Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/h-rZd3ShfaYedaYA6tLbzrX_MkU.roa
File: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (raw, json)
Hash identifier: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=
Subject key identifier: 87:EA:D9:77:74:A1:7D:A6:1E:75:A6:00:EA:D2:DB:CE:B5:FF:32:45
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 019425FC0BD46FACEA4394C83811AD5BA4C0
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/h-rZd3ShfaYedaYA6tLbzrX_MkU.roa
Signing time: Thu 02 Jan 2025 07:47:42 +0000
ROA not before: Thu 02 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56503
IP address blocks: 91.106.64.0/24 maxlen: 24
91.106.65.0/24 maxlen: 24
91.106.66.0/24 maxlen: 24
91.106.67.0/24 maxlen: 24
91.106.68.0/24 maxlen: 24
91.106.69.0/24 maxlen: 24
91.106.70.0/24 maxlen: 24
91.106.71.0/24 maxlen: 24
91.106.72.0/24 maxlen: 24
91.106.73.0/24 maxlen: 24
91.106.74.0/24 maxlen: 24
91.106.75.0/24 maxlen: 24
91.106.76.0/24 maxlen: 24
91.106.77.0/24 maxlen: 24
91.106.78.0/24 maxlen: 24
91.106.79.0/24 maxlen: 24
91.106.80.0/24 maxlen: 24
91.106.81.0/24 maxlen: 24
91.106.82.0/24 maxlen: 24
91.106.83.0/24 maxlen: 24
91.106.84.0/24 maxlen: 24
91.106.85.0/24 maxlen: 24
91.106.86.0/24 maxlen: 24
91.106.87.0/24 maxlen: 24
91.106.88.0/24 maxlen: 24
91.106.89.0/24 maxlen: 24
91.106.90.0/24 maxlen: 24
91.106.91.0/24 maxlen: 24
91.106.92.0/24 maxlen: 24
91.106.93.0/24 maxlen: 24
91.106.94.0/24 maxlen: 24
91.106.95.0/24 maxlen: 24
185.26.232.0/23 maxlen: 23
185.26.234.0/23 maxlen: 23
185.103.244.0/22 maxlen: 22
185.103.248.0/22 maxlen: 22
185.104.232.0/22 maxlen: 22
185.104.240.0/22 maxlen: 22
185.106.136.0/22 maxlen: 22
185.106.144.0/22 maxlen: 22
185.107.28.0/24 maxlen: 24
185.107.29.0/24 maxlen: 24
185.107.30.0/23 maxlen: 23
185.108.164.0/22 maxlen: 22
2a04:1380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0b:d4:6f:ac:ea:43:94:c8:38:11:ad:5b:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Jan 2 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87ead97774a17da61e75a600ead2dbceb5ff3245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:bb:18:eb:27:b1:2e:d6:c7:ae:11:69:36:
2a:a9:29:c8:0c:f3:b3:08:d2:d9:7a:6a:73:f3:01:
b5:7a:3f:78:9c:f2:35:65:8f:81:d1:67:8f:df:cf:
e0:f1:c1:d9:fd:4b:b7:eb:92:fe:6d:83:4f:bd:b2:
b4:36:26:bc:8a:ee:62:ed:b3:b0:6e:84:a4:91:cb:
29:aa:21:23:81:74:fb:39:cc:fd:2a:bb:54:e3:66:
66:c5:82:33:64:52:5c:6f:60:16:33:c4:d9:ee:1d:
84:f3:77:eb:49:f4:59:04:74:52:ef:0c:e3:6b:44:
24:ca:a6:64:bc:fe:c7:b9:ab:c7:25:4b:df:a3:5a:
af:16:b1:0b:e8:f0:f3:9f:e9:77:1e:47:cf:44:a1:
6c:65:9c:39:3c:50:ee:75:3b:7b:d0:d1:9c:37:18:
3c:ee:f8:d4:d4:61:76:50:09:b0:6e:71:07:b4:e1:
e6:91:be:a8:a1:a5:8d:dc:1d:4b:84:c9:70:31:0d:
3d:92:50:4f:e8:b3:46:c9:67:0d:a0:c1:18:96:39:
95:5c:08:79:b4:df:f9:d2:9e:d7:68:af:b9:97:55:
75:d9:c1:49:a6:35:92:3e:4c:44:fd:56:64:11:68:
35:ef:f2:36:97:3c:f4:2e:49:e7:44:c6:9c:91:cc:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EA:D9:77:74:A1:7D:A6:1E:75:A6:00:EA:D2:DB:CE:B5:FF:32:45
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/h-rZd3ShfaYedaYA6tLbzrX_MkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.64.0/19
185.26.232.0/22
185.103.244.0-185.103.251.255
185.104.232.0/22
185.104.240.0/22
185.106.136.0/22
185.106.144.0/22
185.107.28.0/22
185.108.164.0/22
IPv6:
2a04:1380::/29
Signature Algorithm: sha256WithRSAEncryption
d0:c3:a0:d4:cb:c0:61:66:31:03:8c:1e:f3:df:01:cd:c8:b2:
53:e4:57:75:11:42:be:a9:75:e3:6c:8f:f2:c3:e7:cc:fd:26:
30:cc:2d:7c:a1:eb:fa:28:ad:c7:5e:49:a6:81:e5:9a:b8:00:
86:16:ff:07:a5:9a:45:e5:c5:8a:6f:17:72:a6:7d:7f:88:ce:
80:d6:fb:e7:8b:15:28:a1:6d:c3:94:49:f0:b6:9c:b5:4b:d5:
d9:11:18:ed:69:de:30:05:68:f0:11:c7:80:2c:d4:29:20:57:
29:0d:a7:58:5e:2b:18:65:16:c9:39:ab:ac:38:c2:80:13:a3:
6a:f1:43:eb:50:cc:1f:6a:57:b7:f1:20:b0:45:58:44:4a:c9:
c9:92:cc:85:56:1d:f4:ab:85:4d:67:d2:78:86:6e:fe:24:00:
20:a2:76:74:7a:39:29:4d:1f:67:60:f5:1f:8e:53:5d:fc:01:
fb:a7:2f:d4:9e:dc:d4:8b:25:e2:18:ff:6d:15:b8:dc:78:10:
a6:d7:2e:43:08:87:ee:a9:3e:51:16:a8:2d:6f:0f:8d:ef:e8:
3c:1a:04:f9:81:c4:3a:4b:f0:e6:da:de:af:ec:60:46:e1:d8:
fa:f1:a8:3f:2c:4a:fa:e2:e9:2c:29:76:56:99:ac:8a:76:9b:
b9:18:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:37 2025 by rpki-client