Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa
File: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (raw, json)
Hash identifier: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=
Subject key identifier: 0A:9D:DA:F1:04:AD:9E:A5:DF:90:C1:2D:DC:CC:CF:BF:43:4F:2D:FC
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 0194244548E2BA75393614955F1EFB4A1825
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25176
IP address blocks: 92.39.0.0/20 maxlen: 20
95.140.64.0/20 maxlen: 20
193.254.4.0/22 maxlen: 22
194.69.6.0/23 maxlen: 23
194.69.8.0/21 maxlen: 21
194.153.32.0/19 maxlen: 19
194.153.64.0/21 maxlen: 21
2a00:1718::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:48:e2:ba:75:39:36:14:95:5f:1e:fb:4a:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a9ddaf104ad9ea5df90c12ddccccfbf434f2dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:43:53:74:27:60:53:9d:c7:f7:33:eb:44:
93:f2:06:97:7d:fc:a0:9b:59:17:e6:ec:f1:fd:ea:
84:05:ce:78:b5:67:8c:1a:d4:68:d0:2b:36:1c:ce:
46:9c:c4:c7:aa:c2:e7:d5:b4:45:01:34:93:7b:4c:
62:6c:7b:08:aa:f3:89:e1:c7:ee:21:2c:bf:da:09:
eb:ab:1b:90:19:bf:da:f5:eb:c5:65:56:b5:ba:fa:
46:d6:2e:97:9f:af:13:7a:3a:5f:e4:56:6d:67:5b:
9f:e1:29:64:bf:ff:48:3b:5a:99:8f:b9:19:e2:6f:
ad:85:1b:13:bd:20:cd:c0:b2:a0:f5:a3:e7:22:d0:
00:fe:8c:e0:9a:25:01:9e:3b:0c:b0:3c:42:36:19:
fb:05:ed:fc:d8:c3:c6:01:a8:68:4b:47:67:40:8d:
18:ca:86:be:e9:6f:1d:d4:1b:5d:e4:9e:97:d0:07:
c2:b7:39:16:c2:a2:7b:72:bc:2f:2e:d2:c2:f8:6b:
fb:74:06:c8:2c:a5:f7:c7:b9:32:7c:9c:b2:03:33:
83:ec:f0:69:2b:fe:52:a8:19:32:2a:10:09:39:bc:
83:10:3e:2c:13:1a:a6:fb:20:e5:86:f5:a8:69:33:
f6:e5:19:f9:8d:de:ce:f9:82:c5:e8:31:e4:65:f6:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9D:DA:F1:04:AD:9E:A5:DF:90:C1:2D:DC:CC:CF:BF:43:4F:2D:FC
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.0.0/20
95.140.64.0/20
193.254.4.0/22
194.69.6.0-194.69.15.255
194.153.32.0-194.153.71.255
IPv6:
2a00:1718::/32
Signature Algorithm: sha256WithRSAEncryption
39:80:33:ef:c9:86:2c:d9:86:47:29:29:89:81:fc:ae:c3:36:
14:f9:1e:fd:40:c7:bc:46:0f:2c:fb:ed:7c:31:eb:8b:3d:58:
5b:d7:66:24:12:21:5b:1f:fc:27:86:0d:bb:aa:f9:7c:a2:e4:
9e:e2:46:1d:ff:c6:a1:65:67:fe:b6:72:64:e9:f7:a5:68:da:
f9:a7:46:4d:d1:6e:03:0e:6f:a7:d4:f9:41:52:01:58:6d:18:
1d:c8:1e:db:52:c2:3c:c0:82:c1:a0:58:4b:ce:45:42:64:49:
e7:fb:4d:14:17:2e:e6:84:4b:58:8f:76:17:c0:37:b1:a8:5a:
60:8f:69:7d:14:4f:d1:af:3d:da:98:9a:91:87:de:69:8f:08:
ff:80:b6:91:93:db:d9:db:a4:38:32:58:b4:c5:51:be:fe:6d:
d4:fa:6e:d1:9f:76:ee:41:0b:62:1a:ee:d8:bf:fc:26:50:57:
ed:b1:c5:c0:d6:3c:cb:75:e4:e2:3e:8a:49:65:fa:d8:7f:04:
52:cf:2f:9f:dc:5f:64:30:86:bb:14:3a:db:bb:0d:a9:33:fd:
40:1f:ff:56:c0:b7:18:d4:d2:ca:f3:59:e9:be:94:8a:f4:4a:
36:4d:5e:c2:1c:80:09:0f:3e:27:8b:e7:8a:bc:9e:5b:9a:54:
2c:49:77:f5
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAZQkRUjiunU5NhSVXx77ShglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2
MDM3N2QwHhcNMjUwMTAxMjM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTlkZGFmMTA0YWQ5ZWE1ZGY5MGMxMmRkY2NjY2ZiZjQzNGYyZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9JDU3QnYFOdx/cz60ST8gaXffyg
m1kX5uzx/eqEBc54tWeMGtRo0Cs2HM5GnMTHqsLn1bRFATSTe0xibHsIqvOJ4cfu
ISy/2gnrqxuQGb/a9evFZVa1uvpG1i6Xn68Tejpf5FZtZ1uf4Slkv/9IO1qZj7kZ
4m+thRsTvSDNwLKg9aPnItAA/ozgmiUBnjsMsDxCNhn7Be382MPGAahoS0dnQI0Y
yoa+6W8d1Btd5J6X0AfCtzkWwqJ7crwvLtLC+Gv7dAbILKX3x7kyfJyyAzOD7PBp
K/5SqBkyKhAJObyDED4sExqm+yDlhvWoaTP25Rn5jd7O+YLF6DHkZfaD5QIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFAqd2vEErZ6l35DBLdzMz79DTy38MB8GA1UdIwQY
MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt
MGU1NDk0YWY1ODQwLzEvQ3AzYThRU3RucVhma01FdDNNelB2ME5QTGZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw
LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQEXCcAAwQE
X4xAAwQCwf4EMAwDBAHCRQYDBATCRQAwDAMEBcKZIAMEA8KZQDANBAIAAjAHAwUA
KgAXGDANBgkqhkiG9w0BAQsFAAOCAQEAOYAz78mGLNmGRykpiYH8rsM2FPke/UDH
vEYPLPvtfDHriz1YW9dmJBIhWx/8J4YNu6r5fKLknuJGHf/GoWVn/rZyZOn3pWja
+adGTdFuAw5vp9T5QVIBWG0YHcge21LCPMCCwaBYS85FQmRJ5/tNFBcu5oRLWI92
F8A3sahaYI9pfRRP0a892piakYfeaY8I/4C2kZPb2dukODJYtMVRvv5t1Ppu0Z92
7kELYhru2L/8JlBX7bHFwNY8y3Xk4j6KSWX62H8EUs8vn9xfZDCGuxQ627sNqTP9
QB//VsC3GNTSyvNZ6b6UivRKNk1ewhyACQ8+J4vniryeW5pULEl39Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:49:26 2025 by rpki-client