Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa
File: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (raw, json)
Hash identifier: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=
Subject key identifier: A4:A6:EC:0D:20:9C:3E:84:CF:57:D6:B7:C7:21:30:88:D6:9A:EC:A3
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0194221F9A0362F7871EAA47CDDACEAEEA1C
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8648
IP address blocks: 5.11.48.0/21 maxlen: 24
5.44.96.0/20 maxlen: 24
31.47.240.0/20 maxlen: 24
37.218.248.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
45.87.136.0/22 maxlen: 24
46.243.88.0/21 maxlen: 24
77.75.248.0/21 maxlen: 24
81.88.16.0/20 maxlen: 24
81.88.32.0/20 maxlen: 24
82.141.0.0/18 maxlen: 24
84.254.120.0/24 maxlen: 24
85.158.176.0/21 maxlen: 24
89.22.96.0/19 maxlen: 24
91.151.16.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
91.203.212.0/22 maxlen: 24
91.206.142.0/23 maxlen: 24
91.220.49.0/24 maxlen: 24
91.226.88.0/22 maxlen: 24
93.90.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
94.154.148.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
109.237.128.0/20 maxlen: 24
128.127.64.0/21 maxlen: 24
141.101.32.0/21 maxlen: 24
178.20.96.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
178.250.168.0/21 maxlen: 24
185.3.232.0/22 maxlen: 24
185.32.116.0/22 maxlen: 24
185.39.220.0/22 maxlen: 24
185.51.8.0/22 maxlen: 24
185.61.40.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
185.80.92.0/22 maxlen: 24
185.84.80.0/22 maxlen: 24
185.84.82.0/24 maxlen: 24
185.117.248.0/22 maxlen: 24
185.137.168.0/22 maxlen: 24
185.143.164.0/22 maxlen: 24
185.158.212.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
185.211.60.0/22 maxlen: 24
188.64.40.0/21 maxlen: 24
192.162.84.0/22 maxlen: 24
193.22.255.0/24 maxlen: 24
193.25.114.0/23 maxlen: 24
193.38.156.0/22 maxlen: 24
194.116.186.0/23 maxlen: 24
194.145.226.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
195.34.82.0/23 maxlen: 24
195.42.120.0/23 maxlen: 24
195.62.96.0/19 maxlen: 24
195.82.152.0/23 maxlen: 24
195.110.42.0/23 maxlen: 24
195.225.133.0/24 maxlen: 24
212.110.96.0/19 maxlen: 24
213.146.96.0/19 maxlen: 24
2001:880::/32 maxlen: 32
2a00:12c0::/29 maxlen: 48
2a00:5300::/32 maxlen: 48
2a00:fa40::/32 maxlen: 48
2a01:64c0::/32 maxlen: 48
2a01:aee0::/32 maxlen: 48
2a02:248::/32 maxlen: 48
2a02:a60::/32 maxlen: 48
2a02:2b80::/32 maxlen: 48
2a04:4cc0::/29 maxlen: 48
2a04:ff40::/29 maxlen: 48
2a0b:2a40::/29 maxlen: 48
2a0b:6340::/29 maxlen: 48
2a0d:6940::/29 maxlen: 48
2a0e:fe80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9a:03:62:f7:87:1e:aa:47:cd:da:ce:ae:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4a6ec0d209c3e84cf57d6b7c7213088d69aeca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:e9:73:31:9a:84:fe:31:ba:04:25:7f:c3:
5f:e5:07:27:b8:bf:c7:3f:2d:87:19:7c:94:08:b3:
20:80:e9:17:32:da:27:31:93:fb:b0:df:a9:b5:a0:
ff:82:ce:72:a8:c7:a9:c8:e8:53:80:fd:25:22:c9:
53:eb:db:72:61:9b:1f:24:63:7e:bb:63:f4:75:c2:
8d:42:77:f3:6d:d9:72:90:0d:94:65:cb:c4:35:8b:
fb:14:b1:e2:2c:95:28:9b:93:e7:f4:16:a2:5a:85:
64:9c:86:ae:50:b6:d3:e1:53:88:6d:ce:d5:54:07:
2b:ec:e3:00:0b:19:e3:fa:04:f8:cd:b2:f9:23:b2:
46:75:a8:0d:3d:27:cb:b7:00:80:79:00:b9:f2:7a:
66:a9:e8:ba:9c:8e:ce:56:90:b1:2a:64:51:19:8f:
19:3b:a0:bd:f7:2a:28:5e:d2:87:9f:f3:f2:41:9a:
82:f1:b5:90:ed:14:48:4b:43:6e:b1:36:34:6d:6e:
ce:18:35:55:fe:40:a3:39:f0:98:ae:85:bf:bc:03:
8f:d9:02:ee:bf:d2:a9:3a:28:1b:03:88:ab:e7:0a:
6f:f6:2d:75:bd:79:3c:b3:85:50:4a:10:65:35:34:
48:49:1e:4b:a7:58:2c:62:33:89:dc:ad:0d:f5:52:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:EC:0D:20:9C:3E:84:CF:57:D6:B7:C7:21:30:88:D6:9A:EC:A3
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
5.44.96.0/20
31.47.240.0/20
37.218.248.0/21
37.228.152.0/21
45.87.136.0/22
46.243.88.0/21
77.75.248.0/21
81.88.16.0-81.88.47.255
82.141.0.0/18
84.254.120.0/24
85.158.176.0/21
89.22.96.0/19
91.151.16.0/21
91.203.108.0/22
91.203.212.0/22
91.206.142.0/23
91.220.49.0/24
91.226.88.0/22
93.90.176.0/20
93.190.64.0/21
94.154.148.0/22
95.130.248.0/21
109.75.176.0/20
109.237.128.0/20
128.127.64.0/21
141.101.32.0/21
178.20.96.0/21
178.250.8.0/21
178.250.168.0/21
185.3.232.0/22
185.32.116.0/22
185.39.220.0/22
185.51.8.0/22
185.61.40.0/22
185.65.88.0/22
185.80.92.0/22
185.84.80.0/22
185.117.248.0/22
185.137.168.0/22
185.143.164.0/22
185.158.212.0/22
185.207.228.0/22
185.211.60.0/22
188.64.40.0/21
192.162.84.0/22
193.22.255.0/24
193.25.114.0/23
193.38.156.0/22
194.116.186.0/23
194.145.226.0/24
195.5.120.0/23
195.34.82.0/23
195.42.120.0/23
195.62.96.0/19
195.82.152.0/23
195.110.42.0/23
195.225.133.0/24
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a00:12c0::/29
2a00:5300::/32
2a00:fa40::/32
2a01:64c0::/32
2a01:aee0::/32
2a02:248::/32
2a02:a60::/32
2a02:2b80::/32
2a04:4cc0::/29
2a04:ff40::/29
2a0b:2a40::/29
2a0b:6340::/29
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
0d:8f:d5:38:d7:dc:c7:bb:6f:17:c5:a1:19:d2:9a:0f:8a:61:
5c:cf:15:ea:b0:67:c4:5a:33:b0:2c:5d:bd:f7:c5:68:cf:27:
51:f4:4e:57:5e:1d:9d:c3:84:77:9a:c5:3a:6e:7d:3c:e0:5d:
e1:aa:e5:72:0e:8a:2e:ad:56:d0:f2:e4:7d:08:97:32:57:01:
14:92:4a:89:94:35:f5:33:0d:12:88:cb:6d:9f:bc:38:13:f0:
f6:ef:09:29:0c:00:e2:80:6f:63:78:18:d1:f8:c6:e4:33:fb:
ad:73:70:11:2e:e2:15:3e:65:45:14:f9:7c:66:cf:94:71:c7:
04:37:1a:f7:d5:cd:56:56:21:d5:b6:60:7c:04:ac:15:ff:95:
dd:35:ac:e9:82:17:93:b4:2f:af:f8:a8:e3:12:4f:fb:3e:33:
56:0e:54:29:72:04:01:50:4f:0d:b6:18:bc:12:3c:66:ba:7c:
c0:d2:20:96:19:51:68:06:27:29:80:d0:06:9c:d2:68:ad:cd:
53:1a:7a:b3:03:2f:9d:a1:29:ae:d5:27:88:e4:8b:6b:87:5d:
9a:f4:67:64:c6:51:76:1f:7e:f6:99:bc:ff:29:80:f1:a0:a9:
05:48:9a:42:ed:84:04:dc:38:6c:d9:67:f3:b6:3c:ac:0e:2e:
44:38:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:34:33 2025 by rpki-client