Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/w7Fbo3W0AkoJQABo1dgJ37JPic8.roa
File: w7Fbo3W0AkoJQABo1dgJ37JPic8.roa (raw, json)
Hash identifier: gD8RrhuF7+lyzMsNkWMV653nJuELIlwIESwEiuq+hP0=
Subject key identifier: C3:B1:5B:A3:75:B4:02:4A:09:40:00:68:D5:D8:09:DF:B2:4F:89:CF
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 019425FD44F5FA6AA35E33BB516044996FF3
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/w7Fbo3W0AkoJQABo1dgJ37JPic8.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:59::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:44:f5:fa:6a:a3:5e:33:bb:51:60:44:99:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3b15ba375b4024a09400068d5d809dfb24f89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:5e:1f:cd:60:65:a4:29:78:11:e2:34:b0:
08:03:47:47:14:cc:77:75:7a:4d:ac:1d:67:e8:87:
86:d9:ce:31:55:09:ad:68:df:76:8f:77:39:dd:e2:
44:a8:87:2f:24:2d:8e:55:1d:bb:35:c3:3e:bc:c9:
64:38:3a:58:dc:1c:40:4d:2a:d2:e2:5d:72:7a:c1:
b9:2b:ac:9b:49:20:d4:65:0c:24:dd:70:95:22:06:
35:2f:c7:d1:53:32:54:dd:99:76:65:15:54:5a:c8:
2b:39:87:a8:8f:95:de:34:70:09:d7:76:f1:57:5c:
28:02:06:aa:9f:2d:c4:bc:62:fc:13:da:db:78:05:
8c:32:6f:48:c0:60:2d:c1:d7:65:58:e3:c3:5a:46:
0d:e9:a3:41:6f:82:75:3e:1b:f8:5c:13:a9:b4:c8:
b9:0f:f8:1c:5d:22:e7:d3:ba:55:37:cc:94:1d:ab:
65:41:68:11:29:cd:a2:87:41:19:22:5d:87:7a:f3:
0d:5f:5c:82:2d:07:56:22:06:b7:f1:84:7e:51:e9:
d7:c7:b1:5b:56:52:e4:d6:d8:6d:5b:5f:79:24:d6:
23:9c:e8:33:ae:09:6d:89:2d:f5:0e:cb:63:bf:d8:
ed:51:8c:45:4f:0a:ad:21:e7:11:80:2f:bb:67:2d:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:5B:A3:75:B4:02:4A:09:40:00:68:D5:D8:09:DF:B2:4F:89:CF
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/w7Fbo3W0AkoJQABo1dgJ37JPic8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/21
212.70.105.0-212.70.127.255
IPv6:
2a04:7f80:2::-2a04:7f80:5:ffff:ffff:ffff:ffff:ffff
2a04:7f80:10::/45
2a04:7f80:19::-2a04:7f80:1f:ffff:ffff:ffff:ffff:ffff
2a04:7f80:50::/44
Signature Algorithm: sha256WithRSAEncryption
97:c6:93:9f:88:f0:0f:ee:dc:a2:ca:f4:4f:a2:16:7d:32:a7:
c0:67:2e:1a:4a:1b:b8:d3:15:b3:40:b3:f9:24:28:eb:f7:0a:
54:dd:c4:fc:1c:08:be:10:25:da:c1:9f:de:ce:c2:af:2d:01:
52:34:2b:68:91:37:71:f6:03:fd:6b:34:8a:e0:74:7c:2c:a0:
02:9b:62:dc:51:15:a9:c4:03:f7:9e:a9:22:a4:5d:ab:ec:49:
3c:35:46:af:1c:6b:49:ca:b8:5f:26:64:26:14:f7:f5:76:2a:
8c:26:91:f3:0b:e1:c0:27:35:20:06:fb:6e:c4:42:a7:17:89:
62:42:b7:2b:f3:96:df:43:21:9b:0b:ba:8d:4d:c4:3e:98:4b:
5d:34:d8:e3:0e:86:60:50:1e:3e:e2:dc:4d:d0:75:41:c9:30:
b7:a4:1b:57:d1:16:9e:a0:5d:5f:6c:8c:45:d0:8d:86:7d:d8:
13:27:f8:5e:3f:94:37:cd:d6:60:36:39:da:eb:04:56:c2:7a:
32:77:a9:a4:e0:b5:f6:82:e5:d3:eb:2c:89:e6:8d:49:63:47:
c3:2c:eb:98:76:cb:28:df:81:6e:20:a1:9e:e5:c1:ff:d7:90:
81:78:d3:11:63:d6:9c:f2:e2:ef:5c:ae:33:1d:d7:71:93:c6:
d0:70:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:19:56 2025 by rpki-client