Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/SAABZkEQbTfeoiZylh7IAj2UKJY.roa
File: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (raw, json)
Hash identifier: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=
Subject key identifier: 48:00:01:66:41:10:6D:37:DE:A2:26:72:96:1E:C8:02:3D:94:28:96
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 019422FBAD6D2C63106ED50162926BC0C6D1
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/SAABZkEQbTfeoiZylh7IAj2UKJY.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210079
IP address blocks: 5.35.100.0/24 maxlen: 24
5.35.101.0/24 maxlen: 24
5.35.102.0/24 maxlen: 24
37.143.8.0/23 maxlen: 23
37.143.10.0/23 maxlen: 23
37.143.12.0/23 maxlen: 23
37.143.14.0/23 maxlen: 23
46.254.16.0/23 maxlen: 23
46.254.18.0/23 maxlen: 23
46.254.20.0/23 maxlen: 23
46.254.22.0/24 maxlen: 24
46.254.23.0/24 maxlen: 24
91.201.40.0/22 maxlen: 22
91.218.228.0/23 maxlen: 23
91.218.230.0/23 maxlen: 23
95.181.224.0/24 maxlen: 24
95.181.225.0/24 maxlen: 24
95.181.226.0/24 maxlen: 24
95.181.227.0/24 maxlen: 24
95.181.228.0/24 maxlen: 24
95.181.229.0/24 maxlen: 24
95.181.230.0/24 maxlen: 24
95.181.231.0/24 maxlen: 24
95.183.8.0/23 maxlen: 23
95.183.10.0/24 maxlen: 24
95.183.11.0/24 maxlen: 24
95.183.12.0/24 maxlen: 24
95.183.13.0/24 maxlen: 24
95.183.14.0/24 maxlen: 24
95.183.15.0/24 maxlen: 24
178.57.216.0/23 maxlen: 23
178.57.218.0/23 maxlen: 23
178.57.220.0/23 maxlen: 23
178.57.220.0/24 maxlen: 24
178.57.221.0/24 maxlen: 24
178.57.222.0/23 maxlen: 23
178.217.100.0/24 maxlen: 24
178.217.101.0/24 maxlen: 24
185.11.246.0/23 maxlen: 23
185.12.92.0/22 maxlen: 22
185.12.92.0/24 maxlen: 24
185.12.93.0/24 maxlen: 24
185.12.94.0/24 maxlen: 24
185.12.95.0/24 maxlen: 24
185.22.232.0/23 maxlen: 23
185.22.234.0/23 maxlen: 23
185.87.192.0/24 maxlen: 24
185.87.193.0/24 maxlen: 24
185.87.194.0/24 maxlen: 24
185.87.195.0/24 maxlen: 24
185.87.196.0/24 maxlen: 24
185.87.197.0/24 maxlen: 24
185.87.198.0/24 maxlen: 24
185.87.199.0/24 maxlen: 24
185.221.152.0/22 maxlen: 24
185.221.154.0/24 maxlen: 24
185.221.155.0/24 maxlen: 24
212.8.247.0/24 maxlen: 24
217.144.96.0/24 maxlen: 24
217.144.97.0/24 maxlen: 24
217.144.98.0/24 maxlen: 24
217.144.99.0/24 maxlen: 24
217.144.100.0/24 maxlen: 24
217.144.101.0/24 maxlen: 24
217.144.103.0/24 maxlen: 24
2a03:80c0::/48 maxlen: 48
2a03:80c0:1::/48 maxlen: 48
2a03:c980:db::/48 maxlen: 48
2a03:c980:e5::/48 maxlen: 48
2a03:c980:5fb5::/48 maxlen: 48
2a03:c980:5fb7::/48 maxlen: 48
2a03:c980:b239::/48 maxlen: 48
2a03:c980:b916::/48 maxlen: 48
2a03:c980:b957::/48 maxlen: 48
2a03:c980:beef::/48 maxlen: 48
2a03:c980:d990::/48 maxlen: 48
