Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/zUeLco_9U8ifNR5PMJI3zpijW74.roa
File: zUeLco_9U8ifNR5PMJI3zpijW74.roa (raw, json)
Hash identifier: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=
Subject key identifier: CD:47:8B:72:8F:FD:53:C8:9F:35:1E:4F:30:92:37:CE:98:A3:5B:BE
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F73733BB2A533ACFA5A77BC222640
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/zUeLco_9U8ifNR5PMJI3zpijW74.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5606
IP address blocks: 31.14.21.0/24 maxlen: 24
45.14.236.0/24 maxlen: 24
45.14.238.0/24 maxlen: 24
45.67.36.0/24 maxlen: 24
45.67.38.0/24 maxlen: 24
45.67.39.0/24 maxlen: 24
45.82.28.0/23 maxlen: 23
84.247.23.0/24 maxlen: 24
89.34.101.0/24 maxlen: 24
89.39.6.0/24 maxlen: 24
89.39.7.0/24 maxlen: 24
89.42.133.0/24 maxlen: 24
92.114.2.0/24 maxlen: 24
92.114.3.0/24 maxlen: 24
93.174.160.0/24 maxlen: 24
93.174.162.0/24 maxlen: 24
93.174.167.0/24 maxlen: 24
176.223.114.0/24 maxlen: 24
185.220.184.0/24 maxlen: 24
185.220.185.0/24 maxlen: 24
185.220.186.0/24 maxlen: 24
185.248.139.0/24 maxlen: 24
188.240.0.0/24 maxlen: 24
188.241.72.0/24 maxlen: 24
188.241.73.0/24 maxlen: 24
188.241.74.0/23 maxlen: 23
193.16.144.0/24 maxlen: 24
193.200.62.0/24 maxlen: 24
193.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:73:73:3b:b2:a5:33:ac:fa:5a:77:bc:22:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd478b728ffd53c89f351e4f309237ce98a35bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:96:35:e2:8b:15:e5:6a:92:ea:a4:4c:67:
5a:c8:ce:ed:29:7a:87:e4:9c:b9:0f:ab:d1:54:3a:
b7:4d:64:74:05:d1:e5:ec:42:e0:fd:c7:87:86:87:
96:95:04:46:ed:f9:4b:9e:46:6f:70:f6:96:e0:d2:
fa:ef:68:a3:73:64:ba:22:28:2d:9a:15:f8:db:03:
d0:08:17:a2:3f:2a:0d:cf:13:31:f0:e6:3f:d1:17:
ab:29:25:f9:52:e5:4b:0d:ea:ac:a3:1c:3f:9c:6d:
40:ec:cc:62:1b:3e:53:d8:62:db:ae:3d:52:f6:37:
cf:ef:9f:37:4e:16:37:7f:70:7c:87:eb:cd:52:ad:
96:64:ad:4c:8a:44:0f:df:e8:23:e7:8d:73:3b:27:
05:64:8e:05:cd:ff:87:59:fd:7b:ca:35:ee:77:8d:
b6:a5:0e:b3:9d:f1:29:a5:ff:2d:37:8d:18:06:72:
c9:ec:15:bb:65:8a:21:61:04:29:ae:e0:17:0c:af:
15:ea:d9:39:33:e1:5f:41:61:cb:f9:f6:a2:85:4f:
9e:06:2e:53:44:d2:fb:bf:68:b7:19:15:a6:3d:0f:
be:98:b1:6c:35:5f:35:10:8b:3a:8a:ef:b4:e4:cb:
32:e8:2d:31:ae:48:b8:68:6e:3a:fa:82:dd:12:76:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:8B:72:8F:FD:53:C8:9F:35:1E:4F:30:92:37:CE:98:A3:5B:BE
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/zUeLco_9U8ifNR5PMJI3zpijW74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.21.0/24
45.14.236.0/24
45.14.238.0/24
45.67.36.0/24
45.67.38.0/23
