Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/yE8yGiOSM9_WiLeRkIg-dqNW2to.roa
File: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (raw, json)
Hash identifier: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=
Subject key identifier: C8:4F:32:1A:23:92:33:DF:D6:88:B7:91:90:88:3E:76:A3:56:DA:DA
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 01957B532061B0A6809BC9D19337C5AE49E1
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/yE8yGiOSM9_WiLeRkIg-dqNW2to.roa
Signing time: Sun 09 Mar 2025 14:33:20 +0000
ROA not before: Sun 09 Mar 2025 14:33:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48159
IP address blocks: 5.232.64.0/18 maxlen: 18
5.232.128.0/19 maxlen: 19
5.232.160.0/20 maxlen: 20
5.233.82.0/23 maxlen: 23
5.233.84.0/24 maxlen: 24
5.233.94.0/24 maxlen: 24
5.233.95.0/24 maxlen: 24
5.233.240.0/20 maxlen: 20
5.234.36.0/22 maxlen: 22
5.234.40.0/21 maxlen: 21
5.235.188.0/22 maxlen: 22
5.235.188.0/23 maxlen: 23
5.235.192.0/19 maxlen: 19
5.235.224.0/19 maxlen: 19
5.236.0.0/18 maxlen: 18
5.236.64.0/19 maxlen: 19
5.236.96.0/21 maxlen: 21
5.238.0.0/16 maxlen: 16
5.239.0.0/16 maxlen: 16
5.239.144.0/20 maxlen: 20
5.239.160.0/20 maxlen: 20
5.239.176.0/22 maxlen: 22
5.239.192.0/21 maxlen: 21
5.239.200.0/21 maxlen: 21
5.239.244.0/23 maxlen: 23
46.100.0.0/16 maxlen: 16
46.100.164.0/22 maxlen: 22
85.204.80.0/20 maxlen: 20
85.204.208.0/20 maxlen: 20
86.104.240.0/21 maxlen: 21
89.35.64.0/21 maxlen: 21
89.37.144.0/23 maxlen: 23
89.40.152.0/21 maxlen: 21
89.40.240.0/20 maxlen: 20
91.92.220.0/22 maxlen: 22
93.88.64.0/21 maxlen: 21
93.88.72.0/23 maxlen: 23
93.117.96.0/20 maxlen: 20
93.117.112.0/20 maxlen: 20
185.105.100.0/23 maxlen: 23
185.105.102.0/23 maxlen: 23
188.211.128.0/19 maxlen: 19
188.215.176.0/20 maxlen: 20
195.181.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7b:53:20:61:b0:a6:80:9b:c9:d1:93:37:c5:ae:49:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Mar 9 14:33:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c84f321a239233dfd688b79190883e76a356dada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:c7:d9:7a:d4:c0:15:cd:52:f8:28:b8:88:
0e:f0:58:d8:42:3a:69:cd:8d:f3:55:dd:bd:e9:08:
3c:2f:25:ac:23:a8:af:01:0d:76:18:8c:74:eb:01:
09:2b:09:09:b7:3c:ff:3f:93:67:97:24:8a:25:91:
58:9e:04:cf:aa:6e:c8:51:17:b0:6a:7f:a3:0b:b0:
16:d9:b7:8f:43:86:7f:45:c1:f0:a1:05:f9:54:87:
56:b2:b9:97:e2:83:f7:f5:50:b3:41:0d:19:a5:91:
f3:7a:46:d7:eb:9b:25:15:ba:af:20:f5:e6:3c:d6:
25:0c:8d:2f:8d:04:3a:6d:a0:96:ce:02:29:1f:08:
8f:d7:b7:3e:72:3b:23:fd:5e:b9:70:86:ce:d8:a6:
a9:d1:78:d6:7b:40:47:3c:15:a7:73:cf:fb:75:61:
d3:86:b4:c1:8b:a3:74:c9:5d:f0:31:5b:76:18:bc:
39:02:c7:27:a1:49:4e:df:ef:a5:66:2e:57:46:8e:
59:20:fb:20:1a:de:ff:f8:24:50:96:90:66:86:25:
3a:e4:5f:2a:0d:a0:a0:87:98:ee:7c:5c:1d:e2:8a:
40:07:35:3a:10:48:ae:02:ac:f0:4f:71:be:1b:a3:
90:a6:63:86:9a:33:da:a8:48:66:d3:2f:d4:2f:46:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:32:1A:23:92:33:DF:D6:88:B7:91:90:88:3E:76:A3:56:DA:DA
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/yE8yGiOSM9_WiLeRkIg-dqNW2to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.232.64.0-5.232.175.255
5.233.82.0-5.233.84.255
5.233.94.0/23
5.233.240.0/20
5.234.36.0-5.234.47.255
5.235.188.0-5.236.103.255
5.238.0.0/15
46.100.0.0/16
85.204.80.0/20
85.204.208.0/20
86.104.240.0/21
89.35.64.0/21
89.37.144.0/23
89.40.152.0/21
89.40.240.0/20
91.92.220.0/22
93.88.64.0-93.88.73.255
93.117.96.0/19
185.105.100.0/22
188.211.128.0/19
188.215.176.0/20
195.181.32.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:15:1b:ac:8a:7b:a1:42:5b:2d:5d:59:d3:6b:36:9f:45:fc:
08:91:2a:10:ce:40:78:64:80:07:b8:4f:5d:f6:9a:92:a3:61:
fa:ee:6b:fe:d4:88:c5:e1:8d:f4:0f:7e:f4:4b:5a:a4:3f:b4:
b7:9e:c1:b5:d7:19:a2:70:f0:60:7a:7e:2c:9d:33:13:6a:2a:
60:78:7f:67:87:1d:0e:db:13:06:7c:1b:77:16:a1:11:22:3c:
5e:61:09:cb:c3:e3:ad:91:ce:71:cd:23:53:0d:82:2a:4d:48:
af:be:40:5d:a1:c3:d6:33:4f:0b:c3:b7:4f:33:bc:d6:6f:a1:
19:97:a7:54:1e:72:6b:0d:28:66:f4:ab:66:0b:19:60:f4:e6:
2c:e4:08:a6:f5:92:ba:a6:d7:01:60:16:23:65:23:a9:42:db:
57:a1:e8:95:c1:e2:9b:0f:04:91:6f:b8:65:f3:6d:bc:84:8b:
0a:96:87:d0:74:3a:d4:65:5c:5e:22:82:26:cc:98:e3:d1:ad:
69:d3:8a:9a:dd:b2:db:e6:85:50:41:bc:9f:75:3c:14:ff:bd:
be:24:cb:a6:b6:8f:09:51:45:9c:5d:67:db:7b:a9:fe:b5:33:
ec:a0:ed:7f:95:27:7b:81:f0:8a:a8:f6:47:b6:20:0e:dd:45:
22:80:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:31:53 2025 by rpki-client