Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa
File: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (raw, json)
Hash identifier: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=
Subject key identifier: 52:B6:2F:5C:27:0D:5C:D3:C9:D5:19:97:DD:80:A9:47:C4:EF:92:0A
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0194228DEF72E7C39A0DD7F787ED0535FF5B
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34977
IP address blocks: 37.61.144.0/20 maxlen: 20
37.61.144.0/23 maxlen: 23
37.61.146.0/23 maxlen: 23
37.61.155.0/24 maxlen: 24
37.61.159.0/24 maxlen: 24
46.37.64.0/19 maxlen: 19
46.37.69.0/24 maxlen: 24
46.37.70.0/23 maxlen: 23
46.37.76.0/23 maxlen: 23
46.37.78.0/23 maxlen: 23
46.37.80.0/24 maxlen: 24
46.37.81.0/24 maxlen: 24
46.37.84.0/24 maxlen: 24
46.37.92.0/23 maxlen: 23
46.37.94.0/24 maxlen: 24
86.106.0.0/21 maxlen: 21
86.106.64.0/21 maxlen: 21
88.212.188.0/24 maxlen: 24
88.212.190.0/24 maxlen: 24
89.32.112.0/21 maxlen: 21
89.32.118.0/24 maxlen: 24
89.35.136.0/21 maxlen: 21
89.35.137.0/24 maxlen: 24
89.35.138.0/23 maxlen: 23
89.35.140.0/23 maxlen: 23
89.35.142.0/23 maxlen: 23
89.36.0.0/23 maxlen: 23
89.36.2.0/23 maxlen: 23
89.36.4.0/23 maxlen: 23
89.36.6.0/24 maxlen: 24
89.36.7.0/24 maxlen: 24
89.37.72.0/21 maxlen: 21
89.37.72.0/24 maxlen: 24
89.37.73.0/24 maxlen: 24
89.37.74.0/24 maxlen: 24
89.38.16.0/21 maxlen: 21
89.38.16.0/24 maxlen: 24
89.38.17.0/24 maxlen: 24
89.38.18.0/24 maxlen: 24
89.38.19.0/24 maxlen: 24
89.38.20.0/24 maxlen: 24
89.38.21.0/24 maxlen: 24
89.38.22.0/24 maxlen: 24
89.38.23.0/24 maxlen: 24
89.39.16.0/21 maxlen: 21
89.39.22.0/24 maxlen: 24
89.39.24.0/21 maxlen: 21
89.39.25.0/24 maxlen: 24
89.39.26.0/24 maxlen: 24
89.39.27.0/24 maxlen: 24
89.39.28.0/24 maxlen: 24
89.39.29.0/24 maxlen: 24
89.39.31.0/24 maxlen: 24
89.39.152.0/21 maxlen: 21
89.39.156.0/24 maxlen: 24
89.39.158.0/23 maxlen: 23
91.151.96.0/20 maxlen: 20
91.151.96.0/24 maxlen: 24
91.151.97.0/24 maxlen: 24
91.151.99.0/24 maxlen: 24
91.151.105.0/24 maxlen: 24
91.151.108.0/24 maxlen: 24
91.151.109.0/24 maxlen: 24
91.151.110.0/24 maxlen: 24
91.151.111.0/24 maxlen: 24
93.114.144.0/20 maxlen: 20
93.114.144.0/24 maxlen: 24
93.114.146.0/24 maxlen: 24
93.114.147.0/24 maxlen: 24
93.114.148.0/24 maxlen: 24
93.114.149.0/24 maxlen: 24
93.114.153.0/24 maxlen: 24
93.114.154.0/24 maxlen: 24
93.114.156.0/24 maxlen: 24
93.114.157.0/24 maxlen: 24
93.114.158.0/24 maxlen: 24
171.33.232.0/21 maxlen: 21
185.13.200.0/22 maxlen: 22
185.13.203.0/24 maxlen: 24
195.82.100.0/22 maxlen: 22
195.82.100.0/24 maxlen: 24
195.82.101.0/24 maxlen: 24
195.82.102.0/24 maxlen: 24
195.82.112.0/21 maxlen: 21
195.82.113.0/24 maxlen: 24
195.82.126.0/23 maxlen: 23
195.82.126.0/24 maxlen: 24
212.225.128.0/17 maxlen: 17
212.225.128.0/23 maxlen: 23
212.225.130.0/23 maxlen: 23
212.225.132.0/24 maxlen: 24
212.225.133.0/24 maxlen: 24
212.225.134.0/23 maxlen: 23
212.225.137.0/24 maxlen: 24
212.225.138.0/23 maxlen: 23
212.225.142.0/23 maxlen: 23
212.225.144.0/24 maxlen: 24
212.225.145.0/24 maxlen: 24
212.225.146.0/24 maxlen: 24
212.225.148.0/22 maxlen: 22
212.225.152.0/24 maxlen: 24
212.225.156.0/22 maxlen: 22
212.225.162.0/24 maxlen: 24
212.225.163.0/24 maxlen: 24
212.225.164.0/22 maxlen: 22
212.225.168.0/22 maxlen: 22
212.225.172.0/23 maxlen: 23
212.225.174.0/23 maxlen: 23
