Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9MJG__3-VzreHxPYMPvicFLZs6U.roa
File: 9MJG__3-VzreHxPYMPvicFLZs6U.roa (raw, json)
Hash identifier: Pl5Qs4K/YFJBG1Z94x6u+dmcRBlspsuRIKh+YloFCzc=
Subject key identifier: F4:C2:46:FF:FD:FE:57:3A:DE:1F:13:D8:30:FB:E2:70:52:D9:B3:A5
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CEB2F56F9CC2E85E2287D5E17BAD
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9MJG__3-VzreHxPYMPvicFLZs6U.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 45.85.66.0/24 maxlen: 24
45.94.20.0/24 maxlen: 24
45.140.175.0/24 maxlen: 24
45.141.197.0/24 maxlen: 24
45.144.37.0/24 maxlen: 24
45.145.88.0/24 maxlen: 24
45.145.89.0/24 maxlen: 24
45.145.91.0/24 maxlen: 24
45.145.169.0/24 maxlen: 24
45.145.170.0/24 maxlen: 24
45.146.168.0/24 maxlen: 24
45.146.169.0/24 maxlen: 24
45.146.171.0/24 maxlen: 24
45.146.230.0/24 maxlen: 24
45.146.231.0/24 maxlen: 24
45.147.0.0/24 maxlen: 24
45.148.240.0/24 maxlen: 24
45.148.241.0/24 maxlen: 24
45.148.242.0/24 maxlen: 24
45.149.132.0/24 maxlen: 24
45.149.135.0/24 maxlen: 24
45.150.60.0/24 maxlen: 24
45.150.61.0/24 maxlen: 24
45.152.224.0/24 maxlen: 24
45.152.226.0/24 maxlen: 24
45.153.52.0/24 maxlen: 24
45.153.53.0/24 maxlen: 24
45.153.54.0/24 maxlen: 24
45.153.55.0/24 maxlen: 24
45.154.160.0/24 maxlen: 24
45.154.161.0/24 maxlen: 24
45.154.163.0/24 maxlen: 24
45.155.61.0/24 maxlen: 24
91.191.184.0/24 maxlen: 24
91.220.81.0/24 maxlen: 24
91.221.39.0/24 maxlen: 24
91.230.38.0/24 maxlen: 24
91.230.39.0/24 maxlen: 24
92.249.12.0/24 maxlen: 24
92.249.15.0/24 maxlen: 24
109.94.210.0/24 maxlen: 24
109.196.172.0/24 maxlen: 24
193.150.99.0/24 maxlen: 24
194.32.222.0/24 maxlen: 24
194.55.102.0/24 maxlen: 24
194.55.105.0/24 maxlen: 24
194.61.77.0/24 maxlen: 24
194.156.93.0/24 maxlen: 24
195.245.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:b2:f5:6f:9c:c2:e8:5e:22:87:d5:e1:7b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4c246fffdfe573ade1f13d830fbe27052d9b3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:6f:af:f6:b7:17:70:2c:e8:6a:46:13:f7:
26:60:ed:62:e6:97:98:f5:7c:83:9b:7a:c3:4a:18:
a0:f5:b6:90:d0:00:e3:a5:a0:2d:0b:8f:fc:2f:56:
05:6f:99:73:a8:85:56:c2:aa:4e:40:29:bc:fa:14:
60:82:54:1a:fd:51:0e:57:7d:6b:42:75:d1:5a:87:
92:bf:75:f9:64:c7:9b:85:0f:07:35:2d:a0:b9:d8:
16:99:ef:66:0b:3d:a8:5d:08:f8:7c:b3:c0:93:4e:
b1:91:a5:2c:b6:5d:5e:a1:99:3e:e4:69:f7:27:98:
e4:40:44:51:44:ae:5e:c2:27:b6:91:2c:c2:e6:bf:
67:98:25:c8:01:e1:a9:9c:c7:d3:3d:ce:7d:28:20:
55:a0:d5:1e:13:a4:e7:b0:11:bb:b4:33:86:c7:0c:
92:d5:f7:14:96:fd:0e:0a:52:5c:9b:ad:03:c5:75:
fd:22:5f:6f:44:af:ba:1d:44:3c:bf:11:14:60:aa:
c3:ce:85:20:fd:27:b5:6a:19:f6:19:7b:72:0e:9f:
c9:6d:26:93:77:52:22:9e:a1:55:73:0f:72:ce:cc:
45:e5:eb:55:5d:62:37:2e:02:7b:da:69:81:33:54:
00:65:a6:a3:36:12:79:f0:f3:d2:56:1b:76:f3:e1:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:46:FF:FD:FE:57:3A:DE:1F:13:D8:30:FB:E2:70:52:D9:B3:A5
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9MJG__3-VzreHxPYMPvicFLZs6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.66.0/24
