Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/BJWbU3h0q9wVWOT-c9CXfkXxzTI.roa
File: BJWbU3h0q9wVWOT-c9CXfkXxzTI.roa (raw, json)
Hash identifier: z+J9qT8t5WHyrsd9FbLlrFZCDxCHuS4qBPoI0V7XSRI=
Subject key identifier: 04:95:9B:53:78:74:AB:DC:15:58:E4:FE:73:D0:97:7E:45:F1:CD:32
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019423D7F2768A1B73C4B55D46CBCA5AE3AB
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/BJWbU3h0q9wVWOT-c9CXfkXxzTI.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13156
IP address blocks: 84.90.0.0/15 maxlen: 15
84.90.0.0/21 maxlen: 21
84.90.8.0/22 maxlen: 22
84.90.12.0/22 maxlen: 22
84.90.16.0/22 maxlen: 22
84.90.20.0/24 maxlen: 24
84.90.21.0/24 maxlen: 24
84.90.24.0/21 maxlen: 21
84.90.32.0/22 maxlen: 22
84.90.36.0/22 maxlen: 22
84.90.40.0/21 maxlen: 21
84.90.48.0/21 maxlen: 21
84.90.56.0/22 maxlen: 22
84.90.60.0/22 maxlen: 22
84.90.64.0/24 maxlen: 24
84.90.65.0/24 maxlen: 24
84.90.68.0/22 maxlen: 22
84.90.72.0/21 maxlen: 21
84.90.80.0/21 maxlen: 21
84.90.88.0/21 maxlen: 21
84.90.96.0/21 maxlen: 21
84.90.104.0/21 maxlen: 21
84.90.112.0/21 maxlen: 21
84.90.120.0/22 maxlen: 22
84.90.124.0/22 maxlen: 22
84.90.128.0/21 maxlen: 21
84.90.136.0/21 maxlen: 21
84.90.144.0/22 maxlen: 22
84.90.148.0/22 maxlen: 22
84.90.152.0/22 maxlen: 22
84.90.156.0/22 maxlen: 22
84.90.160.0/21 maxlen: 21
84.90.168.0/22 maxlen: 22
84.90.176.0/22 maxlen: 22
84.90.180.0/22 maxlen: 22
84.90.184.0/22 maxlen: 22
84.90.188.0/23 maxlen: 23
84.90.190.0/23 maxlen: 23
84.90.200.0/21 maxlen: 21
84.90.208.0/21 maxlen: 21
84.90.216.0/22 maxlen: 22
84.90.220.0/22 maxlen: 22
84.90.224.0/22 maxlen: 22
84.90.228.0/23 maxlen: 23
84.90.230.0/23 maxlen: 23
84.90.232.0/22 maxlen: 22
84.90.236.0/22 maxlen: 22
84.90.240.0/22 maxlen: 22
84.90.244.0/22 maxlen: 22
84.90.248.0/22 maxlen: 22
84.91.4.0/22 maxlen: 22
84.91.8.0/22 maxlen: 22
84.91.12.0/23 maxlen: 23
84.91.14.0/23 maxlen: 23
84.91.16.0/22 maxlen: 22
84.91.20.0/22 maxlen: 22
84.91.24.0/22 maxlen: 22
84.91.28.0/22 maxlen: 22
84.91.32.0/22 maxlen: 22
84.91.32.0/23 maxlen: 23
84.91.36.0/22 maxlen: 22
84.91.40.0/22 maxlen: 22
84.91.48.0/22 maxlen: 22
84.91.52.0/22 maxlen: 22
84.91.56.0/21 maxlen: 21
84.91.64.0/21 maxlen: 21
84.91.72.0/22 maxlen: 22
84.91.76.0/22 maxlen: 22
84.91.80.0/22 maxlen: 22
84.91.84.0/22 maxlen: 22
84.91.100.0/22 maxlen: 22
84.91.104.0/22 maxlen: 22
84.91.108.0/22 maxlen: 22
84.91.112.0/22 maxlen: 22
84.91.116.0/22 maxlen: 22
84.91.120.0/22 maxlen: 22
84.91.124.0/22 maxlen: 22
