Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/kxux6PZN_wALCnv9GHcDUsMWbbE.roa
File: kxux6PZN_wALCnv9GHcDUsMWbbE.roa (raw, json)
Hash identifier: K/OIfNl/eWd4bOh3PebPr55qq3daVrMSTH+FOwAG9yA=
Subject key identifier: 93:1B:B1:E8:F6:4D:FF:00:0B:0A:7B:FD:18:77:03:52:C3:16:6D:B1
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 01961EA4B14DE46DBECE8C5FE72FB1150881
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/kxux6PZN_wALCnv9GHcDUsMWbbE.roa
Signing time: Thu 10 Apr 2025 07:40:31 +0000
ROA not before: Thu 10 Apr 2025 07:40:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57112
IP address blocks: 5.104.112.0/20 maxlen: 20
31.177.32.0/21 maxlen: 21
45.84.40.0/22 maxlen: 24
45.91.56.0/22 maxlen: 22
45.92.224.0/22 maxlen: 22
81.30.64.0/20 maxlen: 20
86.111.208.0/22 maxlen: 22
185.23.140.0/22 maxlen: 22
185.33.152.0/22 maxlen: 22
185.38.152.0/22 maxlen: 22
185.70.236.0/22 maxlen: 22
185.72.160.0/22 maxlen: 22
185.82.192.0/22 maxlen: 22
185.87.104.0/22 maxlen: 22
185.87.116.0/22 maxlen: 22
185.87.156.0/22 maxlen: 22
185.103.236.0/22 maxlen: 22
185.113.172.0/22 maxlen: 22
185.133.108.0/22 maxlen: 22
185.192.144.0/22 maxlen: 24
185.192.147.0/24 maxlen: 24
185.236.16.0/22 maxlen: 24
217.76.16.0/20 maxlen: 20
217.76.16.0/21 maxlen: 21
217.76.24.0/21 maxlen: 21
2a0a:4980::/29 maxlen: 29
2a0e:c40::/29 maxlen: 29
2a0e:9680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:a4:b1:4d:e4:6d:be:ce:8c:5f:e7:2f:b1:15:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Apr 10 07:40:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931bb1e8f64dff000b0a7bfd18770352c3166db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:43:f6:8a:97:0b:16:13:1b:eb:80:cb:43:
6d:ee:65:50:71:d6:46:ce:d2:da:38:b7:ed:e1:b9:
31:9e:5b:13:9b:d9:54:7a:5d:a4:e3:96:03:36:a5:
b4:88:32:ac:2a:14:b9:f0:cd:be:8c:bb:fa:60:8a:
36:bf:f2:85:10:da:07:ac:78:d7:a5:c1:97:f7:a8:
8d:2d:50:4c:51:1a:98:a6:0a:23:5b:e1:b4:a2:c0:
7b:7c:9c:3f:44:a2:5f:fc:86:d2:b4:b0:f3:58:d8:
52:2d:bf:fb:7e:4a:79:55:bc:ad:3d:f3:b7:44:4c:
44:8e:ba:ba:df:c7:44:d5:5e:b5:da:a2:ed:2f:39:
d5:7f:b9:b6:3b:8b:69:7e:4f:0d:d8:ee:42:e8:d6:
fb:b5:5f:ca:8b:4c:02:85:fd:63:80:1a:f9:8f:d2:
d6:a0:ee:7b:e1:97:a7:48:27:04:9b:4c:37:39:15:
4b:54:2c:04:c4:86:72:6d:70:af:a2:99:50:df:b1:
2e:54:35:a6:19:3d:60:f7:a0:7c:b7:1d:dd:c7:23:
ba:c9:6a:2f:9b:57:b6:f6:29:8f:d9:cf:8f:db:4c:
97:52:83:39:af:b2:3d:5c:2c:ea:3f:bd:eb:a8:8c:
85:35:ed:36:d1:cd:7d:f5:06:fc:e6:7d:fa:6c:fe:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:B1:E8:F6:4D:FF:00:0B:0A:7B:FD:18:77:03:52:C3:16:6D:B1
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/kxux6PZN_wALCnv9GHcDUsMWbbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.112.0/20
31.177.32.0/21
45.84.40.0/22
45.91.56.0/22
45.92.224.0/22
81.30.64.0/20
86.111.208.0/22
185.23.140.0/22
185.33.152.0/22
185.38.152.0/22
185.70.236.0/22
185.72.160.0/22
185.82.192.0/22
185.87.104.0/22
185.87.116.0/22
185.87.156.0/22
185.103.236.0/22
185.113.172.0/22
185.133.108.0/22
185.192.144.0/22
185.236.16.0/22
217.76.16.0/20
IPv6:
2a0a:4980::/29
2a0e:c40::/29
2a0e:9680::/29
Signature Algorithm: sha256WithRSAEncryption
55:d3:f3:b0:b6:6b:0e:a2:af:5c:96:19:18:b1:16:73:1d:a0:
4f:8f:60:f2:b9:e0:73:3e:04:17:df:3b:8e:a1:4e:e5:e2:09:
ae:32:b4:a4:fb:a3:08:dd:0b:9b:14:ae:e9:aa:f2:f4:e6:4c:
2a:6f:fb:96:d6:62:80:c9:8b:35:65:a4:fd:e4:7b:dc:1e:d1:
d9:b0:db:18:2d:c9:23:53:89:91:90:bb:bb:16:0e:7f:49:96:
4e:fd:ce:fc:c4:13:46:ee:32:f5:79:a6:bd:6c:3b:79:90:a6:
d9:fc:2f:92:2c:9c:cc:83:ce:bb:85:12:5a:90:1f:5e:3d:e1:
de:38:fa:78:8c:49:9a:7c:f2:a3:62:ef:cc:96:79:e4:ea:a5:
c7:d3:fd:ae:9e:2b:16:5f:94:b8:da:e2:7f:d9:fb:e8:7a:70:
85:09:a5:5c:df:55:b0:25:42:83:ab:5e:79:94:25:5c:96:d7:
6e:d1:82:79:f9:bf:bf:04:18:bc:50:72:83:df:65:f8:20:89:
e7:b9:ba:c8:f5:d4:a0:6b:19:b6:cb:cd:6d:85:26:2b:2f:53:
6b:e0:04:b2:8e:58:2c:f6:21:dd:e5:18:9b:cb:81:be:8e:c7:
db:81:37:4b:ac:ec:20:a6:89:70:07:7b:00:fd:e6:f4:5b:8a:
70:71:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:34 2025 by rpki-client