Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa
File: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (raw, json)
Hash identifier: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=
Subject key identifier: 68:52:04:C3:29:FD:40:CA:DD:67:18:23:B7:6C:5A:47:2D:C7:B8:15
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 019427488AE002F38392934B4AD512902022
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49558
IP address blocks: 45.128.224.0/22 maxlen: 22
91.213.39.0/24 maxlen: 24
91.228.64.0/22 maxlen: 22
194.4.164.0/22 maxlen: 22
195.20.137.0/24 maxlen: 24
2a0d:8540::/29 maxlen: 29
2a0e:4240::/29 maxlen: 29
2a11:500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8a:e0:02:f3:83:92:93:4b:4a:d5:12:90:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685204c329fd40cadd671823b76c5a472dc7b815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:26:3b:ec:d2:a8:0f:18:7e:0f:82:05:f7:
33:c5:1e:95:27:55:7d:da:79:02:92:7a:90:0f:e0:
73:0c:b7:0c:01:b8:c4:28:9f:38:17:64:85:1e:3e:
33:db:de:6c:68:68:88:d4:b8:1a:17:11:3c:e8:4e:
7e:75:21:bb:d8:3b:31:ef:9b:db:30:4e:f3:bd:b0:
29:49:27:61:68:3c:2c:5f:9c:56:1d:6d:51:e7:0b:
41:bd:01:a0:75:b2:ac:81:b7:fc:fb:c2:42:dd:a5:
77:56:4c:be:7d:0c:f9:60:cd:f4:77:d6:9e:12:af:
81:86:e6:d3:3a:20:86:d9:0e:cc:b7:6f:0a:d0:98:
43:2c:21:d9:dd:11:5f:0f:9a:1f:f3:fa:9f:94:d6:
18:ec:60:ac:d2:5b:2a:4d:1e:de:91:6b:c7:bb:19:
37:43:b8:b2:97:0e:b6:71:be:ac:6a:39:2b:93:d3:
7c:d5:43:38:cc:fb:63:6c:02:06:16:94:9c:10:7c:
0b:32:0e:ac:73:5b:cf:6e:f6:f9:f5:bc:1f:5a:91:
a7:e8:14:ba:e2:0c:4a:6a:67:91:c9:53:99:8c:ba:
b8:a8:8c:9c:f9:15:f9:54:11:fa:f9:87:02:0a:81:
6d:b0:cc:20:ad:13:46:95:5b:57:6f:04:e2:38:f2:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:04:C3:29:FD:40:CA:DD:67:18:23:B7:6C:5A:47:2D:C7:B8:15
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.224.0/22
91.213.39.0/24
91.228.64.0/22
194.4.164.0/22
195.20.137.0/24
IPv6:
2a0d:8540::/29
2a0e:4240::/29
2a11:500::/29
Signature Algorithm: sha256WithRSAEncryption
45:69:cb:eb:e5:c8:10:9f:28:6b:99:98:dd:86:fe:24:67:12:
cb:8a:ff:66:8f:61:ba:72:b7:75:fe:0a:a5:11:15:9c:51:06:
bb:b7:ed:78:ad:10:b9:e7:76:c6:25:64:6f:28:b0:27:1f:d0:
d7:7a:8a:c2:4e:45:d1:62:53:7b:3e:8c:6c:93:9d:a9:a4:76:
c1:a1:b4:1b:f6:45:3a:5b:8e:c8:7b:b3:40:af:e0:f2:34:16:
3b:8f:31:ce:d5:3b:14:52:03:ef:64:ac:1d:49:1c:a9:3d:36:
e0:d5:ff:c0:ad:1c:6b:63:a4:19:eb:f1:77:a9:48:37:9d:71:
8b:b1:a0:05:77:1e:0c:ac:cc:d7:55:36:fb:d7:8b:6a:53:eb:
70:5e:a0:0d:b1:f2:c5:04:03:7d:7a:40:59:ea:2e:77:76:65:
39:e8:a1:b2:2a:79:d0:ee:86:66:c3:fa:3a:dd:42:2c:41:69:
cb:98:93:8a:84:de:8d:cc:86:c1:ef:eb:9a:fb:62:3f:31:ec:
98:44:0b:a2:47:96:c9:ff:96:62:da:a9:2c:f4:8d:3e:9e:53:
29:0f:b7:bc:9c:dc:42:76:60:b9:eb:f8:8a:6e:15:90:e2:b9:
68:84:b4:26:09:c2:d5:29:cd:cb:6a:e1:7f:c1:72:00:76:82:
2d:e1:2c:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZQnSIrgAvODkpNLStUSkCAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3
YjlmYzEwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODUyMDRjMzI5ZmQ0MGNhZGQ2NzE4MjNiNzZjNWE0NzJkYzdiODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoAmO+zSqA8Yfg+CBfczxR6VJ1V9
2nkCknqQD+BzDLcMAbjEKJ84F2SFHj4z295saGiI1LgaFxE86E5+dSG72Dsx75vb
ME7zvbApSSdhaDwsX5xWHW1R5wtBvQGgdbKsgbf8+8JC3aV3Vky+fQz5YM30d9ae
Eq+BhubTOiCG2Q7Mt28K0JhDLCHZ3RFfD5of8/qflNYY7GCs0lsqTR7ekWvHuxk3
Q7iylw62cb6sajkrk9N81UM4zPtjbAIGFpScEHwLMg6sc1vPbvb59bwfWpGn6BS6
4gxKameRyVOZjLq4qIyc+RX5VBH6+YcCCoFtsMwgrRNGlVtXbwTiOPL80QIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFGhSBMMp/UDK3WcYI7dsWkctx7gVMB8GA1UdIwQY
MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt
YTUyYTg3OTVkOTU2LzEvYUZJRXd5bjlRTXJkWnhnanQyeGFSeTNIdUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2
LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQCLYDgAwQA
W9UnAwQCW+RAAwQCwgSkAwQAwxSJMBsEAgACMBUDBQMqDYVAAwUDKg5CQAMFAyoR
BQAwDQYJKoZIhvcNAQELBQADggEBAEVpy+vlyBCfKGuZmN2G/iRnEsuK/2aPYbpy
t3X+CqURFZxRBru37XitELnndsYlZG8osCcf0Nd6isJORdFiU3s+jGyTnamkdsGh
tBv2RTpbjsh7s0Cv4PI0FjuPMc7VOxRSA+9krB1JHKk9NuDV/8CtHGtjpBnr8Xep
SDedcYuxoAV3HgyszNdVNvvXi2pT63BeoA2x8sUEA316QFnqLnd2ZTnoobIqedDu
hmbD+jrdQixBacuYk4qE3o3MhsHv65r7Yj8x7JhEC6JHlsn/lmLaqSz0jT6eUykP
t7yc3EJ2YLnr+IpuFZDiuWiEtCYJwtUpzctq4X/BcgB2gi3hLIM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:40:10 2025 by rpki-client