2a03:c980:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ad:6d:2c:63:10:6e:d5:01:62:92:6b:c0:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4800016641106d37dea22672961ec8023d942896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:0e:83:16:45:c8:57:5c:17:88:24:6b:e3:
2a:50:40:2a:cd:46:6f:81:65:79:11:0b:72:8d:4a:
ac:b9:dd:4a:24:e9:7a:ca:78:e2:7e:d4:9a:49:e6:
4a:da:9e:d0:25:8f:5f:92:0f:30:4c:83:43:14:42:
10:5a:0b:a9:6d:a5:39:f5:42:a6:2d:82:45:aa:97:
53:8c:14:b6:5e:79:4c:77:80:6a:5c:e6:01:86:6a:
3a:93:b3:de:5a:d2:b2:d0:2f:b2:84:3d:f7:97:88:
8c:c8:8a:6f:31:f4:7c:5f:75:a8:c8:84:84:4c:c8:
bc:1e:69:ad:1d:c7:87:98:e6:aa:27:d1:b4:24:b6:
30:d5:3f:d6:e0:af:d5:b3:2c:da:2a:33:6e:23:d0:
d2:07:ca:1f:27:dc:19:e9:98:68:95:5c:5b:3a:d0:
64:70:a4:4d:fb:6e:ca:68:e4:13:c5:6d:2d:43:cd:
64:02:98:be:4f:02:98:36:db:36:0b:1e:02:02:82:
17:55:82:d5:63:d1:2e:a8:cf:be:b1:c1:c9:b1:5d:
1f:a0:af:37:4a:33:02:e3:83:75:d3:36:2e:57:30:
f8:83:d1:72:40:f4:c0:3f:d2:ca:6f:31:84:5f:50:
62:30:93:10:72:10:4b:0d:7f:9a:23:7a:e4:a4:4e:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:01:66:41:10:6D:37:DE:A2:26:72:96:1E:C8:02:3D:94:28:96
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/SAABZkEQbTfeoiZylh7IAj2UKJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.100.0-5.35.102.255
37.143.8.0/21
46.254.16.0/21
91.201.40.0/22
91.218.228.0/22
95.181.224.0/21
95.183.8.0/21
178.57.216.0/21
178.217.100.0/23
185.11.246.0/23
185.12.92.0/22
185.22.232.0/22
185.87.192.0/21
185.221.152.0/22
212.8.247.0/24
217.144.96.0-217.144.101.255
217.144.103.0/24
IPv6:
2a03:80c0::/47
2a03:c980:db::/48
2a03:c980:e5::/48
2a03:c980:5fb5::/48
2a03:c980:5fb7::/48
2a03:c980:b239::/48
2a03:c980:b916::/48
2a03:c980:b957::/48
2a03:c980:beef::/48
2a03:c980:d990::/48
2a03:c980:dead::/48
Signature Algorithm: sha256WithRSAEncryption
39:c0:74:a1:6e:46:32:d2:be:7c:50:09:2e:90:82:5a:3d:35:
bd:fa:50:33:9e:75:70:6d:12:a7:51:f5:d8:ef:50:c4:96:21:
e9:ab:0f:cf:93:80:69:bc:a4:28:d4:f4:76:11:b4:2e:33:c9:
50:bd:31:a4:ca:0d:fe:65:a7:43:1e:4a:a2:b4:06:3d:a1:de:
35:7e:7e:22:66:d2:06:95:48:0f:ac:6e:2c:87:a9:61:ff:07:
2f:0f:80:1f:78:28:75:9b:90:39:d3:4b:7c:d3:ef:f5:e7:2c:
8c:42:80:1a:36:70:11:c4:2b:99:b0:27:f7:b7:61:de:78:d8:
40:8e:7a:53:c8:d2:f0:9c:65:3b:45:f5:0f:93:46:fa:4c:2b:
37:fd:55:e3:f0:c7:66:8a:5f:46:98:77:e0:3c:cd:99:ff:fe:
29:ea:bf:6b:26:49:47:b5:eb:fa:57:13:d9:bf:ae:56:ce:4f:
23:11:ba:0f:e5:38:c6:e2:ec:31:7b:db:3e:bf:c4:84:25:00:
ae:2f:cd:d7:6e:4e:df:61:ed:a9:69:5a:32:24:1f:3f:71:1b:
93:84:7f:bc:65:51:4a:bc:a0:90:d2:2e:4c:e1:1f:0b:91:52:
99:6c:7a:2b:c9:a2:75:f2:96:2b:1c:bf:bb:59:fb:f5:84:75:
7f:c0:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:49:42 2025 by rpki-client