Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa
File: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (raw, json)
Hash identifier: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=
Subject key identifier: A7:97:CE:02:3D:77:3B:EF:02:E9:55:42:99:05:8C:66:51:F7:26:5D
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01955B578FB4E798B6ED5BCFD3EBD7535650
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa
Signing time: Mon 03 Mar 2025 09:30:19 +0000
ROA not before: Mon 03 Mar 2025 09:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34744
IP address blocks: 31.133.28.0/22 maxlen: 22
77.36.0.0/18 maxlen: 18
77.36.16.0/21 maxlen: 21
77.232.216.0/22 maxlen: 22
91.246.172.0/22 maxlen: 22
93.120.47.0/24 maxlen: 24
109.197.232.0/22 maxlen: 22
176.115.232.0/22 maxlen: 22
2a01:7d8::/48 maxlen: 48
2a01:7d8:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:57:8f:b4:e7:98:b6:ed:5b:cf:d3:eb:d7:53:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 3 09:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a797ce023d773bef02e9554299058c6651f7265d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:bb:7c:fb:a5:8f:d8:64:57:bb:65:77:1d:
e5:7b:77:f1:ef:c6:62:a3:72:f0:68:1c:75:91:3c:
ba:84:c2:0c:0b:fd:f2:dd:1a:3f:a9:5e:b3:df:c3:
46:05:3a:26:b7:5e:11:77:e5:82:83:55:fa:12:51:
ce:54:f0:d4:e9:50:58:22:30:64:c8:49:3b:15:1a:
07:12:c0:b9:25:f2:7b:6f:77:ea:d8:c5:dd:d3:f4:
6f:46:b1:c9:e8:23:c8:a9:33:43:1f:f7:22:b6:cf:
f9:1a:3b:29:81:af:16:1e:a0:ef:2c:1d:60:7e:84:
48:85:f2:ca:a0:55:a8:64:d9:7d:51:9f:08:71:ba:
e1:8f:f7:76:f4:04:e8:0e:0a:12:4a:e8:b0:fc:3d:
e4:a7:0b:96:03:9f:55:e2:9e:c3:66:28:fa:fb:32:
6c:f4:0f:88:12:91:bc:af:7a:d8:ac:80:a7:7a:3e:
36:24:96:8a:8a:0f:e1:5f:5f:aa:84:57:b8:0b:d2:
7c:93:8d:fe:e8:44:a7:e6:5e:73:65:aa:71:7b:58:
6f:9d:c3:ec:44:e7:b3:28:7b:4e:dc:e2:31:c1:f4:
62:f4:6f:43:bf:ba:d3:de:7c:e5:86:ef:12:57:52:
2a:2c:41:dc:55:64:ee:7e:a4:1b:b8:62:71:1a:8a:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:CE:02:3D:77:3B:EF:02:E9:55:42:99:05:8C:66:51:F7:26:5D
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.28.0/22
77.36.0.0/18
77.232.216.0/22
91.246.172.0/22
93.120.47.0/24
109.197.232.0/22
176.115.232.0/22
IPv6:
2a01:7d8::/47
Signature Algorithm: sha256WithRSAEncryption
a4:de:d5:e6:1b:f4:db:d2:4d:68:9f:1c:42:17:f8:3d:ff:6f:
44:bb:b5:12:1a:dd:2a:92:b7:89:4b:ac:69:14:da:bd:b4:55:
4d:66:67:93:dd:d8:7d:07:24:ec:5e:12:67:c7:21:83:4a:0e:
d5:01:e2:ca:da:5b:d0:73:a3:8b:ed:69:d3:88:f7:4b:fc:11:
09:05:30:30:aa:7e:c9:93:ee:da:c7:f4:c7:a9:d5:dc:4b:b5:
e8:8c:72:04:ca:27:d1:63:c3:70:d1:a0:e9:90:bb:f0:67:e8:
13:fa:e7:7f:93:33:2b:0b:01:9f:ea:ed:b5:73:99:d7:da:23:
4b:ad:bb:3e:65:d4:84:28:c2:fe:c0:a5:84:9a:51:f5:9f:00:
c3:2c:87:d3:2e:66:f2:ee:4a:98:93:7d:c7:6d:92:41:d8:8f:
21:c4:be:e1:8d:cc:ea:a6:9a:6d:b7:03:31:17:df:ae:96:14:
87:54:0d:75:2e:02:8e:85:cb:17:22:a7:06:53:c4:e9:50:62:
57:10:10:21:36:f7:68:cc:02:7b:aa:8c:5e:b4:f5:34:ba:89:
a6:f3:85:5c:f6:c4:67:61:5e:8d:79:b3:94:a9:75:91:85:d3:
26:22:95:98:83:84:cd:0a:1d:7c:b4:83:26:c6:ed:dd:3e:01:
bb:90:03:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZVbV4+055i27VvP0+vXU1ZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwMzAzMDkzMDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzk3Y2UwMjNkNzczYmVmMDJlOTU1NDI5OTA1OGM2NjUxZjcyNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopq7fPulj9hkV7tldx3le3fx78Zi
o3LwaBx1kTy6hMIMC/3y3Ro/qV6z38NGBTomt14Rd+WCg1X6ElHOVPDU6VBYIjBk
yEk7FRoHEsC5JfJ7b3fq2MXd0/RvRrHJ6CPIqTNDH/cits/5Gjspga8WHqDvLB1g
foRIhfLKoFWoZNl9UZ8Icbrhj/d29AToDgoSSuiw/D3kpwuWA59V4p7DZij6+zJs
9A+IEpG8r3rYrICnej42JJaKig/hX1+qhFe4C9J8k43+6ESn5l5zZapxe1hvncPs
ROezKHtO3OIxwfRi9G9Dv7rT3nzlhu8SV1IqLEHcVWTufqQbuGJxGorMcQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFKeXzgI9dzvvAulVQpkFjGZR9yZdMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvcDVmT0FqMTNPLThDNlZWQ21RV01abEgzSmwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQCH4UcAwQG
TSQAAwQCTejYAwQCW/asAwQAXXgvAwQCbcXoAwQCsHPoMA8EAgACMAkDBwEqAQfY
AAAwDQYJKoZIhvcNAQELBQADggEBAKTe1eYb9NvSTWifHEIX+D3/b0S7tRIa3SqS
t4lLrGkU2r20VU1mZ5Pd2H0HJOxeEmfHIYNKDtUB4sraW9Bzo4vtadOI90v8EQkF
MDCqfsmT7trH9Mep1dxLteiMcgTKJ9Fjw3DRoOmQu/Bn6BP653+TMysLAZ/q7bVz
mdfaI0utuz5l1IQowv7ApYSaUfWfAMMsh9MuZvLuSpiTfcdtkkHYjyHEvuGNzOqm
mm23AzEX366WFIdUDXUuAo6FyxcipwZTxOlQYlcQECE292jMAnuqjF609TS6iabz
hVz2xGdhXo15s5SpdZGF0yYilZiDhM0KHXy0gybG7d0+AbuQA9w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:54 2025 by rpki-client