Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/u5o61NHYqb9zvWGtzBZuF5M5RPI.roa
File: u5o61NHYqb9zvWGtzBZuF5M5RPI.roa (raw, json)
Hash identifier: QUfZge2NwNEyq5T77dMAINVgz9WIkvB5rSQcXwRMvkU=
Subject key identifier: BB:9A:3A:D4:D1:D8:A9:BF:73:BD:61:AD:CC:16:6E:17:93:39:44:F2
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 019423695B81DD02026BA4546C83634A8784
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/u5o61NHYqb9zvWGtzBZuF5M5RPI.roa
Signing time: Wed 01 Jan 2025 19:48:14 +0000
ROA not before: Wed 01 Jan 2025 19:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12365
IP address blocks: 81.95.224.0/20 maxlen: 20
81.95.224.96/27 maxlen: 27
81.95.224.192/26 maxlen: 26
82.215.66.0/23 maxlen: 23
82.215.68.0/23 maxlen: 23
82.215.72.0/22 maxlen: 22
82.215.77.0/24 maxlen: 24
82.215.78.0/23 maxlen: 23
82.215.80.0/22 maxlen: 22
82.215.85.0/24 maxlen: 24
82.215.86.0/23 maxlen: 23
82.215.88.0/21 maxlen: 21
82.215.88.0/22 maxlen: 22
82.215.92.0/22 maxlen: 22
82.215.112.0/22 maxlen: 22
82.215.116.0/22 maxlen: 22
82.215.120.0/22 maxlen: 22
82.215.124.0/22 maxlen: 22
89.146.64.0/18 maxlen: 18
89.146.64.0/22 maxlen: 22
89.146.68.0/22 maxlen: 22
89.146.72.0/22 maxlen: 22
89.146.76.0/22 maxlen: 22
89.146.80.0/22 maxlen: 22
89.146.84.0/22 maxlen: 22
89.146.88.0/22 maxlen: 22
89.146.92.0/22 maxlen: 22
89.146.96.0/22 maxlen: 22
89.146.100.0/22 maxlen: 22
89.146.104.0/22 maxlen: 22
89.146.108.0/22 maxlen: 22
89.146.112.0/22 maxlen: 22
89.146.116.0/22 maxlen: 22
89.146.120.0/22 maxlen: 22
89.146.124.0/22 maxlen: 22
185.78.136.0/22 maxlen: 22
2a00:8840::/32 maxlen: 32
2a00:8840:c000::/36 maxlen: 36
2a00:8840:d000::/36 maxlen: 36
2a00:8840:e000::/36 maxlen: 36
2a00:8840:f000::/36 maxlen: 36
2a00:8841::/32 maxlen: 32
2a00:8842::/32 maxlen: 32
2a00:8843::/32 maxlen: 32
2a00:8844::/32 maxlen: 32
2a00:8845::/32 maxlen: 32
2a00:8846::/32 maxlen: 32
2a00:8847::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:5b:81:dd:02:02:6b:a4:54:6c:83:63:4a:87:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Jan 1 19:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9a3ad4d1d8a9bf73bd61adcc166e17933944f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:4e:80:13:e8:ed:e8:95:05:f8:84:3f:fb:
8e:03:68:be:8d:91:26:85:e1:98:d1:db:2b:4d:7d:
b2:0a:7f:7b:51:4f:3a:64:2b:c7:ab:76:7d:e8:2c:
f6:6e:6e:68:7d:6f:7a:05:04:db:37:9d:49:42:6a:
40:5d:4f:fe:42:02:09:14:39:d3:12:c5:0d:0c:4e:
60:58:62:c0:1b:0d:49:51:cc:24:4e:65:ae:e6:cc:
2d:02:64:01:53:45:78:73:68:ec:20:d0:99:d4:09:
84:f3:02:a7:6a:6f:7c:d6:c5:9b:8f:4c:b2:f8:92:
ed:72:c2:fb:b3:3d:d2:1f:72:e7:3d:62:70:34:fe:
c5:94:80:63:37:07:5c:d2:71:79:e0:e4:62:c7:84:
25:bc:84:62:64:3c:b6:73:5c:03:5d:8b:be:75:9a:
d8:f0:37:66:06:36:da:48:08:61:6b:59:5c:b8:44:
2b:61:ad:be:d3:e5:af:23:90:fd:35:c1:3a:07:e1:
3b:53:c5:72:d8:89:36:22:4a:5b:9a:f1:93:ae:7a:
01:fc:f4:d1:74:37:64:bf:26:12:23:fc:a5:6f:a2:
4d:0f:ce:3c:59:cb:e0:80:ff:94:ca:c9:fc:e1:00:
fb:97:4d:cd:e8:85:89:3d:11:ab:66:b2:a9:9f:37:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:3A:D4:D1:D8:A9:BF:73:BD:61:AD:CC:16:6E:17:93:39:44:F2
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/u5o61NHYqb9zvWGtzBZuF5M5RPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.224.0/20
82.215.66.0-82.215.69.255
82.215.72.0/22
82.215.77.0-82.215.83.255
82.215.85.0-82.215.95.255
82.215.112.0/20
89.146.64.0/18
185.78.136.0/22
IPv6:
2a00:8840::/29
Signature Algorithm: sha256WithRSAEncryption
6c:ff:3d:ba:7a:d9:03:5c:d1:69:d0:3b:ac:8d:14:a6:90:f0:
74:cf:ad:99:8a:c1:55:2e:e8:95:31:51:5e:fd:44:c2:f1:b8:
e8:e9:2d:c9:93:9d:95:85:48:8b:dd:e2:3d:91:ac:28:1a:a8:
fb:6f:9a:15:a3:2d:e1:02:46:d7:3e:ab:8d:8a:4b:b2:f6:be:
0d:90:19:9d:78:74:68:ed:54:f4:b7:c7:36:f9:10:b0:7f:54:
ae:5b:01:1e:ea:0b:b3:c1:46:55:71:74:35:0c:c6:0d:e9:ec:
f8:e9:99:4a:01:cc:28:03:ad:ae:e1:72:df:5a:de:0e:b1:c0:
9f:bf:1e:29:5a:54:e5:3f:e7:b5:20:a6:8b:99:86:ba:a8:d4:
13:e6:fa:a5:40:c5:92:25:33:a3:af:e1:c9:27:cc:43:75:86:
f0:cc:6d:e0:7a:44:cc:57:4a:e2:b0:dd:40:36:80:75:32:01:
c4:5c:e7:1d:75:37:a6:10:ef:cd:8e:d6:8b:77:3c:df:48:bf:
a5:ac:a7:9f:29:0b:0a:0f:60:f4:db:db:9d:f1:7d:69:54:fc:
a7:39:90:41:ee:93:5f:47:8d:d5:22:d2:5c:e8:2d:92:62:e4:
6b:82:8e:b8:94:cf:5a:6a:27:ab:bb:cf:19:80:8e:a2:b5:ae:
ce:36:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:37 2025 by rpki-client