Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xzjGNG7QJ2qWxcYd4P1aqOk9SBQ.roa
File: xzjGNG7QJ2qWxcYd4P1aqOk9SBQ.roa (raw, json)
Hash identifier: 4aM2HUComlrvkD+2y8KVzppCVW8NHa7vWTCNDVFANj8=
Subject key identifier: C7:38:C6:34:6E:D0:27:6A:96:C5:C6:1D:E0:FD:5A:A8:E9:3D:48:14
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D721A26619BB5E337B551AC9937F68
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xzjGNG7QJ2qWxcYd4P1aqOk9SBQ.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
185.232.169.0/24 maxlen: 24
185.233.83.0/24 maxlen: 24
185.233.200.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:21:a2:66:19:bb:5e:33:7b:55:1a:c9:93:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c738c6346ed0276a96c5c61de0fd5aa8e93d4814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:71:13:c2:05:70:1c:53:31:3e:5b:b1:1d:
c0:d5:c5:01:ef:46:d2:b0:12:87:04:ef:bf:61:d1:
af:4f:61:c0:9d:30:e0:7a:a2:76:84:db:eb:d7:84:
f7:cb:e8:84:5c:da:03:7d:db:db:49:ad:02:91:1e:
a6:ba:ee:00:8f:2e:5f:1d:68:27:88:33:e5:d3:78:
30:12:d1:fd:2c:5d:da:ed:10:e9:5a:05:f2:a8:ce:
c1:66:2f:dc:f2:88:87:22:51:60:9d:90:e5:c4:cf:
e4:ed:0d:ca:82:30:c8:67:b2:04:2b:ac:be:b9:98:
45:68:7c:72:42:ce:49:75:da:af:c1:f3:09:57:71:
10:17:69:f8:05:09:29:55:83:72:29:a7:2a:49:6f:
fe:f7:5b:7e:b2:73:31:7b:2e:90:96:6b:81:70:8b:
7c:a6:23:42:78:f7:42:c5:ab:50:42:10:8e:6a:ed:
57:c0:12:39:02:d7:33:b5:c3:df:f7:5d:ea:52:e6:
86:8a:a0:e0:ec:7c:49:ed:cb:79:75:be:98:f4:03:
91:2d:dc:47:29:4c:ca:d8:02:ca:17:6b:cd:92:da:
7a:56:10:4c:fb:52:d1:dd:78:00:da:07:47:26:2f:
4e:b5:c5:74:e3:c3:cf:ea:9a:7b:f2:34:82:7f:33:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:C6:34:6E:D0:27:6A:96:C5:C6:1D:E0:FD:5A:A8:E9:3D:48:14
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xzjGNG7QJ2qWxcYd4P1aqOk9SBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
185.232.169.0/24
185.233.83.0/24
185.233.200.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
12:b2:3b:45:2b:39:e6:0a:d9:ed:ea:4c:1b:05:0a:56:53:b6:
9a:3a:ce:1a:e1:45:3e:33:7a:64:55:03:2d:c6:61:f9:97:9e:
e7:64:27:3b:2f:b6:1e:bc:1f:0e:c8:1e:2e:0c:75:8f:0a:01:
96:53:22:b8:5b:f1:1a:29:eb:1f:09:5d:81:ac:d8:6a:d6:0c:
11:c7:4a:48:2f:24:2f:c8:3a:84:9c:80:4a:9c:93:89:1a:0c:
14:03:61:1a:73:8b:77:ff:1a:04:a8:50:95:81:39:c1:84:62:
fd:f1:1f:14:78:e7:a8:b2:be:09:b3:71:a3:3c:a0:17:76:60:
0a:94:ee:ed:de:0d:54:8b:d6:ea:36:e8:e3:da:0c:32:14:d8:
65:2b:b7:32:40:04:3f:5d:ac:7e:8e:e4:29:44:69:d3:5d:92:
e4:a8:1d:53:26:af:67:ff:42:9b:01:c8:64:bf:14:36:9b:0b:
5c:97:b0:4c:75:5f:93:d3:45:e3:15:91:e8:14:fc:a2:dd:89:
05:67:f5:d5:4e:d5:1d:1f:98:48:71:46:fc:6b:7f:77:56:c1:
08:63:88:fd:2c:36:c8:4d:9d:61:94:86:c9:6a:01:bf:6c:a4:
5d:e1:20:a4:3c:de:f9:59:8f:5b:cf:08:0e:f1:ec:33:7f:ad:
25:fd:7c:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:39 2025 by rpki-client