Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/1-EnRR63WtvPtuldkv59670utzNA.roa
File: 1-EnRR63WtvPtuldkv59670utzNA.roa (raw, json)
Hash identifier: HoD1jMoVPis7hhejcuSPE4XjzqwHGviWh1KYXnyXDLE=
Subject key identifier: F8:49:D1:47:AD:D6:B6:F3:ED:BA:57:64:BF:9F:7A:EF:4B:AD:CC:D0
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 0194221F8A869546E403EACF4B3581FD94BD
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/1-EnRR63WtvPtuldkv59670utzNA.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29222
IP address blocks: 37.156.40.0/21 maxlen: 24
45.157.188.0/22 maxlen: 24
83.166.128.0/19 maxlen: 24
84.16.64.0/19 maxlen: 24
84.234.16.0/20 maxlen: 24
89.47.48.0/22 maxlen: 24
91.214.188.0/22 maxlen: 24
93.88.240.0/20 maxlen: 24
128.65.192.0/21 maxlen: 24
185.74.68.0/22 maxlen: 24
185.125.24.0/22 maxlen: 24
185.143.100.0/22 maxlen: 24
185.172.100.0/22 maxlen: 24
185.176.224.0/22 maxlen: 24
185.177.60.0/22 maxlen: 24
185.181.160.0/22 maxlen: 24
188.213.128.0/22 maxlen: 24
193.108.52.0/22 maxlen: 24
193.111.233.0/24 maxlen: 24
193.128.7.0/24 maxlen: 24
193.134.93.0/24 maxlen: 24
193.134.250.0/24 maxlen: 24
195.15.192.0/18 maxlen: 24
2001:1600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8a:86:95:46:e4:03:ea:cf:4b:35:81:fd:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f849d147add6b6f3edba5764bf9f7aef4badccd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:fa:c7:2d:07:1c:d2:ed:39:7b:db:ad:73:
3c:6f:65:e7:47:59:f3:af:e3:a1:c8:13:87:78:5b:
05:6d:20:ae:35:8f:50:f9:2d:23:b4:f3:1d:2f:9a:
5c:7b:1b:dc:ac:f7:6f:1b:63:cc:04:5a:11:ad:6d:
cd:59:93:bf:5b:4c:ac:ed:25:38:b8:d8:e9:88:2a:
61:a8:80:d9:a0:74:5a:15:27:7d:41:cf:0e:9c:08:
de:4e:c5:6a:00:66:38:1d:e2:ac:ca:b2:60:b6:2c:
bf:a4:8c:c4:ab:86:9a:af:33:f0:da:90:ea:52:63:
2b:1a:ea:f2:69:9c:77:10:aa:b0:b1:a8:31:a5:12:
da:b9:6a:fe:50:59:0c:ef:28:ac:93:cd:d1:9a:94:
84:1a:49:16:de:f3:7e:d1:f5:90:65:3b:b2:2d:69:
72:7f:29:45:aa:ed:04:cb:62:e4:23:4b:9a:83:2d:
03:b4:40:f3:5f:ab:da:e3:43:66:4c:13:fa:1f:a6:
8d:31:94:0d:8e:82:d1:ab:43:18:3a:67:bc:18:00:
da:9c:80:1c:8f:19:1a:95:c5:92:d8:c3:68:9c:ef:
00:b7:87:d4:18:0f:0f:f3:e5:f2:8e:2e:42:4a:2a:
e2:91:be:1d:0a:64:fe:b1:68:25:cd:bc:a7:b9:98:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:49:D1:47:AD:D6:B6:F3:ED:BA:57:64:BF:9F:7A:EF:4B:AD:CC:D0
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/1-EnRR63WtvPtuldkv59670utzNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.40.0/21
45.157.188.0/22
83.166.128.0/19
84.16.64.0/19
84.234.16.0/20
89.47.48.0/22
