Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/REfYg6zs4mzXkznv8BZKawAeEPY.roa
File: REfYg6zs4mzXkznv8BZKawAeEPY.roa (raw, json)
Hash identifier: fxWL8SMng2Jg9LEtF9apPtdYuyEYzVdto0OqCyAqJew=
Subject key identifier: 44:47:D8:83:AC:EC:E2:6C:D7:93:39:EF:F0:16:4A:6B:00:1E:10:F6
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01943C3FC277DABDCFFDF63BEC3CEF4B2C56
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/REfYg6zs4mzXkznv8BZKawAeEPY.roa
Signing time: Mon 06 Jan 2025 15:33:19 +0000
ROA not before: Mon 06 Jan 2025 15:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208687
IP address blocks: 45.89.4.0/22 maxlen: 24
141.195.128.0/18 maxlen: 24
141.195.160.0/19 maxlen: 24
141.195.160.0/24 maxlen: 24
141.195.161.0/24 maxlen: 24
141.195.162.0/24 maxlen: 24
141.195.179.0/24 maxlen: 24
141.195.181.0/24 maxlen: 24
141.195.182.0/24 maxlen: 24
141.195.184.0/24 maxlen: 24
141.195.188.0/24 maxlen: 24
141.195.189.0/24 maxlen: 24
141.195.190.0/23 maxlen: 24
185.147.244.0/23 maxlen: 24
185.147.244.0/24 maxlen: 24
185.147.245.0/24 maxlen: 24
2a0a:5580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:3f:c2:77:da:bd:cf:fd:f6:3b:ec:3c:ef:4b:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 6 15:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4447d883acece26cd79339eff0164a6b001e10f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:a2:b0:a4:fd:87:8f:1c:d1:8d:b0:7e:5b:
70:d2:f4:83:91:23:e3:da:1b:ad:86:34:dc:f4:45:
02:42:35:ff:b5:50:c1:94:08:f0:77:ba:c6:85:72:
84:a7:b5:81:ac:46:d0:90:5c:91:c4:ce:56:5d:b8:
d5:64:ae:4e:59:b0:7d:44:db:6d:6f:79:57:67:2a:
b5:ad:02:e7:1a:aa:f1:3e:27:17:96:13:00:50:62:
9a:58:37:0a:3f:44:29:0c:b5:97:32:c1:44:9c:a8:
8e:ec:4a:16:3f:9c:11:b2:87:e7:2e:3b:8f:54:6f:
97:12:e0:1e:dc:df:53:79:87:6b:02:02:21:f5:82:
a8:c7:11:b8:92:15:93:0b:14:78:78:7e:df:ff:b8:
5b:18:e8:5a:13:28:78:75:a5:5b:90:9e:47:64:b9:
42:26:19:2c:97:f1:a5:9f:e7:de:74:23:17:68:66:
1e:ac:84:3b:cf:49:db:b5:81:ff:1a:7d:b0:7d:5f:
c5:15:bc:b6:7c:20:78:c9:a4:5c:1a:8b:c4:dc:0d:
e2:72:28:60:b6:58:90:9e:98:97:b6:fd:f6:8c:eb:
38:f8:10:8d:0c:23:92:40:46:1d:8b:2b:32:c4:e5:
6a:b4:7b:61:af:61:84:40:a9:87:0e:ac:e7:b8:d0:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:D8:83:AC:EC:E2:6C:D7:93:39:EF:F0:16:4A:6B:00:1E:10:F6
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/REfYg6zs4mzXkznv8BZKawAeEPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.4.0/22
