Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa
File: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (raw, json)
Hash identifier: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=
Subject key identifier: C5:56:A8:3A:8F:56:B2:61:29:74:6C:3B:C4:68:22:D0:9C:E6:81:C2
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0194221F9B1026F9F24F8E5C4F102DB789E4
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45012
IP address blocks: 5.44.100.0/23 maxlen: 24
5.44.102.0/23 maxlen: 24
5.44.104.0/22 maxlen: 24
5.44.108.0/22 maxlen: 24
31.47.240.0/20 maxlen: 24
37.218.248.0/22 maxlen: 22
37.218.252.0/24 maxlen: 24
37.218.254.0/24 maxlen: 24
37.228.152.0/21 maxlen: 24
46.243.88.0/21 maxlen: 24
77.75.248.0/21 maxlen: 24
81.88.16.0/24 maxlen: 24
81.88.28.0/22 maxlen: 24
81.88.32.0/20 maxlen: 24
85.158.176.0/21 maxlen: 24
89.22.100.0/22 maxlen: 24
89.22.106.0/24 maxlen: 24
89.22.108.0/24 maxlen: 24
89.22.110.0/23 maxlen: 24
89.22.112.0/22 maxlen: 24
89.22.116.0/22 maxlen: 24
89.22.122.0/23 maxlen: 24
89.22.124.0/22 maxlen: 24
91.151.16.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
91.203.212.0/22 maxlen: 24
91.220.49.0/24 maxlen: 24
93.90.178.0/24 maxlen: 24
93.90.180.0/23 maxlen: 24
109.237.128.0/20 maxlen: 24
128.127.65.0/24 maxlen: 24
128.127.66.0/24 maxlen: 24
178.20.96.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
178.250.170.0/24 maxlen: 24
178.250.174.0/24 maxlen: 24
185.3.232.0/22 maxlen: 24
185.39.220.0/22 maxlen: 24
185.61.40.0/22 maxlen: 24
185.80.92.0/22 maxlen: 24
185.137.168.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
188.64.46.0/23 maxlen: 24
192.162.87.0/24 maxlen: 24
193.22.255.0/24 maxlen: 24
194.145.226.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
195.82.152.0/23 maxlen: 24
2a00:fa40:2000::/36 maxlen: 64
2a00:fa40:3000::/36 maxlen: 36
2a00:fa40:4000::/36 maxlen: 36
2a01:64c0::/32 maxlen: 32
2a02:2b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:10:26:f9:f2:4f:8e:5c:4f:10:2d:b7:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c556a83a8f56b26129746c3bc46822d09ce681c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:02:ed:ee:ed:b0:d2:1d:02:b6:e2:d5:fa:
fa:49:7b:58:09:d8:a8:e9:fb:6c:3c:c2:15:77:c8:
2b:c0:bd:ae:92:ad:d5:08:42:b7:27:4f:24:c1:c8:
2a:20:dd:c3:66:18:8b:f8:8b:e3:83:5f:cf:40:1e:
9e:35:db:92:4c:8f:cf:4c:c1:3b:c7:9c:45:d2:40:
56:79:9e:c3:3b:b3:64:f5:0d:36:f5:e5:15:b8:63:
d9:da:55:ae:92:51:7c:56:78:de:00:88:2f:be:c1:
90:79:b6:f5:0c:46:11:0e:e6:f8:57:dd:a0:74:48:
fb:71:76:c4:7c:c8:10:4a:02:0f:60:c9:f6:ed:b1:
92:7c:ce:63:d9:7b:96:b5:e4:e4:05:08:a1:c6:32:
d9:df:13:be:2f:28:ad:ea:d7:f9:b2:e5:75:ef:ac:
1d:e2:22:92:b8:00:c6:ae:33:e8:d8:0f:1b:e4:46:
ea:0c:d8:d2:7f:62:94:9d:c4:11:ff:b6:f7:0c:03:
29:62:f5:42:d2:16:01:fb:66:63:ca:d7:60:0f:b3:
78:90:ce:fd:0a:f1:ff:a2:52:d9:db:41:7f:05:83:
34:57:97:24:e7:61:ad:c4:c0:45:5f:f0:d5:17:ca:
e7:38:4d:c7:3e:dc:c6:41:cd:31:ba:01:58:9a:de:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:A8:3A:8F:56:B2:61:29:74:6C:3B:C4:68:22:D0:9C:E6:81:C2
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.100.0-5.44.111.255
31.47.240.0/20
37.218.248.0-37.218.252.255
37.218.254.0/24
37.228.152.0/21
46.243.88.0/21
77.75.248.0/21
81.88.16.0/24
81.88.28.0-81.88.47.255
85.158.176.0/21
89.22.100.0/22
89.22.106.0/24
89.22.108.0/24
89.22.110.0-89.22.119.255
89.22.122.0-89.22.127.255
91.151.16.0/21
91.203.108.0/22
91.203.212.0/22
91.220.49.0/24
93.90.178.0/24
93.90.180.0/23
109.237.128.0/20
128.127.65.0-128.127.66.255
178.20.96.0/21
178.250.8.0/21
178.250.170.0/24
178.250.174.0/24
185.3.232.0/22
185.39.220.0/22
185.61.40.0/22
185.80.92.0/22
185.137.168.0/22
185.207.228.0/22
188.64.46.0/23
192.162.87.0/24
193.22.255.0/24
194.145.226.0/24
195.5.120.0/23
195.82.152.0/23
IPv6:
2a00:fa40:2000::-2a00:fa40:4fff:ffff:ffff:ffff:ffff:ffff
2a01:64c0::/32
2a02:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
56:1e:f5:69:00:fd:21:45:b0:ea:81:71:ee:2e:de:7a:cc:aa:
f6:b8:cd:11:45:bd:3d:f6:e1:c8:23:fb:e9:e0:54:cb:65:eb:
90:c7:cb:bb:a7:01:d0:4a:ef:4e:7f:ec:e9:54:d7:dc:57:90:
20:34:c9:74:44:89:ea:0e:e6:71:9e:25:ba:6e:17:55:a5:c6:
56:b3:55:20:52:79:ef:fc:6d:ec:38:4a:80:b7:90:b1:18:79:
71:79:24:1b:e2:f8:d0:10:55:05:a3:1c:4b:06:eb:5c:62:92:
e1:3b:b4:b7:82:1c:80:37:ea:a7:f7:ab:94:2b:e8:ac:01:1f:
2b:ce:c8:c1:17:38:96:aa:95:05:54:49:dc:dc:b4:48:ea:e6:
84:49:93:c5:7a:fb:db:2e:e8:75:19:c2:19:e4:40:5c:f8:fb:
19:25:79:52:13:3b:10:5c:96:84:19:25:2a:76:c1:bd:37:8c:
b6:4e:b3:2b:dc:94:89:11:67:4a:a2:e9:04:fb:bd:af:f6:a1:
e9:b7:3e:53:37:70:2d:dc:3e:fb:cd:84:c5:09:56:70:b0:2e:
e2:1d:06:f5:2b:43:4d:f0:b7:9a:cb:dc:d8:ef:06:2a:e9:ce:
82:dd:a9:54:99:cc:3a:2b:c0:32:12:c9:87:1d:38:a8:3c:c6:
bc:d8:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:48:58 2025 by rpki-client