Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CrZXzdXmNa97_e-Op4ohhGp8VME.roa
File: CrZXzdXmNa97_e-Op4ohhGp8VME.roa (raw, json)
Hash identifier: 2XxwnC03SZdkeRZl1J2wmOOeMJI9pttc0hfi/BkHo5U=
Subject key identifier: 0A:B6:57:CD:D5:E6:35:AF:7B:FD:EF:8E:A7:8A:21:84:6A:7C:54:C1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0195412C63EAD286E3D7F2280B67DE4B569D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CrZXzdXmNa97_e-Op4ohhGp8VME.roa
Signing time: Wed 26 Feb 2025 07:33:02 +0000
ROA not before: Wed 26 Feb 2025 07:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12887
IP address blocks: 84.40.152.0/23 maxlen: 23
84.40.155.0/24 maxlen: 24
84.40.156.0/22 maxlen: 22
84.40.216.0/24 maxlen: 24
84.40.218.0/23 maxlen: 23
84.40.220.0/22 maxlen: 22
84.40.232.0/22 maxlen: 22
84.40.237.0/24 maxlen: 24
84.40.238.0/23 maxlen: 23
93.159.0.0/22 maxlen: 22
93.159.4.0/23 maxlen: 23
93.159.7.0/24 maxlen: 24
93.159.12.0/23 maxlen: 23
93.159.14.0/24 maxlen: 24
93.159.16.0/23 maxlen: 23
93.159.18.0/24 maxlen: 24
93.159.20.0/24 maxlen: 24
93.159.22.0/24 maxlen: 24
93.159.24.0/22 maxlen: 22
93.159.28.0/24 maxlen: 24
93.159.33.0/24 maxlen: 24
93.159.34.0/23 maxlen: 23
93.159.36.0/24 maxlen: 24
93.159.40.0/24 maxlen: 24
93.159.42.0/24 maxlen: 24
93.159.45.0/24 maxlen: 24
93.159.46.0/23 maxlen: 23
93.159.48.0/24 maxlen: 24
93.159.49.0/24 maxlen: 24
93.159.55.0/24 maxlen: 24
93.159.57.0/24 maxlen: 24
93.159.58.0/23 maxlen: 23
93.159.60.0/22 maxlen: 22
185.72.184.0/22 maxlen: 22
185.164.140.0/22 maxlen: 22
194.9.78.0/23 maxlen: 23
195.85.209.0/24 maxlen: 24
195.128.172.0/24 maxlen: 24
195.128.173.0/24 maxlen: 24
195.128.180.0/24 maxlen: 24
195.128.181.0/24 maxlen: 24
195.160.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:2c:63:ea:d2:86:e3:d7:f2:28:0b:67:de:4b:56:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Feb 26 07:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab657cdd5e635af7bfdef8ea78a21846a7c54c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:e2:db:9d:a1:3d:99:e0:30:fa:78:51:35:
04:bf:84:17:79:a5:e7:b6:67:41:ec:fc:9c:c3:97:
66:b3:30:08:dc:23:3f:8a:82:32:4a:50:dd:d2:f4:
10:db:3b:5f:7e:e2:80:64:da:fe:cd:ee:b2:8f:a4:
71:0e:cd:bf:f9:a7:b6:91:7f:70:a8:c9:5b:2e:b6:
50:96:cc:ed:4c:71:ac:f5:2d:a3:5e:ae:b2:d6:87:
d6:b1:0e:8b:76:94:b1:55:57:c0:10:b1:49:ff:28:
7d:b2:f2:ab:e9:34:ea:02:80:2e:fd:df:d5:89:62:
0f:12:99:b3:9f:e7:ef:fd:f3:26:6d:71:f5:e2:ad:
b8:45:cc:1b:86:79:48:77:38:bc:15:bb:d5:ae:af:
ea:c9:c8:4d:c6:52:2c:53:3c:3c:a0:b7:a1:12:99:
d1:25:19:f9:dc:ae:2a:a0:d6:ae:dd:73:c8:b2:60:
17:b8:a5:bf:db:76:21:88:65:51:f9:b1:75:c2:71:
32:ba:e0:f9:e1:dd:14:dd:f9:e0:f6:64:39:f5:e0:
dc:5a:50:7c:8c:4a:40:a4:c9:e6:b5:d3:bf:4c:81:
2a:f4:ef:99:c4:0b:a8:ca:44:15:17:c6:37:04:97:
50:23:95:35:83:14:59:60:4f:78:2e:97:be:35:7c:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:57:CD:D5:E6:35:AF:7B:FD:EF:8E:A7:8A:21:84:6A:7C:54:C1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CrZXzdXmNa97_e-Op4ohhGp8VME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.152.0/23
