Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/aVCML_0qfO6OM-B-v0Xw0SaCLis.roa
File: aVCML_0qfO6OM-B-v0Xw0SaCLis.roa (raw, json)
Hash identifier: gzLeZf6vO+ZM/QBYI1anl4lUtsGtfB7flnqVi3ieG9w=
Subject key identifier: 69:50:8C:2F:FD:2A:7C:EE:8E:33:E0:7E:BF:45:F0:D1:26:82:2E:2B
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D5FE5AAADC6DA7AE4F16D085E2B0D
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/aVCML_0qfO6OM-B-v0Xw0SaCLis.roa
Signing time: Wed 01 Jan 2025 15:47:57 +0000
ROA not before: Wed 01 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.61.60.0/23 maxlen: 23
5.61.62.0/23 maxlen: 23
45.136.196.0/24 maxlen: 24
45.136.197.0/24 maxlen: 24
45.136.198.0/24 maxlen: 24
45.136.199.0/24 maxlen: 24
176.97.64.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.70.0/23 maxlen: 23
176.97.72.0/24 maxlen: 24
176.97.73.0/24 maxlen: 24
176.97.75.0/24 maxlen: 24
176.97.76.0/24 maxlen: 24
176.97.77.0/24 maxlen: 24
176.97.78.0/24 maxlen: 24
185.87.148.0/23 maxlen: 23
185.87.150.0/23 maxlen: 23
185.132.125.0/24 maxlen: 24
188.116.22.0/24 maxlen: 24
195.54.170.0/24 maxlen: 24
195.54.171.0/24 maxlen: 24
2a02:c6c1:4::/48 maxlen: 48
2a02:c6c1:5::/48 maxlen: 48
2a02:c6c1:6::/48 maxlen: 48
2a02:c6c1:7::/48 maxlen: 48
2a02:c6c1:8::/48 maxlen: 48
2a02:c6c1:9::/48 maxlen: 48
2a02:c6c1:a::/48 maxlen: 48
2a02:c6c1:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5f:e5:aa:ad:c6:da:7a:e4:f1:6d:08:5e:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69508c2ffd2a7cee8e33e07ebf45f0d126822e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:82:b8:cc:2b:aa:81:79:81:59:2e:44:75:
7f:64:fa:54:a2:21:f8:41:c8:e0:52:af:0b:fa:f9:
cd:21:ff:23:8e:f5:f3:3e:e0:c8:06:03:3f:60:d8:
7f:51:a5:44:0f:4b:c9:3d:26:72:90:d8:c5:7d:73:
e3:db:da:e4:4d:f1:ba:be:64:64:69:05:a7:28:7b:
63:7c:a1:d3:9a:23:e8:ed:93:87:66:d8:ba:e9:92:
ec:81:69:84:ca:c4:13:ce:57:8f:dd:be:76:36:54:
94:b3:22:a4:69:e8:ac:39:e2:bd:0d:2b:0c:c0:bb:
0e:b7:22:85:8a:c7:90:3d:34:a8:4d:94:4d:96:57:
3c:1f:13:f1:b7:9a:37:56:09:0d:2c:ed:cd:c6:a4:
21:87:b7:1f:cc:09:a5:38:a7:5e:2a:b5:ae:7b:18:
76:79:27:e1:7f:65:71:d1:72:ab:79:de:2f:a3:c1:
5f:56:2c:d9:ed:3f:7f:01:4c:c0:fe:49:43:03:90:
f2:25:85:87:eb:a0:34:e6:7b:62:69:e8:c7:56:81:
9b:9b:ad:b6:e6:04:f6:65:0e:cd:9d:87:bc:0e:3b:
7f:0a:e3:85:ee:e0:aa:a1:b5:4f:f6:03:0e:30:38:
d5:d4:ee:1d:60:b6:2c:97:af:f6:03:74:66:af:a6:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:8C:2F:FD:2A:7C:EE:8E:33:E0:7E:BF:45:F0:D1:26:82:2E:2B
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/aVCML_0qfO6OM-B-v0Xw0SaCLis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
45.136.196.0/22
176.97.64.0-176.97.73.255
176.97.75.0-176.97.78.255
185.87.148.0/22
185.132.125.0/24
188.116.22.0/24
195.54.170.0/23
IPv6:
2a02:c6c1:4::-2a02:c6c1:b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d2:fd:ac:44:3c:49:d0:26:68:4b:e5:80:79:93:96:d9:ba:1d:
d2:36:92:d8:d7:4c:17:76:e0:6f:80:ac:35:ea:8a:2c:e4:e4:
05:c4:e8:15:e6:58:29:59:50:6d:00:06:85:e2:5f:df:57:89:
6e:99:ed:a5:28:0b:78:e1:7c:ac:c4:65:50:03:cc:87:0b:b8:
0d:24:dd:79:b7:93:75:6d:65:53:3b:85:4a:95:f1:c2:26:12:
db:b0:c2:19:be:3e:3a:0d:72:19:b8:b7:3e:9d:6b:fb:80:eb:
67:db:78:db:c9:64:93:06:7f:d7:96:3f:8f:c5:ab:f4:44:c0:
f5:aa:6b:4d:df:22:59:58:cc:9e:94:fd:d1:86:ff:ca:3d:c1:
c3:21:ab:24:42:b9:8e:e5:6e:a6:9c:b3:8e:3a:2d:c4:52:f4:
65:6a:9a:40:74:31:d4:ad:fc:23:1b:3c:91:3a:f5:a2:66:25:
c5:37:d3:b3:d9:e6:3f:86:c6:95:13:82:13:20:6f:68:43:26:
1b:d7:11:a9:ae:cb:9b:5d:a3:7e:a6:46:e8:50:11:29:8f:f8:
5e:c0:18:93:34:c3:3b:8c:e2:72:7c:29:c8:c5:08:33:41:d7:
a2:a6:f3:74:40:82:9f:6c:c3:9a:f1:61:2f:03:6b:11:80:4b:
d5:5f:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:12:34 2025 by rpki-client