Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/zW8H9236KdsFPYHIiVwdIlsjLeA.roa
File: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (raw, json)
Hash identifier: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=
Subject key identifier: CD:6F:07:F7:6D:FA:29:DB:05:3D:81:C8:89:5C:1D:22:5B:23:2D:E0
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 01942521812BF4FEC32A4F0C7D22CE2338A1
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/zW8H9236KdsFPYHIiVwdIlsjLeA.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209282
IP address blocks: 5.61.211.0/24 maxlen: 24
77.87.184.0/24 maxlen: 24
2a12:90c0:a0::/48 maxlen: 48
2a12:90c0:b0::/48 maxlen: 48
2a12:90c1::/40 maxlen: 40
2a12:90c1:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:81:2b:f4:fe:c3:2a:4f:0c:7d:22:ce:23:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd6f07f76dfa29db053d81c8895c1d225b232de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:da:3d:0d:3d:5d:a9:d2:89:b8:d0:e4:2a:
91:8a:c7:dc:4c:98:cd:26:9d:58:17:64:b7:77:ae:
4b:3d:be:16:3a:9b:16:a4:e4:d3:d2:1a:41:9c:ba:
f7:f5:bb:1e:51:70:a1:97:86:8c:5d:e7:0c:bc:13:
ee:8e:c5:5a:44:f3:8c:98:f7:16:a2:12:81:94:96:
86:a0:45:97:66:b2:fd:61:d2:db:0d:dd:41:2a:98:
59:c1:17:20:62:8d:9b:15:f4:87:9a:a3:c0:52:7c:
05:6b:9a:d1:1d:09:4a:a6:83:f7:6b:03:a1:39:03:
0a:3d:20:56:7b:0a:1e:89:db:d5:af:e2:05:5a:57:
42:95:3c:fe:f3:31:01:a1:f1:42:7d:63:19:81:8c:
cf:7d:fc:46:eb:92:0b:36:32:99:30:3e:cd:7c:76:
95:ea:0c:c1:e6:c1:0b:c8:41:2b:ba:d8:0f:40:00:
7d:a3:31:32:02:af:c3:3f:26:02:d4:48:c0:7d:a4:
be:9e:c8:6c:c4:bc:cf:86:ab:ec:7f:84:6f:c4:5f:
ff:45:dc:6d:65:5c:59:3d:32:45:bd:b0:74:fd:2e:
a9:d7:98:20:42:fe:fb:b8:a1:ad:c3:15:f4:84:38:
28:95:23:8f:4f:e7:c1:2e:6d:1b:3b:da:06:26:6d:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:07:F7:6D:FA:29:DB:05:3D:81:C8:89:5C:1D:22:5B:23:2D:E0
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/zW8H9236KdsFPYHIiVwdIlsjLeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.211.0/24
77.87.184.0/24
IPv6:
2a12:90c0:a0::/48
2a12:90c0:b0::/48
2a12:90c1::/39
Signature Algorithm: sha256WithRSAEncryption
ab:78:80:ae:98:1b:ea:66:9d:8c:78:6a:0b:e5:a5:fe:a8:d3:
1f:a7:fb:d6:04:ac:b9:2c:a3:20:c3:79:08:59:ff:c6:05:da:
7b:52:57:d9:de:61:69:04:4d:ce:85:8a:23:3c:2f:57:a5:35:
2f:fc:a5:ce:89:ee:5a:e8:f7:3c:80:b3:dc:9d:7f:2d:99:49:
d4:82:a9:24:28:2f:7e:d8:04:3b:81:75:8f:f6:e2:0b:bc:85:
c3:32:66:2a:70:78:0c:1b:d7:a5:c8:77:07:c9:6e:19:8f:ab:
36:25:79:c4:86:73:6b:5e:75:8a:a6:86:64:84:71:aa:0b:40:
a9:77:7d:b6:d6:ea:8c:a6:15:f8:42:9b:2b:da:43:02:28:4b:
b5:ec:84:bf:1a:88:47:c6:5a:61:29:08:9c:37:93:1a:25:e7:
b0:3d:05:af:76:47:1e:55:d3:4d:f7:b1:c1:ce:f1:d7:4c:52:
f0:ff:ab:b8:ce:98:45:5a:37:69:98:4e:0d:7d:41:6a:57:f3:
d8:62:a8:59:c2:89:56:3a:f7:9a:5a:00:43:48:86:ab:bc:41:
4c:49:7a:8f:22:d7:d5:20:c6:b0:5f:6c:8b:3f:2d:80:66:8b:
c7:7e:de:a3:27:4b:63:f6:fd:66:2e:c1:91:c2:72:b3:55:de:
bd:a6:56:c0
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQlIYEr9P7DKk8MfSLOIzihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDI2MTY1NTQ2MzIzNTY0NTBiYzRiYjRiNmRhY2ZjNzlk
ZjMwMjUwHhcNMjUwMTAyMDM0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDZmMDdmNzZkZmEyOWRiMDUzZDgxYzg4OTVjMWQyMjViMjMyZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbTaPQ09XanSibjQ5CqRisfcTJjN
Jp1YF2S3d65LPb4WOpsWpOTT0hpBnLr39bseUXChl4aMXecMvBPujsVaRPOMmPcW
ohKBlJaGoEWXZrL9YdLbDd1BKphZwRcgYo2bFfSHmqPAUnwFa5rRHQlKpoP3awOh
OQMKPSBWewoeidvVr+IFWldClTz+8zEBofFCfWMZgYzPffxG65ILNjKZMD7NfHaV
6gzB5sELyEErutgPQAB9ozEyAq/DPyYC1EjAfaS+nshsxLzPhqvsf4RvxF//Rdxt
ZVxZPTJFvbB0/S6p15ggQv77uKGtwxX0hDgolSOPT+fBLm0bO9oGJm1xdwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFM1vB/dt+inbBT2ByIlcHSJbIy3gMB8GA1UdIwQY
MBaAFL0CYWVUYyNWRQvEu0ttrPx53zAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUt
OWUxOWQwOGNiNzFmLzEvelc4SDkyMzZLZHNGUFlISWlWd2RJbHNqTGVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUtOWUxOWQwOGNiNzFm
LzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjASBAIAATAMAwQABT3TAwQA
TVe4MCAEAgACMBoDBwAqEpDAAKADBwAqEpDAALADBgEqEpDBADANBgkqhkiG9w0B
AQsFAAOCAQEAq3iArpgb6madjHhqC+Wl/qjTH6f71gSsuSyjIMN5CFn/xgXae1JX
2d5haQRNzoWKIzwvV6U1L/ylzonuWuj3PICz3J1/LZlJ1IKpJCgvftgEO4F1j/bi
C7yFwzJmKnB4DBvXpch3B8luGY+rNiV5xIZza151iqaGZIRxqgtAqXd9ttbqjKYV
+EKbK9pDAihLteyEvxqIR8ZaYSkInDeTGiXnsD0Fr3ZHHlXTTfexwc7x10xS8P+r
uM6YRVo3aZhODX1Balfz2GKoWcKJVjr3mloAQ0iGq7xBTEl6jyLX1SDGsF9siz8t
gGaLx37eoydLY/b9Zi7BkcJys1XevaZWwA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:33 2025 by rpki-client