Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa
File: AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa (raw, json)
Hash identifier: Jv1vanIsUJEv2fbabmogBnj/mQ6LDnoYHz1QpK/aP2I=
Subject key identifier: 01:03:6C:38:25:33:D7:D5:2D:D1:6D:92:1A:E8:B2:2D:E4:C8:D8:53
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C71035C884AB8AFA32CB5CFBDCE1
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199636
IP address blocks: 45.80.8.0/22 maxlen: 24
45.80.20.0/22 maxlen: 24
45.80.24.0/22 maxlen: 24
45.80.32.0/22 maxlen: 24
82.96.128.0/18 maxlen: 24
88.202.236.0/22 maxlen: 24
88.212.152.0/22 maxlen: 24
91.203.92.0/22 maxlen: 24
95.178.88.0/22 maxlen: 24
130.180.208.0/20 maxlen: 24
141.255.128.0/21 maxlen: 24
185.44.88.0/22 maxlen: 24
185.91.220.0/22 maxlen: 24
185.146.220.0/22 maxlen: 24
212.114.16.0/20 maxlen: 24
2a05:6e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c7:10:35:c8:84:ab:8a:fa:32:cb:5c:fb:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01036c382533d7d52dd16d921ae8b22de4c8d853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:76:6b:fa:ab:ec:f8:bf:08:39:52:7f:52:
f2:e8:dc:c1:4e:d4:1a:3a:3b:a7:04:e5:65:d8:75:
39:e5:71:ef:87:43:3a:8e:49:1b:4b:e4:f5:66:d5:
48:a0:47:2b:46:9e:d4:c2:f0:cf:d3:ed:21:84:24:
c8:8c:e1:90:4a:53:88:66:a9:20:ba:8a:28:da:02:
9c:99:d3:30:00:36:57:ef:c0:c5:c2:88:08:82:74:
06:74:ef:1d:6a:44:66:fa:d6:16:7e:31:31:f0:41:
ce:11:7f:17:71:62:9d:d0:f2:02:e7:81:2a:7d:3d:
a9:ae:c8:c5:b7:b2:95:e1:31:92:9a:99:f7:80:7a:
18:9c:6a:59:4a:25:d7:39:9a:4e:86:8f:05:21:ab:
d4:9c:8b:e2:45:67:b0:bc:b2:52:8a:77:5a:37:11:
5d:93:29:d9:2c:65:91:1e:46:e2:a3:b3:7e:c8:4c:
d0:0c:bf:3d:ef:6d:ee:40:b4:82:70:aa:21:4c:b9:
d5:d0:42:27:2d:45:09:9f:79:44:6b:e1:d0:93:32:
d6:b8:e3:d7:d8:2c:e1:c9:43:b1:07:fe:1c:26:e5:
68:54:0b:43:7e:f8:b5:dd:6e:c7:db:d4:9b:53:2d:
08:1d:2a:ad:d4:ac:3e:d0:c6:c9:24:e6:92:bd:eb:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:6C:38:25:33:D7:D5:2D:D1:6D:92:1A:E8:B2:2D:E4:C8:D8:53
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.8.0/22
45.80.20.0-45.80.27.255
45.80.32.0/22
82.96.128.0/18
88.202.236.0/22
88.212.152.0/22
91.203.92.0/22
95.178.88.0/22
130.180.208.0/20
141.255.128.0/21
185.44.88.0/22
185.91.220.0/22
185.146.220.0/22
212.114.16.0/20
IPv6:
2a05:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:af:0e:66:1d:9d:7e:47:be:59:be:01:73:cc:d7:a0:d4:69:
6e:be:26:bd:5e:1e:8a:58:b1:12:63:bd:51:8f:b7:61:d0:ed:
9e:db:88:a4:ad:40:ab:30:e4:d3:4a:30:7d:a2:0a:b3:ae:ee:
eb:e3:e7:2b:f2:45:6a:fc:8d:1c:00:fc:e2:5c:b6:81:89:40:
3a:ed:f5:1a:a4:4b:a5:a5:8f:3c:07:68:bd:4a:d1:54:69:16:
5e:5f:a6:e1:67:e7:ad:2f:c9:9f:67:5a:13:1d:60:d8:27:84:
3a:04:34:6f:79:c9:64:70:52:56:9e:01:6b:e0:0e:d8:c8:e0:
6c:df:23:d8:ea:2c:e9:ad:28:2d:57:70:73:2f:8d:c5:40:f7:
6a:41:2d:1c:9e:7e:45:bd:02:2e:87:89:f4:ce:51:ad:b7:a2:
dd:2e:b8:28:65:99:55:7b:04:e4:9a:ab:74:d9:00:16:9d:b4:
2f:9e:f2:28:f3:62:6e:16:e2:2e:0c:fb:09:5c:c9:af:1b:8f:
6a:df:18:fe:d3:87:2a:3c:36:4c:8a:e7:2f:fd:01:bb:fd:8f:
f7:5c:9d:b7:b8:96:e9:3f:40:e6:5f:ac:39:a7:09:ae:0b:b7:
ec:36:ba:2d:9d:87:68:75:4c:8e:97:16:13:c7:ae:13:49:41:
e9:7f:f8:fd
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAZQlIccQNciEq4r6Mstc+9zhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTAzNmMzODI1MzNkN2Q1MmRkMTZkOTIxYWU4YjIyZGU0YzhkODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5x2a/qr7Pi/CDlSf1Ly6NzBTtQa
OjunBOVl2HU55XHvh0M6jkkbS+T1ZtVIoEcrRp7UwvDP0+0hhCTIjOGQSlOIZqkg
uooo2gKcmdMwADZX78DFwogIgnQGdO8dakRm+tYWfjEx8EHOEX8XcWKd0PIC54Eq
fT2prsjFt7KV4TGSmpn3gHoYnGpZSiXXOZpOho8FIavUnIviRWewvLJSindaNxFd
kynZLGWRHkbio7N+yEzQDL89723uQLSCcKohTLnV0EInLUUJn3lEa+HQkzLWuOPX
2CzhyUOxB/4cJuVoVAtDfvi13W7H29SbUy0IHSqt1Kw+0MbJJOaSvetAdQIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFAEDbDglM9fVLdFtkhrosi3kyNhTMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvQVFOc09DVXoxOVV0MFcyU0d1aXlMZVRJMkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAi1QCDAM
AwQCLVAUAwQCLVAYAwQCLVAgAwQGUmCAAwQCWMrsAwQCWNSYAwQCW8tcAwQCX7JY
AwQEgrTQAwQDjf+AAwQCuSxYAwQCuVvcAwQCuZLcAwQE1HIQMA0EAgACMAcDBQMq
BW4AMA0GCSqGSIb3DQEBCwUAA4IBAQCPrw5mHZ1+R75ZvgFzzNeg1Gluvia9Xh6K
WLESY71Rj7dh0O2e24ikrUCrMOTTSjB9ogqzru7r4+cr8kVq/I0cAPziXLaBiUA6
7fUapEulpY88B2i9StFUaRZeX6bhZ+etL8mfZ1oTHWDYJ4Q6BDRveclkcFJWngFr
4A7YyOBs3yPY6izprSgtV3BzL43FQPdqQS0cnn5FvQIuh4n0zlGtt6LdLrgoZZlV
ewTkmqt02QAWnbQvnvIo82JuFuIuDPsJXMmvG49q3xj+04cqPDZMiucv/QG7/Y/3
XJ23uJbpP0DmX6w5pwmuC7fsNrotnYdodUyOlxYTx64TSUHpf/j9
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client