Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/_rRQdKAM7uxfZ2rXreMkfx0DeSU.roa
File: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (raw, json)
Hash identifier: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=
Subject key identifier: FE:B4:50:74:A0:0C:EE:EC:5F:67:6A:D7:AD:E3:24:7F:1D:03:79:25
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 01941F8C35B5E904A03C906CD46643526D13
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/_rRQdKAM7uxfZ2rXreMkfx0DeSU.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39591
IP address blocks: 77.94.240.0/21 maxlen: 24
79.143.208.0/20 maxlen: 24
79.143.208.0/22 maxlen: 24
79.143.212.0/23 maxlen: 24
79.143.214.0/24 maxlen: 24
79.143.215.0/24 maxlen: 24
79.143.216.0/21 maxlen: 24
185.3.104.0/22 maxlen: 24
2a00:1280::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:35:b5:e9:04:a0:3c:90:6c:d4:66:43:52:6d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feb45074a00ceeec5f676ad7ade3247f1d037925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:7e:e0:43:16:c9:ea:e8:9d:4e:d9:3f:08:
5d:c0:7d:0d:36:49:ee:d6:22:f7:9b:86:95:0b:74:
61:73:51:3b:18:34:f4:b7:d5:ed:5f:03:b1:47:a4:
f4:47:4a:ef:f2:ee:b9:9d:2f:38:87:27:97:a5:a2:
b7:9e:32:51:28:4a:75:c5:de:b5:4a:95:d4:3c:3f:
27:86:a1:ba:bd:56:ff:04:53:c0:ad:38:a1:8d:2c:
34:3f:a3:26:67:a9:b6:cd:6a:34:ac:cc:3c:55:46:
9c:4f:21:65:da:6c:75:c2:ff:c3:97:2b:02:ee:e7:
42:6c:59:16:77:ca:0b:59:41:78:69:1c:ab:5a:b1:
f6:27:10:aa:97:1d:bc:cc:db:b3:1b:4e:c8:63:5a:
c1:5c:e2:6d:ef:17:df:8b:ca:6a:2f:8f:a9:b8:8f:
c9:a9:97:1c:46:92:8d:e1:85:d8:32:03:e3:3b:c8:
4c:fa:e2:07:f8:1c:8e:13:8f:51:6f:44:89:44:70:
7e:4d:4b:96:25:9f:b4:e7:de:22:af:e3:57:a1:3a:
7e:9c:a8:dd:cd:fc:9e:20:5a:60:93:11:f7:e8:d8:
b4:9b:24:fd:83:be:0c:6e:06:1f:1c:b0:c8:f7:7c:
b6:8c:84:57:f3:ae:c4:2d:6a:d2:8d:8f:cd:36:0d:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B4:50:74:A0:0C:EE:EC:5F:67:6A:D7:AD:E3:24:7F:1D:03:79:25
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/_rRQdKAM7uxfZ2rXreMkfx0DeSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.240.0/21
79.143.208.0/20
185.3.104.0/22
IPv6:
2a00:1280::/32
Signature Algorithm: sha256WithRSAEncryption
6d:74:70:a2:6c:db:be:cf:82:dc:0a:03:e2:37:a1:02:de:4d:
34:6e:95:2a:8a:5c:4f:ef:f1:0d:20:7c:2f:fe:45:04:b0:62:
b9:8c:5e:a1:c2:87:cd:28:49:4e:61:0b:6c:33:8f:aa:88:4c:
37:06:e7:69:10:27:4d:40:5e:b1:1d:43:53:56:a2:5f:0a:e0:
1c:4a:e6:cb:de:14:5c:18:42:16:1c:e1:97:5c:2b:bd:09:8d:
61:f5:ba:93:a5:35:ad:5f:d8:8c:8b:ec:7b:29:1c:40:ce:7d:
e7:0a:06:12:4f:d2:55:63:b3:3e:12:70:78:6d:fa:9a:7c:2c:
47:a5:40:2e:5d:74:55:8d:bb:7d:47:19:7a:26:5d:3e:8f:f5:
2c:13:b8:0d:4e:35:0d:57:38:f0:90:77:73:b9:51:60:25:92:
4b:a9:87:5b:90:21:cc:8b:24:cd:d5:b2:8f:a0:ed:d0:d1:e7:
c3:d1:53:75:2b:54:fc:f3:7d:ce:06:2c:4d:60:59:52:6e:08:
4b:ff:2d:a0:dc:65:bf:e3:de:2e:54:22:80:cf:cc:64:29:a0:
ec:60:8f:7e:9f:56:c1:d7:2c:6b:cd:8b:b7:c9:f5:30:42:21:
9f:83:50:8f:9c:1d:6c:f9:65:19:cb:36:76:3b:51:9d:dc:f8:
4f:6f:df:01
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQfjDW16QSgPJBs1GZDUm0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGE4NGRiYjRjNmExMmQzYzliOGUyMWI3NzMwNDU2OGEw
M2RiNTAwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWI0NTA3NGEwMGNlZWVjNWY2NzZhZDdhZGUzMjQ3ZjFkMDM3OTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYJ+4EMWyeronU7ZPwhdwH0NNknu
1iL3m4aVC3Rhc1E7GDT0t9XtXwOxR6T0R0rv8u65nS84hyeXpaK3njJRKEp1xd61
SpXUPD8nhqG6vVb/BFPArTihjSw0P6MmZ6m2zWo0rMw8VUacTyFl2mx1wv/DlysC
7udCbFkWd8oLWUF4aRyrWrH2JxCqlx28zNuzG07IY1rBXOJt7xffi8pqL4+puI/J
qZccRpKN4YXYMgPjO8hM+uIH+ByOE49Rb0SJRHB+TUuWJZ+0594ir+NXoTp+nKjd
zfyeIFpgkxH36Ni0myT9g74MbgYfHLDI93y2jIRX867ELWrSjY/NNg1CnwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFP60UHSgDO7sX2dq163jJH8dA3klMB8GA1UdIwQY
MBaAFGXahNu0xqEtPJuOIbdzBFaKA9tQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRxRTI3VEdvUzA4bTQ0aHQzTUVWb29EMjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYjI2NWYtYmJiNi00OWQ4LTliMjkt
NTdiOTE3Y2U0NzY1LzEvX3JSUWRLQU03dXhmWjJyWHJlTWtmeDBEZVNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mYjI2NWYtYmJiNi00OWQ4LTliMjktNTdiOTE3Y2U0NzY1
LzEvWmRxRTI3VEdvUzA4bTQ0aHQzTUVWb29EMjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTV7wAwQE
T4/QAwQCuQNoMA0EAgACMAcDBQAqABKAMA0GCSqGSIb3DQEBCwUAA4IBAQBtdHCi
bNu+z4LcCgPiN6EC3k00bpUqilxP7/ENIHwv/kUEsGK5jF6hwofNKElOYQtsM4+q
iEw3BudpECdNQF6xHUNTVqJfCuAcSubL3hRcGEIWHOGXXCu9CY1h9bqTpTWtX9iM
i+x7KRxAzn3nCgYST9JVY7M+EnB4bfqafCxHpUAuXXRVjbt9Rxl6Jl0+j/UsE7gN
TjUNVzjwkHdzuVFgJZJLqYdbkCHMiyTN1bKPoO3Q0efD0VN1K1T8833OBixNYFlS
bghL/y2g3GW/494uVCKAz8xkKaDsYI9+n1bB1yxrzYu3yfUwQiGfg1CPnB1s+WUZ
yzZ2O1Gd3PhPb98B
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:41 2025 by rpki-client