Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Z9UpHL_4Svka-a2SFk7JpuCGULM.roa
File: Z9UpHL_4Svka-a2SFk7JpuCGULM.roa (raw, json)
Hash identifier: Mw47jGUhULfkUmOv6fe3wFOJXdnrID0cVeUzfPq9e04=
Subject key identifier: 67:D5:29:1C:BF:F8:4A:F9:1A:F9:AD:92:16:4E:C9:A6:E0:86:50:B3
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01951946C36B632FEF2292C04DAF85DA6745
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Z9UpHL_4Svka-a2SFk7JpuCGULM.roa
Signing time: Tue 18 Feb 2025 13:37:02 +0000
ROA not before: Tue 18 Feb 2025 13:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
46.102.106.0/24 maxlen: 24
62.197.45.0/24 maxlen: 24
62.197.48.0/23 maxlen: 23
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
176.97.79.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:46:c3:6b:63:2f:ef:22:92:c0:4d:af:85:da:67:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Feb 18 13:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d5291cbff84af91af9ad92164ec9a6e08650b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:e5:75:70:82:32:dc:91:af:3b:9f:cf:1a:
24:f6:fd:eb:0b:20:ba:06:a6:3d:fe:ee:7c:89:1f:
cd:62:f8:e4:97:fc:20:75:01:4b:d9:b2:af:c0:f3:
71:77:e9:e0:04:34:41:0e:e7:45:21:d7:a9:05:29:
84:7c:8e:a1:3c:73:fc:32:0c:79:a5:13:88:a8:2a:
32:79:23:8c:e6:f8:d6:57:81:9d:eb:74:89:ab:57:
65:e6:96:41:fb:4c:a8:95:9d:0a:0c:a6:a0:5b:39:
6d:9d:eb:83:4e:c1:d7:09:55:e2:3a:dd:73:9b:5a:
0e:08:cb:3e:e5:09:45:55:18:a9:16:b9:85:e2:ac:
bb:f4:af:74:8f:3d:c7:69:28:a8:55:b6:5b:96:78:
c0:ab:df:d4:68:df:53:9e:7c:19:57:0f:99:8a:89:
1b:87:74:f7:e6:85:76:d6:b2:8f:6e:15:2e:c7:a4:
fb:0b:b8:09:1d:dd:9a:cd:c3:dd:fc:c1:5f:ca:cc:
9d:94:2b:e9:96:08:98:5d:ed:53:92:44:4d:cd:8d:
56:1b:4a:61:42:26:e6:44:e8:bd:45:72:eb:81:1e:
87:bd:77:cb:b5:79:c9:d8:b6:09:9c:31:85:6d:9d:
78:6f:b1:c0:7a:01:5f:bb:8b:12:0a:f4:51:58:26:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:29:1C:BF:F8:4A:F9:1A:F9:AD:92:16:4E:C9:A6:E0:86:50:B3
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Z9UpHL_4Svka-a2SFk7JpuCGULM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
45.137.212.0-45.137.214.255
46.102.106.0/24
62.197.45.0/24
62.197.48.0/23
82.117.242.0/23
85.90.208.0/24
89.187.73.0/24
176.97.79.0/24
176.98.40.0/24
185.109.48.0/24
185.238.168.0/22
188.116.21.0/24
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:10::/48
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
cd:92:00:04:5e:f9:f6:14:37:6f:77:81:dd:ef:5c:1d:75:2c:
39:09:6d:ad:a4:73:32:85:e7:72:03:bc:f9:68:1e:c9:44:68:
9c:cf:4d:2f:33:35:54:bd:42:7b:77:9c:10:d4:64:16:f0:d1:
e0:dc:0a:aa:e0:82:d6:81:c1:ff:ee:00:43:b7:c2:7f:4f:a3:
46:1d:ff:c0:05:e4:46:60:c4:33:73:e9:fa:b6:ef:be:20:4e:
26:68:a2:ae:55:b0:05:72:cc:b7:3b:ec:91:20:4e:41:de:d2:
83:fb:d9:3d:d6:b3:78:48:7d:af:e8:d5:20:55:43:01:d7:79:
97:b9:50:27:ae:cc:d3:f2:e4:10:d2:01:82:ec:8d:c7:d4:55:
47:d8:a1:1b:de:0d:1a:ee:c8:ac:d5:d8:4a:84:90:a7:43:39:
b3:8c:34:b1:b6:7a:e5:ba:7d:58:ac:ed:14:9f:0f:99:fb:77:
dd:20:fa:89:9b:5c:0e:9e:3b:47:10:91:2a:e1:d9:46:87:e5:
f3:dc:90:ff:fa:b5:5c:27:ab:0d:54:0a:46:5d:7e:00:70:95:
6d:6f:b6:0a:88:60:4f:cf:81:25:64:9b:59:ea:ba:98:42:e7:
ff:c0:3d:9e:f4:fd:6a:e7:9c:ee:c5:f8:5a:6f:cc:d0:a8:8a:
01:55:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:09:57 2025 by rpki-client