45.94.20.0/24
45.140.175.0/24
45.141.197.0/24
45.144.37.0/24
45.145.88.0/23
45.145.91.0/24
45.145.169.0-45.145.170.255
45.146.168.0/23
45.146.171.0/24
45.146.230.0/23
45.147.0.0/24
45.148.240.0-45.148.242.255
45.149.132.0/24
45.149.135.0/24
45.150.60.0/23
45.152.224.0/24
45.152.226.0/24
45.153.52.0/22
45.154.160.0/23
45.154.163.0/24
45.155.61.0/24
91.191.184.0/24
91.220.81.0/24
91.221.39.0/24
91.230.38.0/23
92.249.12.0/24
92.249.15.0/24
109.94.210.0/24
109.196.172.0/24
193.150.99.0/24
194.32.222.0/24
194.55.102.0/24
194.55.105.0/24
194.61.77.0/24
194.156.93.0/24
195.245.103.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f9:a4:15:b2:59:77:01:7e:b5:b5:8c:7f:72:2e:b3:39:b8:
03:19:5f:51:4c:e7:96:a0:f3:7b:aa:cb:94:85:2e:9e:fb:e4:
69:b4:79:08:ae:9b:67:c0:6c:19:8b:3d:f0:ef:e3:52:24:80:
d7:ca:2e:f0:03:6d:9a:70:f7:d7:ff:a8:76:3e:4c:9b:3d:5e:
20:de:f5:71:08:76:65:80:b9:39:3e:f7:e6:b1:5a:59:08:01:
04:a7:e0:f9:41:eb:65:86:fc:b6:ad:f7:f5:b4:3d:49:1f:b9:
00:de:70:70:1a:e6:b8:27:5e:63:35:e8:e2:2f:29:a8:4f:2d:
10:09:92:ac:30:22:20:ea:3b:e9:7b:43:71:f3:bb:41:41:46:
e5:0c:dc:8d:75:9c:71:9e:81:0d:ff:34:26:c8:73:42:57:7a:
c4:6e:c7:e6:92:d3:15:4c:88:cd:b4:fd:a8:ec:cd:5e:bb:57:
3c:91:84:07:48:49:38:8d:d9:b0:b0:82:9d:35:31:f7:23:ff:
41:b0:af:3b:f7:c4:4a:3c:f0:87:e5:08:fe:d6:e3:99:f6:06:
f8:6b:de:a0:2a:65:2e:76:59:ba:8f:a0:d7:61:0c:0a:ba:68:
06:c4:aa:28:b8:bb:33:a4:56:49:15:21:92:c4:24:d3:2e:d9:
e3:ba:aa:14
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAZQg1c6y9W+cwuheIofV4XutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGMyNDZmZmZkZmU1NzNhZGUxZjEzZDgzMGZiZTI3MDUyZDliM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTpvr/a3F3As6GpGE/cmYO1i5peY
9XyDm3rDShig9baQ0ADjpaAtC4/8L1YFb5lzqIVWwqpOQCm8+hRgglQa/VEOV31r
QnXRWoeSv3X5ZMebhQ8HNS2gudgWme9mCz2oXQj4fLPAk06xkaUstl1eoZk+5Gn3
J5jkQERRRK5ewie2kSzC5r9nmCXIAeGpnMfTPc59KCBVoNUeE6TnsBG7tDOGxwyS
1fcUlv0OClJcm60DxXX9Il9vRK+6HUQ8vxEUYKrDzoUg/Se1ahn2GXtyDp/JbSaT
d1IinqFVcw9yzsxF5etVXWI3LgJ72mmBM1QAZaajNhJ58PPSVht28+GK/wIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFPTCRv/9/lc63h8T2DD74nBS2bOlMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvOU1KR19fMy1WenJlSHhQWU1QdmljRkxaczZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA
LVVCAwQALV4UAwQALYyvAwQALY3FAwQALZAlAwQBLZFYAwQALZFbMAwDBAAtkakD
BAAtkaoDBAEtkqgDBAAtkqsDBAEtkuYDBAAtkwAwDAMEBC2U8AMEAC2U8gMEAC2V
hAMEAC2VhwMEAS2WPAMEAC2Y4AMEAC2Y4gMEAi2ZNAMEAS2aoAMEAC2aowMEAC2b
PQMEAFu/uAMEAFvcUQMEAFvdJwMEAVvmJgMEAFz5DAMEAFz5DwMEAG1e0gMEAG3E
rAMEAMGWYwMEAMIg3gMEAMI3ZgMEAMI3aQMEAMI9TQMEAMKcXQMEAMP1ZzANBgkq
hkiG9w0BAQsFAAOCAQEAZPmkFbJZdwF+tbWMf3Iuszm4AxlfUUznlqDze6rLlIUu
nvvkabR5CK6bZ8BsGYs98O/jUiSA18ou8ANtmnD31/+odj5Mmz1eIN71cQh2ZYC5
OT735rFaWQgBBKfg+UHrZYb8tq339bQ9SR+5AN5wcBrmuCdeYzXo4i8pqE8tEAmS
rDAiIOo76XtDcfO7QUFG5QzcjXWccZ6BDf80JshzQld6xG7H5pLTFUyIzbT9qOzN
XrtXPJGEB0hJOI3ZsLCCnTUx9yP/QbCvO/fESjzwh+UI/tbjmfYG+GveoCplLnZZ
uo+g12EMCrpoBsSqKLi7M6RWSRUhksQk0y7Z47qqFA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:47:01 2025 by rpki-client