Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/D5U1j0YPEDas8bxMtDOehRJb48U.roa
File: D5U1j0YPEDas8bxMtDOehRJb48U.roa (raw, json)
Hash identifier: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=
Subject key identifier: 0F:95:35:8F:46:0F:10:36:AC:F1:BC:4C:B4:33:9E:85:12:5B:E3:C5
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 0194221FE7E748917847A148A4EC9F3A1E02
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/D5U1j0YPEDas8bxMtDOehRJb48U.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59414
IP address blocks: 5.102.144.0/21 maxlen: 24
45.11.220.0/22 maxlen: 24
45.81.68.0/22 maxlen: 24
45.151.213.0/24 maxlen: 24
185.72.238.0/23 maxlen: 24
185.79.232.0/22 maxlen: 24
185.98.120.0/22 maxlen: 24
2a06:c00::/32 maxlen: 48
2a06:c01::/32 maxlen: 48
2a06:c02::/32 maxlen: 48
2a06:c07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e7:e7:48:91:78:47:a1:48:a4:ec:9f:3a:1e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f95358f460f1036acf1bc4cb4339e85125be3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:83:cd:e1:42:5a:e6:68:17:4a:7c:29:b9:
b7:ec:c8:e1:12:ea:1f:a0:f5:9d:34:fd:d1:c7:eb:
3c:2a:ff:3a:c3:f1:49:e6:13:17:90:c9:e5:49:8a:
04:a9:b8:17:aa:ab:fa:f8:45:69:2a:45:50:a5:72:
06:a0:0a:c0:77:70:f6:b4:f8:f6:25:bb:86:6b:7b:
b5:a8:6c:f7:7e:b3:1e:75:8f:d5:3c:1c:74:aa:56:
58:5c:b7:f6:73:3c:3b:c6:c3:ab:5f:f7:cb:fd:a2:
c0:1d:24:c8:a6:b4:e6:13:37:ee:03:af:8c:ff:43:
c0:e6:bc:57:7d:34:ba:7c:65:24:52:92:32:5c:03:
34:09:22:a0:62:1f:8a:de:73:e5:b0:4f:b6:69:80:
39:8d:ab:35:dd:e8:80:9c:5a:bc:b1:9c:db:a7:7d:
f7:1a:cc:44:b4:37:18:48:aa:c1:2f:b2:c6:48:d7:
3a:de:94:09:e6:43:25:f7:cd:64:4a:d9:4c:6e:13:
74:a9:34:ac:66:04:de:43:42:a4:75:41:52:96:22:
07:74:4e:9a:73:16:f2:ad:de:4e:cd:74:3a:75:dc:
3c:7e:7f:d2:32:5b:f7:4a:d3:58:cf:ed:7a:3b:0d:
f6:54:53:5b:0c:2a:f4:00:4e:39:77:b2:04:36:c5:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:35:8F:46:0F:10:36:AC:F1:BC:4C:B4:33:9E:85:12:5B:E3:C5
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/D5U1j0YPEDas8bxMtDOehRJb48U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.144.0/21
45.11.220.0/22
45.81.68.0/22
45.151.213.0/24
185.72.238.0/23
185.79.232.0/22
185.98.120.0/22
IPv6:
2a06:c00::-2a06:c02:ffff:ffff:ffff:ffff:ffff:ffff
2a06:c07::/32
Signature Algorithm: sha256WithRSAEncryption
60:31:be:f8:b3:b2:f8:9e:de:93:2a:40:a0:92:77:2a:e4:2e:
fe:11:e9:d8:60:4e:d8:ad:cf:94:2c:0c:2d:59:02:e9:06:a7:
e5:72:73:54:c5:69:81:c9:4e:67:08:6c:e2:fa:dd:6d:bc:93:
c4:f3:e3:06:93:ee:0f:24:e7:fe:a0:0e:d9:5d:81:3d:7d:67:
b5:7e:5b:d6:83:4e:a4:f7:d6:43:90:35:1f:33:07:98:da:1a:
ef:6e:54:1f:27:f1:a8:74:45:00:e1:ed:10:27:34:35:4d:4c:
00:82:aa:7e:3b:81:31:5d:8b:c2:b6:87:cb:ab:e5:5c:b5:41:
55:c7:6b:59:8f:4b:62:3c:2d:08:3e:ee:a0:94:4c:c7:4f:f8:
0c:14:c7:a6:36:4f:70:7b:35:50:6e:cf:c7:b3:e0:0c:9e:1e:
80:0d:a2:c2:ca:5a:88:1b:e2:e8:f7:79:2e:b8:d5:09:40:cf:
9d:fb:29:d9:df:86:c9:cf:9c:8d:3b:c4:94:36:58:34:2a:68:
9c:b9:67:dc:5f:a2:06:81:fd:4f:7a:74:c9:ed:6f:be:18:b7:
31:7a:46:0b:4d:ec:ad:b9:0f:7e:41:cb:42:89:6d:25:f4:2f:
f5:3b:f5:bb:f0:b1:0b:58:40:28:ca:c6:88:23:5a:d4:b3:4b:
8f:6e:b1:33
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZQiH+fnSJF4R6FIpOyfOh4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDFjODlmNDQ4MjljNzJmMmE5NTNkMmEyYmE0YWUwYjdi
NTBkOGEwHhcNMjUwMTAxMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjk1MzU4ZjQ2MGYxMDM2YWNmMWJjNGNiNDMzOWU4NTEyNWJlM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d+DzeFCWuZoF0p8Kbm37MjhEuof
oPWdNP3Rx+s8Kv86w/FJ5hMXkMnlSYoEqbgXqqv6+EVpKkVQpXIGoArAd3D2tPj2
JbuGa3u1qGz3frMedY/VPBx0qlZYXLf2czw7xsOrX/fL/aLAHSTIprTmEzfuA6+M
/0PA5rxXfTS6fGUkUpIyXAM0CSKgYh+K3nPlsE+2aYA5jas13eiAnFq8sZzbp333
GsxEtDcYSKrBL7LGSNc63pQJ5kMl981kStlMbhN0qTSsZgTeQ0KkdUFSliIHdE6a
cxbyrd5OzXQ6ddw8fn/SMlv3StNYz+16Ow32VFNbDCr0AE45d7IENsUglwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFA+VNY9GDxA2rPG8TLQznoUSW+PFMB8GA1UdIwQY
MBaAFKUByJ9Egpxy8qlT0qK6SuC3tQ2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQt
MTRhMWViNTUxMmQ2LzEvRDVVMWowWVBFRGFzOGJ4TXRET2VoUkpiNDhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQtMTRhMWViNTUxMmQ2
LzEvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAwBAIAATAqAwQDBWaQAwQC
LQvcAwQCLVFEAwQALZfVAwQBuUjuAwQCuU/oAwQCuWJ4MBwEAgACMBYwDQMEAioG
DAMFACoGDAIDBQAqBgwHMA0GCSqGSIb3DQEBCwUAA4IBAQBgMb74s7L4nt6TKkCg
kncq5C7+EenYYE7Yrc+ULAwtWQLpBqflcnNUxWmByU5nCGzi+t1tvJPE8+MGk+4P
JOf+oA7ZXYE9fWe1flvWg06k99ZDkDUfMweY2hrvblQfJ/GodEUA4e0QJzQ1TUwA
gqp+O4ExXYvCtofLq+VctUFVx2tZj0tiPC0IPu6glEzHT/gMFMemNk9wezVQbs/H
s+AMnh6ADaLCylqIG+Lo93kuuNUJQM+d+ynZ34bJz5yNO8SUNlg0KmicuWfcX6IG
gf1PenTJ7W++GLcxekYLTeytuQ9+QctCiW0l9C/1O/W78LELWEAoysaII1rUs0uP
brEz
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:35 2025 by rpki-client