Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/_oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa
File: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (raw, json)
Hash identifier: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=
Subject key identifier: FE:82:1A:D6:FE:7F:AA:D8:02:4A:D4:3B:1A:BF:02:99:D8:66:24:99
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 01957B4AE3C11562BACD5A8C614F5BD89F53
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/_oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa
Signing time: Sun 09 Mar 2025 14:24:20 +0000
ROA not before: Sun 09 Mar 2025 14:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12880
IP address blocks: 5.74.128.0/17 maxlen: 17
5.232.0.0/13 maxlen: 13
5.232.160.0/20 maxlen: 20
5.238.0.0/16 maxlen: 16
5.239.0.0/16 maxlen: 16
5.239.244.0/23 maxlen: 23
46.100.0.0/16 maxlen: 16
46.100.6.0/23 maxlen: 23
46.100.43.0/24 maxlen: 24
46.100.44.0/24 maxlen: 24
77.81.144.0/21 maxlen: 21
77.81.152.0/21 maxlen: 21
80.210.48.0/20 maxlen: 20
80.210.48.0/22 maxlen: 22
93.118.96.0/19 maxlen: 19
93.118.168.0/21 maxlen: 21
178.236.96.0/24 maxlen: 24
178.236.97.0/24 maxlen: 24
178.236.104.0/24 maxlen: 24
178.236.110.0/24 maxlen: 24
185.18.156.0/24 maxlen: 24
185.18.157.0/24 maxlen: 24
185.18.158.0/24 maxlen: 24
185.18.159.0/24 maxlen: 24
185.72.80.0/24 maxlen: 24
185.72.81.0/24 maxlen: 24
185.72.82.0/24 maxlen: 24
185.72.83.0/24 maxlen: 24
185.88.48.0/22 maxlen: 22
185.105.100.0/23 maxlen: 23
185.105.102.0/23 maxlen: 23
185.111.80.0/24 maxlen: 24
185.111.81.0/24 maxlen: 24
185.111.82.0/24 maxlen: 24
185.111.83.0/24 maxlen: 24
188.209.16.0/21 maxlen: 21
188.209.24.0/22 maxlen: 22
188.209.28.0/23 maxlen: 23
188.209.30.0/23 maxlen: 23
188.212.160.0/19 maxlen: 19
188.215.160.0/20 maxlen: 20
212.33.208.0/23 maxlen: 23
212.33.212.0/23 maxlen: 23
212.33.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7b:4a:e3:c1:15:62:ba:cd:5a:8c:61:4f:5b:d8:9f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Mar 9 14:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe821ad6fe7faad8024ad43b1abf0299d8662499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:0e:3b:f4:3d:eb:7b:34:b9:74:8f:6c:1a:
c1:2c:c9:e4:df:85:e8:fe:1b:4e:84:4e:1e:9d:93:
4b:db:e8:ee:63:d4:d0:a0:63:57:8f:f6:39:ef:a1:
db:22:d4:fc:25:6c:ce:63:c3:30:34:82:fe:e8:3b:
b1:c9:12:ff:45:00:73:2a:25:a3:08:08:24:5c:ad:
a9:27:a1:40:7f:d8:00:56:5b:f9:df:5c:3e:a2:2f:
cb:7b:20:f8:71:97:70:0b:ec:bc:64:ba:d9:03:20:
63:13:84:f2:7a:cd:f8:84:f3:af:8f:fc:2b:5a:19:
0d:a5:1c:a1:28:5c:0c:b3:10:e1:6a:c2:17:98:05:
1c:ec:a4:b4:24:b4:f1:3b:38:58:97:16:54:79:a6:
e9:c6:c6:06:81:9c:dd:b8:33:03:e4:b4:47:a4:53:
a2:e3:de:de:7c:9b:f2:ba:be:66:9e:00:b7:a6:fd:
29:0a:01:34:88:63:0a:7c:5b:cb:e2:0c:90:06:97:
be:ed:8a:f4:88:af:e3:c1:9f:04:92:32:f0:8c:0d:
58:b3:ef:6b:aa:ed:d3:e9:74:50:ca:85:3d:9c:fd:
53:6f:0d:fd:39:ef:21:de:e2:b1:61:a1:40:b3:62:
66:bd:d5:c3:4b:98:4d:21:a5:a9:88:b5:f6:69:4d:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:1A:D6:FE:7F:AA:D8:02:4A:D4:3B:1A:BF:02:99:D8:66:24:99
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/_oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.74.128.0/17
5.232.0.0/13
46.100.0.0/16
77.81.144.0/20
80.210.48.0/20
93.118.96.0/19
93.118.168.0/21
178.236.96.0/23
178.236.104.0/24
178.236.110.0/24
185.18.156.0/22
185.72.80.0/22
185.88.48.0/22
185.105.100.0/22
185.111.80.0/22
188.209.16.0/20
188.212.160.0/19
188.215.160.0/20
212.33.208.0/23
212.33.212.0/22
Signature Algorithm: sha256WithRSAEncryption
30:76:d3:3f:69:fe:7c:3e:7b:f0:78:10:0f:76:93:92:3e:71:
11:f0:41:d1:e0:13:53:d7:99:ae:55:93:f3:11:9d:a3:ec:37:
db:79:46:ab:e0:e1:69:cb:e7:7c:74:f0:6b:79:e2:ac:4d:c5:
64:09:b1:b8:41:fc:b5:24:97:40:a3:53:a6:48:29:86:84:ef:
a6:e3:60:72:25:87:db:30:f1:00:de:03:d6:d0:0b:f7:bc:b3:
63:7d:bd:4a:66:da:f3:b9:c1:e2:96:19:52:11:0b:48:d2:e1:
54:1f:66:13:c9:1f:43:25:ee:62:84:8c:9f:8a:e8:11:be:ab:
fb:7d:bd:9a:9f:03:f9:c4:0d:8a:d1:8d:f0:52:f0:45:f8:9b:
af:b3:d0:6f:03:89:bb:55:cb:80:ac:ea:33:52:50:74:03:8e:
5b:ea:b0:26:65:ca:9d:26:46:f9:fd:99:36:82:6a:fa:f0:64:
1b:ee:c9:3e:e4:1d:7e:84:53:83:09:3d:13:64:a7:12:f5:54:
a2:a2:3a:c1:11:3f:d2:64:57:ef:6b:4d:a8:98:3e:18:16:a9:
c7:e2:c7:de:9c:97:0c:ef:ee:a6:95:01:80:00:6d:ed:65:3e:
2b:c9:1b:be:37:e1:de:63:16:27:03:8f:bd:65:c4:8f:ac:81:
82:34:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:21:42 2025 by rpki-client