Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa
File: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (raw, json)
Hash identifier: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=
Subject key identifier: 6D:0E:FF:1F:39:96:6F:17:B5:6E:9A:AC:9E:61:BC:B7:6C:FD:27:9E
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019661ADEC9F8AC12E15CC42622FA60F9BF6
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa
Signing time: Wed 23 Apr 2025 08:05:10 +0000
ROA not before: Wed 23 Apr 2025 08:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42160
IP address blocks: 81.95.112.0/20 maxlen: 20
81.95.112.0/22 maxlen: 24
81.95.112.0/24 maxlen: 24
81.95.113.0/24 maxlen: 24
81.95.114.0/24 maxlen: 24
81.95.115.0/24 maxlen: 24
81.95.116.0/24 maxlen: 24
81.95.117.0/24 maxlen: 24
81.95.118.0/23 maxlen: 23
81.95.118.0/24 maxlen: 24
81.95.119.0/24 maxlen: 24
81.95.120.0/23 maxlen: 23
81.95.120.0/24 maxlen: 24
81.95.121.0/24 maxlen: 24
81.95.122.0/23 maxlen: 23
81.95.122.0/24 maxlen: 24
81.95.123.0/24 maxlen: 24
81.95.124.0/22 maxlen: 22
81.95.124.0/24 maxlen: 24
81.95.125.0/24 maxlen: 24
81.95.126.0/24 maxlen: 24
81.95.127.0/24 maxlen: 24
185.55.92.0/22 maxlen: 22
185.55.92.0/23 maxlen: 24
185.55.93.0/24 maxlen: 24
185.55.94.0/24 maxlen: 24
185.55.95.0/24 maxlen: 24
193.110.248.0/21 maxlen: 21
193.110.248.0/23 maxlen: 23
193.110.248.0/24 maxlen: 24
193.110.249.0/24 maxlen: 24
193.110.250.0/23 maxlen: 23
193.110.250.0/24 maxlen: 24
193.110.251.0/24 maxlen: 24
193.110.252.0/22 maxlen: 22
193.110.252.0/24 maxlen: 24
193.110.253.0/24 maxlen: 24
193.110.254.0/24 maxlen: 24
193.110.255.0/24 maxlen: 24
2a02:5940::/32 maxlen: 34
2a02:5940::/34 maxlen: 34
2a02:5940:4000::/34 maxlen: 34
2a02:5940:8000::/34 maxlen: 34
2a02:5940:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:ad:ec:9f:8a:c1:2e:15:cc:42:62:2f:a6:0f:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Apr 23 08:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d0eff1f39966f17b56e9aac9e61bcb76cfd279e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:a2:50:06:ed:b2:31:9c:b9:fe:90:fc:1f:
4c:18:f6:91:f0:23:cf:60:a8:b1:59:a7:6e:5e:ec:
c3:97:b5:75:9b:d1:fa:91:47:73:c9:1b:89:d6:90:
e9:5d:99:92:3a:50:3a:01:ca:ec:50:f0:fb:06:ac:
39:63:b8:09:a1:3e:e5:a1:23:6e:7e:10:bb:a0:fb:
3e:6d:41:0b:da:84:c0:e3:ac:7c:cf:61:d0:a1:58:
f0:cb:31:c7:30:5c:f6:e5:80:98:ed:57:f0:36:5f:
94:b0:20:bb:c6:f9:fb:db:6b:94:47:c3:aa:e6:3c:
6b:40:80:dd:96:62:df:16:56:60:90:b1:8f:22:de:
4a:48:ba:8e:4c:63:c8:f3:cb:ff:7b:8d:be:08:4c:
cb:47:af:6c:54:a1:58:e8:92:21:3b:5b:1c:dc:03:
f5:0e:48:cc:bb:b4:54:dc:09:0b:e8:5b:0d:76:6b:
83:cf:2f:68:1e:2c:45:04:12:9f:fe:e4:eb:5a:a6:
42:25:b5:30:06:83:da:29:2a:f8:d6:50:78:22:15:
ca:ad:c1:0c:f0:03:11:ee:e4:1f:12:b3:f8:1e:26:
45:ee:e8:ec:24:ba:05:38:0e:99:68:65:79:07:a2:
32:19:66:81:51:73:22:72:b1:44:6e:50:82:7d:a8:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0E:FF:1F:39:96:6F:17:B5:6E:9A:AC:9E:61:BC:B7:6C:FD:27:9E
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.112.0/20
185.55.92.0/22
193.110.248.0/21
IPv6:
2a02:5940::/32
Signature Algorithm: sha256WithRSAEncryption
60:f8:91:e0:40:fd:65:03:5d:92:22:8c:a7:25:22:e9:ca:1f:
98:83:9a:e4:14:be:90:86:a7:fe:1a:9c:bc:b3:41:2e:27:57:
56:3f:8c:3c:cf:49:f6:ca:f9:41:71:cb:9a:09:6d:9d:62:95:
e6:9c:aa:2b:10:09:38:89:86:82:c4:de:18:f7:15:fe:c5:bc:
3c:2e:bf:f6:5a:26:c5:b2:19:60:84:a1:f3:5b:29:a1:dc:d0:
d6:f5:d6:d9:8b:e3:40:3b:a0:c0:90:65:e0:27:ed:d9:86:68:
a8:e7:24:f3:76:fd:94:26:43:8f:35:b2:c7:5b:47:e2:15:8a:
78:3a:ab:ae:27:e3:2b:1f:60:3f:85:b8:38:01:e7:47:89:97:
d5:ae:6b:cf:75:d1:41:df:d7:93:1b:83:88:b8:5f:4a:6f:64:
28:15:3c:51:e2:2d:b9:b6:49:4f:c8:65:65:9e:b6:e6:e0:4f:
ff:d4:62:af:c4:3c:2d:2a:17:7b:8b:08:05:91:8d:b1:6f:00:
98:64:cc:f0:8c:70:85:c9:89:1b:58:53:bb:48:a2:06:64:89:
32:0f:94:33:32:f1:c1:11:5c:73:a8:af:d2:1d:db:da:13:15:
ee:b0:90:e2:53:85:51:78:86:86:1a:f9:e5:e0:a4:d6:27:2d:
91:ec:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:19:14 2025 by rpki-client