Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/A8pHLmGqvvL7ZXyTQ3D6P92j5u8.roa
File: A8pHLmGqvvL7ZXyTQ3D6P92j5u8.roa (raw, json)
Hash identifier: uCr7a+QcFX+k6IP9JSJ/P3skrjwZJKJctLLUyppPEI8=
Subject key identifier: 03:CA:47:2E:61:AA:BE:F2:FB:65:7C:93:43:70:FA:3F:DD:A3:E6:EF
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 0194282749B0DC9955DE050BE51F07530701
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/A8pHLmGqvvL7ZXyTQ3D6P92j5u8.roa
Signing time: Thu 02 Jan 2025 17:54:10 +0000
ROA not before: Thu 02 Jan 2025 17:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198589
IP address blocks: 5.62.128.0/20 maxlen: 20
5.62.128.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.130.0/23 maxlen: 23
5.62.130.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
5.62.132.0/23 maxlen: 23
5.62.132.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.134.0/23 maxlen: 23
5.62.134.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.138.0/23 maxlen: 23
5.62.138.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.140.0/23 maxlen: 23
5.62.140.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.142.0/23 maxlen: 23
5.62.142.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.144.0/23 maxlen: 23
5.62.144.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.146.0/23 maxlen: 23
5.62.146.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.148.0/23 maxlen: 23
5.62.148.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.150.0/23 maxlen: 23
5.62.150.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.83.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/23 maxlen: 23
185.69.6.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
2a00:c9e0::/32 maxlen: 32
2a00:c9e0:1::/48 maxlen: 48
2a00:c9e0:5::/48 maxlen: 48
2a00:c9e0:8::/48 maxlen: 48
2a00:c9e0:b::/48 maxlen: 48
2a00:c9e0:c::/48 maxlen: 48
2a00:c9e0:8000::/48 maxlen: 48
2a00:c9e0:8001::/48 maxlen: 48
2a00:c9e0:8002::/48 maxlen: 48
2a00:c9e7:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:49:b0:dc:99:55:de:05:0b:e5:1f:07:53:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jan 2 17:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ca472e61aabef2fb657c934370fa3fdda3e6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:45:62:b1:97:6e:5f:56:08:81:72:81:fe:
a6:4a:2d:5d:dc:b1:4f:18:f5:e6:4a:95:a5:68:ed:
79:b3:4e:ac:cd:07:0a:4c:38:5d:48:3c:b5:e3:1d:
57:43:79:1a:fb:8e:89:ae:ad:43:f2:03:eb:e3:d8:
5f:20:c4:95:40:e7:fd:64:50:50:fa:c3:b1:b4:83:
90:44:17:28:05:6e:94:49:f8:fd:ef:d0:0b:b6:5f:
e7:1f:4b:be:da:b1:aa:5b:ad:6b:e3:c0:74:4f:42:
3c:76:66:52:96:f4:be:cf:f5:c2:54:08:6f:e6:fb:
37:32:ef:cf:cd:96:be:36:e3:a1:78:45:89:18:d7:
9a:82:13:f9:e6:36:a7:1a:13:b9:08:8b:1d:02:2b:
18:28:a0:bc:bd:ff:63:2d:cf:06:06:87:ac:f2:df:
41:e6:56:2d:e8:4c:66:50:a4:e6:d0:c4:55:fe:9c:
29:00:a2:cb:0f:19:54:f6:a7:dc:d7:02:ce:22:53:
0f:b2:9d:c4:ce:90:0b:6b:cb:2b:21:81:07:3f:24:
55:82:19:d3:77:2f:02:bf:d3:bd:97:7c:59:f3:49:
bc:24:6d:79:8f:d7:e0:36:37:f9:03:9b:3a:7b:d6:
6e:4b:e5:5f:8c:8d:9f:44:3a:22:a2:2e:4d:39:8e:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:47:2E:61:AA:BE:F2:FB:65:7C:93:43:70:FA:3F:DD:A3:E6:EF
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/A8pHLmGqvvL7ZXyTQ3D6P92j5u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
IPv6:
2a00:c9e0::/32
2a00:c9e7:1::/48
Signature Algorithm: sha256WithRSAEncryption
97:c6:e3:6b:6c:ce:94:b6:a6:9d:ad:f3:ba:8a:2e:c3:7f:81:
d9:36:b0:ee:6f:cb:04:43:09:52:bb:51:11:72:85:43:69:ae:
11:13:ad:7e:0e:11:ff:53:68:91:47:91:d4:6d:0f:ce:aa:49:
5e:b8:72:ee:28:16:e7:22:31:70:80:fb:76:4a:7c:91:d7:bd:
ff:0d:16:f8:ab:bd:ae:37:bb:60:17:17:4d:df:e7:eb:bc:e2:
f0:db:81:a9:35:4c:f3:2e:21:dc:ea:3d:88:d8:4d:22:25:38:
d4:83:29:9b:d2:e4:4a:7f:f1:3b:d2:62:7a:fa:e2:17:09:aa:
2a:6c:9f:88:8f:78:8a:80:1c:a1:9f:2f:0a:1b:a2:8d:20:f9:
92:0c:e4:8b:d1:3a:97:20:a3:04:9f:65:ee:c2:6e:7a:86:dd:
cf:47:6a:64:b0:4c:61:b4:19:59:12:58:7f:77:f9:1a:8e:f5:
08:ea:11:4f:0a:3d:b0:5e:f9:fa:53:dd:e9:57:e7:e2:2b:4e:
c2:98:3b:fa:f5:47:86:b7:47:dc:d9:99:22:5e:42:87:cd:c0:
5c:f7:6c:3a:44:da:b8:46:c2:ad:5a:89:08:2d:ef:61:b7:1e:
d0:b4:7d:67:ca:60:47:c1:b5:c0:b2:d0:bb:87:2d:60:82:0d:
8f:37:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:39:46 2025 by rpki-client