Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/vMh15nJtc0WhPa3adfD72rfDpjk.roa
File: vMh15nJtc0WhPa3adfD72rfDpjk.roa (raw, json)
Hash identifier: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=
Subject key identifier: BC:C8:75:E6:72:6D:73:45:A1:3D:AD:DA:75:F0:FB:DA:B7:C3:A6:39
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 01942067E1A421967D877BA6DFF515008A83
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/vMh15nJtc0WhPa3adfD72rfDpjk.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56329
IP address blocks: 46.227.144.0/21 maxlen: 21
78.143.192.0/19 maxlen: 19
82.163.144.0/20 maxlen: 20
82.163.184.0/21 maxlen: 21
82.163.252.0/22 maxlen: 22
83.151.200.0/21 maxlen: 21
88.202.128.0/19 maxlen: 19
88.202.192.0/20 maxlen: 20
88.202.232.0/22 maxlen: 22
88.202.240.0/20 maxlen: 20
88.212.164.0/22 maxlen: 22
88.212.168.0/21 maxlen: 21
88.212.176.0/21 maxlen: 21
88.212.184.0/22 maxlen: 22
185.82.156.0/22 maxlen: 22
185.111.224.0/22 maxlen: 22
185.147.88.0/22 maxlen: 22
188.95.40.0/21 maxlen: 21
194.233.152.0/21 maxlen: 21
194.233.152.0/22 maxlen: 22
194.233.156.0/22 maxlen: 22
194.233.224.0/20 maxlen: 20
195.180.16.0/20 maxlen: 20
195.180.32.0/21 maxlen: 21
195.180.32.0/22 maxlen: 22
195.180.36.0/22 maxlen: 22
195.180.48.0/20 maxlen: 20
212.132.32.0/19 maxlen: 19
212.237.220.0/22 maxlen: 22
213.18.128.0/18 maxlen: 18
216.213.128.0/18 maxlen: 18
2a00:d200::/29 maxlen: 29
2a02:fb8::/32 maxlen: 32
2a06:61c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e1:a4:21:96:7d:87:7b:a6:df:f5:15:00:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc875e6726d7345a13dadda75f0fbdab7c3a639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:4d:f0:fc:d6:e0:8b:7e:59:ba:fb:bb:83:
4a:20:6f:ca:98:d1:47:c0:46:09:28:72:e0:f1:7b:
2b:8e:2d:25:5f:7a:10:87:cb:03:29:96:8d:50:7e:
c0:e0:fa:e6:b3:27:16:56:dd:60:37:49:a4:c6:86:
4b:de:9d:f8:e2:68:b9:b5:90:ff:f0:e2:24:b8:6a:
6a:dc:c7:f6:73:14:63:ed:af:41:00:71:ed:a3:18:
ba:b1:c5:c4:94:53:0d:ed:a9:00:65:3c:30:74:8a:
3a:2b:d8:b7:3c:2c:f6:ac:07:e0:22:e6:da:f8:40:
14:14:9e:91:54:0e:11:79:49:b2:b8:7c:84:51:b5:
15:47:b1:1e:02:5a:e2:95:57:58:3c:27:0a:9e:d8:
d6:ac:aa:10:02:ea:7b:c6:fe:dd:37:60:b0:a2:c2:
18:a3:07:e0:34:16:ea:b7:0d:ec:fc:5e:da:bf:92:
70:5f:f4:17:e6:f1:0b:88:54:2c:8b:45:6e:50:88:
a3:70:94:75:53:fb:da:e1:e2:4d:ea:68:14:dd:0c:
00:7a:d5:69:88:67:84:54:a7:db:68:a3:d2:c9:19:
37:61:6e:1e:b2:3b:ba:6d:23:43:06:54:f4:7e:22:
49:24:5f:ce:d0:fc:06:80:42:c9:96:b0:9b:56:cb:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:75:E6:72:6D:73:45:A1:3D:AD:DA:75:F0:FB:DA:B7:C3:A6:39
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/vMh15nJtc0WhPa3adfD72rfDpjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.144.0/21
78.143.192.0/19
82.163.144.0/20
82.163.184.0/21
82.163.252.0/22
83.151.200.0/21
88.202.128.0/19
88.202.192.0/20
