Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LMp18zgEy6KnZXThglOs3qq0wKA.roa
File: LMp18zgEy6KnZXThglOs3qq0wKA.roa (raw, json)
Hash identifier: /k6IyVBCf+dvwCDdGFoqeJUE20r23RXSx3FDUbFch1c=
Subject key identifier: 2C:CA:75:F3:38:04:CB:A2:A7:65:74:E1:82:53:AC:DE:AA:B4:C0:A0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0196A9DA2F0CAB39DF4DC51F8FC260D2443A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LMp18zgEy6KnZXThglOs3qq0wKA.roa
Signing time: Wed 07 May 2025 08:26:10 +0000
ROA not before: Wed 07 May 2025 08:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 45.9.72.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
91.217.76.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
94.142.136.0/23 maxlen: 23
94.142.136.0/24 maxlen: 24
94.142.137.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
95.214.10.0/23 maxlen: 23
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
185.94.164.0/24 maxlen: 24
185.94.165.0/24 maxlen: 24
185.102.136.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.252.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.103.254.0/23 maxlen: 23
185.103.254.0/24 maxlen: 24
185.103.255.0/24 maxlen: 24
185.114.72.0/23 maxlen: 23
185.114.72.0/24 maxlen: 24
185.114.73.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.232.170.0/23 maxlen: 23
185.233.80.0/23 maxlen: 23
185.233.82.0/24 maxlen: 24
185.233.202.0/23 maxlen: 23
185.252.144.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.188.0/23 maxlen: 23
193.124.190.0/24 maxlen: 24
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
194.36.178.0/23 maxlen: 23
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
2a04:5201:4::/48 maxlen: 48
2a04:5201:6::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:9::/48 maxlen: 48
2a04:5201:10::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
2a0d:8341::/32 maxlen: 32
2a0d:8342::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:da:2f:0c:ab:39:df:4d:c5:1f:8f:c2:60:d2:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 7 08:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cca75f33804cba2a76574e18253acdeaab4c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1d:0a:3a:05:7c:91:77:30:49:bf:d6:89:7b:
76:e1:32:a7:17:b4:7a:5b:3f:c3:ff:83:18:5b:37:
34:65:88:59:77:06:5d:0b:e9:6e:a1:86:a1:fe:33:
fa:45:e2:6d:ab:1c:c7:e6:d9:40:a5:b3:6a:f7:77:
9b:82:30:4b:b1:3a:64:6b:fb:4b:b1:12:30:e2:00:
be:90:08:4c:63:b7:49:db:7b:15:23:ba:39:58:b3:
53:ed:5f:9a:f9:03:7e:2b:11:58:9a:fd:0e:7f:c9:
4d:50:2c:fc:19:59:1b:58:42:a5:c8:43:7f:a3:02:
11:d8:ae:24:6a:58:68:2f:b5:53:a1:4c:69:7c:2e:
73:f3:fd:b3:fd:3b:30:24:15:d9:07:e6:c2:b5:69:
b2:bd:8f:78:a3:9c:4c:ca:a2:00:1f:af:59:c7:9d:
d8:3c:fe:c6:7d:50:a4:41:49:48:95:63:3c:a4:e8:
a8:6c:8e:28:c3:50:d8:a4:dc:05:2b:fa:36:0e:fc:
f0:d3:75:d0:71:80:7f:52:43:98:36:11:9b:8d:ee:
c0:58:f4:e4:eb:f4:b7:2a:5e:84:4e:af:72:63:e1:
dc:7e:1d:d5:39:ac:d7:2f:4f:b1:57:62:ce:d7:9a:
72:51:f6:9b:0e:2c:37:19:d8:0d:e8:98:a5:4a:01:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:75:F3:38:04:CB:A2:A7:65:74:E1:82:53:AC:DE:AA:B4:C0:A0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LMp18zgEy6KnZXThglOs3qq0wKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.138.73.0/24
46.17.105.0/24
80.76.32.0/22
91.217.76.0/24
92.118.8.0/23
94.142.136.0/23
95.214.9.0-95.214.11.255
185.40.7.0/24
185.58.204.0/24
185.94.164.0/23
185.102.136.0/24
185.103.252.0/22
185.114.72.0/23
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
185.232.170.0/23
185.233.80.0-185.233.82.255
185.233.202.0/23
185.252.144.0/24
193.124.182.0/23
193.124.188.0-193.124.190.255
193.239.160.0/23
193.239.166.0/23
194.36.178.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:9::/48
2a04:5201:10::/48
2a04:5201:8018::/48
2a0d:8341::-2a0d:8342:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:32:ae:f2:e4:cc:75:e8:a4:8a:c0:a4:b6:8d:bf:36:62:19:
e8:e9:af:2f:eb:ee:bc:d4:00:f7:6b:ad:6c:e4:6a:83:14:28:
26:0c:bd:b3:7e:e2:ac:16:a8:39:97:87:ce:92:3d:b6:30:d4:
3e:db:1c:d0:fb:82:30:f8:99:88:87:ba:24:55:2a:d5:49:dc:
46:bb:8e:c3:d6:70:dc:c7:68:fa:3a:30:9f:7a:27:aa:9f:6f:
3b:1e:ef:2b:9a:39:ab:5b:bc:db:18:dd:92:83:fd:7d:4d:5f:
dc:84:4d:78:71:e1:c3:f3:a5:04:8f:5e:b0:60:cd:00:e6:df:
d1:3a:db:1f:c4:99:40:f2:16:ef:b5:5c:d0:76:d9:0b:20:30:
9d:79:50:d2:3a:da:b8:81:39:11:88:8a:f4:01:34:28:c7:80:
6f:90:d3:ab:c6:d5:a4:24:0d:7f:7a:e3:60:d8:3d:7c:50:2f:
89:3a:3f:b1:23:a2:33:3d:79:de:62:d4:d3:67:75:96:57:ce:
71:55:8e:9c:d2:d5:f5:a6:51:f9:35:42:c6:b2:cc:0e:01:42:
16:7a:96:92:9a:fc:31:d0:28:0d:b3:28:07:cc:2d:ec:20:fa:
ce:57:7e:b5:b7:56:33:61:b4:0d:2c:77:99:ef:85:66:c6:72:
79:fd:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:02:43 2025 by rpki-client