Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/BpGdK4vNgugH_zIwdKpTLTonzFI.roa
File: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (raw, json)
Hash identifier: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=
Subject key identifier: 06:91:9D:2B:8B:CD:82:E8:07:FF:32:30:74:AA:53:2D:3A:27:CC:52
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01942825E4F3DE3A4A814D7BEAC705C978DB
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/BpGdK4vNgugH_zIwdKpTLTonzFI.roa
Signing time: Thu 02 Jan 2025 17:52:39 +0000
ROA not before: Thu 02 Jan 2025 17:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57809
IP address blocks: 2.59.144.0/22 maxlen: 22
5.10.128.0/21 maxlen: 21
5.183.248.0/22 maxlen: 22
23.90.192.0/18 maxlen: 18
31.204.80.0/21 maxlen: 21
45.80.252.0/22 maxlen: 22
45.86.96.0/22 maxlen: 22
45.89.76.0/22 maxlen: 22
45.92.180.0/22 maxlen: 22
45.129.216.0/24 maxlen: 24
45.129.217.0/24 maxlen: 24
45.129.218.0/24 maxlen: 24
45.133.68.0/22 maxlen: 22
45.142.108.0/22 maxlen: 22
45.152.16.0/22 maxlen: 22
46.18.120.0/22 maxlen: 22
46.18.124.0/24 maxlen: 24
46.18.125.0/24 maxlen: 24
46.18.126.0/23 maxlen: 23
62.192.156.0/22 maxlen: 22
79.99.160.0/21 maxlen: 21
88.86.224.0/19 maxlen: 19
88.218.12.0/22 maxlen: 22
92.119.232.0/22 maxlen: 22
94.154.4.0/24 maxlen: 24
94.187.128.0/19 maxlen: 19
94.187.144.0/22 maxlen: 22
94.187.150.0/24 maxlen: 24
168.220.128.0/19 maxlen: 19
185.20.16.0/22 maxlen: 22
185.48.252.0/22 maxlen: 22
185.86.88.0/22 maxlen: 22
185.87.100.0/22 maxlen: 22
185.98.116.0/22 maxlen: 22
185.132.64.0/22 maxlen: 22
185.133.80.0/22 maxlen: 22
185.134.156.0/22 maxlen: 22
185.135.176.0/22 maxlen: 22
185.138.116.0/22 maxlen: 22
185.163.136.0/22 maxlen: 22
185.163.212.0/22 maxlen: 22
185.163.220.0/22 maxlen: 22
185.163.228.0/22 maxlen: 22
185.169.156.0/22 maxlen: 22
185.186.88.0/22 maxlen: 22
185.191.36.0/22 maxlen: 22
185.197.108.0/22 maxlen: 22
185.241.140.0/22 maxlen: 22
185.254.8.0/22 maxlen: 22
192.214.192.0/19 maxlen: 19
195.216.140.0/22 maxlen: 22
2a00:41e0::/29 maxlen: 32
2a00:6780::/29 maxlen: 32
2a01:648::/29 maxlen: 32
2a05:b780::/29 maxlen: 29
2a05:c100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e4:f3:de:3a:4a:81:4d:7b:ea:c7:05:c9:78:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jan 2 17:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06919d2b8bcd82e807ff323074aa532d3a27cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:b1:ef:c2:28:f6:9d:a9:5d:3e:9f:6a:7e:
a9:3f:fb:b3:94:9f:6a:e3:e6:78:3d:b5:eb:c4:2e:
e8:6e:85:57:c2:40:9e:51:ca:7d:89:af:69:b3:1c:
ca:68:4e:6e:33:65:9c:22:bb:97:68:c8:67:c5:31:
5d:b8:fc:21:6c:52:70:20:13:f6:ac:7c:a7:01:36:
35:94:8f:ab:19:32:91:f4:ac:1f:1a:7b:83:6d:8b:
95:34:ee:1f:0c:47:06:05:e4:26:d5:02:0d:c6:73:
94:53:9a:0d:8b:02:1a:70:bb:30:d0:e7:96:5f:16:
35:a9:3c:21:b2:e0:b5:cb:f8:cc:48:89:12:a0:b1:
3b:d8:d1:df:37:e8:5f:df:e9:6b:9d:26:c4:80:d2:
e2:8a:c4:30:9c:c7:04:4d:24:fc:05:2c:2f:6a:cd:
0d:56:b7:34:b6:aa:f0:92:c2:4e:91:80:f6:80:be:
65:08:b6:c6:62:31:bc:78:5a:66:24:7f:6d:08:5e:
e9:6d:b1:9e:48:cb:8a:77:cc:ae:3d:51:01:21:ff:
f5:31:f8:51:a3:f8:a9:fe:1e:b2:ae:d7:40:ad:6b:
b4:47:fe:0c:df:f8:86:f0:d0:db:f3:cd:42:0f:8e:
01:4a:3c:bc:2e:2b:d9:3c:e8:86:16:ef:26:19:5f:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:9D:2B:8B:CD:82:E8:07:FF:32:30:74:AA:53:2D:3A:27:CC:52
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/BpGdK4vNgugH_zIwdKpTLTonzFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.144.0/22
