Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa
File: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (raw, json)
Hash identifier: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=
Subject key identifier: 23:C3:66:87:7E:ED:14:D1:73:8D:79:B0:D2:DF:5B:10:80:04:F0:4A
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01942067E5C4721B4BBE37828DA999D8EFB6
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199967
IP address blocks: 5.181.6.0/24 maxlen: 24
5.181.7.0/24 maxlen: 24
5.183.178.0/24 maxlen: 24
45.12.204.0/24 maxlen: 24
45.12.205.0/24 maxlen: 24
45.66.132.0/24 maxlen: 24
45.66.133.0/24 maxlen: 24
45.82.166.0/24 maxlen: 24
45.128.154.0/24 maxlen: 24
45.134.19.0/24 maxlen: 24
45.144.240.0/24 maxlen: 24
45.144.241.0/24 maxlen: 24
81.90.191.0/24 maxlen: 24
91.217.120.0/24 maxlen: 24
91.217.121.0/24 maxlen: 24
147.78.15.0/24 maxlen: 24
152.89.208.0/24 maxlen: 24
152.89.209.0/24 maxlen: 24
185.105.189.0/24 maxlen: 24
185.105.190.0/24 maxlen: 24
185.120.18.0/24 maxlen: 24
185.120.19.0/24 maxlen: 24
185.126.69.0/24 maxlen: 24
185.126.70.0/24 maxlen: 24
185.126.71.0/24 maxlen: 24
185.126.118.0/24 maxlen: 24
185.126.119.0/24 maxlen: 24
185.126.138.0/24 maxlen: 24
185.126.139.0/24 maxlen: 24
185.159.68.0/24 maxlen: 24
185.159.69.0/24 maxlen: 24
185.159.70.0/24 maxlen: 24
185.160.25.0/24 maxlen: 24
185.160.27.0/24 maxlen: 24
185.168.21.0/24 maxlen: 24
185.168.22.0/24 maxlen: 24
185.168.23.0/24 maxlen: 24
185.171.121.0/24 maxlen: 24
185.175.140.0/24 maxlen: 24
185.175.141.0/24 maxlen: 24
185.187.237.0/24 maxlen: 24
185.187.238.0/24 maxlen: 24
185.187.239.0/24 maxlen: 24
188.119.100.0/24 maxlen: 24
188.119.101.0/24 maxlen: 24
194.156.228.0/24 maxlen: 24
217.197.163.0/24 maxlen: 24
2a0c:8a40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e5:c4:72:1b:4b:be:37:82:8d:a9:99:d8:ef:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c366877eed14d1738d79b0d2df5b108004f04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:d2:ba:7a:d7:c7:85:94:9b:9f:d9:57:ca:
76:eb:01:1f:91:d7:60:f2:e3:35:bd:1e:28:9c:e9:
8f:5f:44:89:6c:2a:23:cf:b1:93:01:90:cc:04:14:
c9:ea:6a:cb:a2:6a:cb:09:2e:37:36:9e:0c:1c:16:
ee:14:bc:52:d0:57:69:11:15:be:db:20:18:f2:d7:
d2:94:79:bc:e2:bb:c1:70:db:7d:8c:4d:60:b9:65:
2c:79:06:67:fc:e8:c9:0a:62:58:dc:d0:a2:3e:b4:
aa:24:09:fe:d7:52:bc:75:a0:96:db:bf:d7:0d:78:
2e:92:e4:85:68:48:ad:3d:49:4c:21:92:2a:ff:18:
3b:1f:b3:86:bb:d9:ad:6e:87:0b:c6:74:6f:d6:ac:
e0:83:e3:5a:8c:ab:3b:62:52:b0:9f:cc:62:3a:42:
72:57:0a:98:a6:6d:11:8a:76:c7:8e:83:c1:68:14:
6c:d3:30:e8:92:66:46:fb:1a:2d:81:1a:19:a3:55:
ad:d4:ac:35:a5:5b:22:e2:ca:7d:a7:89:aa:4b:47:
15:11:4c:4e:53:9a:0a:66:44:c0:5f:ca:27:4b:50:
90:39:fa:e9:17:5c:af:41:17:63:f6:a1:5a:3f:27:
24:50:ea:7e:9a:0f:69:47:0b:40:d2:01:92:fc:07:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:66:87:7E:ED:14:D1:73:8D:79:B0:D2:DF:5B:10:80:04:F0:4A
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.6.0/23
5.183.178.0/24
45.12.204.0/23
45.66.132.0/23
45.82.166.0/24
45.128.154.0/24
45.134.19.0/24
45.144.240.0/23
81.90.191.0/24
91.217.120.0/23
147.78.15.0/24
152.89.208.0/23
185.105.189.0-185.105.190.255
185.120.18.0/23
185.126.69.0-185.126.71.255
185.126.118.0/23
185.126.138.0/23
185.159.68.0-185.159.70.255
185.160.25.0/24
185.160.27.0/24
185.168.21.0-185.168.23.255
185.171.121.0/24
185.175.140.0/23
185.187.237.0-185.187.239.255
188.119.100.0/23
194.156.228.0/24
217.197.163.0/24
IPv6:
2a0c:8a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
80:c8:c8:48:4d:8b:6d:a7:7d:f7:80:28:be:11:2b:52:34:8d:
b7:04:a7:21:5b:21:61:e5:29:18:60:fe:91:ed:62:39:0b:10:
ac:fd:3d:45:e7:a4:2b:5c:ac:06:de:09:56:04:c6:93:c4:a7:
e3:b4:4c:c1:34:94:0c:a1:54:ba:fe:b0:a8:b7:af:49:d9:b1:
43:d2:cb:ba:50:39:4a:0b:ce:91:35:6b:87:7e:cc:82:9b:d6:
ed:ab:69:32:09:2f:a8:da:65:04:f4:40:91:53:e0:a9:ad:06:
70:21:4e:16:62:d7:ad:9b:9f:a9:ef:85:db:1b:70:5a:91:ae:
36:a4:df:99:79:fb:dd:00:0e:39:d7:99:fd:c0:d8:15:ba:cd:
38:51:d1:b8:bb:99:08:21:d9:99:7d:ac:f2:49:cd:f2:e6:78:
0e:a9:8b:7e:6e:92:57:be:ba:29:f4:a4:ad:8a:45:3b:b1:a4:
5b:37:05:1b:33:70:bc:b2:1d:11:f5:26:5c:09:69:52:a1:7c:
4e:48:0d:2e:ba:64:bb:13:ea:a7:64:56:2b:30:21:22:ec:49:
29:b2:f0:0d:83:26:d8:b5:5b:cc:4c:9b:d1:01:67:7b:0d:85:
4e:bf:b0:ad:bf:b3:e6:87:2f:d3:42:d9:aa:fa:9c:b2:7e:b1:
69:f7:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:10 2025 by rpki-client