Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/CSELLzCfw6oI74q-WWe9dtPSQE4.roa
File: CSELLzCfw6oI74q-WWe9dtPSQE4.roa (raw, json)
Hash identifier: gStbgJoQDV2DxWz+eMD0JCL1YRpJSnO1lPVyl9mxRzw=
Subject key identifier: 09:21:0B:2F:30:9F:C3:AA:08:EF:8A:BE:59:67:BD:76:D3:D2:40:4E
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 01973A5EC10AE9785CE355A3E2FFD6EB0A6A
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/CSELLzCfw6oI74q-WWe9dtPSQE4.roa
Signing time: Wed 04 Jun 2025 09:56:17 +0000
ROA not before: Wed 04 Jun 2025 09:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 5.144.128.0/21 maxlen: 21
5.144.128.0/22 maxlen: 22
5.144.128.0/23 maxlen: 23
5.144.128.0/24 maxlen: 24
5.144.129.0/24 maxlen: 24
5.144.130.0/23 maxlen: 24
5.144.130.0/24 maxlen: 24
5.144.131.0/24 maxlen: 24
5.144.132.0/22 maxlen: 22
5.144.132.0/23 maxlen: 24
5.144.132.0/24 maxlen: 24
5.144.133.0/24 maxlen: 24
5.144.134.0/23 maxlen: 24
5.144.134.0/24 maxlen: 24
5.144.135.0/24 maxlen: 24
45.92.92.0/22 maxlen: 24
45.92.92.0/23 maxlen: 24
45.92.92.0/24 maxlen: 24
45.92.93.0/24 maxlen: 24
45.92.94.0/23 maxlen: 24
45.92.94.0/24 maxlen: 24
45.92.95.0/24 maxlen: 24
45.138.132.0/22 maxlen: 24
45.138.132.0/23 maxlen: 24
45.138.132.0/24 maxlen: 24
45.138.133.0/24 maxlen: 24
45.138.134.0/24 maxlen: 24
45.138.135.0/24 maxlen: 24
80.91.208.0/24 maxlen: 24
185.36.231.0/24 maxlen: 24
185.40.16.0/24 maxlen: 24
185.83.112.0/22 maxlen: 22
185.83.112.0/23 maxlen: 23
185.83.112.0/24 maxlen: 24
185.83.113.0/24 maxlen: 24
185.83.114.0/23 maxlen: 24
185.83.114.0/24 maxlen: 24
185.83.115.0/24 maxlen: 24
185.83.181.0/24 maxlen: 24
185.83.183.0/24 maxlen: 24
185.89.22.0/24 maxlen: 24
185.169.6.0/24 maxlen: 24
185.173.104.0/22 maxlen: 24
185.173.104.0/24 maxlen: 24
185.173.105.0/24 maxlen: 24
185.173.106.0/24 maxlen: 24
185.173.107.0/24 maxlen: 24
185.205.203.0/24 maxlen: 24
185.208.76.0/23 maxlen: 23
185.208.78.0/23 maxlen: 24
185.208.78.0/24 maxlen: 24
185.208.79.0/24 maxlen: 24
193.3.231.0/24 maxlen: 24
193.162.129.0/24 maxlen: 24
2a05:9a00::/29 maxlen: 29
2a05:9a00::/48 maxlen: 48
2a05:9a00:1::/48 maxlen: 48
2a05:9a00:2::/48 maxlen: 48
2a05:9a00:3::/48 maxlen: 48
2a05:9a00:4::/48 maxlen: 48
2a05:9a00:1000::/48 maxlen: 48
2a05:9a00:1001::/48 maxlen: 48
2a05:9a00:1002::/48 maxlen: 48
2a05:9a00:1003::/48 maxlen: 48
2a07:7ec0::/29 maxlen: 29
2a07:e440::/29 maxlen: 29
2a10:4340::/29 maxlen: 29
2a10:5c40::/29 maxlen: 29