212.225.176.0/24 maxlen: 24
212.225.178.0/23 maxlen: 23
212.225.180.0/23 maxlen: 23
212.225.182.0/23 maxlen: 23
212.225.184.0/24 maxlen: 24
212.225.185.0/24 maxlen: 24
212.225.186.0/24 maxlen: 24
212.225.187.0/24 maxlen: 24
212.225.188.0/24 maxlen: 24
212.225.189.0/24 maxlen: 24
212.225.190.0/24 maxlen: 24
212.225.191.0/24 maxlen: 24
212.225.196.0/24 maxlen: 24
212.225.197.0/24 maxlen: 24
212.225.198.0/24 maxlen: 24
212.225.199.0/24 maxlen: 24
212.225.200.0/22 maxlen: 22
212.225.204.0/24 maxlen: 24
212.225.208.0/23 maxlen: 23
212.225.215.0/24 maxlen: 24
212.225.216.0/23 maxlen: 23
212.225.218.0/24 maxlen: 24
212.225.219.0/24 maxlen: 24
212.225.220.0/24 maxlen: 24
212.225.221.0/24 maxlen: 24
212.225.222.0/24 maxlen: 24
212.225.234.0/24 maxlen: 24
212.225.236.0/24 maxlen: 24
212.225.240.0/23 maxlen: 23
212.225.246.0/24 maxlen: 24
212.225.248.0/24 maxlen: 24
212.225.250.0/24 maxlen: 24
212.225.252.0/24 maxlen: 24
212.225.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ef:72:e7:c3:9a:0d:d7:f7:87:ed:05:35:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b62f5c270d5cd3c9d51997dd80a947c4ef920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:67:49:bf:6c:d9:cb:f2:3e:88:81:51:9b:
6a:4d:4e:00:19:40:16:50:07:9b:ef:f3:53:97:62:
b0:99:14:71:5e:47:bf:56:8a:fd:89:90:38:d5:f6:
32:64:51:70:73:e9:de:08:c8:f9:0d:60:89:32:e0:
1f:e3:dc:bb:86:e2:c0:1a:c5:83:b7:47:39:a6:f4:
23:c5:a4:65:60:9c:18:38:d0:c8:e4:a1:35:26:b5:
37:28:c7:5e:3c:b3:7e:2e:6e:4b:7e:6b:8c:ad:ac:
c6:0f:d9:f9:3a:f4:88:8e:47:f5:96:49:7e:87:03:
61:ab:f1:ed:a1:51:fc:57:1b:77:44:9e:c7:21:8f:
ee:aa:3e:30:9c:41:40:a4:40:c2:15:9b:1a:31:5f:
06:12:fa:d9:87:24:8b:c3:26:37:fa:18:db:58:56:
0c:d7:99:5c:71:f4:08:02:d9:22:02:ae:ee:ce:f0:
f6:88:26:88:2d:9b:e0:bc:c2:e1:4e:9f:75:7a:93:
04:d0:eb:e8:d3:f9:23:65:c2:da:a3:50:b6:ca:06:
18:a6:09:ab:54:52:7a:36:7a:8f:d7:7a:3e:40:27:
11:08:54:cd:8c:ca:d8:73:11:1f:8f:7f:23:70:b1:
50:a8:23:ed:88:2e:92:6d:a1:9a:a8:03:10:6c:99:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:2F:5C:27:0D:5C:D3:C9:D5:19:97:DD:80:A9:47:C4:EF:92:0A
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.144.0/20
46.37.64.0/19
86.106.0.0/21
86.106.64.0/21
88.212.188.0/24
88.212.190.0/24
89.32.112.0/21
89.35.136.0/21
89.36.0.0/21
89.37.72.0/21
89.38.16.0/21
89.39.16.0/20
89.39.152.0/21
91.151.96.0/20
93.114.144.0/20
171.33.232.0/21
185.13.200.0/22
195.82.100.0/22
195.82.112.0/21
195.82.126.0/23
212.225.128.0/17
Signature Algorithm: sha256WithRSAEncryption
27:69:b6:da:76:c0:a4:33:69:20:5b:11:fe:00:71:08:04:ef:
3b:1b:d3:ee:6d:a9:90:56:73:1c:dd:86:b3:38:b1:9f:dc:12:
0c:73:e1:02:eb:b7:c9:d8:ae:70:a1:a8:ec:96:88:09:6b:f6:
8c:24:74:7b:a3:87:34:21:cc:f3:99:1a:b8:26:8e:ff:3b:ff:
37:d4:ab:fb:5b:05:48:00:2f:71:b5:c7:27:9b:b0:2d:d3:9c:
a9:98:cb:48:d0:92:23:cf:f6:c0:b0:a7:d1:47:6d:5c:27:f8:
16:0f:7b:c8:d7:c6:a1:74:6a:38:28:c8:97:78:75:de:d3:02:
9f:d3:eb:8a:c1:e6:24:a1:ce:1c:e4:90:39:fd:19:41:4b:74:
19:a2:64:53:09:dc:25:31:43:5a:9d:c9:85:7a:39:4b:04:f9:
7b:9f:89:07:ae:7f:0f:d2:c3:86:e3:01:e4:2f:5e:83:e3:27:
4f:fe:36:f7:57:0b:39:f0:bb:3c:19:00:60:19:32:44:e5:e1:
69:be:67:db:07:db:d7:c8:ed:d9:1b:17:0e:d1:ca:e1:2d:3f:
80:1b:d6:84:e2:73:be:5d:8d:57:11:18:98:8d:98:ba:57:c8:
58:1f:f5:01:ba:5a:a8:8b:13:a4:e5:e1:b8:bf:44:f1:14:fa:
d7:39:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:32 2025 by rpki-client