Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/iyPNjwJabCXXK6p6-uFNI9tlBmA.roa
File: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (raw, json)
Hash identifier: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=
Subject key identifier: 8B:23:CD:8F:02:5A:6C:25:D7:2B:AA:7A:FA:E1:4D:23:DB:65:06:60
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 0194258FA996AA28EE906C72E4E8290843A1
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/iyPNjwJabCXXK6p6-uFNI9tlBmA.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203924
IP address blocks: 85.117.252.0/22 maxlen: 22
85.117.252.0/23 maxlen: 23
85.117.254.0/23 maxlen: 23
185.113.144.0/22 maxlen: 22
185.113.144.0/24 maxlen: 24
185.113.145.0/24 maxlen: 24
185.113.146.0/24 maxlen: 24
185.113.147.0/24 maxlen: 24
185.146.36.0/22 maxlen: 22
185.146.36.0/24 maxlen: 24
185.146.37.0/24 maxlen: 24
185.146.38.0/23 maxlen: 23
185.216.120.0/22 maxlen: 22
185.216.120.0/24 maxlen: 24
185.216.121.0/24 maxlen: 24
185.216.122.0/23 maxlen: 23
193.105.0.0/24 maxlen: 24
2a06:6a40::/29 maxlen: 29
2a07:4d00::/29 maxlen: 29
2a07:4d00::/30 maxlen: 30
2a07:4d04::/30 maxlen: 30
2a0b:b640::/29 maxlen: 29
2a0b:b640::/30 maxlen: 30
2a0b:b644::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:96:aa:28:ee:90:6c:72:e4:e8:29:08:43:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b23cd8f025a6c25d72baa7afae14d23db650660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:80:06:48:86:ec:6a:d5:47:9a:08:15:1c:
b2:ed:85:b2:d7:d4:e0:f6:bd:0f:bf:8f:37:f3:4b:
5b:35:66:bc:b7:c8:b8:b5:c1:50:2a:37:e8:ef:59:
fc:cd:fd:52:1a:20:2d:6d:79:b4:22:44:1b:b1:3d:
40:1a:a1:87:8c:32:b6:92:86:12:03:06:90:10:a8:
0a:1d:af:db:30:ff:cd:0e:69:ef:b0:41:62:a9:fc:
8e:93:64:15:f6:c7:86:dc:5d:56:48:37:b9:9d:c4:
11:fb:be:48:55:6d:07:a4:b8:33:f4:d1:1e:0b:07:
69:2a:bb:35:ce:36:93:9e:62:de:73:c3:66:b6:59:
5e:c1:c8:d0:7e:f1:af:54:bf:9f:be:e1:ff:5f:89:
af:7c:61:00:a2:a2:32:28:e9:35:7f:65:a0:90:74:
72:1e:ab:ac:d6:b9:87:7e:6a:a6:0b:d1:4c:a2:d3:
cb:ab:93:8d:db:70:38:68:53:f0:01:39:fb:7a:57:
ac:c8:03:07:e4:05:61:eb:7e:90:52:fe:1e:cc:f8:
e8:66:ee:30:58:11:c1:da:e9:7d:2c:a3:18:a4:13:
f4:cc:94:ff:0b:85:2b:e9:d2:d2:be:9e:a4:c1:64:
bc:b3:a1:3e:67:5f:22:cf:f2:f9:9c:0d:60:12:eb:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:CD:8F:02:5A:6C:25:D7:2B:AA:7A:FA:E1:4D:23:DB:65:06:60
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/iyPNjwJabCXXK6p6-uFNI9tlBmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.252.0/22
185.113.144.0/22
185.146.36.0/22
