Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/8it1mnGsBB_0bpcwXcQ7puN3Hok.roa
File: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (raw, json)
Hash identifier: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=
Subject key identifier: F2:2B:75:9A:71:AC:04:1F:F4:6E:97:30:5D:C4:3B:A6:E3:77:1E:89
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 0194274791C28366970339F04609F80E6E9B
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/8it1mnGsBB_0bpcwXcQ7puN3Hok.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48359
IP address blocks: 45.155.192.0/24 maxlen: 24
45.155.193.0/24 maxlen: 24
45.155.194.0/24 maxlen: 24
45.155.195.0/24 maxlen: 24
91.213.157.0/24 maxlen: 24
91.213.167.0/24 maxlen: 24
91.213.172.0/24 maxlen: 24
185.47.48.0/23 maxlen: 23
185.47.48.0/24 maxlen: 24
185.47.49.0/24 maxlen: 24
185.47.50.0/23 maxlen: 23
185.47.50.0/24 maxlen: 24
185.47.51.0/24 maxlen: 24
185.82.64.0/22 maxlen: 22
185.82.64.0/24 maxlen: 24
185.82.65.0/24 maxlen: 24
185.82.66.0/24 maxlen: 24
185.82.67.0/24 maxlen: 24
185.121.56.0/22 maxlen: 22
185.121.56.0/24 maxlen: 24
185.121.57.0/24 maxlen: 24
185.121.58.0/24 maxlen: 24
185.121.59.0/24 maxlen: 24
185.125.20.0/24 maxlen: 24
185.125.21.0/24 maxlen: 24
185.125.22.0/24 maxlen: 24
185.125.23.0/24 maxlen: 24
185.137.60.0/22 maxlen: 24
185.137.60.0/24 maxlen: 24
185.137.61.0/24 maxlen: 24
185.137.62.0/24 maxlen: 24
185.137.63.0/24 maxlen: 24
185.142.92.0/22 maxlen: 22
185.142.92.0/24 maxlen: 24
185.142.93.0/24 maxlen: 24
185.142.94.0/24 maxlen: 24
185.142.95.0/24 maxlen: 24
185.142.124.0/22 maxlen: 22
185.142.124.0/24 maxlen: 24
185.142.125.0/24 maxlen: 24
185.142.126.0/24 maxlen: 24
185.142.127.0/24 maxlen: 24
185.212.192.0/24 maxlen: 24
185.212.193.0/24 maxlen: 24
185.212.195.0/24 maxlen: 24
185.221.192.0/22 maxlen: 22
185.221.192.0/24 maxlen: 24
185.221.194.0/24 maxlen: 24
185.221.195.0/24 maxlen: 24
185.238.44.0/24 maxlen: 24
185.238.45.0/24 maxlen: 24
185.238.46.0/24 maxlen: 24
185.238.47.0/24 maxlen: 24
193.246.174.0/24 maxlen: 24
193.246.175.0/24 maxlen: 24
193.246.200.0/24 maxlen: 24
193.246.201.0/24 maxlen: 24
195.8.110.0/24 maxlen: 24
195.8.112.0/24 maxlen: 24
195.8.114.0/24 maxlen: 24
195.191.22.0/24 maxlen: 24
195.191.23.0/24 maxlen: 24
195.191.44.0/24 maxlen: 24
195.191.45.0/24 maxlen: 24
195.230.97.0/24 maxlen: 24
195.230.105.0/24 maxlen: 24