88.202.232.0/22
88.202.240.0/20
88.212.164.0-88.212.187.255
185.82.156.0/22
185.111.224.0/22
185.147.88.0/22
188.95.40.0/21
194.233.152.0/21
194.233.224.0/20
195.180.16.0-195.180.39.255
195.180.48.0/20
212.132.32.0/19
212.237.220.0/22
213.18.128.0/18
216.213.128.0/18
IPv6:
2a00:d200::/29
2a02:fb8::/32
2a06:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
b8:fb:39:7f:ea:b8:a9:a2:25:da:6b:c9:91:84:d1:16:22:92:
fc:eb:64:dd:11:e8:d4:7e:59:c4:48:61:b2:87:95:20:d8:51:
ec:2a:86:63:27:19:07:f1:82:73:4a:2e:0f:33:20:39:82:75:
cb:b6:2e:6c:1f:6d:ee:9f:f5:39:83:09:99:f9:3c:b4:83:74:
22:8d:b1:a4:28:27:31:75:30:77:2f:d7:89:89:ae:8e:76:6a:
b3:c4:f5:f7:9a:3f:83:f5:59:f8:4e:57:cb:79:ab:38:5f:2d:
05:b2:31:a0:3a:ba:d7:33:e0:a5:0f:f2:9f:6e:e5:01:8e:5e:
63:75:b5:78:e0:8a:13:9a:a6:55:a6:a7:64:a0:ff:04:73:54:
ec:1d:dd:2a:f2:7e:61:b2:42:01:ce:fb:91:a0:79:65:06:7d:
37:d6:6f:aa:bf:8d:57:f1:d1:d1:a9:ab:1b:5f:9c:f8:72:ef:
87:b8:1e:66:fd:2e:4e:ac:26:fd:38:2e:be:a2:28:cd:74:00:
99:9d:5c:34:14:9b:30:ed:4f:23:46:ad:41:f4:8f:ef:dc:6b:
7d:70:0a:51:76:4e:0e:fe:42:3e:4f:2e:07:82:b3:13:b0:70:
e6:95:36:8d:ae:3d:50:f5:66:47:0a:dd:35:af:e2:0e:d3:0a:
fa:6b:1b:3f
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAZQgZ+GkIZZ9h3um3/UVAIqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh
MmQ2MTEwHhcNMjUwMTAxMDU0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2M4NzVlNjcyNmQ3MzQ1YTEzZGFkZGE3NWYwZmJkYWI3YzNhNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc5N8PzW4It+Wbr7u4NKIG/KmNFH
wEYJKHLg8Xsrji0lX3oQh8sDKZaNUH7A4PrmsycWVt1gN0mkxoZL3p344mi5tZD/
8OIkuGpq3Mf2cxRj7a9BAHHtoxi6scXElFMN7akAZTwwdIo6K9i3PCz2rAfgIuba
+EAUFJ6RVA4ReUmyuHyEUbUVR7EeAlrilVdYPCcKntjWrKoQAup7xv7dN2CwosIY
owfgNBbqtw3s/F7av5JwX/QX5vELiFQsi0VuUIijcJR1U/va4eJN6mgU3QwAetVp
iGeEVKfbaKPSyRk3YW4esju6bSNDBlT0fiJJJF/O0PwGgELJlrCbVst3SQIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFLzIdeZybXNFoT2t2nXw+9q3w6Y5MB8GA1UdIwQY
MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt
YmZiZTFiYzE1ZmMyLzEvdk1oMTVuSnRjMFdoUGEzYWRmRDcycmZEcGprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy
LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBoQQCAAEwgZoDBAMu
45ADBAVOj8ADBARSo5ADBANSo7gDBAJSo/wDBANTl8gDBAVYyoADBARYysADBAJY
yugDBARYyvAwDAMEAljUpAMEAljUuAMEArlSnAMEArlv4AMEArmTWAMEA7xfKAME
A8LpmAMEBMLp4DAMAwQEw7QQAwQDw7QgAwQEw7QwAwQF1IQgAwQC1O3cAwQG1RKA
AwQG2NWAMBsEAgACMBUDBQMqANIAAwUAKgIPuAMFAyoGYcAwDQYJKoZIhvcNAQEL
BQADggEBALj7OX/quKmiJdpryZGE0RYikvzrZN0R6NR+WcRIYbKHlSDYUewqhmMn
GQfxgnNKLg8zIDmCdcu2Lmwfbe6f9TmDCZn5PLSDdCKNsaQoJzF1MHcv14mJro52
arPE9feaP4P1WfhOV8t5qzhfLQWyMaA6utcz4KUP8p9u5QGOXmN1tXjgihOaplWm
p2Sg/wRzVOwd3SryfmGyQgHO+5GgeWUGfTfWb6q/jVfx0dGpqxtfnPhy74e4Hmb9
Lk6sJv04Lr6iKM10AJmdXDQUmzDtTyNGrUH0j+/ca31wClF2Tg7+Qj5PLgeCsxOw
cOaVNo2uPVD1ZkcK3TWv4g7TCvprGz8=
-----END CERTIFICATE-----
Generated at Mon Mar 10 00:47:46 2025 by rpki-client