Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/apjpZR9XG9TMPV-27QBt0_nYBIk.roa
File: apjpZR9XG9TMPV-27QBt0_nYBIk.roa (raw, json)
Hash identifier: xs00w0q5MukixQFWMwJUzeN+S42AnFz/oLMgjh08mZk=
Subject key identifier: 6A:98:E9:65:1F:57:1B:D4:CC:3D:5F:B6:ED:00:6D:D3:F9:D8:04:89
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0194DBBE42987EC49886BE8A873E177D0D19
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/apjpZR9XG9TMPV-27QBt0_nYBIk.roa
Signing time: Thu 06 Feb 2025 14:51:06 +0000
ROA not before: Thu 06 Feb 2025 14:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
82.137.128.0/18 maxlen: 24
82.137.176.0/20 maxlen: 22
82.179.32.0/20 maxlen: 24
82.179.63.0/24 maxlen: 24
82.179.64.0/19 maxlen: 24
82.179.140.0/23 maxlen: 23
82.179.160.0/20 maxlen: 24
82.179.192.0/19 maxlen: 24
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.16.0/20 maxlen: 24
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/24 maxlen: 24
86.110.101.0/24 maxlen: 24
86.110.102.0/23 maxlen: 24
86.110.118.0/24 maxlen: 24
185.71.96.0/22 maxlen: 22
185.141.124.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.168.0/23 maxlen: 23
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.149.70.0/23 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/23 maxlen: 24
194.190.247.0/24 maxlen: 24
194.190.249.0/24 maxlen: 24
194.190.254.0/23 maxlen: 23
194.226.192.0/19 maxlen: 24
195.209.224.0/22 maxlen: 22
195.209.234.0/24 maxlen: 24
195.209.236.0/23 maxlen: 23
195.209.240.0/22 maxlen: 22
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:be:42:98:7e:c4:98:86:be:8a:87:3e:17:7d:0d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 6 14:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a98e9651f571bd4cc3d5fb6ed006dd3f9d80489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:d5:ad:b9:ac:ab:06:4c:69:17:3e:c1:fd:
37:d2:bc:50:5b:04:60:62:2e:65:c9:9d:fb:22:bf:
45:3f:e5:c2:11:68:ff:66:76:41:82:44:cc:65:b7:
e1:82:76:25:f6:2f:f8:90:67:bd:6a:40:5f:fd:d7:
71:e9:f0:d4:57:db:25:2c:3e:a9:48:18:26:f6:eb:
49:b4:2a:04:6f:51:7c:bf:ba:b4:b8:07:50:9a:62:
d1:de:cf:16:26:7d:e5:53:60:6b:66:33:a7:08:a0:
dc:5d:75:e5:93:df:b1:38:44:31:14:b2:d5:a8:48:
2d:db:32:19:a0:4d:07:0d:c0:45:d1:9d:87:b1:2d:
70:eb:03:67:a8:ae:bc:9e:3a:41:c6:03:df:98:60:
a5:ba:d9:35:e8:1f:58:08:d0:54:e6:b1:4e:e3:61:
24:d8:24:d2:e3:70:d1:55:e5:36:f5:e7:a1:c5:00:
76:af:4d:bd:6c:ba:78:4f:22:44:86:21:4b:b5:10:
6d:b3:a7:9d:00:9e:29:df:fb:71:25:41:89:e7:d2:
33:55:46:3c:5a:7d:b2:17:7f:3a:25:56:cd:71:45:
87:05:f2:2c:5e:d8:c5:8a:8c:cf:51:8c:73:84:51:
0d:92:32:2d:01:58:41:9a:b7:5c:3c:f1:39:25:15:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:E9:65:1F:57:1B:D4:CC:3D:5F:B6:ED:00:6D:D3:F9:D8:04:89
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/apjpZR9XG9TMPV-27QBt0_nYBIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.128.0/18
82.179.32.0/20
82.179.63.0-82.179.95.255
82.179.140.0/23
82.179.160.0/20
82.179.192.0/19
83.149.192.0/18
85.142.8.0-85.142.39.255
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/24
86.110.101.0-86.110.103.255
86.110.118.0/24
185.71.96.0/22
185.141.124.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.168.0/23
194.85.174.0/23
194.149.64.0/24
194.149.70.0/23
194.190.232.0-194.190.241.255
194.190.247.0/24
194.190.249.0/24
194.190.254.0/23
194.226.192.0/19
195.209.224.0/22
195.209.234.0/24
195.209.236.0/23
195.209.240.0/22
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:7e:d0:6b:d6:96:3e:ca:ed:2f:90:72:d3:15:bd:ef:53:86:
9a:d9:e1:88:6d:52:25:da:66:c8:b8:9a:a1:56:93:62:c0:43:
88:6d:8d:94:d0:b9:4f:ba:a4:60:f5:07:3f:47:9a:da:5f:76:
9d:22:25:5b:51:8e:27:77:ce:4f:db:fc:b2:00:e3:3d:24:ba:
ed:30:2e:12:fa:52:9b:3a:54:a8:f9:2c:0a:9c:1b:eb:28:d3:
a6:fe:5d:e3:07:73:f3:2d:e5:d9:b2:2a:d1:1e:1d:ea:ce:e8:
98:e5:dd:11:b2:f0:a1:8e:6e:27:67:94:05:a4:cc:28:c1:28:
71:9f:d8:07:dc:fb:61:5e:92:bd:f1:f0:c8:c6:a6:13:f1:6e:
8b:f1:38:f4:70:fa:b8:07:e2:3e:e6:0e:62:8d:c4:d0:6d:b2:
56:20:58:29:35:07:4d:2e:e6:32:38:ba:8a:53:b0:5f:6c:99:
d4:9b:4c:d5:6b:8b:97:9f:6b:bb:f9:25:3b:5f:8d:74:6b:82:
2f:02:56:d6:3a:76:78:80:65:87:25:e3:de:39:72:68:b8:61:
5d:82:1f:fc:48:46:da:97:8f:ca:e1:31:81:3a:2a:49:d2:b7:
2b:71:d0:bd:96:1e:19:17:97:28:d9:dc:eb:0e:ff:4b:1a:a0:
64:f5:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:35 2025 by rpki-client