141.195.128.0/18
185.147.244.0/23
IPv6:
2a0a:5580::/29
Signature Algorithm: sha256WithRSAEncryption
56:f8:98:d7:bd:0a:bc:d5:21:67:11:40:4a:90:90:1b:de:ea:
d6:f5:d3:d3:7f:a3:34:24:dd:11:1f:b7:9d:06:15:c3:a6:60:
9b:d3:4c:4d:d8:b1:0b:09:8b:83:e4:77:e4:f7:df:3e:f3:14:
4e:72:33:29:75:69:4c:3c:26:e2:1f:a7:ee:e8:cd:e6:06:12:
34:f8:e0:ce:44:c7:d0:4c:aa:ea:4c:32:60:6b:a2:f7:76:d4:
90:a6:a3:36:a5:d9:d4:90:fe:17:cc:9a:88:17:c6:d9:04:a5:
8a:64:d1:90:c2:50:92:d3:0e:1f:1a:ec:b3:1b:a6:82:61:07:
82:f4:6c:aa:27:3d:ce:0d:fc:2b:9f:71:24:97:79:e5:9c:c8:
50:d9:9b:1a:43:6b:a6:a4:6a:0c:fb:ac:27:e4:fe:c4:18:9b:
b6:24:ab:6e:e5:0b:da:d5:7a:28:1d:44:33:f6:b4:85:78:e0:
6a:ac:17:96:8e:11:06:9e:7b:46:42:b5:ae:61:30:84:58:02:
82:c0:d3:31:ed:85:24:41:b0:1a:22:8a:75:09:bf:be:27:2f:
9d:92:d4:16:18:bc:15:1b:de:5c:bd:5b:31:70:1e:72:1d:f5:
a8:06:71:36:ee:95:f2:db:81:ce:da:48:41:55:40:75:87:1b:
40:8e:d7:43
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQ8P8J32r3P/fY77DzvSyxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk
ZjEwNDUwHhcNMjUwMTA2MTUzMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQ3ZDg4M2FjZWNlMjZjZDc5MzM5ZWZmMDE2NGE2YjAwMWUxMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscOisKT9h48c0Y2wfltw0vSDkSPj
2huthjTc9EUCQjX/tVDBlAjwd7rGhXKEp7WBrEbQkFyRxM5WXbjVZK5OWbB9RNtt
b3lXZyq1rQLnGqrxPicXlhMAUGKaWDcKP0QpDLWXMsFEnKiO7EoWP5wRsofnLjuP
VG+XEuAe3N9TeYdrAgIh9YKoxxG4khWTCxR4eH7f/7hbGOhaEyh4daVbkJ5HZLlC
Jhksl/Gln+fedCMXaGYerIQ7z0nbtYH/Gn2wfV/FFby2fCB4yaRcGovE3A3icihg
tliQnpiXtv32jOs4+BCNDCOSQEYdiysyxOVqtHthr2GEQKmHDqznuNCwiwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFERH2IOs7OJs15M57/AWSmsAHhD2MB8GA1UdIwQY
MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt
MjA5MmFmNjQ3MDcwLzEvUkVmWWc2enM0bXpYa3pudjhCWkthd0FlRVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw
LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVkEAwQG
jcOAAwQBuZP0MA0EAgACMAcDBQMqClWAMA0GCSqGSIb3DQEBCwUAA4IBAQBW+JjX
vQq81SFnEUBKkJAb3urW9dPTf6M0JN0RH7edBhXDpmCb00xN2LELCYuD5Hfk998+
8xROcjMpdWlMPCbiH6fu6M3mBhI0+ODORMfQTKrqTDJga6L3dtSQpqM2pdnUkP4X
zJqIF8bZBKWKZNGQwlCS0w4fGuyzG6aCYQeC9GyqJz3ODfwrn3Ekl3nlnMhQ2Zsa
Q2umpGoM+6wn5P7EGJu2JKtu5Qva1XooHUQz9rSFeOBqrBeWjhEGnntGQrWuYTCE
WAKCwNMx7YUkQbAaIop1Cb++Jy+dktQWGLwVG95cvVsxcB5yHfWoBnE27pXy24HO
2khBVUB1hxtAjtdD
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:42 2025 by rpki-client