2a10:6140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:5e:c1:0a:e9:78:5c:e3:55:a3:e2:ff:d6:eb:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jun 4 09:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09210b2f309fc3aa08ef8abe5967bd76d3d2404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:b2:79:10:10:c5:5d:da:df:14:db:8b:3c:
38:de:16:56:61:ef:16:cb:53:94:10:49:5a:1a:4d:
3c:4f:8c:df:60:a8:6c:16:f7:18:b4:1e:27:d1:14:
b2:94:1b:81:0c:1a:ff:90:e8:fa:77:7b:e4:1b:e4:
9b:48:47:bc:f3:45:96:77:3b:7d:cd:18:6c:5c:9e:
fe:ef:cf:f2:03:42:c5:d1:63:6a:85:a6:d8:ae:fb:
76:17:88:f8:c1:80:fc:01:d3:c2:0a:2e:23:5b:a4:
c6:16:15:01:06:d7:64:dc:a5:64:6c:c4:c9:99:e1:
75:ed:66:eb:3f:f4:cd:65:6f:0a:f0:84:fb:21:3f:
57:38:ba:ee:cd:d2:81:f7:3b:2c:d6:ca:5a:f4:6f:
e5:6e:61:cd:e3:af:e8:f5:8b:dd:ab:5a:90:1c:9e:
12:16:3d:36:b7:31:49:37:62:47:ec:90:ea:f0:28:
b1:84:c8:6d:61:1b:fe:2d:1c:eb:01:59:61:4e:90:
75:e2:2a:b0:d1:e3:a5:a2:a0:52:26:a9:4a:be:31:
51:40:3f:51:11:68:b7:38:13:ae:d3:5f:d8:59:da:
38:2e:3a:84:57:50:40:2f:f4:a7:5e:37:d8:20:18:
7c:55:44:e1:5a:54:5f:a4:07:af:19:63:8b:5c:d4:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:0B:2F:30:9F:C3:AA:08:EF:8A:BE:59:67:BD:76:D3:D2:40:4E
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/CSELLzCfw6oI74q-WWe9dtPSQE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.128.0/21
45.92.92.0/22
45.138.132.0/22
80.91.208.0/24
185.36.231.0/24
185.40.16.0/24
185.83.112.0/22
185.83.181.0/24
185.83.183.0/24
185.89.22.0/24
185.169.6.0/24
185.173.104.0/22
185.205.203.0/24
185.208.76.0/22
193.3.231.0/24
193.162.129.0/24
IPv6:
2a05:9a00::/29
2a07:7ec0::/29
2a07:e440::/29
2a10:4340::/29
2a10:5c40::/29
2a10:6140::/29
Signature Algorithm: sha256WithRSAEncryption
66:25:fb:58:c7:11:33:ab:52:c9:bc:d3:21:08:a0:f0:92:d6:
16:66:9e:d4:d7:fc:98:4c:64:10:1c:25:30:d6:82:da:24:12:
1b:c7:8a:7d:36:eb:b1:a7:d7:73:54:3f:75:1c:2b:d1:59:2e:
4a:3b:95:08:20:aa:64:91:67:bf:71:0c:89:c4:55:1b:6c:bf:
52:17:d9:c7:f0:cb:ad:5d:c2:c7:db:a9:9e:85:79:d0:c6:99:
06:91:86:70:b6:ec:09:b0:40:86:16:bb:99:74:2d:9d:b7:87:
d6:7b:5e:9f:c0:da:c6:36:0e:9f:bc:af:5f:c8:e5:5a:66:c7:
e9:0c:8d:07:73:f6:1f:c3:4b:6d:53:3a:5c:08:8c:ef:a6:46:
1b:e8:c3:d6:4e:5e:c9:1f:29:d0:a2:31:85:87:c3:82:d9:65:
59:7a:b5:4b:6e:2f:41:5e:d7:66:85:ed:94:37:44:8e:94:0a:
82:56:d1:46:96:c4:71:0f:81:a3:28:7a:ef:e8:2f:2e:94:32:
e0:94:99:92:72:88:4b:1b:4c:f7:79:14:5e:fb:49:a1:ce:fa:
33:7a:e3:44:90:b4:87:86:4d:ec:ea:b0:02:47:c8:ae:b1:b7:
c7:f9:3d:bd:f8:ea:d7:fb:dd:c0:f7:6d:2d:b4:67:88:c4:0a:
36:21:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:38:11 2025 by rpki-client