Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s3PAcHRBLZR9PhVg6YjNefZj7Ps.roa
File: s3PAcHRBLZR9PhVg6YjNefZj7Ps.roa (raw, json)
Hash identifier: MFPbgigtYmb3RgYMcG9XjCOmiUNzKrA7cvX+3ZJ+if8=
Subject key identifier: B3:73:C0:70:74:41:2D:94:7D:3E:15:60:E9:88:CD:79:F6:63:EC:FB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B236DF30577456785B7E3E1CDF1D3F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s3PAcHRBLZR9PhVg6YjNefZj7Ps.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41111
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.22.0/23 maxlen: 24
5.180.27.0/24 maxlen: 24
5.180.29.0/24 maxlen: 24
5.180.31.0/24 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
45.66.160.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.86.66.0/24 maxlen: 24
45.128.60.0/24 maxlen: 24
45.136.114.0/24 maxlen: 24
45.136.115.0/24 maxlen: 24
45.136.116.0/24 maxlen: 24
45.136.117.0/24 maxlen: 24
45.136.124.0/22 maxlen: 24
45.136.128.0/23 maxlen: 24
45.136.149.0/24 maxlen: 24
45.149.112.0/22 maxlen: 24
85.208.119.0/24 maxlen: 24
85.209.155.0/24 maxlen: 24
85.209.156.0/22 maxlen: 24
85.209.194.0/24 maxlen: 24
88.218.92.0/24 maxlen: 24
88.218.94.0/24 maxlen: 24
88.218.95.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.167.0/24 maxlen: 24
141.98.188.0/22 maxlen: 24
171.22.110.0/23 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.136.0/23 maxlen: 24
194.55.188.0/24 maxlen: 24
194.55.189.0/24 maxlen: 24
194.59.221.0/24 maxlen: 24
194.59.244.0/24 maxlen: 24
194.59.245.0/24 maxlen: 24
194.76.146.0/24 maxlen: 24
194.76.147.0/24 maxlen: 24
194.76.154.0/23 maxlen: 24
194.124.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:36:df:30:57:74:56:78:5b:7e:3e:1c:df:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b373c07074412d947d3e1560e988cd79f663ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:79:ac:41:a6:00:cf:75:44:5d:98:4c:f4:
95:d2:c5:b6:57:1e:58:e6:3c:b9:b7:56:af:b9:36:
51:5e:8b:a8:7e:5f:18:10:b2:78:8e:f8:01:ed:1c:
5f:3b:de:d0:99:44:54:c9:6b:1c:cb:45:ed:9c:d7:
2e:b6:76:69:49:49:a8:82:0e:e8:a3:c0:36:9c:d0:
7c:f5:47:14:11:c9:f1:cd:2c:8c:be:4a:02:3e:5b:
ee:4f:c8:6b:82:e4:23:2d:74:de:3a:25:31:c9:a5:
46:9d:eb:3a:ea:8a:7d:1c:b2:9c:eb:e9:dd:5e:d4:
66:d3:af:83:c7:91:82:21:37:35:09:64:d4:d4:57:
75:e3:0d:b1:41:ff:04:c7:d6:27:45:5d:a0:eb:64:
1c:1e:84:e4:90:12:8c:f9:8d:3b:4e:db:1d:28:dc:
1c:0b:9a:ed:b5:5a:a1:63:19:b9:1d:fa:c0:84:91:
97:92:68:27:32:9d:e1:29:20:35:a4:45:f9:b2:7b:
f6:f2:08:dd:66:94:5e:29:9d:c6:82:90:e5:7b:be:
3f:e8:17:ff:dd:90:5a:f1:26:de:50:a7:08:2c:38:
f8:c0:e6:e1:07:3e:b3:52:4c:79:8e:5e:86:38:4e:
4c:a6:58:e0:f8:90:ad:38:93:55:ac:08:bf:3d:e6:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:C0:70:74:41:2D:94:7D:3E:15:60:E9:88:CD:79:F6:63:EC:FB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s3PAcHRBLZR9PhVg6YjNefZj7Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/22
5.180.27.0/24
5.180.29.0/24
5.180.31.0/24
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
5.180.145.0/24
5.180.147.0/24
5.253.28.0/22
5.253.42.0/24
45.66.160.0/21
45.86.66.0/24
45.128.60.0/24
45.136.114.0-45.136.117.255
45.136.124.0-45.136.129.255
45.136.149.0/24
45.149.112.0/22
85.208.119.0/24
85.209.155.0-85.209.159.255
85.209.194.0/24
88.218.92.0/24
88.218.94.0/23
139.28.234.0/23
141.98.167.0/24
141.98.188.0/22
171.22.110.0/23
194.36.36.0/22
194.55.136.0/23
194.55.188.0/23
194.59.221.0/24
194.59.244.0/23
194.76.146.0/23
194.76.154.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
36:01:9b:0e:20:c2:cd:1f:01:d5:18:2e:b1:01:fd:d4:d7:23:
22:6a:8f:74:d7:e6:40:9b:d5:2b:a6:8f:01:a2:f8:40:85:63:
c8:72:14:35:bd:4d:ea:cc:80:22:66:31:dd:1a:27:7b:62:e9:
56:d2:bf:c3:58:df:b9:2e:bc:b2:1f:c9:01:f0:24:ee:1b:c5:
8a:2c:e4:10:0a:c4:1e:3a:94:b8:53:60:ae:f4:24:8d:a1:90:
54:bf:ba:ac:92:a8:84:d3:32:91:59:95:5f:b0:1b:f1:eb:7c:
19:2e:9a:7a:79:4b:ee:78:99:9e:f2:c2:a0:43:f5:22:87:4e:
b2:c9:1d:36:1f:20:cc:3d:f5:e6:6c:47:1a:af:3d:4e:07:06:
ff:e5:41:67:e1:98:f5:1c:cb:e1:0d:af:1d:f6:f3:e4:8e:12:
d6:10:5e:27:e8:1a:56:78:e8:dd:55:e0:5f:c4:37:ce:75:4f:
6e:06:6f:21:42:f0:61:0e:3f:80:2e:5e:97:45:e8:bd:a9:82:
15:b8:f5:01:6b:44:3b:7f:b1:fc:5e:cc:c0:c8:ca:85:68:59:
74:be:be:97:a6:1b:84:56:fd:4d:58:8b:c2:31:c8:64:a8:fb:
0c:1e:f1:fd:5f:8e:3a:1e:cd:74:64:6d:94:06:60:61:aa:91:
f4:a6:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:48 2025 by rpki-client