Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JBbPtIiRXI1rn9o3JvGDVCwF8EU.roa
File: JBbPtIiRXI1rn9o3JvGDVCwF8EU.roa (raw, json)
Hash identifier: SlBBUTDJUBy4NoFs0z4c9H/Oj0wu1jlGte0UlFe8QmA=
Subject key identifier: 24:16:CF:B4:88:91:5C:8D:6B:9F:DA:37:26:F1:83:54:2C:05:F0:45
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019677A602F409E575586A5623352E8400D7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JBbPtIiRXI1rn9o3JvGDVCwF8EU.roa
Signing time: Sun 27 Apr 2025 14:28:10 +0000
ROA not before: Sun 27 Apr 2025 14:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.132.255.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
185.232.169.0/24 maxlen: 24
185.233.83.0/24 maxlen: 24
185.233.200.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:a6:02:f4:09:e5:75:58:6a:56:23:35:2e:84:00:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 27 14:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2416cfb488915c8d6b9fda3726f183542c05f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:da:e0:24:1a:3e:25:2d:cc:96:94:4c:ca:
77:4e:bb:54:a0:6b:87:69:f9:e5:77:10:ba:e3:7b:
db:17:65:22:ef:dc:ea:47:08:5a:3f:f3:15:9f:05:
7e:7b:06:c8:8e:d1:b8:70:8c:88:c7:f7:b8:31:d1:
6f:b6:b7:5f:bf:d0:64:12:cc:16:1f:50:24:79:d8:
db:20:f5:d4:0e:18:9c:a7:0f:cd:f2:df:77:16:47:
83:42:c7:2b:05:25:bd:6c:64:d7:f2:6a:72:da:89:
c3:35:0c:0a:71:df:ad:61:4c:52:11:f7:3e:0c:32:
37:21:a7:7e:f5:06:c4:dc:4a:90:b4:50:cd:99:44:
61:04:99:f9:72:b2:96:db:ce:6d:63:d5:ca:00:d6:
26:0d:e8:38:44:99:80:8a:5e:6c:92:20:06:e5:99:
a1:c6:86:27:0b:3a:90:75:57:fe:dd:2e:e4:79:dd:
ba:6f:3a:20:db:5f:09:1e:a0:58:c1:77:7a:90:49:
45:7d:9d:ea:e9:5f:d0:cb:26:79:75:07:b9:99:16:
91:9a:21:fd:f4:29:e4:53:4f:60:55:8e:e7:1f:84:
84:69:2e:46:9c:d9:3a:a9:2d:6d:f4:04:59:2e:5c:
d5:ea:fd:21:d9:3b:9f:2a:7e:fc:6d:3f:1c:af:ee:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:CF:B4:88:91:5C:8D:6B:9F:DA:37:26:F1:83:54:2C:05:F0:45
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JBbPtIiRXI1rn9o3JvGDVCwF8EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
45.132.255.0/24
84.252.73.0-84.252.75.255
85.209.2.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
185.232.169.0/24
185.233.83.0/24
185.233.200.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
82:a7:46:0c:be:96:02:63:3e:d7:48:3c:d5:3b:2a:30:e8:68:
69:9d:47:54:ce:ce:a9:a3:80:de:2f:6f:11:2b:55:6a:27:a9:
8a:13:a1:dd:48:f6:13:8e:e3:f6:ba:97:9b:8d:e5:e0:6c:8f:
cb:59:56:6e:1e:b8:02:6f:5d:84:37:76:1e:26:52:d4:41:67:
6d:8a:e4:f5:6a:10:10:a8:ac:f5:68:87:fa:26:64:50:bd:a1:
8c:04:f1:1c:05:70:ff:e7:34:9c:f3:89:a1:4d:49:31:13:64:
f6:2f:ce:81:9d:07:98:ef:b0:02:39:96:0e:84:ea:8d:2a:f9:
67:0a:9c:5e:47:90:4c:4c:4f:6a:a3:58:6f:2f:95:c4:48:dd:
8d:ed:13:5e:ef:14:92:9b:51:e5:a3:ab:56:b4:5c:ef:61:75:
99:b9:72:25:63:2a:7c:22:f4:84:60:45:3a:fc:a0:ea:90:79:
a0:80:fa:35:bf:43:17:5e:11:d4:7e:80:99:67:95:ef:68:f8:
f2:22:e5:47:26:91:1c:b1:81:f1:c0:d9:ae:9a:1d:41:57:91:
a1:ab:ce:f5:60:8e:1e:89:3d:ee:25:cb:07:97:74:f5:d8:48:
f6:71:b5:c4:ad:f5:6b:0b:5c:8c:0d:86:ef:24:49:fd:27:24:
fc:02:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:28:32 2025 by rpki-client