Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/fIjleh2crKLbZG2p_pW6sJNXzgE.roa
File: fIjleh2crKLbZG2p_pW6sJNXzgE.roa (raw, json)
Hash identifier: wfNWlZAoz4d7U8GGL+obzZQHM3GpRCjoUB+xMdyboeA=
Subject key identifier: 7C:88:E5:7A:1D:9C:AC:A2:DB:64:6D:A9:FE:95:BA:B0:93:57:CE:01
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0194258EFA82E21C2FF2AD8F5A67665244EE
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/fIjleh2crKLbZG2p_pW6sJNXzgE.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.178.0.0/15 maxlen: 15
31.178.0.0/16 maxlen: 16
31.179.0.0/16 maxlen: 16
31.186.192.0/19 maxlen: 19
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
77.236.0.0/19 maxlen: 19
77.236.0.0/20 maxlen: 20
77.236.16.0/20 maxlen: 20
81.18.192.0/20 maxlen: 20
81.18.192.0/21 maxlen: 21
81.18.200.0/21 maxlen: 21
81.18.208.0/20 maxlen: 20
81.18.208.0/21 maxlen: 21
81.18.216.0/21 maxlen: 21
83.144.64.0/18 maxlen: 18
83.144.64.0/19 maxlen: 19
83.144.96.0/19 maxlen: 19
83.175.176.0/20 maxlen: 20
83.175.176.0/21 maxlen: 21
83.175.184.0/21 maxlen: 21
84.10.0.0/16 maxlen: 16
84.10.0.0/17 maxlen: 17
84.10.128.0/17 maxlen: 17
85.222.0.0/17 maxlen: 17
85.222.0.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
87.206.0.0/15 maxlen: 15
87.206.0.0/16 maxlen: 16
87.207.0.0/16 maxlen: 16
89.64.0.0/12 maxlen: 12
89.64.0.0/13 maxlen: 13
89.72.0.0/13 maxlen: 13
91.150.192.0/19 maxlen: 19
91.150.192.0/20 maxlen: 20
91.150.208.0/20 maxlen: 20
92.244.32.0/19 maxlen: 19
92.244.32.0/20 maxlen: 20
92.244.48.0/20 maxlen: 20
94.75.64.0/18 maxlen: 18
94.75.64.0/19 maxlen: 19
94.75.96.0/19 maxlen: 19
94.172.0.0/16 maxlen: 16
94.172.0.0/17 maxlen: 17
94.172.128.0/17 maxlen: 17
95.158.64.0/18 maxlen: 18
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
188.93.164.0/22 maxlen: 22
193.47.158.0/23 maxlen: 23
193.47.160.0/24 maxlen: 24
194.187.40.0/22 maxlen: 22
195.34.208.0/22 maxlen: 22
212.76.32.0/19 maxlen: 19
212.76.32.0/20 maxlen: 20
212.76.48.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
213.134.160.0/20 maxlen: 20
213.134.176.0/20 maxlen: 20
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/27 maxlen: 27
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fa:82:e2:1c:2f:f2:ad:8f:5a:67:66:52:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c88e57a1d9caca2db646da9fe95bab09357ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d1:bd:13:75:0c:ae:76:86:c1:84:89:13:9f:
02:9e:e3:75:61:c2:09:41:04:bb:15:51:39:48:19:
75:3e:48:a0:38:44:1c:8d:9b:5f:a0:68:20:76:44:
93:eb:ab:a0:93:4c:4f:71:6c:0f:6d:88:27:43:6f:
5d:42:2a:5d:88:f9:17:8d:41:a1:60:70:62:7d:52:
9a:28:36:50:94:c3:f8:3b:f0:a9:d3:27:7d:83:a2:
bb:ad:bd:95:4a:50:20:23:4b:01:42:05:7f:f4:1f:
17:78:9b:e5:59:aa:36:9e:0e:d1:23:41:03:42:6c:
87:48:92:60:81:a6:94:86:69:7a:49:fe:7d:07:c9:
5e:e2:4e:40:df:2e:f9:ae:bf:23:c8:f3:96:cb:75:
d1:46:e3:29:18:65:01:a5:96:8f:f5:91:1c:c2:88:
cb:ce:3b:98:4f:2f:eb:d3:05:65:9f:fb:d1:c9:4d:
3d:c5:b0:09:6d:f2:a2:00:e1:81:cc:ca:e6:79:7a:
a3:47:5e:d4:da:48:cd:f3:6e:53:32:b0:24:fb:bc:
fb:ee:ac:be:a4:cd:76:86:38:d4:7a:ba:48:34:94:
a6:75:9c:99:18:e1:49:a3:df:a4:35:d8:20:3c:32:
09:63:3e:aa:c6:d5:74:71:1e:b1:55:21:20:46:af:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:E5:7A:1D:9C:AC:A2:DB:64:6D:A9:FE:95:BA:B0:93:57:CE:01
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/fIjleh2crKLbZG2p_pW6sJNXzgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
83.175.176.0/20
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
91.150.192.0/19
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
193.47.158.0-193.47.160.255
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
0c:02:8d:84:ee:0f:7c:21:1a:77:e9:32:7a:eb:d6:f2:df:82:
0f:2a:e4:52:00:05:3d:65:b8:ac:54:cd:5f:e6:57:20:91:d7:
c2:8f:9e:78:da:58:04:e2:31:d8:5c:67:ea:88:d9:aa:a3:3c:
a0:db:c9:92:e4:3d:c0:03:01:fa:fa:0e:f6:e8:3c:ff:af:c6:
eb:37:de:ad:4d:ba:98:ba:ef:a9:a1:a1:11:8c:37:d5:63:3f:
df:74:5d:0c:5b:b4:e5:82:8e:d7:0a:16:f1:c8:dd:af:09:a2:
4b:de:29:71:69:df:e4:78:2e:ea:83:57:80:fd:49:2e:47:24:
5c:2f:b1:fe:d3:66:07:35:58:fc:47:9b:d3:7f:11:9d:61:f2:
8f:03:48:e3:5d:e4:92:c0:21:a6:90:9e:84:4e:fb:57:f8:b1:
79:6a:6e:d4:d7:1b:a8:3d:41:61:58:da:ee:e9:d3:16:e4:c1:
d6:11:17:03:46:2e:be:8a:c9:24:9f:f2:9b:98:56:29:70:51:
c3:d3:c6:05:03:41:b3:8a:f4:c4:b7:97:51:f5:5d:0f:ed:da:
6a:b3:2c:5b:58:86:0e:f1:b8:9a:ed:f6:f4:76:b6:9a:fc:08:
2b:59:3f:ce:f9:94:a6:2a:85:d0:55:24:e8:a7:c7:55:13:27:
6b:f6:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:40 2025 by rpki-client