Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mzknVHY04SbVvkzSjTvkOKHusbU.roa
File: mzknVHY04SbVvkzSjTvkOKHusbU.roa (raw, json)
Hash identifier: wPUzeq3u9NQSOHmVS65zBorq/5N5aKuEt5s4b825RM4=
Subject key identifier: 9B:39:27:54:76:34:E1:26:D5:BE:4C:D2:8D:3B:E4:38:A1:EE:B1:B5
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B957D54A3689F8C6782C56A1DECED
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mzknVHY04SbVvkzSjTvkOKHusbU.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199738
IP address blocks: 5.154.56.0/22 maxlen: 22
5.154.56.0/24 maxlen: 24
5.154.57.0/24 maxlen: 24
5.154.58.0/24 maxlen: 24
5.154.59.0/24 maxlen: 24
84.232.55.0/24 maxlen: 24
93.114.252.0/23 maxlen: 23
93.114.252.0/24 maxlen: 24
93.114.253.0/24 maxlen: 24
109.167.58.0/23 maxlen: 23
109.167.58.0/24 maxlen: 24
109.167.59.0/24 maxlen: 24
109.167.64.0/23 maxlen: 23
109.167.64.0/24 maxlen: 24
109.167.65.0/24 maxlen: 24
109.167.92.0/23 maxlen: 23
109.167.92.0/24 maxlen: 24
109.167.93.0/24 maxlen: 24
176.227.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:95:7d:54:a3:68:9f:8c:67:82:c5:6a:1d:ec:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b3927547634e126d5be4cd28d3be438a1eeb1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:c4:80:f0:b0:b6:49:80:f7:92:05:c9:ca:
41:81:b7:e1:3e:44:1e:af:b4:0d:83:b1:6f:bd:98:
93:2b:29:fc:d7:af:04:81:45:a1:2b:31:24:50:f0:
f6:08:c7:b7:18:00:5a:3d:ff:88:4c:e0:7c:6d:de:
32:eb:99:4e:2f:db:b0:7b:d3:f6:6d:5f:40:01:81:
8b:a2:76:8d:7e:c8:e4:57:96:00:47:3e:b0:0c:86:
4b:fb:e4:01:bd:71:11:e1:04:5e:da:74:5e:63:4a:
cc:c6:3f:f9:b1:a7:86:eb:7a:53:fd:ce:67:ab:2f:
f6:81:fb:11:50:f5:ea:50:5d:6f:5f:d7:a5:cb:25:
5d:57:c8:32:2a:5d:4c:56:fc:36:66:85:24:80:a0:
3e:4e:6b:5a:18:38:1a:9b:73:90:92:14:77:34:6f:
56:8f:3c:ee:a5:56:36:e6:de:3e:4b:0d:c8:c5:01:
63:d7:bc:27:af:69:9f:66:76:cd:26:b5:58:b3:46:
bd:92:08:de:5c:7e:29:a0:0f:04:91:c8:af:92:f6:
6f:21:3f:9e:8e:32:12:31:3a:8f:84:02:4a:fa:fe:
23:03:e1:5d:16:c7:58:fd:b6:62:c5:58:53:29:f8:
c9:df:22:ec:dc:82:5b:2b:c0:97:98:ff:1c:b5:dd:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:27:54:76:34:E1:26:D5:BE:4C:D2:8D:3B:E4:38:A1:EE:B1:B5
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/mzknVHY04SbVvkzSjTvkOKHusbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.56.0/22
84.232.55.0/24
93.114.252.0/23
109.167.58.0/23
109.167.64.0/23
109.167.92.0/23
176.227.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2c:26:45:60:79:91:9a:4f:5d:47:ab:16:f3:2f:f6:78:6f:
6c:8a:c2:2e:7f:1a:05:9b:81:33:6e:3c:08:87:89:72:02:c5:
74:1d:a2:cb:45:f5:88:38:d6:73:4f:d8:b8:25:ad:d7:59:43:
ce:08:e6:fb:60:14:13:72:8e:ab:c5:99:a6:9d:a8:91:a0:17:
39:24:a0:ef:ed:34:f6:96:6a:ba:9e:7b:f1:d0:57:96:35:4b:
04:d8:96:a5:49:3b:7d:ae:22:64:61:ef:5c:86:8e:99:c1:12:
22:83:9a:3c:74:88:2b:ee:43:c1:6a:72:4c:3e:48:0b:9d:a1:
bb:4a:51:d8:d4:75:fd:4c:e9:13:86:1c:20:9a:cd:11:53:6f:
77:3a:4f:d3:56:ce:17:43:fc:a2:bd:44:da:e1:ec:43:ac:e6:
52:43:22:94:7b:09:ff:74:35:ca:ad:f3:19:c4:fa:f7:6b:d3:
bb:5f:ed:d1:23:21:b9:c6:ba:89:e6:28:a8:53:c6:82:38:70:
3e:fe:62:55:30:ad:26:00:1c:8d:f5:f0:a7:54:e5:61:77:e9:
0c:c2:fa:55:75:8f:9e:ae:a3:3c:95:f8:5f:eb:8f:18:96:db:
0b:f8:5d:d1:0d:4f:59:bb:8b:22:76:15:02:80:f8:53:40:19:
1c:c5:57:a2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQma5V9VKNon4xngsVqHeztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjM5Mjc1NDc2MzRlMTI2ZDViZTRjZDI4ZDNiZTQzOGExZWViMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsPEgPCwtkmA95IFycpBgbfhPkQe
r7QNg7FvvZiTKyn8168EgUWhKzEkUPD2CMe3GABaPf+ITOB8bd4y65lOL9uwe9P2
bV9AAYGLonaNfsjkV5YARz6wDIZL++QBvXER4QRe2nReY0rMxj/5saeG63pT/c5n
qy/2gfsRUPXqUF1vX9elyyVdV8gyKl1MVvw2ZoUkgKA+TmtaGDgam3OQkhR3NG9W
jzzupVY25t4+Sw3IxQFj17wnr2mfZnbNJrVYs0a9kgjeXH4poA8EkcivkvZvIT+e
jjISMTqPhAJK+v4jA+FdFsdY/bZixVhTKfjJ3yLs3IJbK8CXmP8ctd2wKQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJs5J1R2NOEm1b5M0o075Dih7rG1MB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvbXprblZIWTA0U2JWdmt6U2pUdmtPS0h1c2JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCBZo4AwQA
VOg3AwQBXXL8AwQBbac6AwQBbadAAwQBbadcAwQAsOOSMA0GCSqGSIb3DQEBCwUA
A4IBAQBeLCZFYHmRmk9dR6sW8y/2eG9sisIufxoFm4EzbjwIh4lyAsV0HaLLRfWI
ONZzT9i4Ja3XWUPOCOb7YBQTco6rxZmmnaiRoBc5JKDv7TT2lmq6nnvx0FeWNUsE
2JalSTt9riJkYe9cho6ZwRIig5o8dIgr7kPBanJMPkgLnaG7SlHY1HX9TOkThhwg
ms0RU293Ok/TVs4XQ/yivUTa4exDrOZSQyKUewn/dDXKrfMZxPr3a9O7X+3RIyG5
xrqJ5iioU8aCOHA+/mJVMK0mAByN9fCnVOVhd+kMwvpVdY+erqM8lfhf648YltsL
+F3RDU9Zu4sidhUCgPhTQBkcxVei
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:36:26 2025 by rpki-client