Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eR4Ea5lGCyz5AU3BZVgGkFIWSYM.roa
File: eR4Ea5lGCyz5AU3BZVgGkFIWSYM.roa (raw, json)
Hash identifier: AN+yTpFzwxmGQcZatfFlvnBA0EvTaHp3yj6DSQMWf/Q=
Subject key identifier: 79:1E:04:6B:99:46:0B:2C:F9:01:4D:C1:65:58:06:90:52:16:49:83
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACE3F026FB7B5C5602EE8CC4BF4DF7BB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eR4Ea5lGCyz5AU3BZVgGkFIWSYM.roa
Signing time: Tue 28 Jan 2025 12:30:06 +0000
ROA not before: Tue 28 Jan 2025 12:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201021
IP address blocks: 77.81.88.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:e3:f0:26:fb:7b:5c:56:02:ee:8c:c4:bf:4d:f7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=791e046b99460b2cf9014dc16558069052164983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:de:90:e4:d9:3f:21:71:6b:80:44:4a:88:
3c:1e:20:dd:c4:d2:3d:51:94:a8:21:62:f4:80:ae:
d2:81:ea:af:f8:ca:fc:80:51:83:88:ba:4a:95:68:
e5:81:33:68:2b:88:bc:fd:6c:f6:6e:af:2e:6d:02:
4b:f9:ac:22:fa:fa:90:7b:41:19:55:4e:77:0f:32:
37:ba:5c:9a:93:25:fd:61:ad:d3:2d:18:e5:c5:fe:
b2:86:35:8e:0a:2f:6c:6d:ee:0c:67:ac:f6:c3:33:
60:c0:05:c5:d7:87:70:2b:65:16:b9:34:bd:d4:d6:
ca:1c:fd:8d:34:7c:64:cb:01:36:e1:33:b8:1a:26:
51:3b:47:f3:36:9e:bb:18:d7:04:8e:78:29:de:06:
40:7c:70:d9:93:f1:ef:de:cf:7a:12:e6:e5:bb:0e:
ee:f9:2f:5b:5b:52:f9:81:ec:b3:f1:72:ff:5a:28:
bc:2c:9c:94:e5:ec:a7:23:d1:2a:bf:87:d6:c9:cf:
d5:88:c9:fa:e5:87:88:cc:59:f0:bf:f7:01:4d:db:
c9:d1:2d:71:72:84:c2:f0:23:d6:15:1a:44:02:b9:
12:af:05:6d:14:20:00:1e:56:82:f9:ea:75:ed:0b:
ad:30:81:66:b8:d6:37:09:e9:5d:dd:c3:82:18:9f:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:04:6B:99:46:0B:2C:F9:01:4D:C1:65:58:06:90:52:16:49:83
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eR4Ea5lGCyz5AU3BZVgGkFIWSYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
77.81.100.0/24
86.107.51.0/24
89.37.194.0/24
89.39.125.0/24
89.43.62.0/24
89.45.162.0/24
93.90.75.0/24
93.115.105.0/24
188.241.137.0/24
194.135.18.0/24
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
50:57:cc:54:60:34:df:ab:48:7e:02:2d:3e:fd:02:69:03:17:
a1:b1:2e:00:73:77:f4:ce:7e:a7:88:81:b1:cb:60:cd:d8:d9:
00:fb:d6:e0:0a:42:7b:a9:a2:06:fd:91:ec:96:35:48:70:46:
bc:83:d4:41:ad:c0:d0:fe:13:79:08:49:b8:86:03:95:73:52:
83:a5:d6:e5:9d:1c:1c:2e:b7:11:3f:d7:77:32:b8:2e:f7:f3:
06:83:60:10:2e:9c:21:68:16:b5:d9:67:f8:05:21:1e:5b:fd:
a9:17:c2:9f:b7:19:70:79:e4:9a:9e:19:9b:78:58:f6:2a:a9:
56:c8:cd:53:b1:48:e1:d1:97:01:ca:39:6f:b1:03:1d:a9:94:
be:2b:88:ea:02:5b:77:93:9f:b7:ce:c4:38:47:5d:a8:8f:2e:
23:72:a7:78:1a:5f:97:99:a3:8c:5d:87:86:6c:4c:26:63:57:
9e:10:17:d0:f7:d9:7b:91:c3:92:e7:f3:81:6a:e0:ad:bb:9e:
d7:e8:e8:0b:a3:cb:c3:c7:3b:f7:d0:83:52:78:50:06:f1:f6:
73:5a:86:59:53:f3:01:ce:a9:d5:f5:1b:73:e4:3d:be:23:ca:
3b:94:59:fe:d7:1a:94:01:67:ad:ce:82:dd:38:e0:c7:47:02:
17:94:ff:47
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZSs4/Am+3tcVgLujMS/Tfe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTI4MTIzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTFlMDQ2Yjk5NDYwYjJjZjkwMTRkYzE2NTU4MDY5MDUyMTY0OTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHekOTZPyFxa4BESog8HiDdxNI9
UZSoIWL0gK7Sgeqv+Mr8gFGDiLpKlWjlgTNoK4i8/Wz2bq8ubQJL+awi+vqQe0EZ
VU53DzI3ulyakyX9Ya3TLRjlxf6yhjWOCi9sbe4MZ6z2wzNgwAXF14dwK2UWuTS9
1NbKHP2NNHxkywE24TO4GiZRO0fzNp67GNcEjngp3gZAfHDZk/Hv3s96Eubluw7u
+S9bW1L5geyz8XL/Wii8LJyU5eynI9Eqv4fWyc/ViMn65YeIzFnwv/cBTdvJ0S1x
coTC8CPWFRpEArkSrwVtFCAAHlaC+ep17QutMIFmuNY3Celd3cOCGJ/zfQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFHkeBGuZRgss+QFNwWVYBpBSFkmDMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZVI0RWE1bEdDeXo1QVUzQlpWZ0drRklXU1lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQATVFYAwQA
TVFkAwQAVmszAwQAWSXCAwQAWSd9AwQAWSs+AwQAWS2iAwQAXVpLAwQAXXNpAwQA
vPGJAwQAwocSAwQA1MAFMA0GCSqGSIb3DQEBCwUAA4IBAQBQV8xUYDTfq0h+Ai0+
/QJpAxehsS4Ac3f0zn6niIGxy2DN2NkA+9bgCkJ7qaIG/ZHsljVIcEa8g9RBrcDQ
/hN5CEm4hgOVc1KDpdblnRwcLrcRP9d3Mrgu9/MGg2AQLpwhaBa12Wf4BSEeW/2p
F8KftxlweeSanhmbeFj2KqlWyM1TsUjh0ZcByjlvsQMdqZS+K4jqAlt3k5+3zsQ4
R12ojy4jcqd4Gl+XmaOMXYeGbEwmY1eeEBfQ99l7kcOS5/OBauCtu57X6OgLo8vD
xzv30INSeFAG8fZzWoZZU/MBzqnV9Rtz5D2+I8o7lFn+1xqUAWetzoLdOODHRwIX
lP9H
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client