Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/584SAPvYLLfkKzkLONB-h5sT-gY.roa
File: 584SAPvYLLfkKzkLONB-h5sT-gY.roa (raw, json)
Hash identifier: t2gryRqgtFXG9MqyLmvKfbXpt9McqJw5rgbi7QzEXIE=
Subject key identifier: E7:CE:12:00:FB:D8:2C:B7:E4:2B:39:0B:38:D0:7E:87:9B:13:FA:06
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D776F618E2E84848D1C204C0ABB97C
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/584SAPvYLLfkKzkLONB-h5sT-gY.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6747
IP address blocks: 62.63.159.0/24 maxlen: 24
78.28.197.0/24 maxlen: 24
80.232.180.0/24 maxlen: 24
80.232.181.0/24 maxlen: 24
80.233.136.0/24 maxlen: 24
81.198.93.0/24 maxlen: 24
195.13.180.0/24 maxlen: 24
2a02:16d8:105:9::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:76:f6:18:e2:e8:48:48:d1:c2:04:c0:ab:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ce1200fbd82cb7e42b390b38d07e879b13fa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:0f:7e:40:db:f0:f7:8e:22:c3:45:d4:97:
02:73:9d:1c:c6:a0:a6:69:ef:96:c7:87:dc:ff:9d:
11:2a:71:bd:37:36:1f:5a:c0:88:e7:67:80:bd:f7:
bd:ad:6d:47:a3:db:bd:37:9d:69:59:1f:b4:12:18:
50:5f:e7:35:3d:5f:09:57:e3:cf:a3:18:3c:1f:70:
94:62:f1:20:71:1c:cc:79:3a:12:3a:be:f6:6c:c7:
c5:00:87:f5:8a:48:c5:62:18:e5:e6:7a:72:e0:f0:
d2:84:60:88:85:1d:26:57:49:15:53:4c:d6:bf:b5:
99:2c:89:e4:bd:3c:3f:2a:4c:2a:cd:33:5c:8a:fa:
af:05:28:d9:0c:9f:36:a2:2f:ff:ad:3c:44:0d:7e:
d5:99:24:4d:77:f3:b7:10:ab:c1:bc:04:2d:59:eb:
1c:c7:43:74:79:87:42:94:a6:86:29:a0:99:9d:f6:
ee:a9:bf:a3:cc:ff:80:0c:69:fe:b4:6f:6a:33:1b:
fa:e2:0d:2f:4a:35:7a:67:0a:c9:0e:4d:65:fb:92:
1d:29:23:ba:06:af:d8:d0:31:55:25:6e:bc:d7:6f:
e5:b5:2e:03:08:5e:0c:2a:ea:86:95:c8:b2:a0:42:
4b:7f:75:75:ec:32:ad:43:d0:7a:2c:f5:31:d3:82:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:12:00:FB:D8:2C:B7:E4:2B:39:0B:38:D0:7E:87:9B:13:FA:06
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/584SAPvYLLfkKzkLONB-h5sT-gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.159.0/24
78.28.197.0/24
80.232.180.0/23
80.233.136.0/24
81.198.93.0/24
195.13.180.0/24
IPv6:
2a02:16d8:105:9::/64
Signature Algorithm: sha256WithRSAEncryption
28:64:05:7b:e2:a5:b0:89:fd:de:ae:18:44:17:2c:40:fa:04:
85:a6:59:6c:08:b1:c5:22:8b:54:c5:42:f4:18:4d:f1:cc:42:
34:e0:a9:a6:8b:49:69:b4:0c:53:46:83:d8:61:fa:4f:0a:55:
cc:e3:44:8b:71:a8:6f:ef:4d:b5:5f:e5:d1:af:bf:f6:ec:5f:
25:b2:d6:f1:20:27:f5:47:d8:76:04:38:46:58:62:e1:a6:3c:
53:83:1d:4d:52:94:41:3f:c2:86:8a:a3:ce:84:14:7b:cb:79:
a6:eb:84:9a:e7:2b:95:46:f4:0d:81:bb:c7:01:1f:89:8b:0e:
0c:1f:44:70:72:b5:df:0a:33:6d:ed:ac:91:cc:8c:2f:ad:b8:
b6:68:72:86:ec:73:d4:18:e4:df:6b:3d:8b:dc:dc:25:c8:af:
c0:83:fb:8a:7c:79:c3:c7:37:83:c5:63:ae:d2:af:91:84:fd:
c8:46:3d:01:71:20:3c:e1:85:2f:af:38:b0:cc:37:5d:8e:80:
43:9c:73:b5:fd:7f:ae:6f:77:eb:35:c2:d7:5c:f4:55:f5:39:
61:26:dc:4f:07:e0:29:b5:b9:54:eb:fc:82:f7:11:08:a7:36:
89:13:1c:16:eb:f5:92:22:d8:2e:fa:bf:63:df:c9:5a:b9:2b:
d7:dc:97:52
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZQj13b2GOLoSEjRwgTAq7l8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2NlMTIwMGZiZDgyY2I3ZTQyYjM5MGIzOGQwN2U4NzliMTNmYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3APfkDb8PeOIsNF1JcCc50cxqCm
ae+Wx4fc/50RKnG9NzYfWsCI52eAvfe9rW1Ho9u9N51pWR+0EhhQX+c1PV8JV+PP
oxg8H3CUYvEgcRzMeToSOr72bMfFAIf1ikjFYhjl5npy4PDShGCIhR0mV0kVU0zW
v7WZLInkvTw/KkwqzTNcivqvBSjZDJ82oi//rTxEDX7VmSRNd/O3EKvBvAQtWesc
x0N0eYdClKaGKaCZnfbuqb+jzP+ADGn+tG9qMxv64g0vSjV6ZwrJDk1l+5IdKSO6
Bq/Y0DFVJW6812/ltS4DCF4MKuqGlciyoEJLf3V17DKtQ9B6LPUx04KPHQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFOfOEgD72Cy35Cs5CzjQfoebE/oGMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvNTg0U0FQdllMTGZrS3prTE9OQi1oNXNULWdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAqBAIAATAkAwQAPj+fAwQA
ThzFAwQBUOi0AwQAUOmIAwQAUcZdAwQAww20MBEEAgACMAsDCQAqAhbYAQUACTAN
BgkqhkiG9w0BAQsFAAOCAQEAKGQFe+KlsIn93q4YRBcsQPoEhaZZbAixxSKLVMVC
9BhN8cxCNOCppotJabQMU0aD2GH6TwpVzONEi3Gob+9NtV/l0a+/9uxfJbLW8SAn
9UfYdgQ4Rlhi4aY8U4MdTVKUQT/ChoqjzoQUe8t5puuEmucrlUb0DYG7xwEfiYsO
DB9EcHK13wozbe2skcyML624tmhyhuxz1Bjk32s9i9zcJcivwIP7inx5w8c3g8Vj
rtKvkYT9yEY9AXEgPOGFL684sMw3XY6AQ5xztf1/rm936zXC11z0VfU5YSbcTwfg
KbW5VOv8gvcRCKc2iRMcFuv1kiLYLvq/Y9/JWrkr19yXUg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 03:28:57 2025 by rpki-client