Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa
File: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (raw, json)
Hash identifier: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=
Subject key identifier: A4:0F:85:AB:F2:7A:03:94:8D:64:91:7D:F1:48:B1:ED:E4:8F:94:88
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC3BE3F42D36FD5461E0B7335989E2
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48851
IP address blocks: 92.61.228.0/24 maxlen: 24
92.61.230.0/24 maxlen: 24
92.61.231.0/24 maxlen: 24
92.61.232.0/24 maxlen: 24
92.61.236.0/24 maxlen: 24
92.61.237.0/24 maxlen: 24
92.61.238.0/24 maxlen: 24
94.188.137.0/24 maxlen: 24
94.188.194.0/24 maxlen: 24
94.188.201.0/24 maxlen: 24
94.188.202.0/24 maxlen: 24
94.188.203.0/24 maxlen: 24
94.188.205.0/24 maxlen: 24
94.188.206.0/24 maxlen: 24
94.188.207.0/24 maxlen: 24
94.188.208.0/24 maxlen: 24
94.188.209.0/24 maxlen: 24
94.188.210.0/24 maxlen: 24
94.188.211.0/24 maxlen: 24
94.188.212.0/24 maxlen: 24
94.188.214.0/24 maxlen: 24
94.188.215.0/24 maxlen: 24
94.188.216.0/24 maxlen: 24
94.188.222.0/24 maxlen: 24
94.188.223.0/24 maxlen: 24
94.188.224.0/24 maxlen: 24
94.188.225.0/24 maxlen: 24
94.188.226.0/24 maxlen: 24
94.188.227.0/24 maxlen: 24
94.188.228.0/24 maxlen: 24
94.188.229.0/24 maxlen: 24
94.188.230.0/24 maxlen: 24
94.188.231.0/24 maxlen: 24
94.188.232.0/24 maxlen: 24
94.188.233.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
94.188.235.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
94.188.237.0/24 maxlen: 24
94.188.239.0/24 maxlen: 24
94.188.240.0/24 maxlen: 24
94.188.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3b:e3:f4:2d:36:fd:54:61:e0:b7:33:59:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40f85abf27a03948d64917df148b1ede48f9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:69:b8:c4:3b:0a:65:33:02:4e:0e:af:c0:
8a:93:a9:e2:ae:72:d4:86:3f:fb:81:d7:4b:08:15:
2b:64:c9:14:c6:9c:0a:76:7b:5d:44:84:03:eb:b1:
cf:ff:5c:91:15:80:af:13:f0:0d:45:36:69:2e:4c:
3b:f1:76:17:60:7f:fb:96:95:3c:08:ad:d5:e6:9e:
37:72:75:11:61:d6:00:45:f9:ba:71:df:85:11:d8:
47:bd:34:37:10:be:22:81:89:da:d2:93:66:9b:a4:
86:95:a5:9b:0d:41:dd:88:34:2a:3e:34:ce:2b:b5:
11:d2:13:60:bb:42:a4:f0:0b:f7:a0:46:2c:77:75:
4d:2a:50:15:06:64:26:0b:28:e0:43:ac:2a:46:a0:
ee:b4:17:05:ce:87:f8:6c:20:e2:e6:e4:20:a9:fa:
7b:14:72:cd:03:26:7e:c1:0a:fd:e0:4f:fc:61:b4:
c6:c0:7e:c2:b2:98:82:57:03:82:b4:27:a7:1d:1c:
f1:55:f6:02:1b:20:c5:45:d9:72:e9:6a:f5:58:60:
92:7a:3f:50:21:1d:8c:61:2e:6f:5d:30:8f:40:bb:
c8:94:87:0e:e3:02:22:95:d2:9a:5f:a9:63:ac:1f:
d3:04:13:02:13:a8:4e:af:39:79:bd:53:e4:9e:cd:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:85:AB:F2:7A:03:94:8D:64:91:7D:F1:48:B1:ED:E4:8F:94:88
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.228.0/24
92.61.230.0-92.61.232.255
92.61.236.0-92.61.238.255
94.188.137.0/24
94.188.194.0/24
94.188.201.0-94.188.203.255
94.188.205.0-94.188.212.255
94.188.214.0-94.188.216.255
94.188.222.0-94.188.237.255
94.188.239.0-94.188.241.255
Signature Algorithm: sha256WithRSAEncryption
55:4c:42:6b:3d:22:75:f8:24:32:08:66:30:e8:b5:af:53:16:
d3:69:a5:74:d5:3e:b0:9e:f0:1e:cc:28:9b:73:4b:70:29:b0:
8f:ea:32:c5:63:f2:0b:39:dc:8a:80:74:99:e5:a4:73:b0:a4:
f6:f2:62:28:b3:bb:ee:9d:45:3a:b6:c3:72:af:f2:65:22:4d:
2b:8f:4f:fd:7e:d6:96:33:29:ee:8e:42:09:86:3b:ba:28:95:
a4:6f:c9:1b:7d:97:05:06:e4:ef:6b:b1:e2:b6:60:1e:c2:70:
05:5c:f2:2e:2d:fe:a8:a3:38:1d:fa:6c:b6:56:29:39:41:23:
45:1b:62:33:f3:5b:93:df:9a:39:85:b1:94:05:cb:29:60:66:
28:6d:ab:09:21:96:58:5f:50:8a:4b:b4:cc:37:6d:03:05:0a:
e4:a5:27:29:fa:88:91:7a:28:35:74:e0:50:d9:7d:b5:35:b9:
0a:33:60:ca:20:26:05:cd:25:ff:92:7a:05:71:c6:d9:25:c8:
9f:44:f0:89:31:0a:bf:32:61:c6:47:4a:b7:75:58:c4:07:d9:
f5:2f:12:dc:9c:3f:41:e4:33:24:df:e7:19:e0:09:35:66:2a:
13:95:b4:0b:12:fc:27:68:09:5f:7c:fb:2c:fc:87:8f:f9:50:
ab:59:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:51 2025 by rpki-client