Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa
File: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (raw, json)
Hash identifier: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=
Subject key identifier: 7B:CC:B2:07:2F:D6:62:4D:0C:9A:23:85:FF:E7:3A:64:E1:3B:F1:ED
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 01961DFE1100E5CB83BC2C531259AEF8F74A
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa
Signing time: Thu 10 Apr 2025 04:38:31 +0000
ROA not before: Thu 10 Apr 2025 04:38:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48095
IP address blocks: 2.56.48.0/23 maxlen: 23
2.56.50.0/23 maxlen: 23
5.253.116.0/23 maxlen: 23
5.253.118.0/23 maxlen: 23
45.66.236.0/23 maxlen: 23
45.66.238.0/23 maxlen: 23
46.175.152.0/22 maxlen: 22
77.83.168.0/23 maxlen: 23
77.83.170.0/23 maxlen: 23
81.16.128.0/22 maxlen: 22
85.208.120.0/23 maxlen: 23
85.208.122.0/23 maxlen: 23
86.62.56.0/23 maxlen: 23
86.62.58.0/23 maxlen: 23
92.118.40.0/23 maxlen: 23
92.118.42.0/23 maxlen: 23
152.89.128.0/23 maxlen: 23
152.89.130.0/23 maxlen: 23
185.234.4.0/22 maxlen: 22
193.47.236.0/22 maxlen: 22
194.59.200.0/23 maxlen: 23
194.59.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:fe:11:00:e5:cb:83:bc:2c:53:12:59:ae:f8:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Apr 10 04:38:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bccb2072fd6624d0c9a2385ffe73a64e13bf1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:d7:1f:be:65:92:24:45:51:7a:81:41:d4:
13:d6:07:e1:b2:e2:f0:3d:62:3d:a8:aa:90:13:ae:
ca:49:37:db:e4:d1:95:24:4c:9c:23:2e:38:de:bd:
7d:07:0b:30:a7:33:d7:40:b3:e2:74:b6:c0:ef:24:
bb:b6:88:09:20:b2:51:ba:bc:ed:bf:d8:fb:02:14:
19:8a:4c:81:90:2f:2f:24:38:c2:5d:6a:d7:ba:42:
92:db:08:98:bf:a0:bd:aa:b7:7f:12:8d:35:de:0f:
68:39:e1:df:ae:7d:1c:87:80:de:b9:02:5b:34:03:
4b:f3:5f:84:89:e7:88:6e:3a:ef:dd:88:80:c3:51:
15:dc:4d:9e:2e:c5:cd:f6:a2:12:e5:46:e1:91:b1:
9d:c6:93:0b:28:24:0a:43:57:20:d1:29:9e:ff:5c:
7d:f8:17:ab:52:1e:11:3f:aa:7e:e4:9a:44:0a:14:
ef:93:b9:0f:59:1f:0e:3e:da:7f:3c:f1:15:01:ba:
c7:4a:14:76:07:fb:e0:43:a6:6b:02:41:8b:29:af:
0c:6f:bf:74:e6:dd:13:9f:ac:56:e9:d0:92:b8:0c:
61:4d:cd:89:f4:dd:fc:a3:f0:e3:a3:ad:12:e0:76:
95:4d:93:cd:c3:3a:00:3c:08:ff:5f:4f:87:93:ca:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:B2:07:2F:D6:62:4D:0C:9A:23:85:FF:E7:3A:64:E1:3B:F1:ED
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.48.0/22
5.253.116.0/22
45.66.236.0/22
46.175.152.0/22
77.83.168.0/22
81.16.128.0/22
