b7:83:a4:da:e2:ef:bd:8a:00:09:24:46:
61:a7:53:66:de:1d:23:ea:bd:8c:a2:34:0a:92:2e:
6a:bd:22:cd:ac:5d:d1:f8:0f:fa:d7:e3:60:5d:76:
de:4e:fa:3e:ec:31:f6:ed:70:e6:cd:a0:0f:9f:b1:
c4:35:c1:c3:eb:0c:1d:41:3c:bd:7a:aa:3e:98:9e:
bb:77:b4:ca:45:20:71:8b:5a:2d:65:ce:7e:be:f5:
61:16:80:e4:27:35:34:5d:3b:72:14:d8:7a:c7:ff:
8f:bf:9f:14:fc:c4:92:92:dd:82:58:ba:8d:3b:8a:
fd:04:2f:67:ad:83:bb:64:41:7e:54:8e:c9:f2:ac:
91:67:d7:24:2d:98:32:7c:ca:c0:55:87:a2:96:08:
67:f6:36:4b:a4:28:fc:38:c5:47:1c:de:e2:99:d1:
42:39:d9:1d:03:58:b3:e3:c7:25:2c:fc:75:7e:a4:
5a:59:b0:88:c2:3b:c6:f1:62:95:ff:8e:f4:21:2c:
3c:37:ae:f9:40:fd:d8:0a:6f:1f:43:da:38:b8:2a:
45:b3:1b:48:c4:c9:36:cb:e0:5c:10:af:f9:1f:03:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:33:E7:79:D3:63:6D:F9:A1:73:98:10:91:9F:F0:9F:61:48:19
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/rq4z53nTY235oXOYEJGf8J9hSBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/19
31.3.192.0/20
31.128.64.0/23
31.128.68.0-31.128.95.255
46.164.128.0/18
77.88.200.0-77.88.223.255
77.88.240.0/20
77.222.128.0/19
80.77.32.0/20
80.91.160.0/19
80.249.224.0/20
85.159.0.0/21
88.81.224.0/19
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
91.237.152.0/24
93.183.192.0/18
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/19
188.247.96.0/19
193.41.48.0/22
193.108.48.0/22
193.108.128.0/23
193.109.80.0/24
193.109.164.0/22
193.238.96.0/22
194.29.60.0/22
194.110.79.0/24
194.146.196.0/22
195.69.176.0/22
195.114.128.0/19
195.225.52.0/23
213.111.192.0/18
217.112.208.0/20
Signature Algorithm: sha256WithRSAEncryption
18:dd:8f:af:07:90:4a:db:ef:cb:62:2d:80:97:18:f5:ab:a8:
35:ce:cf:ce:0b:a1:74:6f:04:bc:fe:ce:f6:9b:05:8e:36:c0:
5c:d9:3b:c7:89:b6:9e:d3:24:ab:41:95:fb:94:93:08:58:6e:
a1:1c:95:a0:04:a0:58:58:ba:61:ab:08:23:6c:5a:76:aa:4a:
53:85:ad:2b:91:7d:e6:32:8a:8d:aa:0d:f3:d1:98:3d:27:1a:
1b:53:c9:58:31:b5:d8:6e:e1:62:03:b5:5f:13:c8:92:92:c3:
24:3a:8e:8a:d5:57:a0:0f:cb:4e:d4:9a:de:ba:c6:39:54:e0:
5f:5c:bb:57:5c:50:d6:72:98:99:9e:93:6b:0c:7d:d4:63:ec:
92:76:0e:f8:dd:d6:93:26:f6:49:0a:04:6d:95:ae:f8:39:c5:
b5:66:10:da:a4:2e:b6:b9:94:23:a5:cc:31:aa:80:f6:01:ff:
d7:44:b9:fa:09:0d:1c:b9:bf:68:97:61:51:8a:b6:a0:66:82:
a3:a2:ad:0a:73:55:96:54:b3:33:d0:7f:1c:67:e5:60:9e:e9:
0c:95:ab:d0:23:41:d4:f1:02:f1:24:c6:d0:19:b7:2c:a7:d0:
b8:b1:03:f1:ad:69:76:02:6f:52:21:ff:db:aa:fd:30:8a:b0:
1d:a9:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:30:24 2025 by rpki-client