Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/0dT9gx4qOXkpqZlNkbev_-uBl0c.roa
File: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (raw, json)
Hash identifier: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=
Subject key identifier: D1:D4:FD:83:1E:2A:39:79:29:A9:99:4D:91:B7:AF:FF:EB:81:97:47
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 019420685A51D4E5DCB4F3EBB69B2B2CC3A5
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/0dT9gx4qOXkpqZlNkbev_-uBl0c.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205952
IP address blocks: 62.213.72.0/21 maxlen: 21
62.213.94.0/23 maxlen: 23
62.213.102.0/23 maxlen: 23
62.213.112.0/23 maxlen: 23
62.213.116.0/24 maxlen: 24
185.48.236.0/22 maxlen: 22
212.24.37.0/24 maxlen: 24
212.24.39.0/24 maxlen: 24
212.24.40.0/24 maxlen: 24
212.24.43.0/24 maxlen: 24
212.24.50.0/24 maxlen: 24
212.24.57.0/24 maxlen: 24
212.158.168.0/24 maxlen: 24
212.158.170.0/23 maxlen: 23
212.158.174.0/23 maxlen: 23
217.23.129.0/24 maxlen: 24
217.23.139.0/24 maxlen: 24
217.23.152.0/21 maxlen: 21
2a01:9860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5a:51:d4:e5:dc:b4:f3:eb:b6:9b:2b:2c:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1d4fd831e2a397929a9994d91b7afffeb819747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:70:8d:2b:1b:2a:86:a7:eb:51:8e:10:c9:
ff:9a:c9:a7:b9:35:09:d5:3f:f9:d8:b2:ff:3c:04:
44:f7:70:c3:d3:d9:fa:78:c4:8b:31:8d:f6:9c:c4:
03:4c:55:af:12:fa:d0:60:58:b4:02:fc:52:9e:06:
9e:1f:38:ed:da:2b:11:30:79:e0:d3:2f:a6:00:17:
df:14:f0:c1:e1:5b:e9:5a:a7:29:b5:3f:7f:bf:3c:
36:25:3c:bd:c2:92:3d:91:63:d6:95:9a:a2:8b:a2:
54:30:33:37:e4:f0:ea:02:e6:f7:bd:b2:5d:69:24:
e5:9f:67:fa:32:e1:43:16:f0:67:5a:d6:f1:6b:7f:
f1:2b:66:d0:06:24:e9:4e:ac:c8:a6:09:66:56:d8:
9e:a9:9c:19:a9:86:57:38:e3:82:13:b9:9c:68:c1:
17:35:e8:ff:b1:21:d6:3a:99:af:81:75:2d:2e:23:
32:66:dd:bc:4b:c2:b7:35:0b:cf:4e:ec:41:49:e2:
53:ee:5e:50:73:4a:17:28:9a:4e:37:a9:ac:44:0d:
b6:5a:da:59:e4:12:3c:84:af:11:10:35:24:1a:dc:
28:1b:1f:d0:ce:a5:89:28:f6:69:3b:99:30:09:b3:
c6:79:93:9c:08:07:c9:10:cb:bd:f6:19:ea:07:a5:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:FD:83:1E:2A:39:79:29:A9:99:4D:91:B7:AF:FF:EB:81:97:47
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/0dT9gx4qOXkpqZlNkbev_-uBl0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.213.72.0/21
62.213.94.0/23
62.213.102.0/23
62.213.112.0/23
62.213.116.0/24
185.48.236.0/22
212.24.37.0/24
212.24.39.0-212.24.40.255
212.24.43.0/24
212.24.50.0/24
212.24.57.0/24
212.158.168.0/24
212.158.170.0/23
