Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/pkWwFHWljplPEjpAQkLOwXgSCt4.roa
File: pkWwFHWljplPEjpAQkLOwXgSCt4.roa (raw, json)
Hash identifier: +whOS2AadbTPHnOXnw+btN+MISq5HGl1GuCFl5cL8RM=
Subject key identifier: A6:45:B0:14:75:A5:8E:99:4F:12:3A:40:42:42:CE:C1:78:12:0A:DE
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0195853F32A6BB14851D4835EFE5FFDDC7B8
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/pkWwFHWljplPEjpAQkLOwXgSCt4.roa
Signing time: Tue 11 Mar 2025 12:47:46 +0000
ROA not before: Tue 11 Mar 2025 12:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.178.0.0/15 maxlen: 15
31.178.0.0/16 maxlen: 16
31.179.0.0/16 maxlen: 16
31.186.192.0/19 maxlen: 19
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
77.236.0.0/19 maxlen: 19
77.236.0.0/20 maxlen: 20
77.236.16.0/20 maxlen: 20
81.18.192.0/20 maxlen: 20
81.18.192.0/21 maxlen: 21
81.18.200.0/21 maxlen: 21
81.18.208.0/20 maxlen: 20
81.18.208.0/21 maxlen: 21
81.18.216.0/21 maxlen: 21
83.144.64.0/18 maxlen: 18
83.144.64.0/19 maxlen: 19
83.144.96.0/19 maxlen: 19
84.10.0.0/16 maxlen: 16
84.10.0.0/17 maxlen: 17
84.10.128.0/17 maxlen: 17
85.222.0.0/17 maxlen: 17
85.222.0.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
87.206.0.0/15 maxlen: 15
87.206.0.0/16 maxlen: 16
87.207.0.0/16 maxlen: 16
89.64.0.0/12 maxlen: 12
89.64.0.0/13 maxlen: 13
89.72.0.0/13 maxlen: 13
91.150.192.0/19 maxlen: 19
91.150.192.0/20 maxlen: 20
91.150.208.0/20 maxlen: 20
92.244.32.0/19 maxlen: 19
92.244.32.0/20 maxlen: 20
92.244.48.0/20 maxlen: 20
94.75.64.0/18 maxlen: 18
94.75.64.0/19 maxlen: 19
94.75.96.0/19 maxlen: 19
94.172.0.0/16 maxlen: 16
94.172.0.0/17 maxlen: 17
94.172.128.0/17 maxlen: 17
95.158.64.0/18 maxlen: 18
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
188.93.164.0/22 maxlen: 22
193.47.158.0/23 maxlen: 23
193.47.160.0/24 maxlen: 24
194.187.40.0/22 maxlen: 22
195.34.208.0/22 maxlen: 22
212.76.32.0/19 maxlen: 19
212.76.32.0/20 maxlen: 20
212.76.48.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
213.134.160.0/20 maxlen: 20
213.134.176.0/20 maxlen: 20
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/27 maxlen: 27
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:3f:32:a6:bb:14:85:1d:48:35:ef:e5:ff:dd:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Mar 11 12:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a645b01475a58e994f123a404242cec178120ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b8:5e:19:80:14:b4:9b:94:a5:1c:66:01:2d:
5a:00:47:a2:34:1a:80:90:ed:df:83:6c:23:fc:bf:
31:bc:cb:6f:1c:73:06:eb:1f:a6:5b:6f:5b:53:2b:
e4:bd:bf:e5:48:ab:af:82:79:72:bb:b7:98:7d:6c:
16:1e:ac:49:8d:ca:15:3d:26:84:8f:59:ec:5b:8e:
12:63:48:37:e6:cd:6f:d6:16:68:db:e6:25:db:84:
19:22:5b:3d:5e:71:41:6e:f1:30:c9:3a:1f:74:16:
6a:4c:d2:c8:28:7c:26:1a:27:f5:8e:3e:25:be:02:
31:2f:51:51:fd:4f:e8:2c:64:7a:cc:d6:9a:0e:8a:
37:8c:54:e6:df:e9:b4:48:61:b1:97:c5:84:eb:eb:
55:b0:f2:5d:3d:7f:9d:0a:42:a2:c0:02:e1:40:e2:
f9:5f:2b:79:81:31:22:09:92:39:44:f0:ad:bf:e1:
be:a1:43:11:22:bd:00:0a:74:cf:9d:17:a3:e3:50:
ac:ab:44:10:b0:bc:00:bb:dd:93:42:56:52:c5:ad:
4d:38:f2:66:d5:9c:77:68:fd:c7:2f:40:de:6e:bb:
b7:07:22:da:63:97:0e:dd:af:5b:d2:8d:46:58:9f:
17:6d:6a:ed:57:e2:7d:60:14:d1:bc:e9:61:21:f5:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:B0:14:75:A5:8E:99:4F:12:3A:40:42:42:CE:C1:78:12:0A:DE
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/pkWwFHWljplPEjpAQkLOwXgSCt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
91.150.192.0/19
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
193.47.158.0-193.47.160.255
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
9c:35:15:20:46:21:48:aa:9f:3a:43:c2:50:bc:ac:3c:4e:56:
11:0c:da:fd:c7:23:75:b1:3e:36:dc:ec:20:8e:d1:12:8d:9e:
e7:bf:72:8a:51:7b:8a:2d:7c:3f:49:a1:ba:2f:4c:28:a7:9d:
b0:17:6f:d3:c6:6e:f5:79:08:7e:3b:e6:38:2b:3e:42:dc:bd:
0b:9d:35:5a:14:91:67:09:76:6f:fe:c0:3d:ca:bb:d4:51:cb:
04:77:ed:1c:c4:a1:e2:34:c6:91:65:3a:58:9d:b8:6f:4a:63:
d4:84:fa:f4:3f:5d:6a:18:98:00:55:c6:48:df:a5:a8:48:f6:
33:f4:bd:16:9f:19:30:da:d4:c7:20:8d:0e:0e:9b:ae:f6:e2:
c1:69:44:81:a4:5c:a3:35:95:da:43:ae:6e:44:50:b5:2f:e9:
60:9e:cf:75:f4:5b:a3:25:ff:02:d4:a1:63:76:a4:b3:a7:ad:
8b:f7:39:c6:36:f5:c3:eb:d9:eb:5b:3f:1a:09:84:97:17:7e:
cd:fb:4a:25:21:e4:4c:b5:ca:ae:c4:d0:68:cb:76:9f:cf:d8:
68:11:11:77:1f:fb:49:3b:8b:35:1e:dd:de:be:fa:99:2f:b3:
5a:f8:f7:5c:44:c4:ff:62:ee:22:92:c7:5e:99:1d:0b:e3:3b:
1f:62:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:00:17 2025 by rpki-client