84.91.128.0/22 maxlen: 22
84.91.132.0/22 maxlen: 22
84.91.136.0/22 maxlen: 22
84.91.140.0/22 maxlen: 22
84.91.144.0/22 maxlen: 22
84.91.148.0/22 maxlen: 22
84.91.152.0/24 maxlen: 24
84.91.153.0/24 maxlen: 24
84.91.155.0/24 maxlen: 24
84.91.162.0/23 maxlen: 23
84.91.164.0/23 maxlen: 23
84.91.166.0/23 maxlen: 23
84.91.168.0/23 maxlen: 23
84.91.176.0/22 maxlen: 22
84.91.180.0/22 maxlen: 22
84.91.184.0/22 maxlen: 22
84.91.188.0/23 maxlen: 23
84.91.192.0/22 maxlen: 22
84.91.208.0/23 maxlen: 23
84.91.210.0/24 maxlen: 24
84.91.211.0/24 maxlen: 24
84.91.212.0/22 maxlen: 22
84.91.216.0/22 maxlen: 22
84.91.220.0/22 maxlen: 22
84.91.224.0/23 maxlen: 23
84.91.226.0/24 maxlen: 24
84.91.227.0/24 maxlen: 24
84.91.228.0/22 maxlen: 22
84.91.232.0/22 maxlen: 22
84.91.236.0/22 maxlen: 22
84.91.248.0/22 maxlen: 22
84.91.252.0/22 maxlen: 22
91.194.170.0/23 maxlen: 23
91.194.182.0/23 maxlen: 23
213.228.128.0/18 maxlen: 18
213.228.128.0/22 maxlen: 22
213.228.132.0/24 maxlen: 24
213.228.136.0/24 maxlen: 24
213.228.137.0/24 maxlen: 24
213.228.139.0/24 maxlen: 24
213.228.141.0/24 maxlen: 24
213.228.142.0/24 maxlen: 24
213.228.149.0/24 maxlen: 24
213.228.150.0/24 maxlen: 24
213.228.151.0/24 maxlen: 24
213.228.153.0/24 maxlen: 24
213.228.154.0/24 maxlen: 24
213.228.155.0/24 maxlen: 24
213.228.156.0/24 maxlen: 24
213.228.157.0/24 maxlen: 24
213.228.163.0/24 maxlen: 24
213.228.164.0/24 maxlen: 24
213.228.166.0/24 maxlen: 24
213.228.167.0/24 maxlen: 24
213.228.168.0/24 maxlen: 24
213.228.169.0/24 maxlen: 24
213.228.170.0/24 maxlen: 24
213.228.171.0/24 maxlen: 24
213.228.178.0/24 maxlen: 24
213.228.180.0/24 maxlen: 24
213.228.181.0/24 maxlen: 24
213.228.184.0/24 maxlen: 24
213.228.185.0/24 maxlen: 24
213.228.187.0/24 maxlen: 24
217.129.0.0/16 maxlen: 16
217.129.0.0/21 maxlen: 21
217.129.8.0/21 maxlen: 21
217.129.16.0/21 maxlen: 21
217.129.24.0/21 maxlen: 21
217.129.32.0/21 maxlen: 21
217.129.40.0/21 maxlen: 21
217.129.48.0/20 maxlen: 20
217.129.64.0/21 maxlen: 21
217.129.72.0/21 maxlen: 21
217.129.80.0/22 maxlen: 22
217.129.84.0/22 maxlen: 22
217.129.88.0/22 maxlen: 22
217.129.92.0/22 maxlen: 22
217.129.96.0/21 maxlen: 21
217.129.104.0/21 maxlen: 21
217.129.112.0/20 maxlen: 20
217.129.128.0/20 maxlen: 20
217.129.144.0/22 maxlen: 22
217.129.148.0/22 maxlen: 22
217.129.152.0/22 maxlen: 22
217.129.156.0/22 maxlen: 22
217.129.160.0/21 maxlen: 21
217.129.168.0/21 maxlen: 21
217.129.176.0/21 maxlen: 21
217.129.184.0/21 maxlen: 21
217.129.192.0/21 maxlen: 21
217.129.200.0/21 maxlen: 21