212.158.174.0/23
217.23.129.0/24
217.23.139.0/24
217.23.152.0/21
IPv6:
2a01:9860::/32
Signature Algorithm: sha256WithRSAEncryption
26:de:6c:17:18:a8:93:42:21:e2:06:ab:8f:ba:ea:ba:6b:51:
13:0e:bf:0e:38:6d:48:ce:84:fe:be:1c:7d:8a:5d:a9:10:56:
a4:ab:80:c4:89:d6:43:ab:f4:c3:16:48:2b:db:58:c7:54:92:
e6:da:44:d9:60:a4:97:01:5f:5a:a0:05:43:dd:00:00:88:8f:
0c:1d:d8:09:c2:c2:db:86:d4:28:6c:0b:87:c8:26:37:e4:fb:
c5:24:9f:05:2e:85:31:e8:ac:4f:65:d1:37:bc:a3:f6:be:39:
43:a3:f1:e0:31:78:67:84:ea:cf:80:1f:bb:db:cc:e8:7d:e9:
71:07:6c:82:77:72:7a:d2:4c:f2:6f:9a:9a:d8:87:c6:d8:0f:
e8:4b:33:6c:39:ea:3c:d7:4e:d9:a9:50:fa:1f:cb:55:d7:49:
1f:3c:ed:fc:df:f5:b5:15:3a:42:84:31:ff:91:49:ce:07:a2:
0f:33:03:8c:e5:a3:6b:77:75:02:5a:90:df:97:cd:1a:80:6d:
56:bb:65:70:06:90:a9:ac:cc:83:30:c5:ff:42:f2:84:0c:d1:
e2:96:a3:6a:52:7a:23:9e:6c:75:ee:52:d4:c1:fd:a6:69:b9:
c5:21:28:28:fd:36:22:7b:47:aa:a3:f1:af:30:50:aa:d3:1b:
e4:6c:dc:b1
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQgaFpR1OXctPPrtpsrLMOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1
NTBlYmQwHhcNMjUwMTAxMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWQ0ZmQ4MzFlMmEzOTc5MjlhOTk5NGQ5MWI3YWZmZmViODE5NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYhwjSsbKoan61GOEMn/msmnuTUJ
1T/52LL/PARE93DD09n6eMSLMY32nMQDTFWvEvrQYFi0AvxSngaeHzjt2isRMHng
0y+mABffFPDB4VvpWqcptT9/vzw2JTy9wpI9kWPWlZqii6JUMDM35PDqAub3vbJd
aSTln2f6MuFDFvBnWtbxa3/xK2bQBiTpTqzIpglmVtieqZwZqYZXOOOCE7mcaMEX
Nej/sSHWOpmvgXUtLiMyZt28S8K3NQvPTuxBSeJT7l5Qc0oXKJpON6msRA22WtpZ
5BI8hK8REDUkGtwoGx/QzqWJKPZpO5kwCbPGeZOcCAfJEMu99hnqB6WkxQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFNHU/YMeKjl5KamZTZG3r//rgZdHMB8GA1UdIwQY
MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt
MzE5NzExMDA5N2M5LzEvMGRUOWd4NHFPWGtwcVpsTmtiZXZfLXVCbDBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5
LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTB0BAIAATBuAwQDPtVI
AwQBPtVeAwQBPtVmAwQBPtVwAwQAPtV0AwQCuTDsAwQA1BglMAwDBADUGCcDBADU
GCgDBADUGCsDBADUGDIDBADUGDkDBADUnqgDBAHUnqoDBAHUnq4DBADZF4EDBADZ
F4sDBAPZF5gwDQQCAAIwBwMFACoBmGAwDQYJKoZIhvcNAQELBQADggEBACbebBcY
qJNCIeIGq4+66rprURMOvw44bUjOhP6+HH2KXakQVqSrgMSJ1kOr9MMWSCvbWMdU
kubaRNlgpJcBX1qgBUPdAACIjwwd2AnCwtuG1ChsC4fIJjfk+8UknwUuhTHorE9l
0Te8o/a+OUOj8eAxeGeE6s+AH7vbzOh96XEHbIJ3cnrSTPJvmprYh8bYD+hLM2w5
6jzXTtmpUPofy1XXSR887fzf9bUVOkKEMf+RSc4Hog8zA4zlo2t3dQJakN+XzRqA
bVa7ZXAGkKmszIMwxf9C8oQM0eKWo2pSeiOebHXuUtTB/aZpucUhKCj9NiJ7R6qj
8a8wUKrTG+Rs3LE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:23 2025 by rpki-client