Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/5PEhmSsylF5Cqau7beHA-5hPtJA.roa
File: 5PEhmSsylF5Cqau7beHA-5hPtJA.roa (raw, json)
Hash identifier: qg7bbX5JQ150gt7VxDeJGfpKO/e8RwLdHWGQ9Drrzh4=
Subject key identifier: E4:F1:21:99:2B:32:94:5E:42:A9:AB:BB:6D:E1:C0:FB:98:4F:B4:90
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019421B188E22ECDD1AA3355BEEEF645CE89
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/5PEhmSsylF5Cqau7beHA-5hPtJA.roa
Signing time: Wed 01 Jan 2025 11:47:50 +0000
ROA not before: Wed 01 Jan 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 139.83.0.0/16 maxlen: 16
185.175.184.0/22 maxlen: 22
192.122.238.0/23 maxlen: 23
192.122.240.0/23 maxlen: 23
192.122.242.0/24 maxlen: 24
193.136.0.0/15 maxlen: 24
193.236.0.0/20 maxlen: 20
193.236.97.0/24 maxlen: 24
193.236.98.0/23 maxlen: 23
193.236.102.0/23 maxlen: 23
193.236.104.0/21 maxlen: 21
193.236.112.0/21 maxlen: 21
193.236.124.0/22 maxlen: 22
193.236.153.0/24 maxlen: 24
193.236.154.0/23 maxlen: 23
193.236.157.0/24 maxlen: 24
193.236.158.0/23 maxlen: 23
193.236.160.0/20 maxlen: 20
193.236.178.0/23 maxlen: 23
193.236.180.0/22 maxlen: 22
193.236.184.0/21 maxlen: 21
193.236.192.0/18 maxlen: 18
194.117.0.0/20 maxlen: 20
194.117.16.0/21 maxlen: 21
194.117.40.0/21 maxlen: 21
194.117.48.0/23 maxlen: 23
194.210.0.0/16 maxlen: 24
2001:690::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:88:e2:2e:cd:d1:aa:33:55:be:ee:f6:45:ce:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f121992b32945e42a9abbb6de1c0fb984fb490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:c2:5c:c5:5b:15:12:b5:0d:5b:69:d6:52:
b1:d2:57:61:94:9c:43:2d:48:57:44:2d:58:4e:52:
ac:f9:75:7d:62:9d:49:90:53:50:5d:cf:29:4d:dd:
ea:e5:76:06:8f:c5:91:11:8f:5e:60:83:4d:cc:0f:
75:5a:9d:e9:aa:59:9d:c9:10:3f:70:94:83:0e:de:
bb:2e:98:8e:11:54:1e:97:eb:b1:00:77:e8:a7:82:
fa:af:cf:6a:e5:f0:f6:34:4e:5c:b2:3c:e4:3b:bb:
60:3a:0a:88:03:69:b6:de:e9:b0:02:f3:77:c0:6b:
0f:88:56:79:06:d1:de:8a:f5:1b:dc:7f:28:0c:d0:
ed:48:da:fe:ce:54:ff:18:de:34:30:fa:f9:a0:06:
3b:1a:7e:f2:fb:ac:53:78:14:7d:46:0c:cb:c4:3c:
a2:cb:3f:69:87:6c:45:4d:f6:02:e0:ca:fa:8b:f3:
b2:58:0c:1e:2e:1b:a9:c1:5c:79:c3:0e:33:d1:dc:
79:49:f4:32:93:f2:cb:74:18:f5:8f:7c:4d:9f:ef:
59:67:1c:0a:cc:47:6e:55:b6:95:00:73:08:6e:4b:
e0:9e:3c:cf:6c:6e:18:76:6c:49:7d:1b:da:a3:ce:
b8:ca:a4:ba:56:16:a7:87:cc:c9:32:0d:fd:67:7b:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:21:99:2B:32:94:5E:42:A9:AB:BB:6D:E1:C0:FB:98:4F:B4:90
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/5PEhmSsylF5Cqau7beHA-5hPtJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.83.0.0/16
185.175.184.0/22
192.122.238.0-192.122.242.255