45.82.28.0/23
84.247.23.0/24
89.34.101.0/24
89.39.6.0/23
89.42.133.0/24
92.114.2.0/23
93.174.160.0/24
93.174.162.0/24
93.174.167.0/24
176.223.114.0/24
185.220.184.0-185.220.186.255
185.248.139.0/24
188.240.0.0/24
188.241.72.0/22
193.16.144.0/24
193.200.62.0/23
Signature Algorithm: sha256WithRSAEncryption
82:39:c2:cf:10:f5:b5:1f:ef:ea:09:91:22:a8:b7:cd:29:27:
bb:60:c5:80:8d:d7:3e:fc:bb:7e:b9:15:9d:a9:70:70:47:38:
2c:4d:6b:1d:fa:35:ac:57:2a:07:b4:3c:b4:fd:59:15:8b:1c:
02:4e:19:db:b0:e8:9b:99:33:18:5f:52:28:8c:06:88:dc:1f:
e8:f1:a3:cc:92:de:ec:e7:c1:e2:c0:68:e9:3c:37:6c:58:e1:
58:72:4e:ca:d3:f9:1f:09:70:8c:79:a6:fc:a3:02:ed:87:21:
ce:89:4a:84:d1:19:61:45:d0:08:cb:11:83:a8:4f:1b:87:47:
3b:57:28:eb:6c:dc:b8:49:a6:dd:27:9c:8f:17:6a:65:07:4d:
b0:84:ab:80:54:5c:f3:3d:33:fe:c5:57:46:cb:54:ea:df:fd:
1e:7b:39:8f:93:7b:cb:49:dc:9b:93:ca:46:d6:33:64:c9:fe:
c7:55:2c:bd:76:20:9e:d2:c0:40:44:f4:9f:41:49:50:8f:67:
13:f6:47:c5:24:2a:aa:01:d2:0f:55:a5:53:ba:5c:a4:ef:f3:
0b:e0:9a:78:32:ae:7d:fb:af:5a:4e:86:4d:b0:1a:2d:23:1a:
cd:2b:6c:e3:b9:88:3d:34:9d:c8:5b:dc:a0:65:2d:69:d4:ee:
ec:b6:85:85
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZQiH3NzO7KlM6z6Wne8IiZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTAxMTM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQ3OGI3MjhmZmQ1M2M4OWYzNTFlNGYzMDkyMzdjZTk4YTM1YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkGWNeKLFeVqkuqkTGdayM7tKXqH
5Jy5D6vRVDq3TWR0BdHl7ELg/ceHhoeWlQRG7flLnkZvcPaW4NL672ijc2S6Iigt
mhX42wPQCBeiPyoNzxMx8OY/0RerKSX5UuVLDeqsoxw/nG1A7MxiGz5T2GLbrj1S
9jfP7583ThY3f3B8h+vNUq2WZK1MikQP3+gj541zOycFZI4Fzf+HWf17yjXud422
pQ6znfEppf8tN40YBnLJ7BW7ZYohYQQpruAXDK8V6tk5M+FfQWHL+faihU+eBi5T
RNL7v2i3GRWmPQ++mLFsNV81EIs6iu+05Msy6C0xrki4aG46+oLdEnbw0QIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFM1Hi3KP/VPInzUeTzCSN86Yo1u+MB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvelVlTGNvXzlVOGlmTlI1UE1KSTN6cGlqVzc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAf
DhUDBAAtDuwDBAAtDu4DBAAtQyQDBAEtQyYDBAEtUhwDBABU9xcDBABZImUDBAFZ
JwYDBABZKoUDBAFccgIDBABdrqADBABdrqIDBABdrqcDBACw33IwDAMEA7ncuAME
ALncugMEALn4iwMEALzwAAMEArzxSAMEAMEQkAMEAcHIPjANBgkqhkiG9w0BAQsF
AAOCAQEAgjnCzxD1tR/v6gmRIqi3zSknu2DFgI3XPvy7frkVnalwcEc4LE1rHfo1
rFcqB7Q8tP1ZFYscAk4Z27Dom5kzGF9SKIwGiNwf6PGjzJLe7OfB4sBo6Tw3bFjh
WHJOytP5HwlwjHmm/KMC7YchzolKhNEZYUXQCMsRg6hPG4dHO1co62zcuEmm3Sec
jxdqZQdNsISrgFRc8z0z/sVXRstU6t/9Hns5j5N7y0ncm5PKRtYzZMn+x1UsvXYg
ntLAQET0n0FJUI9nE/ZHxSQqqgHSD1WlU7pcpO/zC+CaeDKuffuvWk6GTbAaLSMa
zSts47mIPTSdyFvcoGUtadTu7LaFhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:15 2025 by rpki-client