Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/yMtJt_twvVm4xjz7jm_5XvRHAMc.roa
File: yMtJt_twvVm4xjz7jm_5XvRHAMc.roa (raw, json)
Hash identifier: tZbHO+4LpU/O3doJf9chezEvxXqfJDLPtEQzBh/Xinc=
Subject key identifier: C8:CB:49:B7:FB:70:BD:59:B8:C6:3C:FB:8E:6F:F9:5E:F4:47:00:C7
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 019427B601A4FE4A75CFD7F6034AEF98307D
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/yMtJt_twvVm4xjz7jm_5XvRHAMc.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 5.101.136.0/21 maxlen: 21
5.101.144.0/21 maxlen: 21
5.101.168.0/21 maxlen: 21
31.132.0.0/21 maxlen: 21
37.9.56.0/21 maxlen: 21
77.74.192.0/21 maxlen: 21
77.75.120.0/21 maxlen: 21
78.110.160.0/21 maxlen: 21
78.110.168.0/23 maxlen: 23
78.110.170.0/24 maxlen: 24
78.110.172.0/22 maxlen: 22
78.157.192.0/21 maxlen: 21
78.157.200.0/22 maxlen: 22
78.157.204.0/24 maxlen: 24
78.157.206.0/23 maxlen: 23
78.157.208.0/20 maxlen: 20
94.229.64.0/20 maxlen: 20
178.159.0.0/20 maxlen: 20
185.17.24.0/24 maxlen: 24
185.17.26.0/24 maxlen: 24
185.17.27.0/24 maxlen: 24
185.103.96.0/22 maxlen: 22
2a01:a500::/32 maxlen: 32
2a01:a500:1::/48 maxlen: 48
2a01:a500:1228::/48 maxlen: 48
2a01:a500:251a::/48 maxlen: 48
2a01:a500:251b::/48 maxlen: 48
2a01:a500:251c::/48 maxlen: 48
2a01:a500:2566::/48 maxlen: 48
2a01:a500:a517::/48 maxlen: 48
2a01:a500:b517::/48 maxlen: 48
2a01:a500:c517::/48 maxlen: 48
2a01:a500:d517::/48 maxlen: 48
2a01:a500:e517::/48 maxlen: 48
2a01:a500:f517::/48 maxlen: 48
2a01:a507::/32 maxlen: 32
2a01:a507:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:01:a4:fe:4a:75:cf:d7:f6:03:4a:ef:98:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8cb49b7fb70bd59b8c63cfb8e6ff95ef44700c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:40:c9:20:95:32:a9:6e:92:91:56:56:0e:
be:83:a0:ed:97:ff:17:21:87:54:a8:16:24:82:40:
02:7d:14:be:76:cd:e4:6c:e3:3b:b0:7c:a0:3e:ef:
45:14:e3:43:a1:b1:0d:5a:31:64:fa:60:c1:72:f3:
b9:93:30:c7:14:21:1f:ac:38:65:c6:e0:6b:a2:c7:
59:43:86:65:44:68:bc:d8:f3:4e:37:a9:83:84:1f:
6e:ad:a5:8a:cd:1a:f0:ce:f9:59:93:da:67:c0:85:
b3:5c:51:29:02:f5:b6:01:1d:53:51:c4:06:53:fc:
e6:a8:72:38:93:3a:4d:96:c9:cc:d6:f0:a6:5b:8c:
d3:23:ad:58:16:c1:d8:a3:c9:d7:89:de:5d:34:9f:
ef:8e:3f:1b:96:e7:c1:c4:9e:1b:a5:7d:51:f3:0e:
00:72:cb:cf:ae:fe:71:02:c6:ce:78:0f:06:9a:86:
d2:5d:22:a4:a4:89:b3:6f:7d:98:71:bb:68:02:a2:
ff:d3:25:47:61:78:38:77:dc:d6:72:f8:e0:76:d1:
1e:af:92:28:69:65:e5:06:e9:a8:11:13:23:e6:e4:
95:c5:0f:bb:f6:bd:bc:0d:ca:4a:23:6b:d3:6d:7b:
b0:ea:f3:70:7b:4e:86:22:14:29:8d:75:87:30:16:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CB:49:B7:FB:70:BD:59:B8:C6:3C:FB:8E:6F:F9:5E:F4:47:00:C7
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/yMtJt_twvVm4xjz7jm_5XvRHAMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.136.0-5.101.151.255
5.101.168.0/21
31.132.0.0/21
37.9.56.0/21
77.74.192.0/21
77.75.120.0/21
78.110.160.0-78.110.170.255
78.110.172.0/22
78.157.192.0-78.157.204.255
78.157.206.0-78.157.223.255
94.229.64.0/20
178.159.0.0/20
185.17.24.0/24
185.17.26.0/23
185.103.96.0/22
IPv6:
2a01:a500::/32
2a01:a507::/32
Signature Algorithm: sha256WithRSAEncryption
54:9a:49:73:1a:78:4e:08:bc:c8:44:de:ca:c8:84:a6:10:f3:
15:5e:25:f1:06:f8:2d:4b:9a:01:e4:7f:02:e2:39:d9:9b:ab:
32:9e:7a:ad:f9:2d:23:05:83:9f:d5:16:c3:5a:65:ac:1c:9d:
7f:3a:bb:8b:45:14:76:1d:92:e0:33:2c:78:6e:35:48:f8:9d:
3e:32:0a:46:64:7e:30:09:69:a0:7e:cc:35:54:a0:84:69:37:
40:d3:6f:8a:7d:10:28:b4:ee:78:e9:fa:d4:0a:1a:de:2d:a9:
cd:ee:cf:31:83:b2:6a:c5:73:1e:d8:b3:d8:fd:1a:0b:ec:a9:
85:a2:a8:d4:cd:8f:45:5f:f0:d6:c7:ed:d7:fc:d7:e1:68:81:
fd:38:92:a1:c2:26:1a:53:3c:50:13:4d:9b:b5:b6:65:e5:12:
ea:6c:db:b1:cb:73:4a:a5:95:36:35:03:67:a6:0e:30:09:f2:
48:a5:b4:11:67:87:96:a9:10:51:8d:d1:13:3f:e1:f3:12:22:
ed:04:4b:9b:fb:b5:23:d7:f7:62:6a:92:1c:07:f7:d5:a8:d0:
6a:94:bc:0e:29:08:e4:89:26:cb:9f:d4:81:43:ce:bc:2c:c3:
28:10:d5:06:52:09:4c:50:b9:8a:cb:f6:e3:7f:78:a6:f0:44:
48:0d:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:24:16 2025 by rpki-client