Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa
File: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (raw, json)
Hash identifier: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=
Subject key identifier: 7D:BD:E5:CE:C2:91:B9:3D:C3:AA:64:55:6D:B4:7E:04:61:78:C1:75
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019428252E010DADA9C8E4071EBC17BA4DBC
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa
Signing time: Thu 02 Jan 2025 17:51:52 +0000
ROA not before: Thu 02 Jan 2025 17:51:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 5.157.132.0/22 maxlen: 22
5.157.152.0/21 maxlen: 21
5.157.168.0/22 maxlen: 24
5.157.172.0/22 maxlen: 24
5.157.192.0/22 maxlen: 22
5.157.196.0/22 maxlen: 22
5.157.200.0/21 maxlen: 21
5.157.208.0/21 maxlen: 21
5.157.216.0/22 maxlen: 24
5.157.220.0/22 maxlen: 24
5.157.228.0/22 maxlen: 22
5.157.232.0/21 maxlen: 21
5.157.248.0/21 maxlen: 21
37.35.48.0/22 maxlen: 22
37.35.52.0/24 maxlen: 24
62.216.72.0/22 maxlen: 22
62.216.72.0/24 maxlen: 24
62.216.73.0/24 maxlen: 24
62.216.74.0/24 maxlen: 24
62.216.75.0/24 maxlen: 24
62.216.80.0/22 maxlen: 22
62.216.80.0/24 maxlen: 24
62.216.81.0/24 maxlen: 24
62.216.82.0/24 maxlen: 24
62.216.83.0/24 maxlen: 24
62.216.92.0/24 maxlen: 24
62.216.93.0/24 maxlen: 24
62.216.94.0/24 maxlen: 24
62.216.95.0/24 maxlen: 24
178.157.68.0/22 maxlen: 22
178.157.94.0/24 maxlen: 24
178.157.100.0/24 maxlen: 24
178.157.101.0/24 maxlen: 24
178.157.112.0/21 maxlen: 21
178.157.120.0/22 maxlen: 22
188.74.144.0/22 maxlen: 22
188.74.148.0/22 maxlen: 22
188.74.160.0/21 maxlen: 21
188.74.180.0/24 maxlen: 24
188.74.184.0/22 maxlen: 22
188.74.192.0/21 maxlen: 21
188.74.200.0/21 maxlen: 21
188.74.216.0/21 maxlen: 21
188.74.224.0/21 maxlen: 21
188.74.232.0/21 maxlen: 21
188.74.248.0/21 maxlen: 21
188.119.128.0/20 maxlen: 24
188.119.168.0/21 maxlen: 21
188.119.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:2e:01:0d:ad:a9:c8:e4:07:1e:bc:17:ba:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dbde5cec291b93dc3aa64556db47e046178c175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:9a:04:c2:2e:6a:b1:ae:9e:dc:21:6f:bb:
f0:0d:4a:05:d4:99:a4:0d:31:c4:1c:64:ce:9d:50:
6c:98:93:ce:b1:be:b5:8c:34:3d:f1:b0:c1:df:ce:
fb:99:06:47:5f:99:2e:8c:de:82:f0:fb:84:b5:a2:
ac:b0:87:21:e7:7e:d3:8d:5c:ae:b0:9f:80:38:0d:
cc:0d:c2:14:e4:3b:a4:26:f1:8f:52:21:bf:61:34:
b4:1a:a8:26:5f:8e:37:fd:61:65:78:e8:b6:6b:5b:
96:25:70:aa:d5:ea:fb:75:97:61:49:86:c3:19:35:
21:80:e7:69:5f:0e:94:5b:6c:37:ee:20:b6:db:31:
8d:ee:d6:44:67:58:2f:58:e0:7b:30:d9:44:c0:4a:
76:1e:0e:8d:39:93:f8:13:2d:8a:fb:d8:07:74:3e:
3f:ed:b2:61:2b:dc:99:9e:30:10:ef:9d:41:43:0e:
0d:d2:97:89:e3:70:d5:40:1c:25:46:41:a1:2c:20:
e2:27:3a:bd:83:54:48:50:ad:87:59:44:2c:94:53:
99:a4:a2:f9:c9:8d:55:b5:84:90:54:35:a8:f8:56:
3e:90:55:b4:a3:63:ad:6a:e3:58:7e:af:f3:fb:1e:
1f:42:98:58:2a:3b:f7:24:65:1c:08:98:d2:73:d1:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:E5:CE:C2:91:B9:3D:C3:AA:64:55:6D:B4:7E:04:61:78:C1:75
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.132.0/22
5.157.152.0/21
5.157.168.0/21
5.157.192.0/19
5.157.228.0-5.157.239.255
5.157.248.0/21
37.35.48.0-37.35.52.255
62.216.72.0/22
62.216.80.0/22
62.216.92.0/22
178.157.68.0/22
178.157.94.0/24
178.157.100.0/23
178.157.112.0-178.157.123.255
188.74.144.0/21
188.74.160.0/21
188.74.180.0/24
188.74.184.0/22
188.74.192.0/20
188.74.216.0-188.74.239.255
188.74.248.0/21
188.119.128.0/20
188.119.168.0/21
188.119.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:bb:30:42:a1:23:e9:97:1f:44:63:88:aa:d3:e2:cc:94:fc:
0d:b2:b7:6c:dc:05:cf:1c:3b:d4:a6:73:ad:b6:5e:81:8e:64:
d6:88:51:c6:36:2c:be:04:e0:42:3e:12:96:30:2f:2e:02:5e:
52:76:94:5b:e7:03:b3:55:73:1f:17:b1:c0:cb:72:33:05:dc:
f9:c5:82:3f:d9:15:0f:79:c8:e0:0b:b3:ab:f7:2b:4e:34:f6:
82:a8:a9:57:5d:4f:a0:e4:5f:32:d5:cb:c9:ad:41:3f:65:aa:
ce:44:47:2b:46:a0:5c:25:ee:72:42:30:24:70:74:a5:1d:87:
10:8f:8c:b3:c2:de:f7:1d:de:e5:64:12:de:a9:6e:55:11:33:
09:8f:7f:07:3b:c7:f2:5d:26:d8:61:65:cc:59:0e:3e:4c:08:
eb:cd:f2:5a:7f:19:5e:d5:53:5c:dc:54:ef:1e:5c:49:ae:7e:
f0:49:0b:5a:dd:d7:a8:93:3a:38:bd:98:4b:bd:a7:b4:91:1d:
c4:f8:f3:bb:88:be:b3:e9:74:fc:88:e4:f0:49:92:97:b1:42:
a7:41:c9:01:9c:9c:3f:c6:13:ee:90:3c:9a:47:9d:21:5c:7c:
bb:39:a3:07:30:1f:aa:1b:b3:2f:84:d3:ba:cc:cd:d6:ad:c1:
08:e4:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:14 2025 by rpki-client