Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/iZWDIUILuFWunNVYaqJwiBg2ZXU.roa
File: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (raw, json)
Hash identifier: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=
Subject key identifier: 89:95:83:21:42:0B:B8:55:AE:9C:D5:58:6A:A2:70:88:18:36:65:75
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 01942067BBEB7E65369E323EED3C5EF77F05
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/iZWDIUILuFWunNVYaqJwiBg2ZXU.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43420
IP address blocks: 77.87.216.0/21 maxlen: 21
85.202.32.0/20 maxlen: 20
109.95.168.0/21 maxlen: 21
109.196.224.0/20 maxlen: 20
185.129.76.0/22 maxlen: 22
193.46.68.0/24 maxlen: 24
2a03:9c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bb:eb:7e:65:36:9e:32:3e:ed:3c:5e:f7:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89958321420bb855ae9cd5586aa2708818366575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:4b:02:ad:43:2a:dd:c5:1f:a0:28:b8:12:
3f:44:cb:66:98:d4:aa:28:ba:92:cc:d9:d9:b5:49:
2b:98:b9:f2:7e:49:ac:59:2c:1a:42:68:5b:81:b1:
57:1b:af:05:da:83:d1:24:f8:fa:e8:87:1e:02:c5:
6a:66:61:fc:55:07:f4:5f:2d:c0:84:e0:f0:e0:b9:
ab:f3:94:49:bf:ad:57:6c:fd:65:25:07:d9:3d:39:
a2:9d:ca:67:83:e6:48:d5:5a:c4:4b:d6:db:14:c8:
1e:68:8b:01:f5:26:4b:f8:42:f8:68:a9:ce:c4:d5:
ea:06:7e:cc:1a:44:c2:ce:05:8c:a1:21:f8:19:0f:
ec:8d:2d:76:83:61:da:6a:65:e4:58:f0:15:d7:20:
35:24:d1:10:08:15:c8:5f:62:03:f2:26:11:d5:78:
12:5f:16:0f:34:72:da:34:1f:e9:f6:a2:3f:31:42:
9e:47:7c:de:43:84:bf:38:34:cb:69:2c:49:8e:6c:
b5:ff:ba:a2:36:55:47:14:a9:49:92:cb:55:5b:d9:
7f:2a:cd:32:9a:ba:73:ff:a3:a9:c8:e4:b9:24:c2:
6a:cd:15:50:7a:49:67:e2:f3:24:73:70:1e:3c:aa:
2d:79:5d:4f:e1:ee:ef:16:60:9f:d1:0e:9d:1e:2b:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:83:21:42:0B:B8:55:AE:9C:D5:58:6A:A2:70:88:18:36:65:75
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/iZWDIUILuFWunNVYaqJwiBg2ZXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.216.0/21
85.202.32.0/20
109.95.168.0/21
109.196.224.0/20
185.129.76.0/22
193.46.68.0/24
IPv6:
2a03:9c60::/32
Signature Algorithm: sha256WithRSAEncryption
3c:e3:49:a4:8f:47:d5:04:2f:ee:38:e3:da:9e:94:c8:1d:0f:
29:30:e3:47:f9:69:b9:7d:68:39:b3:4d:46:57:db:0b:6b:bd:
e0:f0:aa:f4:b0:37:75:63:8d:6f:87:96:9d:9d:cd:b0:04:4b:
a8:a3:38:84:51:11:45:4b:68:d8:1b:00:29:41:22:bb:80:de:
a4:bd:c9:2d:4e:e6:41:62:8d:87:46:46:8c:34:00:e9:9b:11:
41:74:01:85:1b:03:e3:42:d6:05:a7:76:07:41:f1:11:0b:be:
64:02:00:d0:0d:fa:a5:32:ae:1f:20:80:13:88:d2:03:5e:9e:
4a:ba:f0:8b:3d:fe:72:bd:33:94:b3:4b:ee:88:fc:93:18:42:
90:d1:8f:72:43:7f:71:b0:e8:13:bf:9f:ed:5e:2f:31:c1:9a:
bc:53:fc:34:4b:65:49:ee:af:2c:72:54:01:cf:5d:91:d9:62:
26:f9:49:79:7a:ce:ec:70:db:cc:8e:fa:5f:02:80:f1:68:fc:
d1:a6:50:3e:f9:d6:79:29:f9:9f:69:91:ec:bf:6d:42:7a:ad:
0b:11:2c:97:b5:fe:6e:b8:33:19:4a:3d:84:84:44:d0:1f:6f:
52:1f:41:7e:ce:b3:6f:d9:1c:e7:29:74:be:4b:7d:60:2a:55:
16:b9:e0:7f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQgZ7vrfmU2njI+7Txe938FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmNjOTc2ZWY5MDM4M2FjZTdmMGI0ZTA5ZTRkODE5ZWQw
ZDliNWUwHhcNMjUwMTAxMDU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTk1ODMyMTQyMGJiODU1YWU5Y2Q1NTg2YWEyNzA4ODE4MzY2NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls9LAq1DKt3FH6AouBI/RMtmmNSq
KLqSzNnZtUkrmLnyfkmsWSwaQmhbgbFXG68F2oPRJPj66IceAsVqZmH8VQf0Xy3A
hODw4Lmr85RJv61XbP1lJQfZPTmincpng+ZI1VrES9bbFMgeaIsB9SZL+EL4aKnO
xNXqBn7MGkTCzgWMoSH4GQ/sjS12g2HaamXkWPAV1yA1JNEQCBXIX2ID8iYR1XgS
XxYPNHLaNB/p9qI/MUKeR3zeQ4S/ODTLaSxJjmy1/7qiNlVHFKlJkstVW9l/Ks0y
mrpz/6OpyOS5JMJqzRVQekln4vMkc3AePKoteV1P4e7vFmCf0Q6dHis91wIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFImVgyFCC7hVrpzVWGqicIgYNmV1MB8GA1UdIwQY
MBaAFI78yXbvkDg6zn8LTgnk2BntDZteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEt
ZTI3NTRmNmZiNGM1LzEvaVpXRElVSUx1Rld1bk5WWWFxSndpQmcyWlhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEtZTI3NTRmNmZiNGM1
LzEvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDTVfYAwQE
VcogAwQDbV+oAwQEbcTgAwQCuYFMAwQAwS5EMA0EAgACMAcDBQAqA5xgMA0GCSqG
SIb3DQEBCwUAA4IBAQA840mkj0fVBC/uOOPanpTIHQ8pMONH+Wm5fWg5s01GV9sL
a73g8Kr0sDd1Y41vh5adnc2wBEuooziEURFFS2jYGwApQSK7gN6kvcktTuZBYo2H
RkaMNADpmxFBdAGFGwPjQtYFp3YHQfERC75kAgDQDfqlMq4fIIATiNIDXp5KuvCL
Pf5yvTOUs0vuiPyTGEKQ0Y9yQ39xsOgTv5/tXi8xwZq8U/w0S2VJ7q8sclQBz12R
2WIm+Ul5es7scNvMjvpfAoDxaPzRplA++dZ5KfmfaZHsv21Ceq0LESyXtf5uuDMZ
Sj2EhETQH29SH0F+zrNv2RznKXS+S31gKlUWueB/
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:00 2025 by rpki-client