Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/CFOEQzJpDfyIX_oaNWeu5lzrryg.roa
File: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (raw, json)
Hash identifier: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=
Subject key identifier: 08:53:84:43:32:69:0D:FC:88:5F:FA:1A:35:67:AE:E6:5C:EB:AF:28
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 019421B23458CAD2D641CAF07DFF8F56022D
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/CFOEQzJpDfyIX_oaNWeu5lzrryg.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5605
IP address blocks: 193.98.110.0/24 maxlen: 24
193.101.58.0/24 maxlen: 24
193.102.227.0/24 maxlen: 24
195.244.224.0/24 maxlen: 24
195.244.225.0/24 maxlen: 24
195.244.226.0/24 maxlen: 24
195.244.227.0/24 maxlen: 24
195.244.228.0/24 maxlen: 24
195.244.229.0/24 maxlen: 24
195.244.230.0/24 maxlen: 24
195.244.231.0/24 maxlen: 24
195.244.232.0/24 maxlen: 24
195.244.233.0/24 maxlen: 24
195.244.234.0/24 maxlen: 24
195.244.235.0/24 maxlen: 24
195.244.236.0/24 maxlen: 24
195.244.238.0/24 maxlen: 24
195.244.239.0/24 maxlen: 24
195.244.240.0/24 maxlen: 24
195.244.241.0/24 maxlen: 24
195.244.242.0/24 maxlen: 24
195.244.243.0/24 maxlen: 24
195.244.244.0/24 maxlen: 24
195.244.245.0/24 maxlen: 24
195.244.246.0/24 maxlen: 24
195.244.247.0/24 maxlen: 24
195.244.248.0/24 maxlen: 24
195.244.249.0/24 maxlen: 24
195.244.250.0/24 maxlen: 24
195.244.251.0/24 maxlen: 24
195.244.252.0/24 maxlen: 24
195.244.253.0/24 maxlen: 24
195.244.254.0/24 maxlen: 24
195.244.255.0/24 maxlen: 24
2a00:fa8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:58:ca:d2:d6:41:ca:f0:7d:ff:8f:56:02:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0853844332690dfc885ffa1a3567aee65cebaf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:20:ec:84:85:94:9e:7a:b5:0a:93:7a:c8:
ee:1e:e7:e3:3f:68:c5:fe:4a:32:6d:9f:ac:64:63:
4b:5c:24:85:79:4a:66:da:0b:4d:a1:3e:92:c4:c9:
0c:e9:2a:5e:ec:8c:cf:23:00:c2:7e:25:e4:92:aa:
51:8a:19:c9:da:b9:70:36:3c:1e:cc:90:08:54:36:
f8:af:52:13:15:43:89:b3:a0:b7:72:2c:b6:05:f0:
94:31:f4:c1:6f:b6:9f:d5:23:d9:5c:50:79:a2:25:
41:29:7d:41:8f:8d:35:f8:64:d8:1e:37:f9:4c:37:
8d:96:ae:b6:4c:83:d8:fc:fb:89:52:16:5c:aa:41:
9e:57:98:68:88:3b:dd:3c:c2:c1:bf:65:f3:2f:55:
1c:99:d4:1d:38:8d:55:2e:d2:93:75:14:d4:a9:6b:
cf:93:71:f2:e7:f0:0c:84:e4:7c:80:23:ee:db:c4:
4e:1d:da:47:6f:5d:00:14:31:6d:9d:d6:74:52:04:
a5:14:31:c0:fc:48:cc:ab:21:8c:91:b8:f0:51:77:
79:fd:9e:09:16:19:aa:00:81:2b:ed:99:b9:c4:51:
a8:fe:58:be:27:2d:03:20:f8:9b:fb:2e:90:b3:0b:
44:bf:53:1e:da:e1:ba:c9:2b:c8:02:c5:1b:f3:8e:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:84:43:32:69:0D:FC:88:5F:FA:1A:35:67:AE:E6:5C:EB:AF:28
