Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/OFO40pbXY33B4_R6m0vxzmJtlaE.roa
File: OFO40pbXY33B4_R6m0vxzmJtlaE.roa (raw, json)
Hash identifier: OKgJmR90SzKnzfJWjgu0f1y4g1wd7HW3UjBatZfs5A8=
Subject key identifier: 38:53:B8:D2:96:D7:63:7D:C1:E3:F4:7A:9B:4B:F1:CE:62:6D:95:A1
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 01944B89A3FDCE9716D7E2D03880280BC63A
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/OFO40pbXY33B4_R6m0vxzmJtlaE.roa
Signing time: Thu 09 Jan 2025 14:48:18 +0000
ROA not before: Thu 09 Jan 2025 14:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1273
IP address blocks: 62.25.64.0/18 maxlen: 18
62.208.0.0/16 maxlen: 16
62.221.0.0/19 maxlen: 19
141.1.0.0/16 maxlen: 16
185.204.4.0/22 maxlen: 22
193.164.160.0/19 maxlen: 19
193.195.0.0/17 maxlen: 17
193.195.128.0/21 maxlen: 21
193.195.136.0/23 maxlen: 23
193.195.139.0/24 maxlen: 24
193.195.140.0/24 maxlen: 24
193.195.142.0/23 maxlen: 23
193.195.144.0/20 maxlen: 20
193.195.160.0/19 maxlen: 19
193.195.192.0/18 maxlen: 18
194.6.0.0/18 maxlen: 18
194.6.64.0/19 maxlen: 19
194.70.0.0/23 maxlen: 23
194.70.2.0/24 maxlen: 24
194.70.4.0/22 maxlen: 22
194.70.8.0/21 maxlen: 21
194.70.16.0/20 maxlen: 20
194.70.32.0/22 maxlen: 22
194.70.37.0/24 maxlen: 24
194.70.38.0/23 maxlen: 23
194.70.40.0/21 maxlen: 21
194.70.48.0/20 maxlen: 20
194.70.64.0/20 maxlen: 20
194.70.80.0/21 maxlen: 21
194.70.88.0/22 maxlen: 22
194.70.92.0/23 maxlen: 23
194.70.95.0/24 maxlen: 24
194.70.96.0/19 maxlen: 19
194.70.128.0/18 maxlen: 18
194.70.192.0/19 maxlen: 19
194.70.224.0/21 maxlen: 21
194.70.232.0/23 maxlen: 23
194.70.235.0/24 maxlen: 24
194.70.236.0/22 maxlen: 22
194.70.240.0/20 maxlen: 20
194.112.64.0/18 maxlen: 18
194.152.64.0/19 maxlen: 19
194.159.0.0/16 maxlen: 16
194.176.128.0/19 maxlen: 19
194.177.160.0/19 maxlen: 19
194.205.0.0/16 maxlen: 16
194.217.0.0/16 maxlen: 16
194.221.0.0/16 maxlen: 16
195.2.0.0/19 maxlen: 19
195.10.0.0/18 maxlen: 18
195.11.0.0/16 maxlen: 16
195.27.0.0/16 maxlen: 16
195.44.0.0/16 maxlen: 16
195.59.0.0/16 maxlen: 16
195.80.64.0/19 maxlen: 19
195.89.0.0/16 maxlen: 16
195.89.13.0/24 maxlen: 24
195.92.0.0/16 maxlen: 16
195.144.128.0/19 maxlen: 19
195.173.0.0/16 maxlen: 16
212.62.0.0/19 maxlen: 19
212.137.0.0/16 maxlen: 16
212.158.0.0/17 maxlen: 17
212.165.0.0/19 maxlen: 19
212.240.0.0/16 maxlen: 16
213.12.0.0/16 maxlen: 16
213.38.0.0/16 maxlen: 16
213.185.192.0/19 maxlen: 19
213.216.128.0/18 maxlen: 18
217.134.0.0/15 maxlen: 15
217.135.0.0/16 maxlen: 16
217.161.0.0/16 maxlen: 16
2001:5000::/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:89:a3:fd:ce:97:16:d7:e2:d0:38:80:28:0b:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Jan 9 14:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3853b8d296d7637dc1e3f47a9b4bf1ce626d95a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:a9:0b:2e:fd:e5:4c:91:ce:14:16:7a:9b:
