Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rxIiTGn-D8jbwiMw7pKp3vLm8AM.roa
File: rxIiTGn-D8jbwiMw7pKp3vLm8AM.roa (raw, json)
Hash identifier: +k7v/tWnHXODEKTFRTLX8deE1T5SAORFgPpl6DdzSEk=
Subject key identifier: AF:12:22:4C:69:FE:0F:C8:DB:C2:23:30:EE:92:A9:DE:F2:E6:F0:03
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D28C9AF8D1CD6E33BD484683EFEAF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rxIiTGn-D8jbwiMw7pKp3vLm8AM.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31208
IP address blocks: 37.28.184.0/24 maxlen: 24
37.28.186.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.140.0/24 maxlen: 24
46.229.141.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
83.169.208.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.212.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.178.82.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.178.131.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
2a03:d000:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:28:c9:af:8d:1c:d6:e3:3b:d4:84:68:3e:fe:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af12224c69fe0fc8dbc22330ee92a9def2e6f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:b2:0b:0e:48:4a:08:fb:b0:0b:c0:85:54:
cf:a9:91:31:40:98:a7:de:1d:d3:03:1a:8f:e1:54:
da:bd:14:70:43:3b:97:cd:ff:6b:5f:2c:ee:bb:bd:
71:03:d5:67:b0:cf:6b:65:be:39:bb:22:69:3a:fb:
8e:3a:7a:a7:1d:44:af:97:66:f5:62:f4:fd:d7:41:
8a:45:02:ab:90:92:62:14:46:ed:2f:60:77:4b:32:
ea:dd:c6:79:ca:68:f6:71:26:be:7d:e4:c2:6a:72:
f2:63:2c:26:ce:90:50:03:56:64:bf:5c:88:2b:4d:
48:cd:9f:e1:a3:5b:8f:8e:da:d4:76:66:74:a1:5f:
c0:05:64:b2:45:52:33:23:e5:8b:90:2f:f3:38:da:
6c:b1:1e:ce:87:da:47:29:11:68:9e:d2:a5:0a:12:
2d:5d:cb:01:2f:cc:6f:1a:5a:fb:b0:ca:0d:b9:5a:
8a:b5:4f:ee:85:4a:9e:25:51:c4:41:e8:2f:ed:7a:
ed:78:95:73:32:13:be:e6:be:a7:2c:d3:db:f3:9f:
8e:ff:7c:35:e2:d1:a3:1a:66:cd:72:95:cd:bd:15:
91:aa:dc:13:47:33:9f:b3:2a:40:f0:82:35:2b:44:
f6:e2:d4:bd:e4:d1:a2:3a:cc:b3:c1:34:7f:d3:b7:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:22:4C:69:FE:0F:C8:DB:C2:23:30:EE:92:A9:DE:F2:E6:F0:03
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rxIiTGn-D8jbwiMw7pKp3vLm8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/24
37.28.186.0/24
37.29.72.0/24
37.29.74.0/23
46.229.136.0/21
83.149.40.0/24
83.149.42.0/23
83.169.208.0/24
83.169.211.0-83.169.214.255
178.176.56.0/21
178.178.82.0/24
178.178.128.0-178.178.137.255
178.178.142.0/23
188.170.48.0-188.170.50.255
188.170.52.0/23
188.170.56.0/23
188.170.59.0-188.170.63.255
IPv6:
2a03:d000:3000::/36
Signature Algorithm: sha256WithRSAEncryption
27:4d:36:6e:d2:f4:6d:76:44:f5:75:5c:48:9f:d0:e1:db:4e:
e9:44:2b:c2:dc:68:34:94:fc:7a:74:d5:07:45:24:20:a0:a8:
8e:f2:7b:8d:f0:bf:cb:68:24:bd:4a:20:ce:91:b2:28:96:2c:
ef:b8:6a:b3:9c:aa:e9:74:a5:b8:98:0c:c9:d3:b0:ac:a1:20:
2e:45:06:c7:cd:e3:b2:5f:59:73:79:d7:70:e9:d5:2b:65:d8:
6d:95:fa:03:83:ad:47:e0:21:e3:74:26:59:f1:80:d3:e6:1a:
9b:33:e2:cf:c3:39:a3:e6:f9:2b:f8:70:2e:e8:15:9b:a6:55:
d0:32:72:46:c4:af:6c:28:9d:60:4b:3b:95:d3:f9:70:34:39:
65:fe:b9:9a:72:6d:68:e3:0f:f4:9d:01:e8:b2:c1:cb:c6:6a:
0d:43:f1:52:93:e6:66:61:cf:90:00:dd:e8:47:e9:26:f9:22:
ad:d9:f4:aa:e8:30:2d:1a:6a:10:4f:2e:cf:ed:bb:b1:61:30:
1c:ba:cd:49:5b:6e:d2:cf:28:9b:58:d6:29:8f:f4:e5:68:78:
51:23:07:d4:01:0f:86:fb:b1:6b:db:e6:7b:4c:6e:1d:33:eb:
5e:a6:2e:e7:37:36:ca:86:e2:2f:48:5f:89:43:f6:91:11:4d:
2c:40:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:11 2025 by rpki-client