Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/clYhAW8kFlSaTpdGL_6AqwLYC_c.roa
File: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (raw, json)
Hash identifier: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=
Subject key identifier: 72:56:21:01:6F:24:16:54:9A:4E:97:46:2F:FE:80:AB:02:D8:0B:F7
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 0194266B306920F5272D1CE3D92E100FB55B
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/clYhAW8kFlSaTpdGL_6AqwLYC_c.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 5.198.136.0/24 maxlen: 24
5.198.140.0/24 maxlen: 24
5.198.142.0/24 maxlen: 24
5.198.143.0/24 maxlen: 24
188.92.136.0/24 maxlen: 24
188.92.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:30:69:20:f5:27:2d:1c:e3:d9:2e:10:0f:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=725621016f2416549a4e97462ffe80ab02d80bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:f9:5f:e5:70:6a:e3:10:15:2b:c5:ba:8a:
60:8c:92:ea:3b:c5:29:b9:59:dd:32:21:fe:30:76:
7a:38:f7:0b:70:90:36:a0:bd:96:cc:d3:e0:1d:88:
ee:ce:d8:03:8c:fc:a6:8a:89:cc:b8:11:cd:db:2b:
cb:a0:3f:be:ab:64:9c:d2:e2:8f:01:c9:73:54:59:
0b:09:91:8f:2c:eb:90:76:3d:a7:0c:6e:14:d3:b1:
5b:c7:81:b9:0d:0b:99:c0:45:cc:6b:6a:70:83:e4:
20:3e:df:3f:4c:e3:ba:6b:4a:b0:01:58:fd:d4:bf:
f9:85:9b:8a:66:75:55:d2:30:e0:31:86:f3:c5:f0:
aa:09:1e:4c:b3:00:cc:69:1f:0c:dc:59:93:bd:a7:
19:56:6a:81:a2:de:10:86:5e:9c:c6:1f:d7:a5:76:
54:75:55:c5:85:f1:f0:c4:c3:bf:bd:52:3f:15:11:
ae:cc:c7:95:8c:08:40:b9:49:41:ff:2d:d9:0f:15:
a6:1d:d4:a2:61:5c:a7:74:09:13:d8:b7:68:54:0a:
d0:7c:7d:61:0c:a2:c6:24:c6:b9:ef:c0:9f:d7:c0:
42:90:30:27:ab:70:9e:d4:66:d2:01:bf:91:c7:bf:
84:8c:f3:6a:f0:fd:e5:72:e8:77:0c:4b:89:28:a7:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:21:01:6F:24:16:54:9A:4E:97:46:2F:FE:80:AB:02:D8:0B:F7
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/clYhAW8kFlSaTpdGL_6AqwLYC_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.136.0/24
5.198.140.0/24
5.198.142.0/23
188.92.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:75:ff:99:df:5b:13:6c:64:86:31:16:b5:d8:3c:1d:17:fa:
1b:0b:87:b6:1a:c2:e3:1c:0a:92:66:c0:cb:67:6e:56:43:4c:
73:c4:66:0e:c0:cc:5f:fc:45:e6:bf:30:37:7e:95:9b:7e:1e:
d7:8c:01:7a:f0:7b:c3:a0:98:2f:48:95:b0:29:a3:8d:4f:48:
1c:da:09:a0:7b:2b:b2:41:be:68:89:56:fc:59:aa:3d:bf:76:
3e:16:f6:d4:02:15:6e:87:d8:f4:05:22:57:71:6b:f5:1c:8d:
0e:f3:f4:2b:86:30:b8:72:c7:c7:9d:61:37:f7:4b:7f:95:a2:
9a:cf:b8:bf:43:25:b0:34:46:78:eb:a1:54:ae:23:73:47:ba:
bf:cb:bd:15:52:92:15:27:f1:69:ec:de:8c:e4:59:ec:8a:64:
be:8d:d1:11:6a:12:7d:b7:b1:e3:b9:03:30:81:8b:d1:1d:80:
eb:81:59:bd:49:7d:3a:3e:6b:43:96:bd:74:af:9e:17:78:0f:
ee:8f:ad:08:7b:60:b6:e6:08:be:e8:f9:2b:a6:8b:5f:9c:5a:
f6:12:98:e0:89:a6:35:5c:be:38:56:e0:8c:ed:da:f9:12:fe:
17:cb:43:25:05:7d:30:8b:40:6b:ce:6e:c5:5f:54:1a:ba:48:
30:ee:4b:11
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQmazBpIPUnLRzj2S4QD7VbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjUwMTAyMDk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU2MjEwMTZmMjQxNjU0OWE0ZTk3NDYyZmZlODBhYjAyZDgwYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5H5X+VwauMQFSvFuopgjJLqO8Up
uVndMiH+MHZ6OPcLcJA2oL2WzNPgHYjuztgDjPymionMuBHN2yvLoD++q2Sc0uKP
AclzVFkLCZGPLOuQdj2nDG4U07Fbx4G5DQuZwEXMa2pwg+QgPt8/TOO6a0qwAVj9
1L/5hZuKZnVV0jDgMYbzxfCqCR5MswDMaR8M3FmTvacZVmqBot4Qhl6cxh/XpXZU
dVXFhfHwxMO/vVI/FRGuzMeVjAhAuUlB/y3ZDxWmHdSiYVyndAkT2LdoVArQfH1h
DKLGJMa578Cf18BCkDAnq3Ce1GbSAb+Rx7+EjPNq8P3lcuh3DEuJKKc+NQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHJWIQFvJBZUmk6XRi/+gKsC2Av3MB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvY2xZaEFXOGtGbFNhVHBkR0xfNkFxd0xZQ19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABcaIAwQA
BcaMAwQBBcaOAwQBvFyIMA0GCSqGSIb3DQEBCwUAA4IBAQCzdf+Z31sTbGSGMRa1
2DwdF/obC4e2GsLjHAqSZsDLZ25WQ0xzxGYOwMxf/EXmvzA3fpWbfh7XjAF68HvD
oJgvSJWwKaONT0gc2gmgeyuyQb5oiVb8Wao9v3Y+FvbUAhVuh9j0BSJXcWv1HI0O
8/QrhjC4csfHnWE390t/laKaz7i/QyWwNEZ466FUriNzR7q/y70VUpIVJ/Fp7N6M
5FnsimS+jdERahJ9t7HjuQMwgYvRHYDrgVm9SX06PmtDlr10r54XeA/uj60Ie2C2
5gi+6PkrpotfnFr2EpjgiaY1XL44VuCM7dr5Ev4Xy0MlBX0wi0Brzm7FX1Qaukgw
7ksR
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:55:06 2025 by rpki-client