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/CFOEQzJpDfyIX_oaNWeu5lzrryg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.98.110.0/24
193.101.58.0/24
193.102.227.0/24
195.244.224.0-195.244.236.255
195.244.238.0-195.244.255.255
IPv6:
2a00:fa8::/32
Signature Algorithm: sha256WithRSAEncryption
68:8d:a5:40:1b:49:25:85:da:e2:d8:01:85:31:79:74:3a:f8:
6a:ab:37:a5:d6:4c:62:6f:a5:14:a7:3c:cf:cd:a2:56:54:56:
08:90:09:1e:a8:12:47:a8:c4:43:9b:4b:a7:cc:ba:9b:78:63:
0f:c5:91:30:06:76:fe:b9:83:53:f4:b6:6c:bc:77:b7:ba:78:
05:72:87:34:2b:9f:f9:f8:9d:94:80:05:a1:0b:ca:9e:99:73:
7a:30:9c:3a:12:6e:c1:6b:ce:6a:3c:ac:62:c2:13:ef:ee:f8:
d6:eb:51:57:27:de:70:1b:0e:30:e9:55:22:60:c2:fa:24:b4:
f8:ca:30:18:d9:4b:c8:a1:5e:c8:5c:0a:a0:39:eb:f5:19:69:
88:3e:36:88:89:c4:02:89:ca:8c:84:07:9a:06:e9:6d:76:5f:
bc:d9:c3:32:b5:e1:45:7f:2d:ab:a9:70:c5:e6:47:76:19:b2:
95:5f:7e:2b:f1:f8:eb:aa:c0:2d:a5:f0:9d:8a:83:b0:dc:7f:
06:2a:9c:bb:80:65:c3:96:09:38:56:bf:6e:41:c1:f2:8e:1b:
b4:cf:67:73:e8:1b:de:65:32:73:cb:5e:98:c8:4c:62:9a:5a:
76:09:86:57:a9:bb:0b:74:be:10:3d:e8:26:d6:6c:e8:c6:57:
7f:f6:d9:f9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZQhsjRYytLWQcrwff+PVgItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm
NDIxNWUwHhcNMjUwMTAxMTE0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODUzODQ0MzMyNjkwZGZjODg1ZmZhMWEzNTY3YWVlNjVjZWJhZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAIg7ISFlJ56tQqTesjuHufjP2jF
/koybZ+sZGNLXCSFeUpm2gtNoT6SxMkM6Spe7IzPIwDCfiXkkqpRihnJ2rlwNjwe
zJAIVDb4r1ITFUOJs6C3ciy2BfCUMfTBb7af1SPZXFB5oiVBKX1Bj401+GTYHjf5
TDeNlq62TIPY/PuJUhZcqkGeV5hoiDvdPMLBv2XzL1UcmdQdOI1VLtKTdRTUqWvP
k3Hy5/AMhOR8gCPu28ROHdpHb10AFDFtndZ0UgSlFDHA/EjMqyGMkbjwUXd5/Z4J
FhmqAIEr7Zm5xFGo/li+Jy0DIPib+y6QswtEv1Me2uG6ySvIAsUb845jdwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFAhThEMyaQ38iF/6GjVnruZc668oMB8GA1UdIwQY
MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt
MWU0ZmNiMWM2MGNiLzEvQ0ZPRVF6SnBEZnlJWF9vYU5XZXU1bHpycnlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi
LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAzBAIAATAtAwQAwWJuAwQA
wWU6AwQAwWbjMAwDBAXD9OADBADD9OwwCwMEAcP07gMDAMP0MA0EAgACMAcDBQAq
AA+oMA0GCSqGSIb3DQEBCwUAA4IBAQBojaVAG0klhdri2AGFMXl0Ovhqqzel1kxi
b6UUpzzPzaJWVFYIkAkeqBJHqMRDm0unzLqbeGMPxZEwBnb+uYNT9LZsvHe3ungF
coc0K5/5+J2UgAWhC8qemXN6MJw6Em7Ba85qPKxiwhPv7vjW61FXJ95wGw4w6VUi
YML6JLT4yjAY2UvIoV7IXAqgOev1GWmIPjaIicQCicqMhAeaBultdl+82cMyteFF
fy2rqXDF5kd2GbKVX34r8fjrqsAtpfCdioOw3H8GKpy7gGXDlgk4Vr9uQcHyjhu0
z2dz6BveZTJzy16YyEximlp2CYZXqbsLdL4QPegm1mzoxld/9tn5
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:28 2025 by rpki-client