5.10.128.0/21
5.183.248.0/22
23.90.192.0/18
31.204.80.0/21
45.80.252.0/22
45.86.96.0/22
45.89.76.0/22
45.92.180.0/22
45.129.216.0-45.129.218.255
45.133.68.0/22
45.142.108.0/22
45.152.16.0/22
46.18.120.0/21
62.192.156.0/22
79.99.160.0/21
88.86.224.0/19
88.218.12.0/22
92.119.232.0/22
94.154.4.0/24
94.187.128.0/19
168.220.128.0/19
185.20.16.0/22
185.48.252.0/22
185.86.88.0/22
185.87.100.0/22
185.98.116.0/22
185.132.64.0/22
185.133.80.0/22
185.134.156.0/22
185.135.176.0/22
185.138.116.0/22
185.163.136.0/22
185.163.212.0/22
185.163.220.0/22
185.163.228.0/22
185.169.156.0/22
185.186.88.0/22
185.191.36.0/22
185.197.108.0/22
185.241.140.0/22
185.254.8.0/22
192.214.192.0/19
195.216.140.0/22
IPv6:
2a00:41e0::/29
2a00:6780::/29
2a01:648::/29
2a05:b780::/29
2a05:c100::/29
Signature Algorithm: sha256WithRSAEncryption
ad:43:25:f5:1e:12:ed:9a:b6:dc:8c:75:c6:ca:c4:88:2c:33:
b7:90:65:77:d5:dc:b6:b7:0d:5f:51:26:a5:fb:42:fa:a2:82:
f7:19:ad:21:41:dd:0f:8b:db:54:2f:59:0e:bf:c9:d6:f0:2b:
1a:66:39:0f:12:c5:cb:d6:71:53:08:d7:93:97:6d:6a:69:b1:
28:ef:dd:2c:b7:18:a7:11:13:d2:da:db:98:d6:da:4c:db:ba:
64:e9:b0:78:f3:af:9f:4b:9e:b7:b5:e6:19:29:19:ab:fc:20:
c8:3a:00:cb:ca:45:47:48:2f:8c:63:4b:3c:ae:f7:32:6a:6d:
24:56:53:60:af:dc:da:4c:52:a3:fc:63:a6:43:d5:a7:95:bb:
53:7c:9e:1f:7b:54:04:21:7a:c4:8f:e9:fb:54:9b:6e:64:6b:
92:f2:56:bc:1f:eb:60:e3:5d:3d:3a:6e:fa:3f:48:a0:03:93:
01:69:6c:92:60:35:43:ed:6f:2e:cd:89:77:1e:d4:45:33:e0:
1f:6d:99:dc:2a:ca:d2:3b:54:81:15:79:6f:a4:d1:af:74:d6:
1d:be:e9:78:b2:b7:7e:1f:c1:1a:fa:22:a9:6e:4b:35:5f:27:
e4:9a:49:5c:10:10:2f:bc:aa:20:53:9d:fc:19:68:ca:11:14:
42:51:3c:17
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgISAZQoJeTz3jpKgU176scFyXjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjUwMTAyMTc1MjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjkxOWQyYjhiY2Q4MmU4MDdmZjMyMzA3NGFhNTMyZDNhMjdjYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA166x78Io9p2pXT6fan6pP/uzlJ9q
4+Z4PbXrxC7oboVXwkCeUcp9ia9psxzKaE5uM2WcIruXaMhnxTFduPwhbFJwIBP2
rHynATY1lI+rGTKR9KwfGnuDbYuVNO4fDEcGBeQm1QINxnOUU5oNiwIacLsw0OeW
XxY1qTwhsuC1y/jMSIkSoLE72NHfN+hf3+lrnSbEgNLiisQwnMcETST8BSwvas0N
Vrc0tqrwksJOkYD2gL5lCLbGYjG8eFpmJH9tCF7pbbGeSMuKd8yuPVEBIf/1MfhR
o/ip/h6yrtdArWu0R/4M3/iG8NDb881CD44BSjy8LivZPOiGFu8mGV/prQIDAQAB
o4IDSDCCA0QwHQYDVR0OBBYEFAaRnSuLzYLoB/8yMHSqUy06J8xSMB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvQnBHZEs0dk5ndWdIX3pJd2RLcFRMVG9uekZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXAYIKwYBBQUHAQcBAf8EggFLMIIBRzCCARgEAgABMIIB
EAMEAgI7kAMEAwUKgAMEAgW3+AMEBhdawAMEAx/MUAMEAi1Q/AMEAi1WYAMEAi1Z
TAMEAi1ctDAMAwQDLYHYAwQALYHaAwQCLYVEAwQCLY5sAwQCLZgQAwQDLhJ4AwQC
PsCcAwQDT2OgAwQFWFbgAwQCWNoMAwQCXHfoAwQAXpoEAwQFXruAAwQFqNyAAwQC
uRQQAwQCuTD8AwQCuVZYAwQCuVdkAwQCuWJ0AwQCuYRAAwQCuYVQAwQCuYacAwQC
uYewAwQCuYp0AwQCuaOIAwQCuaPUAwQCuaPcAwQCuaPkAwQCuamcAwQCubpYAwQC
ub8kAwQCucVsAwQCufGMAwQCuf4IAwQFwNbAAwQCw9iMMCkEAgACMCMDBQMqAEHg
AwUDKgBngAMFAyoBBkgDBQMqBbeAAwUDKgXBADANBgkqhkiG9w0BAQsFAAOCAQEA
rUMl9R4S7Zq23Ix1xsrEiCwzt5Bld9XctrcNX1EmpftC+qKC9xmtIUHdD4vbVC9Z
Dr/J1vArGmY5DxLFy9ZxUwjXk5dtammxKO/dLLcYpxET0trbmNbaTNu6ZOmwePOv
n0uet7XmGSkZq/wgyDoAy8pFR0gvjGNLPK73MmptJFZTYK/c2kxSo/xjpkPVp5W7
U3yeH3tUBCF6xI/p+1SbbmRrkvJWvB/rYONdPTpu+j9IoAOTAWlskmA1Q+1vLs2J
dx7URTPgH22Z3CrK0jtUgRV5b6TRr3TWHb7peLK3fh/BGvoiqW5LNV8n5JpJXBAQ
L7yqIFOd/BloyhEUQlE8Fw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:38:56 2025 by rpki-client