217.129.208.0/21 maxlen: 21
217.129.216.0/21 maxlen: 21
217.129.224.0/21 maxlen: 21
217.129.232.0/22 maxlen: 22
217.129.236.0/22 maxlen: 22
217.129.240.0/21 maxlen: 21
217.129.248.0/22 maxlen: 22
217.129.252.0/22 maxlen: 22
2a02:26c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f2:76:8a:1b:73:c4:b5:5d:46:cb:ca:5a:e3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04959b537874abdc1558e4fe73d0977e45f1cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:7d:9d:c7:86:00:d3:31:ae:19:bd:96:59:
f8:f7:a8:18:e3:cd:e9:11:32:f4:ae:7f:f0:4c:bd:
10:f1:2c:ff:ea:45:76:09:02:8d:c5:2e:0a:b4:88:
52:d7:8a:ad:9a:81:74:3e:f6:b2:de:4c:f4:dd:f9:
96:b6:0b:ef:3e:80:55:81:fd:16:65:ca:78:22:30:
bc:48:43:db:cd:7e:74:ff:99:22:02:cb:c6:5f:23:
37:4c:8f:58:d9:77:6c:56:6d:b2:e5:82:b4:04:24:
f3:1a:4f:13:22:a3:f5:2d:2e:de:0f:9d:f4:40:75:
17:0c:4e:68:c3:35:2d:ce:b6:5d:e5:52:fc:61:f5:
ca:2c:be:6f:b6:9b:23:a7:a2:72:79:10:b8:eb:8f:
3e:78:69:78:72:63:e9:31:57:0a:3f:b7:37:6c:b8:
90:d7:fd:06:f2:e8:53:bf:2d:c3:fb:69:50:ad:d0:
16:f7:88:b7:ac:57:2e:36:25:db:7b:8f:0d:9b:e5:
c8:3c:18:e6:b8:7a:f1:82:13:41:c3:0e:3d:56:d4:
bc:4b:8e:3d:73:9c:89:3b:6f:20:8a:68:9c:f3:00:
5d:16:ce:e6:2f:ba:2a:06:b8:94:8b:5d:d4:46:30:
1f:0a:4f:2c:9f:bc:30:57:98:e3:34:06:5b:97:08:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:9B:53:78:74:AB:DC:15:58:E4:FE:73:D0:97:7E:45:F1:CD:32
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/BJWbU3h0q9wVWOT-c9CXfkXxzTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.90.0.0/15
91.194.170.0/23
91.194.182.0/23
213.228.128.0/18
217.129.0.0/16
IPv6:
2a02:26c8::/32
Signature Algorithm: sha256WithRSAEncryption
ac:e6:28:36:47:f2:16:58:63:69:c3:e4:f4:9a:e9:b8:b8:de:
75:92:7e:0d:1e:21:6e:a7:94:57:b5:af:f9:1f:0e:e3:fd:9b:
1e:67:6d:f7:88:a4:3f:91:78:0b:a7:1c:66:c7:c5:b2:a5:3c:
f7:77:02:a3:54:ae:6e:2e:5c:16:dc:ed:e9:37:1f:eb:68:16:
3c:e1:e9:f9:1f:db:97:b5:4c:53:ab:de:de:03:dc:64:e1:ce:
ad:a4:32:d9:98:63:b4:f3:41:c4:3a:0c:7a:f5:9e:4f:e7:91:
04:d1:82:ce:b7:54:66:65:be:b3:06:49:5f:44:a9:0a:61:4a:
8c:a5:83:f0:00:75:65:23:b9:40:a4:fa:4d:b5:23:33:58:a3:
6f:4b:e4:8c:3a:a5:6b:78:64:9b:31:30:a1:e7:26:8c:40:68:
89:95:40:fc:7a:ba:e9:6e:02:8f:ea:6e:dd:fc:3c:50:61:06:
af:b2:c3:08:fe:54:02:cc:c6:b1:78:ac:93:d8:cc:02:73:e1:
14:3d:89:e7:f7:87:db:03:02:01:3b:ee:a2:5c:d1:33:27:66:
a8:7b:fa:13:d8:76:42:07:69:36:7c:20:80:91:5b:e0:de:8c:
8e:a3:db:e1:e1:3e:54:0d:cc:5b:d7:73:61:36:b4:83:06:01:
b4:1c:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:06:39 2025 by rpki-client