84.40.155.0-84.40.159.255
84.40.216.0/24
84.40.218.0-84.40.223.255
84.40.232.0/22
84.40.237.0-84.40.239.255
93.159.0.0-93.159.5.255
93.159.7.0/24
93.159.12.0-93.159.14.255
93.159.16.0-93.159.18.255
93.159.20.0/24
93.159.22.0/24
93.159.24.0-93.159.28.255
93.159.33.0-93.159.36.255
93.159.40.0/24
93.159.42.0/24
93.159.45.0-93.159.49.255
93.159.55.0/24
93.159.57.0-93.159.63.255
185.72.184.0/22
185.164.140.0/22
194.9.78.0/23
195.85.209.0/24
195.128.172.0/23
195.128.180.0/23
195.160.174.0/23
Signature Algorithm: sha256WithRSAEncryption
62:3c:e1:62:f6:8f:bf:a5:06:64:a8:7c:a2:eb:96:00:8e:a8:
5b:13:26:d6:ff:1e:f2:44:02:fa:c0:3e:05:93:6a:fb:d4:85:
59:ed:2b:e2:1d:1e:ba:7d:16:f6:39:2d:c9:96:bb:39:3f:e4:
91:ec:3c:7d:78:dd:88:8b:ed:dd:cb:f1:52:5b:8a:2c:b1:f1:
32:fb:cb:bb:4b:03:80:a6:90:3a:46:7f:37:56:17:54:f1:44:
80:96:bb:42:6b:17:e6:69:dd:14:a6:be:16:a4:2c:76:4b:c7:
77:f5:94:d2:12:3c:28:b8:05:52:43:3e:f8:84:66:1a:65:21:
8f:d8:e0:ab:72:7b:01:4d:76:cd:ca:56:e5:97:ab:0b:2d:cf:
7a:08:71:0b:05:6f:84:ae:a4:96:44:4b:8a:72:f3:22:83:92:
1f:91:7d:f1:b4:61:49:ff:43:c7:8c:85:dc:5e:52:da:f4:16:
40:fd:ae:85:9f:d9:97:8d:3d:88:bd:67:9a:fe:f9:93:30:68:
69:2e:1d:ad:bf:eb:f6:e6:61:2c:98:df:14:aa:fb:16:6b:b7:
b7:b6:48:f8:01:36:ee:a6:99:5e:a4:95:7e:0c:12:84:f9:db:
83:6e:ba:79:48:6e:6c:74:f1:61:86:cf:e6:48:30:e6:4b:d1:
ee:14:ec:1c
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgISAZVBLGPq0obj1/IoC2feS1adMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMjI2MDczMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWI2NTdjZGQ1ZTYzNWFmN2JmZGVmOGVhNzhhMjE4NDZhN2M1NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54ji252hPZngMPp4UTUEv4QXeaXn
tmdB7Pycw5dmszAI3CM/ioIySlDd0vQQ2ztffuKAZNr+ze6yj6RxDs2/+ae2kX9w
qMlbLrZQlsztTHGs9S2jXq6y1ofWsQ6LdpSxVVfAELFJ/yh9svKr6TTqAoAu/d/V
iWIPEpmzn+fv/fMmbXH14q24RcwbhnlIdzi8FbvVrq/qychNxlIsUzw8oLehEpnR
JRn53K4qoNau3XPIsmAXuKW/23YhiGVR+bF1wnEyuuD54d0U3fng9mQ59eDcWlB8
jEpApMnmtdO/TIEq9O+ZxAuoykQVF8Y3BJdQI5U1gxRZYE94Lpe+NXw3BQIDAQAB
o4IC9DCCAvAwHQYDVR0OBBYEFAq2V83V5jWve/3vjqeKIYRqfFTBMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvQ3JaWHpkWG1OYTk3X2UtT3A0b2hoR3A4Vk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgABMIHrAwQB
VCiYMAwDBABUKJsDBAVUKIADBABUKNgwDAMEAVQo2gMEBVQowAMEAlQo6DAMAwQA
VCjtAwQEVCjgMAsDAwBdnwMEAV2fBAMEAF2fBzAMAwQCXZ8MAwQAXZ8OMAwDBARd
nxADBABdnxIDBABdnxQDBABdnxYwDAMEA12fGAMEAF2fHDAMAwQAXZ8hAwQAXZ8k
AwQAXZ8oAwQAXZ8qMAwDBABdny0DBAFdnzADBABdnzcwDAMEAF2fOQMEBl2fAAME
ArlIuAMEArmkjAMEAcIJTgMEAMNV0QMEAcOArAMEAcOAtAMEAcOgrjANBgkqhkiG
9w0BAQsFAAOCAQEAYjzhYvaPv6UGZKh8ouuWAI6oWxMm1v8e8kQC+sA+BZNq+9SF
We0r4h0eun0W9jktyZa7OT/kkew8fXjdiIvt3cvxUluKLLHxMvvLu0sDgKaQOkZ/
N1YXVPFEgJa7QmsX5mndFKa+FqQsdkvHd/WU0hI8KLgFUkM++IRmGmUhj9jgq3J7
AU12zcpW5ZerCy3PeghxCwVvhK6klkRLinLzIoOSH5F98bRhSf9Dx4yF3F5S2vQW
QP2uhZ/Zl409iL1nmv75kzBoaS4drb/r9uZhLJjfFKr7Fmu3t7ZI+AE27qaZXqSV
fgwShPnbg266eUhubHTxYYbP5kgw5kvR7hTsHA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:15 2025 by rpki-client