Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/KfRiG75Zh2R61TN_EiWqTHilwGw.roa
File: KfRiG75Zh2R61TN_EiWqTHilwGw.roa (raw, json)
Hash identifier: gxYuIp9SWq+RPkQf6rEJ0hDaifl2E9IqGvk00j77Wec=
Subject key identifier: 29:F4:62:1B:BE:59:87:64:7A:D5:33:7F:12:25:AA:4C:78:A5:C0:6C
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0194B65059AFD9F4A215A46FA13D93E6C1C2
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/KfRiG75Zh2R61TN_EiWqTHilwGw.roa
Signing time: Thu 30 Jan 2025 08:25:06 +0000
ROA not before: Thu 30 Jan 2025 08:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48287
IP address blocks: 31.177.64.0/22 maxlen: 24
31.177.68.0/22 maxlen: 22
31.177.72.0/21 maxlen: 24
31.177.80.0/21 maxlen: 24
31.177.88.0/21 maxlen: 22
31.177.91.0/24 maxlen: 24
31.177.92.0/24 maxlen: 24
89.104.80.0/21 maxlen: 24
89.111.128.0/24 maxlen: 24
89.111.130.0/24 maxlen: 24
89.111.132.0/23 maxlen: 23
89.111.144.0/22 maxlen: 24
89.111.164.0/24 maxlen: 24
91.189.112.0/21 maxlen: 21
91.189.114.0/23 maxlen: 23
91.189.116.0/22 maxlen: 22
91.217.20.0/24 maxlen: 24
91.217.21.0/24 maxlen: 24
109.70.24.0/21 maxlen: 24
178.210.64.0/19 maxlen: 24
185.26.112.0/22 maxlen: 22
185.76.144.0/22 maxlen: 22
195.24.64.0/22 maxlen: 22
195.24.68.0/22 maxlen: 22
195.24.68.0/23 maxlen: 23
195.24.70.0/24 maxlen: 24
195.24.71.0/24 maxlen: 24
2a02:2090::/48 maxlen: 48
2a02:2090:1::/48 maxlen: 48
2a02:2090:e400::/48 maxlen: 48
2a02:2090:e800::/48 maxlen: 48
2a02:2090:ec00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:50:59:af:d9:f4:a2:15:a4:6f:a1:3d:93:e6:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 30 08:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29f4621bbe5987647ad5337f1225aa4c78a5c06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:86:92:b8:c7:08:3a:3e:ac:8a:3f:41:43:
f5:af:8c:8b:45:9a:8f:5d:c6:4b:09:ff:63:98:1e:
db:e7:85:54:90:86:56:96:f7:ef:a8:4d:e0:33:a9:
8a:d0:4e:1c:7c:64:e1:e0:57:7f:38:12:aa:63:4b:
ed:e1:16:d8:fb:6f:cf:47:e7:83:21:de:0e:c6:4a:
48:65:1f:28:77:07:9e:b7:84:77:9f:e8:5f:9a:76:
bd:20:eb:99:2e:fb:18:e6:78:88:7d:78:16:4d:0f:
5e:30:9f:ee:28:71:8d:3c:69:d4:2e:be:bd:b4:62:
34:2e:80:37:72:fc:76:36:19:60:58:25:4b:35:af:
dd:54:60:5d:d1:37:44:7e:14:36:a4:d4:0f:71:d0:
a2:45:2c:e2:44:ea:ad:f3:b0:8e:f4:93:75:ad:97:
13:e4:89:b2:d1:4e:0c:f1:06:5f:4f:d0:b9:4d:ee:
ad:ed:81:9f:ea:33:c2:be:9e:b3:ad:e3:b9:32:11:
cc:35:53:8e:6a:53:e3:1a:7e:20:66:db:1a:fb:30:
c2:f0:8b:cc:24:37:25:2b:bc:43:d3:1a:de:71:e1:
de:44:6e:ac:9e:b2:15:bf:c2:e5:95:0f:ea:b4:e5:
a9:a6:54:90:9d:de:a0:b7:94:b1:7b:08:06:88:df:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F4:62:1B:BE:59:87:64:7A:D5:33:7F:12:25:AA:4C:78:A5:C0:6C
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/KfRiG75Zh2R61TN_EiWqTHilwGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.64.0/19
89.104.80.0/21
89.111.128.0/24
89.111.130.0/24
89.111.132.0/23
89.111.144.0/22
89.111.164.0/24
91.189.112.0/21
91.217.20.0/23
109.70.24.0/21
178.210.64.0/19
185.26.112.0/22
185.76.144.0/22
195.24.64.0/21
IPv6:
2a02:2090::/47
2a02:2090:e400::/48
2a02:2090:e800::/48
2a02:2090:ec00::/48
Signature Algorithm: sha256WithRSAEncryption
2d:29:34:b7:17:86:42:1c:7f:7b:ce:85:83:bf:02:92:88:b7:
af:d7:11:de:8d:39:ff:44:69:39:be:80:76:d2:95:3c:f6:b9:
f2:65:ab:6d:45:e3:3e:a6:9f:a1:92:67:60:b8:74:83:d9:7a:
07:d4:1d:08:53:cf:e3:36:a7:1b:e6:3c:26:7e:4e:85:69:7c:
b1:45:0e:c6:aa:66:14:71:40:1e:5d:75:95:30:91:6a:81:9f:
41:5c:ed:a0:f9:c0:7a:35:70:5d:3a:57:6e:c2:25:26:3a:ea:
8c:5c:81:5f:c5:61:0d:1c:94:82:5e:11:77:dd:3f:3d:90:8e:
21:f9:86:35:5b:ab:b5:be:70:e7:5e:34:af:ed:c4:32:b9:4a:
05:dd:20:de:32:99:eb:1b:34:c8:ae:3c:58:b3:da:6e:f2:be:
b9:20:d7:38:21:31:e6:8c:56:28:2d:53:11:37:01:a3:68:6d:
cb:e2:8b:ce:f4:bd:63:79:8f:e2:72:a8:0b:a7:f4:d3:de:75:
a4:e2:b8:ed:2f:e8:5a:fb:11:e8:b7:47:38:6f:30:26:a5:35:
c8:b4:1a:a1:91:a8:a4:aa:20:a2:ff:95:da:98:5a:23:9f:36:
a1:e2:33:e8:6d:28:1a:39:35:6f:43:ea:28:0e:ee:aa:f0:43:
2c:83:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:33 2025 by rpki-client