195.230.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:91:c2:83:66:97:03:39:f0:46:09:f8:0e:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f22b759a71ac041ff46e97305dc43ba6e3771e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:dd:88:fe:04:fd:1e:de:b0:60:64:ed:57:
52:69:85:31:07:53:6b:ad:9f:07:38:69:ac:fc:08:
df:3d:d7:ed:dc:94:c4:29:b3:43:57:70:42:cf:91:
67:83:44:2c:23:31:21:e3:10:f9:30:74:0a:3a:14:
cf:ea:0c:b3:2c:11:09:01:f0:4c:39:4f:41:55:7a:
cb:f3:43:66:a4:47:f9:5e:ba:1e:63:ed:55:ff:6e:
9a:6a:25:bd:a6:38:5e:7e:e6:97:03:fb:8a:d4:9f:
67:5c:f0:c5:48:2d:b3:18:f3:2e:4d:e6:be:17:43:
c5:40:84:ff:d0:f6:84:d1:cf:e6:e2:63:d1:60:6b:
72:b2:bf:2c:fb:df:3a:35:41:3f:6d:90:4f:23:29:
28:9f:85:8c:a2:f5:4f:ae:31:0a:89:35:d3:22:cc:
1a:7f:34:39:b5:0b:71:fe:3e:12:b7:85:91:a5:aa:
9e:f5:bc:db:83:64:56:3b:b0:6b:1b:8e:c3:8f:eb:
92:7a:76:82:79:0b:a3:1c:ac:92:d2:02:f5:2e:97:
97:c6:15:0b:e3:be:ad:0b:c5:c6:c2:84:83:a0:ba:
94:23:e6:a1:69:ac:72:b8:7e:39:68:bb:61:f1:0d:
7a:df:86:fb:0f:fc:6a:4c:ae:03:6d:85:9f:ee:6a:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:75:9A:71:AC:04:1F:F4:6E:97:30:5D:C4:3B:A6:E3:77:1E:89
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/8it1mnGsBB_0bpcwXcQ7puN3Hok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.192.0/22
91.213.157.0/24
91.213.167.0/24
91.213.172.0/24
185.47.48.0/22
185.82.64.0/22
185.121.56.0/22
185.125.20.0/22
185.137.60.0/22
185.142.92.0/22
185.142.124.0/22
185.212.192.0/23
185.212.195.0/24
185.221.192.0/22
185.238.44.0/22
193.246.174.0/23
193.246.200.0/23
195.8.110.0/24
195.8.112.0/24
195.8.114.0/24
195.191.22.0/23
195.191.44.0/23
195.230.97.0/24
195.230.105.0/24
195.230.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:89:c2:02:68:e7:08:a1:9e:b8:d7:28:c4:c0:e8:0b:fa:05:
9e:ef:c4:c1:e4:75:70:0e:81:ab:d1:0e:01:92:ea:3a:8a:0a:
c6:39:dc:1b:35:65:f7:00:1b:ed:d8:70:1a:44:0b:4a:3c:cb:
ee:cc:d8:23:31:24:9a:18:2f:c4:af:01:26:f6:8e:8a:e4:7e:
70:26:9c:4a:c0:86:9d:3f:19:83:62:1c:a8:98:56:8e:d7:90:
3a:8c:f9:08:a5:d1:8d:ce:10:64:42:9e:3c:87:fd:61:29:de:
34:93:e7:9c:68:45:ca:7b:94:47:92:a8:7c:3a:5d:b1:da:05:
2b:e2:c5:b5:99:d8:e6:7a:8e:42:28:79:4b:a1:33:94:64:b7:
58:e3:b4:09:52:54:9f:81:79:e8:ea:95:b5:5f:a8:11:d5:77:
4f:ef:dc:82:17:51:43:c4:c2:77:36:54:91:9f:d9:d2:7d:bb:
16:d1:10:7e:eb:62:c3:b9:98:bb:c0:e7:e9:ab:e1:b1:b4:0c:
6c:03:63:43:c0:fb:c3:39:ea:c3:00:8d:27:65:d9:e8:4a:7d:
59:18:6c:fd:92:e0:cd:09:52:19:72:36:c4:30:48:91:69:82:
16:38:99:02:78:14:d3:da:71:66:47:49:a6:e9:0c:52:bc:01:
f7:d7:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:54:10 2025 by rpki-client