Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiNhtTQlh1mTiOa8Xs1GE2qvpqo.roa
File: kiNhtTQlh1mTiOa8Xs1GE2qvpqo.roa (raw, json)
Hash identifier: gy1Lz2JL2Qs538X6ihc4AuUOx6g+sRw/Y57TnXyafj8=
Subject key identifier: 92:23:61:B5:34:25:87:59:93:88:E6:BC:5E:CD:46:13:6A:AF:A6:AA
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01942522021DD55B91F7D791D882A2165FD0
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiNhtTQlh1mTiOa8Xs1GE2qvpqo.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.204.222.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a01:4740::/32 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:02:1d:d5:5b:91:f7:d7:91:d8:82:a2:16:5f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=922361b5342587599388e6bc5ecd46136aafa6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:40:48:99:d5:8a:1a:b2:7d:f2:e2:13:c2:
cb:fd:76:06:99:b1:06:c2:50:35:75:a5:57:41:68:
93:08:37:7b:1f:f1:2b:00:06:85:eb:b8:c6:69:b4:
01:02:e2:c4:af:12:35:a6:ee:bd:c9:67:8c:ac:8d:
87:48:60:83:a1:18:9e:4b:b3:4b:5f:38:50:11:56:
f9:ed:ed:ec:d0:da:73:81:66:fa:3f:42:9a:8e:1f:
d6:79:9c:17:b5:04:4a:b6:a9:ce:75:a1:fa:94:37:
75:b9:02:ca:de:d6:5a:11:0c:5c:d2:e8:65:8c:94:
0f:35:3a:d6:99:af:6e:7e:44:37:6e:9e:8f:7d:24:
6e:81:87:4c:bc:df:6e:0e:d2:b8:5b:21:b6:79:79:
63:12:f1:18:29:aa:3e:bd:ca:87:4b:14:da:6d:b4:
fe:5b:47:4a:4d:ea:db:75:c4:1d:9c:df:af:af:a3:
b9:d6:4e:05:cc:2f:61:78:96:2f:b6:4a:ec:1f:5a:
58:31:1d:6d:55:ad:67:7f:61:ad:c7:5a:8e:8b:b1:
31:b8:b3:c7:08:b7:b0:ee:cf:a0:5e:e6:2f:11:7b:
4d:07:4d:f9:d8:09:ac:bd:81:e1:79:a9:bf:ce:b6:
84:58:23:46:7c:de:61:03:ba:2e:a9:ce:78:ef:aa:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:61:B5:34:25:87:59:93:88:E6:BC:5E:CD:46:13:6A:AF:A6:AA
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiNhtTQlh1mTiOa8Xs1GE2qvpqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.204.222.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
a1:3a:fa:6d:e7:b9:5b:9b:ae:b9:77:6a:31:cc:c6:fc:44:ff:
58:47:d7:62:b1:41:d0:f2:7e:ec:35:c2:2b:a8:8d:e6:29:a4:
6f:c9:80:7e:82:34:e1:76:e1:11:4b:31:d5:89:6d:d2:df:8e:
70:3e:ff:e3:73:e5:17:ed:66:f9:da:1b:f6:48:e0:3d:1f:45:
dc:03:86:7f:f9:6e:89:7f:36:2b:53:1a:a8:b5:1c:95:c6:50:
92:f7:8f:52:08:b8:4f:c7:00:cc:ee:ae:5a:6c:08:a4:f9:c0:
72:71:23:6d:67:74:8a:ed:df:08:0b:0a:b7:fb:66:c3:d8:e4:
50:8c:41:0d:3f:8e:5d:cb:d3:ae:cb:a0:61:53:03:2c:f5:8d:
bf:23:27:cc:47:5c:7b:e8:5c:33:fd:f1:1d:5e:bb:cb:22:58:
80:49:a7:bd:36:32:e1:d3:94:df:bb:ac:95:d1:d6:1d:00:1c:
f3:5e:b1:1e:4d:47:39:09:24:b5:29:9f:bd:b0:a2:e3:e8:23:
07:16:7a:59:9a:25:0a:ef:cd:fc:83:44:f5:5a:ee:15:4f:69:
51:67:80:0d:72:7c:2d:52:3c:d4:a8:d0:00:6a:a1:4f:84:c0:
ca:02:0a:a4:17:8a:e2:8d:ad:81:df:b1:83:fe:62:d4:b3:ec:
60:b1:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:08 2025 by rpki-client