193.136.0.0/15
193.236.0.0/20
193.236.97.0-193.236.99.255
193.236.102.0-193.236.119.255
193.236.124.0/22
193.236.153.0-193.236.155.255
193.236.157.0-193.236.175.255
193.236.178.0-193.236.255.255
194.117.0.0-194.117.23.255
194.117.40.0-194.117.49.255
194.210.0.0/16
IPv6:
2001:690::/32
Signature Algorithm: sha256WithRSAEncryption
1f:cc:80:31:af:48:83:92:01:c4:f4:8c:cf:0d:21:96:a9:8f:
af:4c:bd:75:09:be:15:db:71:73:b7:da:64:18:8c:54:66:eb:
02:50:b6:8e:16:a1:5d:7e:4a:0b:8c:bd:64:07:54:77:07:d2:
16:cc:56:39:7b:ab:7a:0d:62:09:b5:f0:d3:c6:a8:4a:09:5a:
43:41:28:8e:6c:a7:1c:69:ea:f4:84:8a:db:da:ca:81:6b:4d:
87:2c:23:3a:35:d1:21:63:53:69:0d:01:70:fb:02:9e:cb:e9:
da:09:b6:72:dc:5a:80:1f:23:e6:51:14:39:d9:b9:1f:0a:69:
69:e0:be:bc:47:ef:0f:fa:ab:96:b4:dd:cd:65:e3:ab:4a:44:
f6:a0:68:4f:35:85:c3:29:a6:76:94:96:1f:4a:93:ce:58:b7:
93:e5:56:d0:a1:b8:b4:6c:c6:fb:15:9c:bc:d9:9d:88:83:62:
77:3c:14:e5:81:88:2d:e4:1e:8b:25:ce:7b:41:36:d8:91:0d:
f3:6c:03:b2:ef:a3:13:83:bc:a7:c2:29:92:a0:c6:53:af:ce:
72:c8:33:c9:ae:b3:db:d0:ca:59:a6:b5:16:42:45:49:d0:bd:
08:1c:c4:ec:7e:a1:06:75:9f:9a:e3:fe:5b:20:e8:02:78:51:
3a:9d:ed:e7
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQhsYjiLs3RqjNVvu72Rc6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjUwMTAxMTE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGYxMjE5OTJiMzI5NDVlNDJhOWFiYmI2ZGUxYzBmYjk4NGZiNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6fCXMVbFRK1DVtp1lKx0ldhlJxD
LUhXRC1YTlKs+XV9Yp1JkFNQXc8pTd3q5XYGj8WREY9eYINNzA91Wp3pqlmdyRA/
cJSDDt67LpiOEVQel+uxAHfop4L6r89q5fD2NE5csjzkO7tgOgqIA2m23umwAvN3
wGsPiFZ5BtHeivUb3H8oDNDtSNr+zlT/GN40MPr5oAY7Gn7y+6xTeBR9RgzLxDyi
yz9ph2xFTfYC4Mr6i/OyWAweLhupwVx5ww4z0dx5SfQyk/LLdBj1j3xNn+9ZZxwK
zEduVbaVAHMIbkvgnjzPbG4YdmxJfRvao864yqS6Vhanh8zJMg39Z3v4SQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFOTxIZkrMpReQqmru23hwPuYT7SQMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvNVBFaG1Tc3lsRjVDcWF1N2JlSEEtNWhQdEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBlgQCAAEwgY8DAwCL
UwMEArmvuDAMAwQBwHruAwQAwHryAwMBwYgDBATB7AAwDAMEAMHsYQMEAsHsYDAM
AwQBwexmAwQDwexwAwQCwex8MAwDBADB7JkDBALB7JgwDAMEAMHsnQMEBMHsoDAL
AwQBweyyAwMAwewwCwMDAMJ1AwQDwnUQMAwDBAPCdSgDBAHCdTADAwDC0jANBAIA
AjAHAwUAIAEGkDANBgkqhkiG9w0BAQsFAAOCAQEAH8yAMa9Ig5IBxPSMzw0hlqmP
r0y9dQm+Fdtxc7faZBiMVGbrAlC2jhahXX5KC4y9ZAdUdwfSFsxWOXureg1iCbXw
08aoSglaQ0EojmynHGnq9ISK29rKgWtNhywjOjXRIWNTaQ0BcPsCnsvp2gm2ctxa
gB8j5lEUOdm5HwppaeC+vEfvD/qrlrTdzWXjq0pE9qBoTzWFwymmdpSWH0qTzli3
k+VW0KG4tGzG+xWcvNmdiINidzwU5YGILeQeiyXOe0E22JEN82wDsu+jE4O8p8Ip
kqDGU6/Ocsgzya6z29DKWaa1FkJFSdC9CBzE7H6hBnWfmuP+WyDoAnhROp3t5w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:49 2025 by rpki-client