Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/oEDAb_-YZ2g4zh9tclXwopyXjP4.roa
File: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (raw, json)
Hash identifier: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=
Subject key identifier: A0:40:C0:6F:FF:98:67:68:38:CE:1F:6D:72:55:F0:A2:9C:97:8C:FE
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0194236A3222CC46E2D4201C71B8AC802955
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/oEDAb_-YZ2g4zh9tclXwopyXjP4.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15518
IP address blocks: 212.86.160.0/20 maxlen: 20
212.86.180.0/22 maxlen: 22
212.86.188.0/22 maxlen: 22
213.153.64.0/22 maxlen: 22
213.153.72.0/22 maxlen: 22
213.153.72.0/24 maxlen: 24
213.153.73.0/24 maxlen: 24
213.153.74.0/24 maxlen: 24
213.153.75.0/24 maxlen: 24
2a00:1180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:22:cc:46:e2:d4:20:1c:71:b8:ac:80:29:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a040c06fff98676838ce1f6d7255f0a29c978cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:c5:37:76:24:48:bc:67:27:2b:1d:d7:e0:
b0:d2:3c:9c:e7:30:cd:2c:04:97:02:db:68:91:f8:
34:19:6a:4d:fe:ba:a0:a7:96:74:0e:93:7c:62:05:
32:cb:11:ed:7c:71:4e:d3:a0:a4:b2:5a:c5:d7:7f:
90:88:c4:b9:66:d0:15:d9:d5:5f:91:2c:3a:80:b6:
6e:58:ca:51:35:e8:69:c3:f0:d6:1d:d5:1a:67:f2:
7b:0e:db:64:32:02:8b:b6:e6:09:fa:c6:24:48:6d:
72:a9:3b:1a:1d:6f:c8:c4:35:cf:29:ec:eb:90:bf:
e3:65:e6:67:d4:c3:e4:65:37:38:ec:c9:fa:a8:20:
af:9b:a1:f2:8d:a4:9d:b7:06:91:d6:f5:9a:de:a0:
83:86:c9:20:b1:16:f6:eb:cb:3b:99:6f:e0:45:ba:
71:a0:1b:d0:c4:eb:a8:bf:ea:7a:30:da:70:12:94:
56:c2:7a:99:e3:9c:a0:b2:5f:1d:fb:84:68:55:95:
df:c9:00:51:a0:8b:e7:f5:f1:4c:cc:77:c8:ae:10:
f0:52:bf:ea:13:1b:8d:9e:ce:64:28:0f:3a:f3:98:
1c:45:2f:96:a6:55:7b:76:84:55:fa:10:f2:23:60:
4c:86:26:85:11:2d:14:84:6a:3d:9c:78:0f:e8:83:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:C0:6F:FF:98:67:68:38:CE:1F:6D:72:55:F0:A2:9C:97:8C:FE
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/oEDAb_-YZ2g4zh9tclXwopyXjP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.160.0/20
212.86.180.0/22
212.86.188.0/22
213.153.64.0/22
213.153.72.0/22
IPv6:
2a00:1180::/32
Signature Algorithm: sha256WithRSAEncryption
91:d5:82:7b:73:36:a0:17:77:65:a1:d5:f9:ad:35:78:39:76:
cb:60:e3:b8:63:15:9d:a4:6c:70:bc:9b:84:c3:e7:6b:98:45:
01:41:9e:4e:e7:2c:4c:b2:88:86:08:b7:25:03:4e:50:0c:7e:
22:fc:90:65:8b:d8:11:01:05:0c:64:2d:19:23:0b:4c:37:83:
59:27:c2:7a:a9:47:0a:ac:08:fb:e8:3e:d4:45:ce:f4:4a:f8:
fd:19:8d:6c:ee:6b:bf:21:61:54:e6:f0:63:ae:7e:de:92:ef:
98:28:5f:0d:21:93:af:2f:23:29:74:8c:09:c4:a5:78:07:2e:
c8:8c:a7:9f:38:db:0c:f4:e7:9f:6f:bf:3c:f7:df:71:12:0b:
dc:24:f5:7b:42:55:18:fc:a4:a6:27:88:77:31:75:ee:09:fb:
a9:0e:58:14:4c:2d:8c:78:24:e6:e6:6c:18:97:f9:4a:87:61:
50:32:32:7f:d1:c6:d3:c4:07:fa:9e:fa:fb:5d:a5:26:6f:f1:
9a:5a:92:ee:14:b0:f8:43:51:12:74:1a:0c:30:b1:86:fa:9b:
ae:22:83:4c:7e:02:01:b8:8c:7f:bf:f5:fd:26:e5:7e:d8:40:
04:1a:f4:42:23:ce:2c:75:19:ec:65:2e:01:9a:13:d0:6f:4b:
83:cb:93:2b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQjajIizEbi1CAccbisgClVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjhlZGUyMGI3OGY5OTU5OTNkYTk4ZjQzNGE5NjYwNzRk
NTYyYzIwHhcNMjUwMTAxMTk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDQwYzA2ZmZmOTg2NzY4MzhjZTFmNmQ3MjU1ZjBhMjljOTc4Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPFN3YkSLxnJysd1+Cw0jyc5zDN
LASXAttokfg0GWpN/rqgp5Z0DpN8YgUyyxHtfHFO06CkslrF13+QiMS5ZtAV2dVf
kSw6gLZuWMpRNehpw/DWHdUaZ/J7DttkMgKLtuYJ+sYkSG1yqTsaHW/IxDXPKezr
kL/jZeZn1MPkZTc47Mn6qCCvm6HyjaSdtwaR1vWa3qCDhskgsRb268s7mW/gRbpx
oBvQxOuov+p6MNpwEpRWwnqZ45ygsl8d+4RoVZXfyQBRoIvn9fFMzHfIrhDwUr/q
ExuNns5kKA8685gcRS+WplV7doRV+hDyI2BMhiaFES0UhGo9nHgP6IMVewIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFKBAwG//mGdoOM4fbXJV8KKcl4z+MB8GA1UdIwQY
MBaAFCj47eILePmVmT2pj0NKlmB01WLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgt
OWQzYTBmMjNjYmU3LzEvb0VEQWJfLVlaMmc0emg5dGNsWHdvcHlYalA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmNmZmEtNjAyOS00MmRkLTllZjgtOWQzYTBmMjNjYmU3
LzEvS1BqdDRndDQtWldaUGFtUFEwcVdZSFRWWXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQE1FagAwQC
1Fa0AwQC1Fa8AwQC1ZlAAwQC1ZlIMA0EAgACMAcDBQAqABGAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR1YJ7czagF3dlodX5rTV4OXbLYOO4YxWdpGxwvJuEw+drmEUBQZ5O
5yxMsoiGCLclA05QDH4i/JBli9gRAQUMZC0ZIwtMN4NZJ8J6qUcKrAj76D7URc70
Svj9GY1s7mu/IWFU5vBjrn7eku+YKF8NIZOvLyMpdIwJxKV4By7IjKefONsM9Oef
b788999xEgvcJPV7QlUY/KSmJ4h3MXXuCfupDlgUTC2MeCTm5mwYl/lKh2FQMjJ/
0cbTxAf6nvr7XaUmb/GaWpLuFLD4Q1ESdBoMMLGG+puuIoNMfgIBuIx/v/X9JuV+
2EAEGvRCI84sdRnsZS4BmhPQb0uDy5Mr
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:22 2025 by rpki-client