Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/mYwzdqAY7_S9Fk60kMnWASIug-A.roa
File: mYwzdqAY7_S9Fk60kMnWASIug-A.roa (raw, json)
Hash identifier: 52FaK7zJCUXQtBsYKmcDyOdvm3LIQVlGj6112gPSUr8=
Subject key identifier: 99:8C:33:76:A0:18:EF:F4:BD:16:4E:B4:90:C9:D6:01:22:2E:83:E0
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019424B3D4A504C324C8D6F98D2AEF98AE2B
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/mYwzdqAY7_S9Fk60kMnWASIug-A.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20857
IP address blocks: 5.61.248.0/21 maxlen: 24
31.14.96.0/22 maxlen: 24
37.34.56.0/21 maxlen: 24
37.97.128.0/17 maxlen: 24
77.72.144.0/21 maxlen: 24
80.69.64.0/19 maxlen: 24
84.247.8.0/21 maxlen: 24
85.10.128.0/19 maxlen: 24
86.105.244.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
89.41.168.0/22 maxlen: 24
91.142.254.0/23 maxlen: 23
93.119.0.0/20 maxlen: 24
95.170.64.0/19 maxlen: 24
141.138.136.0/21 maxlen: 24
149.210.128.0/17 maxlen: 24
185.10.48.0/22 maxlen: 24
185.108.112.0/22 maxlen: 24
188.240.52.0/22 maxlen: 22
188.241.148.0/22 maxlen: 22
195.8.195.0/24 maxlen: 24
195.135.195.0/24 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:7000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:e000::/36 maxlen: 36
2a01:7860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d4:a5:04:c3:24:c8:d6:f9:8d:2a:ef:98:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=998c3376a018eff4bd164eb490c9d601222e83e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:a7:4e:c3:3c:9e:9c:2d:43:2b:35:0e:21:
0e:46:4a:7a:6a:63:30:c3:fc:b3:fb:0b:36:a7:a2:
a1:ee:52:0d:53:72:9d:0b:69:2f:ab:03:46:ad:9e:
9b:c8:9d:83:6f:c5:3f:00:25:dd:08:8f:51:2c:67:
31:aa:28:16:f5:bb:f0:0d:a8:94:e4:ec:04:f9:fe:
83:07:be:72:7d:83:9f:26:7b:17:23:7e:88:67:1c:
6e:d0:c1:c2:a0:4c:8d:ec:6d:dc:04:a2:51:e7:e6:
98:42:a0:e2:1b:fe:59:c9:18:c8:af:55:35:a9:f9:
93:dd:b5:0b:c9:83:ec:5c:18:d5:ee:d8:2d:9e:b1:
8c:c7:cc:93:78:41:fd:e6:92:da:aa:a9:22:b1:4e:
c5:69:df:09:bd:f3:01:cf:56:2d:de:78:c4:40:3d:
0f:9a:9b:94:10:5d:e7:d5:15:2c:5d:a7:84:3d:b8:
5d:eb:be:dd:6f:d4:64:b4:ca:39:54:36:5d:e5:42:
7e:0b:3a:0d:88:3c:4f:32:0e:b1:57:d5:f1:97:37:
19:75:85:b0:7d:14:c2:d4:ed:23:dc:a7:b1:4e:09:
15:7d:64:41:30:9c:f9:c1:da:12:68:7f:b1:8e:7a:
02:71:75:fc:fe:5f:3d:d0:2e:6d:6b:78:0e:34:2d:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8C:33:76:A0:18:EF:F4:BD:16:4E:B4:90:C9:D6:01:22:2E:83:E0
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/mYwzdqAY7_S9Fk60kMnWASIug-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.14.96.0/22
37.34.56.0/21
37.97.128.0/17
77.72.144.0/21
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
86.105.244.0/22
87.253.128.0/19
89.41.168.0/22
91.142.254.0/23
93.119.0.0/20
95.170.64.0/19
141.138.136.0/21
149.210.128.0/17
185.10.48.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
2a01:7860::/32
Signature Algorithm: sha256WithRSAEncryption
39:3c:bd:42:c9:04:41:c6:8f:53:0c:9e:28:20:79:8d:52:50:
7c:86:6f:68:fe:d4:3d:51:c5:84:a5:ac:95:2c:13:59:05:2b:
d8:93:66:f9:cd:50:fa:e4:ca:9f:ee:c3:1e:91:a4:da:73:ba:
1f:ca:8d:1c:c8:45:1d:bd:4f:c8:39:95:25:ec:35:1e:9a:62:
39:db:56:aa:d3:64:48:fe:1b:92:c3:27:10:16:ac:71:97:4a:
14:cd:79:c2:89:7e:53:e2:d1:71:81:8f:89:38:ea:95:0a:9c:
22:de:90:4c:45:34:2a:fd:75:11:6c:73:07:d9:32:89:08:79:
74:2e:56:6d:fe:53:5e:a0:de:97:47:91:b4:93:e8:72:bd:ea:
ef:61:fc:4e:01:b7:ca:cb:25:ef:cb:c1:c8:79:54:e8:51:3a:
33:c4:76:b2:f7:42:fa:23:b9:a7:d9:fe:ca:03:bf:7d:9e:94:
00:ac:5a:96:5b:5b:b4:cb:aa:13:75:c4:4e:65:97:be:88:dd:
2c:8c:50:b4:ca:6c:a6:78:9a:d4:a4:ee:b1:88:a6:79:5d:d6:
f0:b6:05:4e:58:86:cb:bc:d4:1f:cf:13:ba:77:79:61:78:7e:
95:61:79:37:4b:71:b4:49:96:c6:12:da:c1:34:08:0c:7b:3c:
ad:50:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:11 2025 by rpki-client