Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/gFDYu-uhEM1jBAo3hw85Wh4IxBw.roa
File: gFDYu-uhEM1jBAo3hw85Wh4IxBw.roa (raw, json)
Hash identifier: 7u75Gy2BAJ4DBJsB/vM91L7VubiXctkI6OGQbCkbAws=
Subject key identifier: 80:50:D8:BB:EB:A1:10:CD:63:04:0A:37:87:0F:39:5A:1E:08:C4:1C
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01942747F35534BB1F66E9A71B16399845FC
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/gFDYu-uhEM1jBAo3hw85Wh4IxBw.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
45.66.36.0/22 maxlen: 22
45.80.160.0/22 maxlen: 22
45.130.56.0/22 maxlen: 22
45.143.112.0/22 maxlen: 22
45.152.28.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.216.0/22 maxlen: 22
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
195.242.148.0/23 maxlen: 23
195.244.2.0/23 maxlen: 23
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
217.171.100.0/22 maxlen: 22
217.171.104.0/22 maxlen: 22
2a07:5940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f3:55:34:bb:1f:66:e9:a7:1b:16:39:98:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8050d8bbeba110cd63040a37870f395a1e08c41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:2c:c1:89:62:cf:31:bc:13:37:35:53:90:
42:11:fa:be:8b:46:fc:eb:79:6c:7b:5b:85:67:3f:
a7:38:3c:37:81:17:51:e1:44:17:1c:11:8a:ef:c3:
1c:f5:1a:8a:7c:ea:9a:93:e7:98:4e:86:48:ec:73:
d4:ab:b7:81:ac:a3:d8:34:0e:ef:f8:7b:ad:a1:33:
6a:5b:85:ea:23:7b:c7:09:eb:65:64:6a:3e:9e:42:
1c:af:7b:d0:7f:d1:9e:f7:60:1d:de:e3:e3:81:ed:
7f:26:c3:b7:3b:95:39:bb:91:d4:38:74:65:e3:ba:
06:78:30:22:3e:f8:bc:63:02:83:8d:33:c8:bb:63:
40:40:70:4c:cc:52:92:79:91:26:87:ab:40:08:1a:
ef:95:df:64:63:43:62:92:ff:6d:59:30:60:53:e8:
eb:95:58:42:34:f3:e5:fe:b3:90:9d:ee:fd:ca:cd:
dc:eb:a1:39:91:59:33:f2:6d:33:d0:4b:22:f9:5f:
47:4f:37:5e:86:c4:50:cc:3d:3c:83:22:a9:89:b8:
8a:5b:16:30:65:70:c0:a8:b7:9f:a6:40:17:db:27:
22:03:42:c1:e6:92:4b:d4:36:ff:e5:ca:c7:51:c0:
37:c0:82:a8:1a:5e:f8:f0:31:83:63:4d:76:e1:d0:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:D8:BB:EB:A1:10:CD:63:04:0A:37:87:0F:39:5A:1E:08:C4:1C
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/gFDYu-uhEM1jBAo3hw85Wh4IxBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
45.66.36.0/22
45.80.160.0/22
45.130.56.0/22
45.143.112.0/22
45.152.28.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.216.0/22
109.224.224.0/22
109.224.234.0-109.224.241.255
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.184.250.0/23
195.206.172.0/22
195.242.148.0/23
195.244.2.0/23
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
217.171.100.0-217.171.107.255
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
55:2b:f2:b3:c0:5d:00:c8:c8:bd:a5:b3:c1:9f:c4:48:eb:d1:
6b:e3:d9:2d:0e:70:5a:bb:a2:49:f7:a5:4e:2f:a5:f2:03:14:
75:10:1f:a1:86:b3:e4:99:ce:c9:9a:fb:ff:c3:cf:56:35:47:
6a:45:63:00:a8:25:9e:4a:cc:2d:fa:4f:cf:87:a4:59:cb:46:
4d:c4:58:a5:e6:6f:c1:d6:73:18:34:14:b2:87:dd:ee:22:70:
c9:5c:ed:f3:f1:96:29:67:d3:a5:05:38:b7:4e:14:e4:55:ad:
0f:8f:d4:bf:51:8f:c5:ae:e8:0a:8e:b5:9d:e0:00:da:15:a2:
de:97:c4:0f:f7:dd:e4:68:a0:0a:87:16:04:4a:94:5b:b4:3a:
69:77:a4:8f:67:5d:c4:1d:b3:1d:51:eb:82:04:9c:ce:82:89:
7e:a0:ae:63:e2:66:88:b2:42:ef:d6:43:7a:10:de:ee:92:06:
84:92:60:70:d4:41:c0:26:6b:ca:cc:27:c1:1e:c3:a3:d4:ce:
34:b6:28:70:a3:52:22:e0:22:ed:13:88:af:f7:ed:6f:a3:69:
43:7a:81:50:1a:48:14:bc:a7:c5:1b:e9:4d:26:2d:4b:e4:1f:
92:31:39:e0:9d:16:b4:3d:72:05:96:a6:8e:f7:9f:e8:ef:2c:
07:12:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:23 2025 by rpki-client