185.216.120.0/22
193.105.0.0/24
IPv6:
2a06:6a40::/29
2a07:4d00::/29
2a0b:b640::/29
Signature Algorithm: sha256WithRSAEncryption
45:41:a6:ef:6b:6a:4f:c0:49:26:c8:bc:50:bb:42:28:06:b2:
06:d5:cb:47:e3:8f:19:7d:d1:1b:b5:b8:5d:c9:79:cd:4f:ab:
96:16:8b:b9:17:71:7a:1f:20:0d:d7:4b:08:da:3e:9e:40:f5:
56:3c:a6:ad:4f:1f:67:82:83:45:30:07:b1:16:d8:bd:ba:30:
d8:80:27:8f:30:65:11:46:a8:f6:7a:5b:1b:5a:3c:87:26:7d:
6e:11:37:8c:f2:0b:62:80:df:2f:67:0f:57:ec:ee:4d:50:9d:
a2:f5:f2:61:00:c8:92:1b:06:2f:a1:05:25:50:1d:d4:ca:e3:
d2:9e:57:7e:3d:d8:5b:e2:33:58:3b:b5:25:72:e7:d2:24:1c:
97:f1:c2:16:3b:78:d0:2d:02:fd:23:08:89:b8:ef:40:57:a4:
6b:05:0f:17:d5:72:f1:af:d7:4c:c5:65:1e:4f:a2:14:68:5c:
13:a5:4b:d1:5f:13:9c:6b:9e:b6:aa:f4:b0:c7:20:a3:3e:f1:
be:af:71:1f:65:e1:1a:f0:ea:2a:a9:1d:d1:02:18:08:64:55:
e5:5b:4f:d7:3b:9e:31:19:9e:63:79:fc:88:ed:41:27:ee:d1:
51:57:29:76:c8:0b:fd:d3:5b:6b:ff:ab:db:c6:a4:e1:f0:2a:
be:b4:07:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZQlj6mWqijukGxy5OgpCEOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTBmNmI3NWU5MTNmMjc4MmVkNTQ5ZWI3MjE3MmM1OWNj
NDdhZjEwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjIzY2Q4ZjAyNWE2YzI1ZDcyYmFhN2FmYWUxNGQyM2RiNjUwNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1uABkiG7GrVR5oIFRyy7YWy19Tg
9r0Pv48380tbNWa8t8i4tcFQKjfo71n8zf1SGiAtbXm0IkQbsT1AGqGHjDK2koYS
AwaQEKgKHa/bMP/NDmnvsEFiqfyOk2QV9seG3F1WSDe5ncQR+75IVW0HpLgz9NEe
CwdpKrs1zjaTnmLec8NmtllewcjQfvGvVL+fvuH/X4mvfGEAoqIyKOk1f2WgkHRy
Hqus1rmHfmqmC9FMotPLq5ON23A4aFPwATn7elesyAMH5AVh636QUv4ezPjoZu4w
WBHB2ul9LKMYpBP0zJT/C4Ur6dLSvp6kwWS8s6E+Z18iz/L5nA1gEuvnrwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFIsjzY8CWmwl1yuqevrhTSPbZQZgMB8GA1UdIwQY
MBaAFI+Q9rdekT8ngu1UnrchcsWcxHrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQt
YzFkMGFjYjc4MTlhLzEvaXlQTmp3SmFiQ1hYSzZwNi11Rk5JOXRsQm1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQtYzFkMGFjYjc4MTlh
LzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQCVXX8AwQC
uXGQAwQCuZIkAwQCudh4AwQAwWkAMBsEAgACMBUDBQMqBmpAAwUDKgdNAAMFAyoL
tkAwDQYJKoZIhvcNAQELBQADggEBAEVBpu9rak/ASSbIvFC7QigGsgbVy0fjjxl9
0Ru1uF3Jec1Pq5YWi7kXcXofIA3XSwjaPp5A9VY8pq1PH2eCg0UwB7EW2L26MNiA
J48wZRFGqPZ6WxtaPIcmfW4RN4zyC2KA3y9nD1fs7k1QnaL18mEAyJIbBi+hBSVQ
HdTK49KeV3492FviM1g7tSVy59IkHJfxwhY7eNAtAv0jCIm470BXpGsFDxfVcvGv
10zFZR5PohRoXBOlS9FfE5xrnraq9LDHIKM+8b6vcR9l4Rrw6iqpHdECGAhkVeVb
T9c7njEZnmN5/IjtQSfu0VFXKXbIC/3TW2v/q9vGpOHwKr60B4s=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:26 2025 by rpki-client