Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CcK82TyBiIzahi9LQ9AQZjkmAqg.roa
File: CcK82TyBiIzahi9LQ9AQZjkmAqg.roa (raw, json)
Hash identifier: ilef0xuZNWMM976dYUGeIdZsouF8HmVBGpVBJoCFWf4=
Subject key identifier: 09:C2:BC:D9:3C:81:88:8C:DA:86:2F:4B:43:D0:10:66:39:26:02:A8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDAB3F97D8A1DC470FD3C48AD5987
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CcK82TyBiIzahi9LQ9AQZjkmAqg.roa
Signing time: Thu 02 Jan 2025 05:49:32 +0000
ROA not before: Thu 02 Jan 2025 05:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61390
IP address blocks: 92.38.33.0/24 maxlen: 24
93.170.108.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
93.170.232.0/22 maxlen: 24
93.171.40.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
95.46.116.0/22 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
146.120.252.0/22 maxlen: 24
146.158.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:da:b3:f9:7d:8a:1d:c4:70:fd:3c:48:ad:59:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09c2bcd93c81888cda862f4b43d01066392602a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:56:5c:99:10:d6:75:11:c4:c5:4c:18:d7:
5a:c5:73:24:e0:09:c9:37:e2:9c:a1:7f:88:4d:ef:
57:5e:dc:df:a1:bc:af:4d:cf:16:00:7e:a4:1e:95:
4c:de:be:03:1d:76:85:18:a7:3c:0e:4d:f8:84:f2:
e1:6c:f6:a8:11:32:19:c7:1b:aa:a4:2f:29:c7:98:
be:03:7c:e1:42:bf:4e:3b:7a:ca:13:48:04:ff:43:
ef:1e:d6:b6:51:6c:f7:fd:96:61:17:d2:38:0b:0e:
a6:e1:57:45:f7:92:03:f4:4d:54:2d:18:19:d3:c0:
3b:78:5b:86:eb:ac:6f:c6:54:12:74:1f:ae:dc:9b:
9c:60:1f:81:e1:c1:f4:ab:d4:4c:e5:97:8a:b5:81:
37:22:b7:a1:99:5e:36:02:99:bd:ba:18:48:1e:d4:
25:58:91:f3:5a:70:a7:b4:ad:b7:54:4f:87:eb:c4:
2e:e9:e7:ae:b3:4b:f5:4a:ee:7e:ff:9f:0a:bd:34:
86:aa:b4:76:de:5d:2b:aa:28:c5:18:db:e3:2d:14:
4e:9d:73:2b:85:64:ac:e1:16:e7:61:9a:7d:57:8f:
9b:26:21:95:eb:5f:bd:c1:51:a8:11:ff:41:65:25:
02:42:aa:f4:1f:4f:d7:06:00:61:ae:ec:48:59:78:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:BC:D9:3C:81:88:8C:DA:86:2F:4B:43:D0:10:66:39:26:02:A8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CcK82TyBiIzahi9LQ9AQZjkmAqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.108.0/22
93.170.180.0/22
93.170.232.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.120.252.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:36:df:c0:34:c9:0e:9d:dd:29:b3:5a:63:e7:0a:4e:a3:48:
65:c2:a1:98:87:ba:3f:da:46:44:f1:01:7b:a6:95:34:4b:c3:
8b:45:89:18:83:9d:2b:c2:ee:28:30:e4:ab:97:5e:2c:10:10:
67:05:22:a0:15:31:6d:23:76:bf:97:86:23:87:65:ca:42:3d:
ac:ad:48:78:94:28:c4:64:d3:3c:86:b1:3c:b9:1c:0b:b7:1a:
0d:31:26:e1:c4:59:bc:d2:3b:95:01:67:69:f2:91:48:df:fd:
0d:fc:c5:0f:ff:6f:86:90:d4:81:1b:60:ba:a9:50:80:3b:2d:
2c:d6:d0:db:a5:0d:c1:41:2d:4a:7c:e5:fd:58:7a:19:14:e8:
e7:d2:ac:d9:ae:f3:3c:62:61:48:72:9a:46:6a:54:8c:d5:4a:
26:37:d6:d9:b7:7d:c7:d6:9d:cf:f9:d4:08:48:d4:3e:54:4d:
9d:14:30:d6:8a:5f:09:f6:d0:c8:f3:47:dd:27:a7:98:31:ee:
ad:c5:c8:fe:f9:9a:60:4e:52:f8:72:93:c6:98:ec:07:58:f0:
52:11:9f:ba:9e:12:c9:5e:53:9e:9f:90:e6:d6:a4:87:2d:3b:
74:1f:ec:7d:0d:e0:66:99:df:37:6d:b7:8d:73:1e:41:69:60:
08:7c:0b:9a
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZQlj9qz+X2KHcRw/TxIrVmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWMyYmNkOTNjODE4ODhjZGE4NjJmNGI0M2QwMTA2NjM5MjYwMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5lWXJkQ1nURxMVMGNdaxXMk4AnJ
N+KcoX+ITe9XXtzfobyvTc8WAH6kHpVM3r4DHXaFGKc8Dk34hPLhbPaoETIZxxuq
pC8px5i+A3zhQr9OO3rKE0gE/0PvHta2UWz3/ZZhF9I4Cw6m4VdF95ID9E1ULRgZ
08A7eFuG66xvxlQSdB+u3JucYB+B4cH0q9RM5ZeKtYE3IrehmV42Apm9uhhIHtQl
WJHzWnCntK23VE+H68Qu6eeus0v1Su5+/58KvTSGqrR23l0rqijFGNvjLRROnXMr
hWSs4RbnYZp9V4+bJiGV61+9wVGoEf9BZSUCQqr0H0/XBgBhruxIWXgDFQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFAnCvNk8gYiM2oYvS0PQEGY5JgKoMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvQ2NLODJUeUJpSXphaGk5TFE5QVFaamttQXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAXCYhAwQC
XapsAwQCXaq0AwQCXaroAwQCXasoAwQBXau2AwQCXy50AwQCknh4AwQCknjsAwQC
knj8AwQCkp48MA0GCSqGSIb3DQEBCwUAA4IBAQCoNt/ANMkOnd0ps1pj5wpOo0hl
wqGYh7o/2kZE8QF7ppU0S8OLRYkYg50rwu4oMOSrl14sEBBnBSKgFTFtI3a/l4Yj
h2XKQj2srUh4lCjEZNM8hrE8uRwLtxoNMSbhxFm80juVAWdp8pFI3/0N/MUP/2+G
kNSBG2C6qVCAOy0s1tDbpQ3BQS1KfOX9WHoZFOjn0qzZrvM8YmFIcppGalSM1Uom
N9bZt33H1p3P+dQISNQ+VE2dFDDWil8J9tDI80fdJ6eYMe6txcj++ZpgTlL4cpPG
mOwHWPBSEZ+6nhLJXlOen5Dm1qSHLTt0H+x9DeBmmd83bbeNcx5BaWAIfAua
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:56 2025 by rpki-client