Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/L-AWJ4nIztFSgG66bUsPdBmarDA.roa
File: L-AWJ4nIztFSgG66bUsPdBmarDA.roa (raw, json)
Hash identifier: Jz5CZKRVQCw+134+FFFDl9gJVDsq6GauK572upLA91U=
Subject key identifier: 2F:E0:16:27:89:C8:CE:D1:52:80:6E:BA:6D:4B:0F:74:19:9A:AC:30
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0196890CF7B93B581AAFC29BD9E7ACDA4ED1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/L-AWJ4nIztFSgG66bUsPdBmarDA.roa
Signing time: Wed 30 Apr 2025 23:34:10 +0000
ROA not before: Wed 30 Apr 2025 23:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
2a11:840:73::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:0c:f7:b9:3b:58:1a:af:c2:9b:d9:e7:ac:da:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Apr 30 23:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe0162789c8ced152806eba6d4b0f74199aac30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:65:d5:b2:fd:c3:c3:b7:4c:1c:be:1e:c8:
cf:f1:30:8b:7e:94:2b:d8:cf:c7:3b:4c:2d:22:7f:
ed:f9:e1:c8:8a:d6:8d:bf:3a:31:90:ee:eb:62:79:
be:ee:ac:13:5f:51:31:34:20:50:7a:41:0e:64:12:
67:8e:a7:64:d2:ae:66:37:27:51:20:3e:d3:39:89:
88:39:09:df:f7:85:a6:92:c7:73:f4:04:66:bd:48:
be:4a:eb:f6:3a:ea:26:81:0f:75:67:dc:e9:8f:e3:
d1:9c:56:15:f6:dc:95:5b:18:63:11:27:74:a4:f1:
e5:36:ac:47:bd:c4:17:c5:83:7f:ae:d0:8d:68:ce:
b5:db:3e:66:ec:32:84:5e:55:d8:32:e7:59:8e:42:
f4:26:d3:8b:66:1f:08:2e:f1:7c:69:b7:fd:44:8d:
61:51:6a:bb:fa:1f:ff:82:77:46:17:6b:07:96:4c:
04:73:cc:91:70:ad:4b:50:d8:bd:4b:34:3b:94:23:
34:bd:b7:3f:6c:c0:27:b1:76:d5:59:dd:7f:dd:c2:
03:80:cb:3f:b7:30:5f:a9:9e:08:26:31:7e:76:58:
8b:6d:4b:67:6d:d2:3c:c4:e9:d7:f1:7c:82:f4:69:
15:a0:39:ac:99:43:b8:cf:ca:d5:1e:d4:00:d2:53:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:16:27:89:C8:CE:D1:52:80:6E:BA:6D:4B:0F:74:19:9A:AC:30
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/L-AWJ4nIztFSgG66bUsPdBmarDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::/48
2a11:840:5::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::/46
Signature Algorithm: sha256WithRSAEncryption
2d:93:20:0e:c6:69:14:f2:81:62:22:e5:d3:51:70:af:c2:09:
73:b2:00:61:76:22:46:9b:40:03:1d:f5:63:da:35:22:f7:33:
e7:f5:2e:fb:e5:33:06:4b:5d:09:8b:1c:ff:f8:c3:7a:df:71:
cb:40:ff:d1:38:e2:67:93:51:5a:94:b0:fb:6b:c6:6a:fa:2e:
e1:7a:62:14:ab:14:7f:c2:3b:44:13:63:92:57:f5:a0:1f:0b:
cc:62:88:ab:5a:e7:a4:d5:c1:be:2f:8f:5e:c7:9c:21:aa:c1:
5d:f9:b2:b7:f0:57:02:24:c9:ec:f4:4f:23:3d:3e:83:be:f5:
ce:66:a2:9f:34:ed:4f:07:de:00:4e:de:57:22:e5:5e:ef:c8:
3f:9f:d1:73:30:11:81:af:37:f9:cf:65:3b:d3:15:ea:68:a4:
f1:2b:b2:b6:fd:8e:01:78:7a:19:06:8b:2d:b2:98:7d:15:8f:
38:d1:c8:b4:04:66:36:65:03:e7:da:6f:4c:fa:93:2b:72:ee:
b6:33:03:1f:15:de:c4:70:1e:7d:bd:30:ee:a6:24:40:04:57:
53:11:1f:37:4f:37:ab:4e:a8:f0:6d:e7:6a:9f:65:98:00:e9:
4b:69:0f:ac:7e:ac:d2:96:ae:cc:5f:fe:d3:b7:f1:0c:ad:5a:
a9:05:22:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 7 15:43:09 2025 by rpki-client