Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/_PMt2OoL3tDM4rKRYVgBBMfWRFA.roa
File: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (raw, json)
Hash identifier: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=
Subject key identifier: FC:F3:2D:D8:EA:0B:DE:D0:CC:E2:B2:91:61:58:01:04:C7:D6:44:50
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4E894AB0B8D60E71B0636F975B21
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/_PMt2OoL3tDM4rKRYVgBBMfWRFA.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198710
IP address blocks: 80.86.180.0/24 maxlen: 24
80.86.186.0/24 maxlen: 24
81.209.132.0/24 maxlen: 24
81.209.151.0/24 maxlen: 24
81.209.154.0/23 maxlen: 24
81.209.159.0/24 maxlen: 24
83.125.106.0/23 maxlen: 23
83.125.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:89:4a:b0:b8:d6:0e:71:b0:63:6f:97:5b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf32dd8ea0bded0cce2b29161580104c7d64450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:f7:ee:bd:82:2f:6a:c2:42:d6:3c:65:c9:
14:c7:9b:54:c9:a5:2e:5d:b3:e6:2e:d8:a7:69:d7:
ec:91:ee:a5:e7:b5:f7:43:7d:03:67:7e:50:ac:90:
6c:dd:f4:61:26:b8:b0:80:9b:9a:69:7a:27:12:25:
76:22:c9:0b:43:49:ea:28:43:5a:0c:e5:32:2e:9b:
9d:9a:5f:91:5b:4e:7a:2d:1a:16:ed:1d:6d:37:8a:
8a:04:9d:a8:52:69:1a:01:a4:b2:d2:4f:65:5a:1e:
9f:c5:4f:75:1a:bc:76:a3:e1:23:70:4a:f7:24:d7:
c9:79:2e:b2:09:3d:62:ac:a5:f0:9a:36:b3:5f:a7:
78:a1:bf:bb:2d:0a:96:57:30:41:b9:2f:4b:4c:5b:
76:d6:94:c7:03:63:8c:d1:e3:0f:2c:c5:57:8e:8e:
2f:19:f0:f3:c4:a0:6f:4d:2f:58:b3:4c:06:a3:dd:
31:c4:32:87:7c:96:94:47:c5:4f:12:6f:96:99:e4:
d8:ed:64:59:2a:83:26:02:5f:c9:d5:6b:bb:ab:a2:
56:82:b8:fc:40:c1:15:0e:de:d2:6d:4f:89:6a:ba:
a1:a1:4d:61:71:48:74:d9:9b:14:da:3b:bb:e7:5e:
88:22:e3:86:92:ae:54:3e:64:8b:c2:6f:be:46:56:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:2D:D8:EA:0B:DE:D0:CC:E2:B2:91:61:58:01:04:C7:D6:44:50
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/_PMt2OoL3tDM4rKRYVgBBMfWRFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.180.0/24
80.86.186.0/24
81.209.132.0/24
81.209.151.0/24
81.209.154.0/23
81.209.159.0/24
83.125.106.0-83.125.108.255
Signature Algorithm: sha256WithRSAEncryption
15:f0:f2:e7:04:21:65:fc:55:0f:b5:d0:48:df:9c:cb:cf:8c:
c7:f4:2c:a5:10:64:4a:ce:98:7d:c9:62:89:49:a9:a8:41:2a:
c1:f5:ae:bf:4a:99:a1:d7:b8:fd:48:53:01:5e:f4:8f:4e:f4:
1b:09:24:8f:8e:36:93:3d:c2:0e:c8:65:6a:22:9a:77:6b:3e:
56:af:6b:b1:25:a2:79:ac:74:17:26:4b:5a:aa:6a:27:d2:86:
15:fc:c9:d7:4a:a8:5e:b1:56:0f:b1:50:ec:ad:31:41:46:94:
9e:a1:2b:34:43:ce:18:74:e2:7c:11:d9:86:88:4c:72:16:5f:
8a:10:e6:5b:22:cd:28:c0:89:ab:ee:da:fb:a6:20:13:d8:97:
31:fe:77:06:b5:b5:f0:8d:e5:2a:cd:69:43:aa:06:cf:1a:6a:
39:f1:d3:b8:0f:30:36:68:b0:60:c7:c7:33:b4:ef:af:2e:24:
98:5e:1d:f0:85:84:db:f8:e9:ab:17:3c:e1:5f:c7:0a:a7:dc:
e8:9c:0d:b3:68:97:e6:5e:0b:c9:91:c5:e7:4d:04:b8:3d:2f:
a2:c0:0b:9c:e3:01:ee:a4:c0:42:e9:c1:53:79:cf:71:08:87:
21:c1:0b:b2:22:d1:1f:18:0d:06:f4:4e:c1:77:8d:18:a4:9e:
6c:22:71:56
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQf+k6JSrC41g5xsGNvl1shMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2YzMmRkOGVhMGJkZWQwY2NlMmIyOTE2MTU4MDEwNGM3ZDY0NDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5P37r2CL2rCQtY8ZckUx5tUyaUu
XbPmLtinadfske6l57X3Q30DZ35QrJBs3fRhJriwgJuaaXonEiV2IskLQ0nqKENa
DOUyLpudml+RW056LRoW7R1tN4qKBJ2oUmkaAaSy0k9lWh6fxU91Grx2o+EjcEr3
JNfJeS6yCT1irKXwmjazX6d4ob+7LQqWVzBBuS9LTFt21pTHA2OM0eMPLMVXjo4v
GfDzxKBvTS9Ys0wGo90xxDKHfJaUR8VPEm+WmeTY7WRZKoMmAl/J1Wu7q6JWgrj8
QMEVDt7SbU+JarqhoU1hcUh02ZsU2ju7516IIuOGkq5UPmSLwm++RlbEzwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFPzzLdjqC97QzOKykWFYAQTH1kRQMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvX1BNdDJPb0wzdERNNHJLUllWZ0JCTWZXUkZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAUFa0AwQA
UFa6AwQAUdGEAwQAUdGXAwQBUdGaAwQAUdGfMAwDBAFTfWoDBABTfWwwDQYJKoZI
hvcNAQELBQADggEBABXw8ucEIWX8VQ+10EjfnMvPjMf0LKUQZErOmH3JYolJqahB
KsH1rr9KmaHXuP1IUwFe9I9O9BsJJI+ONpM9wg7IZWoimndrPlava7ElonmsdBcm
S1qqaifShhX8yddKqF6xVg+xUOytMUFGlJ6hKzRDzhh04nwR2YaITHIWX4oQ5lsi
zSjAiavu2vumIBPYlzH+dwa1tfCN5SrNaUOqBs8aajnx07gPMDZosGDHxzO0768u
JJheHfCFhNv46asXPOFfxwqn3OicDbNol+ZeC8mRxedNBLg9L6LAC5zjAe6kwELp
wVN5z3EIhyHBC7Ii0R8YDQb0TsF3jRiknmwicVY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:19 2025 by rpki-client