Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/3nS1HLz39tr7tq2EFPNnPFroRnU.roa
File: 3nS1HLz39tr7tq2EFPNnPFroRnU.roa (raw, json)
Hash identifier: pJKIFiqTsdzCaAiPIRSnCqbmwY0+EAZrl4VIft8OeOE=
Subject key identifier: DE:74:B5:1C:BC:F7:F6:DA:FB:B6:AD:84:14:F3:67:3C:5A:E8:46:75
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01961A41947FA69A96C7D092C15D413701C8
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/3nS1HLz39tr7tq2EFPNnPFroRnU.roa
Signing time: Wed 09 Apr 2025 11:13:47 +0000
ROA not before: Wed 09 Apr 2025 11:13:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.0.0/18 maxlen: 18
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.88.0/21 maxlen: 21
87.192.96.0/19 maxlen: 19
87.192.128.0/18 maxlen: 18
87.192.192.0/20 maxlen: 20
87.192.208.0/21 maxlen: 21
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.192.224.0/19 maxlen: 19
87.232.0.0/19 maxlen: 19
87.232.144.0/20 maxlen: 20
87.232.160.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.200.0/21 maxlen: 21
87.232.208.0/20 maxlen: 20
87.232.225.0/24 maxlen: 24
87.232.226.0/23 maxlen: 23
87.232.228.0/22 maxlen: 22
87.232.232.0/21 maxlen: 21
87.232.240.0/21 maxlen: 21
87.232.248.0/23 maxlen: 23
89.124.0.0/17 maxlen: 17
89.124.0.0/24 maxlen: 24
89.124.128.0/18 maxlen: 18
89.124.192.0/19 maxlen: 19
89.124.224.0/20 maxlen: 20
89.124.245.0/24 maxlen: 24
89.124.246.0/23 maxlen: 23
89.124.248.0/21 maxlen: 21
89.125.0.0/16 maxlen: 16
89.126.0.0/16 maxlen: 16
89.126.0.0/22 maxlen: 22
89.126.4.0/22 maxlen: 22
89.126.8.0/22 maxlen: 22
89.126.12.0/22 maxlen: 22
89.126.16.0/22 maxlen: 22
89.126.20.0/22 maxlen: 22
89.126.24.0/22 maxlen: 22
89.126.28.0/22 maxlen: 22
89.127.0.0/17 maxlen: 17
89.127.128.0/18 maxlen: 18
89.127.192.0/19 maxlen: 19
89.127.224.0/20 maxlen: 20
89.127.240.0/21 maxlen: 21
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:41:94:7f:a6:9a:96:c7:d0:92:c1:5d:41:37:01:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Apr 9 11:13:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de74b51cbcf7f6dafbb6ad8414f3673c5ae84675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:c1:e9:70:5e:96:57:10:bf:ce:f6:98:fd:
df:17:0a:3f:e7:08:bc:8b:a0:a7:c6:66:2a:54:8d:
fb:26:4a:c0:4e:6c:75:38:86:4b:31:25:a1:a0:84:
e9:0d:3a:aa:4a:e8:0b:90:7a:4e:bf:54:34:65:29:
bb:65:3e:02:04:ab:e0:06:5d:34:78:b4:13:3c:c8:
0c:4a:72:6b:f9:c9:a9:db:bf:a9:eb:c4:4d:13:53:
35:bc:16:94:91:09:76:c7:3d:78:4b:00:58:76:9a:
f5:7b:83:11:c5:8f:6b:da:71:c6:5e:5b:e5:89:8c:
33:d7:82:f1:8b:29:5f:d2:87:df:7b:2d:4a:ab:e6:
77:f7:bb:62:3a:da:82:06:da:aa:12:5d:ca:5b:b6:
ff:06:b9:21:87:79:cd:14:cd:7c:65:de:b4:74:7e:
8b:58:52:0e:32:dd:76:50:39:47:c8:ac:4d:09:a3:
2c:0c:d8:0a:a8:49:17:e9:85:64:d3:65:fc:39:9c:
4f:a1:bc:b0:a6:ed:71:7a:72:dc:1c:b2:67:47:01:
24:af:de:e7:1b:f9:64:77:98:0c:96:19:a6:85:24:
78:4b:43:45:a0:98:d2:93:64:b5:55:11:fa:80:ac:
88:30:26:8c:91:45:96:8c:27:50:2f:a0:de:63:c6:
c6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:B5:1C:BC:F7:F6:DA:FB:B6:AD:84:14:F3:67:3C:5A:E8:46:75
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/3nS1HLz39tr7tq2EFPNnPFroRnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.0.0-87.192.79.255
87.192.82.0-87.192.219.255
87.192.222.0-87.192.255.255
87.232.0.0/19
87.232.144.0-87.232.192.255
87.232.194.0-87.232.223.255
87.232.225.0-87.232.249.255
89.124.0.0-89.124.239.255
89.124.245.0-89.127.251.255
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
0a:66:d5:0c:f4:de:be:1b:e9:92:9d:c2:75:f4:c4:c3:8f:e7:
8c:e1:f1:b2:6c:10:aa:f5:b4:8e:3d:8c:12:8d:16:80:e0:1a:
23:85:7e:f5:e1:4a:24:9a:e4:61:c5:31:66:d0:b4:60:98:21:
65:8c:f8:80:ea:c0:a1:a2:5e:b9:41:5b:79:22:f4:8a:0e:1c:
a6:d6:83:de:af:48:2d:81:98:ae:49:70:e7:41:d1:f1:ca:53:
1f:90:b0:32:30:2c:a1:8f:bd:bf:35:7a:89:86:a5:d8:50:ae:
e5:94:fb:e4:bb:5a:ca:17:aa:9d:ea:6c:df:d0:4c:e9:86:ab:
2e:a4:a0:61:db:ca:43:4c:1c:5a:25:9f:8c:8a:b6:14:ee:fc:
1a:31:27:98:b8:38:36:78:38:c5:e3:7c:fb:fd:d9:0b:10:fc:
ca:57:0a:e6:ba:25:82:1e:f8:5a:ab:03:07:70:ff:fc:58:8c:
df:cd:8d:b0:ac:f6:5f:5f:4e:d1:d6:5b:ef:d0:b6:29:01:17:
f5:56:be:6d:42:41:21:9f:1f:8b:33:c6:32:e4:85:f7:2a:0b:
31:0e:10:28:0a:22:53:ee:c4:a4:07:9e:30:ad:c5:04:de:39:
61:74:0c:ed:a5:70:3b:be:3a:11:e7:38:0b:40:5a:ea:ae:24:
91:79:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:57:36 2025 by rpki-client