85.208.120.0/22
86.62.56.0/22
92.118.40.0/22
152.89.128.0/22
185.234.4.0/22
193.47.236.0/22
194.59.200.0/22
Signature Algorithm: sha256WithRSAEncryption
89:eb:ba:74:79:e4:38:63:33:90:f5:6d:c2:b8:7a:54:ad:b5:
f3:35:ab:ba:bd:0c:56:84:f6:e5:87:4f:fe:72:e5:a5:d4:12:
8c:25:1a:ef:ed:c4:83:84:06:41:13:52:35:89:f7:3c:a8:20:
d2:0d:51:a6:a8:ee:9a:6a:e1:58:73:f5:99:4c:d9:35:a7:27:
d8:fc:d9:fa:19:c2:08:a8:1e:43:1b:ab:0f:f8:78:ca:fc:be:
9d:ac:05:a1:27:1f:d2:c2:b4:05:10:3c:ad:a5:99:b5:49:d1:
38:5c:38:4c:ad:05:22:94:ed:13:35:12:1d:cc:a8:e6:b9:e8:
10:db:13:2c:7c:79:fd:35:8b:60:3b:7b:fd:ed:fc:21:02:5b:
24:71:80:94:77:0c:53:0a:6a:b9:89:78:78:9f:19:f6:3a:ae:
79:15:61:51:67:21:f0:03:84:ec:df:2e:56:0b:0f:7f:e1:b5:
f6:37:f8:38:20:aa:de:2a:0d:a9:03:3c:4d:e3:ea:81:60:b0:
bb:a4:27:1d:2a:2a:1a:bb:de:f0:4d:4e:b5:2e:c4:db:4b:01:
0a:4c:d0:16:4e:fa:eb:84:c0:9d:db:21:1b:4d:8e:84:71:78:
a2:a2:f7:b8:63:31:f1:a2:da:c7:cc:d4:81:c9:37:49:b4:07:
93:7b:bb:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZYd/hEA5cuDvCxTElmu+PdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4
MTNjNWYwHhcNMjUwNDEwMDQzODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmNjYjIwNzJmZDY2MjRkMGM5YTIzODVmZmU3M2E2NGUxM2JmMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JrXH75lkiRFUXqBQdQT1gfhsuLw
PWI9qKqQE67KSTfb5NGVJEycIy443r19BwswpzPXQLPidLbA7yS7togJILJRurzt
v9j7AhQZikyBkC8vJDjCXWrXukKS2wiYv6C9qrd/Eo013g9oOeHfrn0ch4DeuQJb
NANL81+EieeIbjrv3YiAw1EV3E2eLsXN9qIS5UbhkbGdxpMLKCQKQ1cg0Sme/1x9
+BerUh4RP6p+5JpEChTvk7kPWR8OPtp/PPEVAbrHShR2B/vgQ6ZrAkGLKa8Mb790
5t0Tn6xW6dCSuAxhTc2J9N38o/Djo60S4HaVTZPNwzoAPAj/X0+Hk8rYAwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFHvMsgcv1mJNDJojhf/nOmThO/HtMB8GA1UdIwQY
MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt
ZDQ4YjQyZWYxNTliLzEvZTh5eUJ5X1dZazBNbWlPRl8tYzZaT0U3OGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli
LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCAjgwAwQC
Bf10AwQCLULsAwQCLq+YAwQCTVOoAwQCURCAAwQCVdB4AwQCVj44AwQCXHYoAwQC
mFmAAwQCueoEAwQCwS/sAwQCwjvIMA0GCSqGSIb3DQEBCwUAA4IBAQCJ67p0eeQ4
YzOQ9W3CuHpUrbXzNau6vQxWhPblh0/+cuWl1BKMJRrv7cSDhAZBE1I1ifc8qCDS
DVGmqO6aauFYc/WZTNk1pyfY/Nn6GcIIqB5DG6sP+HjK/L6drAWhJx/SwrQFEDyt
pZm1SdE4XDhMrQUilO0TNRIdzKjmuegQ2xMsfHn9NYtgO3v97fwhAlskcYCUdwxT
Cmq5iXh4nxn2Oq55FWFRZyHwA4Ts3y5WCw9/4bX2N/g4IKreKg2pAzxN4+qBYLC7
pCcdKioau97wTU61LsTbSwEKTNAWTvrrhMCd2yEbTY6EcXiiove4YzHxotrHzNSB
yTdJtAeTe7uw
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:00:05 2025 by rpki-client