76:06:e5:88:3c:f8:a7:dc:70:41:6b:cf:3e:f3:ba:
51:46:7c:e3:4a:07:4f:16:af:7a:2c:f0:c7:de:06:
fe:8e:52:53:7e:4f:bd:88:bb:0d:24:6b:ad:38:92:
ea:76:86:3f:c7:2c:49:ab:c7:3b:85:d6:ba:b2:78:
8a:c9:97:31:39:17:54:a1:5d:d5:00:b1:38:71:49:
f9:46:c5:93:4d:2e:91:c8:c4:1b:5e:02:b3:54:fb:
b5:6d:2a:ff:06:33:57:d3:06:7c:6c:ab:c5:6c:0a:
70:1a:e0:62:3d:da:ba:2b:60:d5:29:a3:dc:8e:7f:
56:8d:1e:1e:85:d2:99:15:89:86:f9:79:cb:e8:0f:
a1:11:5d:99:83:58:ab:55:81:4f:9b:4b:96:df:da:
4e:96:61:ba:94:d3:2a:c3:09:34:6e:44:09:73:39:
37:13:8d:97:0c:ab:cc:f3:92:76:63:71:6d:09:7d:
5a:c0:ee:d7:c1:f9:b7:e4:1c:60:e6:dd:d9:48:d0:
42:5b:dd:98:21:74:87:92:fa:39:e6:9c:c8:d1:aa:
d8:54:20:bf:f3:6b:f0:47:b1:87:1c:cf:2e:99:4e:
4e:b4:08:94:0e:1f:57:5c:5b:a6:c5:53:68:01:94:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:B8:D2:96:D7:63:7D:C1:E3:F4:7A:9B:4B:F1:CE:62:6D:95:A1
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/OFO40pbXY33B4_R6m0vxzmJtlaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0/18
62.208.0.0/16
62.221.0.0/19
141.1.0.0/16
185.204.4.0/22
193.164.160.0/19
193.195.0.0-193.195.137.255
193.195.139.0-193.195.140.255
193.195.142.0-193.195.255.255
194.6.0.0-194.6.95.255
194.70.0.0-194.70.2.255
194.70.4.0-194.70.35.255
194.70.37.0-194.70.93.255
194.70.95.0-194.70.233.255
194.70.235.0-194.70.255.255
194.112.64.0/18
194.152.64.0/19
194.159.0.0/16
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.217.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.11.0.0/16
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.89.0.0/16
195.92.0.0/16
195.144.128.0/19
195.173.0.0/16
212.62.0.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
212.240.0.0/16
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
213.216.128.0/18
217.134.0.0/15
217.161.0.0/16
IPv6:
2001:5000::/21
Signature Algorithm: sha256WithRSAEncryption
1b:b0:d1:05:ff:0a:07:da:b9:29:9e:a7:fe:2d:04:9c:ab:e9:
be:84:a8:9a:36:af:73:3f:53:6d:e5:a9:d1:3e:73:6b:1b:a7:
15:c3:79:b1:2f:22:07:67:58:72:91:95:ad:1c:8a:70:a0:5f:
9d:64:5c:12:20:8f:1f:64:c3:8d:50:1a:fb:af:81:a5:6b:fe:
58:0f:a4:bb:fe:ee:e6:8f:8c:56:12:a3:1c:21:f4:9e:ef:9b:
82:43:dc:81:d5:d7:22:eb:3b:4f:a4:36:a9:93:59:6b:b4:59:
15:89:5b:65:a1:05:da:a2:a9:40:78:b0:b4:fa:07:a0:18:00:
5d:df:f1:57:e5:51:05:f6:fc:64:84:20:a8:2b:cd:20:97:2f:
44:67:b8:fe:22:d0:f4:af:34:3e:48:84:fa:7e:1a:01:eb:ad:
0a:8e:01:2e:1a:ba:d4:9c:42:16:87:96:d3:33:13:e8:70:d8:
4e:56:c1:3f:ed:b0:7a:8d:eb:97:05:4c:ad:a9:64:c8:ce:c2:
0f:8d:24:de:5c:ac:66:57:3c:48:40:1f:ca:e2:98:97:50:cb:
68:b8:72:47:e9:cf:30:14:dd:82:d6:07:fb:6a:47:f3:13:e4:
3e:23:0a:e1:72:fd:54:68:30:65:bb:0e:48:0d:3b:58:00:a8:
ac:31:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:55 2025 by rpki-client