91.214.188.0/22
93.88.240.0/20
128.65.192.0/21
185.74.68.0/22
185.125.24.0/22
185.143.100.0/22
185.172.100.0/22
185.176.224.0/22
185.177.60.0/22
185.181.160.0/22
188.213.128.0/22
193.108.52.0/22
193.111.233.0/24
193.128.7.0/24
193.134.93.0/24
193.134.250.0/24
195.15.192.0/18
IPv6:
2001:1600::/29
Signature Algorithm: sha256WithRSAEncryption
2d:8c:b1:a6:a5:2c:74:67:6c:86:b4:e6:d9:5a:d5:4c:77:ca:
3a:06:84:39:5b:e9:73:2a:60:1b:9b:a9:e1:37:e4:73:08:41:
1b:33:9f:55:bb:2f:58:6b:26:70:2c:68:43:97:91:30:7b:29:
fe:6e:b7:8d:e4:04:7f:8d:67:6c:4c:e1:3f:02:de:8e:ea:de:
8c:ad:23:ee:33:8c:f1:e2:ff:06:31:72:46:c0:74:52:9c:21:
e3:a6:0a:87:b8:a0:14:76:24:1d:17:69:e2:7d:7f:7c:5d:79:
68:65:e1:56:b5:52:45:b4:02:83:cb:5d:16:bb:2c:c0:47:9d:
be:c2:cd:61:5d:fc:06:f8:6a:d9:da:84:cf:c5:c6:3b:3c:33:
8c:4d:8f:71:28:bd:86:9f:56:19:0d:2d:7c:a9:4d:a0:c7:da:
a2:0d:1a:33:0e:9b:32:fb:06:03:8c:09:2c:53:d7:27:6b:bc:
18:06:30:a2:83:79:e2:b2:94:92:dc:f7:46:50:1c:d6:ef:ff:
bd:74:2c:21:83:3d:a9:24:52:c3:b9:fa:a4:93:e8:a6:57:5d:
b8:79:0e:f2:08:ef:fc:c0:1d:63:f6:fd:db:5c:75:9a:86:1e:
56:48:91:9d:a3:fa:71:23:43:cd:02:00:57:c6:56:21:8d:cf:
57:bd:9b:58
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZQiH4qGlUbkA+rPSzWB/ZS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZjFlZWZhYTc1N2QzOGViMTA0ZmE0Y2JhNGQ5NjJiNzJl
NTJiNTIwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQ5ZDE0N2FkZDZiNmYzZWRiYTU3NjRiZjlmN2FlZjRiYWRjY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMf6xy0HHNLtOXvbrXM8b2XnR1nz
r+OhyBOHeFsFbSCuNY9Q+S0jtPMdL5pcexvcrPdvG2PMBFoRrW3NWZO/W0ys7SU4
uNjpiCphqIDZoHRaFSd9Qc8OnAjeTsVqAGY4HeKsyrJgtiy/pIzEq4aarzPw2pDq
UmMrGuryaZx3EKqwsagxpRLauWr+UFkM7yisk83RmpSEGkkW3vN+0fWQZTuyLWly
fylFqu0Ey2LkI0uagy0DtEDzX6va40NmTBP6H6aNMZQNjoLRq0MYOme8GADanIAc
jxkalcWS2MNonO8At4fUGA8P8+Xyji5CSirikb4dCmT+sWglzbynuZjOvwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFPhJ0Uet1rbz7bpXZL+feu9LrczQMB8GA1UdIwQY
MBaAFK7x7vqnV9OOsQT6TLpNlity5StSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQt
OWE2YmQwMTFmOGY2LzEvMS1FblJSNjNXdHZQdHVsZGt2NTk2NzB1dHpOQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzcvYzlmMzNiLTJmMWItNGExMS1hMjFkLTlhNmJkMDExZjhm
Ni8xL3J2SHUtcWRYMDQ2eEJQcE11azJXSzNMbEsxSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBtgYIKwYBBQUHAQcBAf8EgaYwgaMwgZEEAgABMIGKAwQD
JZwoAwQCLZ28AwQFU6aAAwQFVBBAAwQEVOoQAwQCWS8wAwQCW9a8AwQEXVjwAwQD
gEHAAwQCuUpEAwQCuX0YAwQCuY9kAwQCuaxkAwQCubDgAwQCubE8AwQCubWgAwQC
vNWAAwQCwWw0AwQAwW/pAwQAwYAHAwQAwYZdAwQAwYb6AwQGww/AMA0EAgACMAcD
BQMgARYAMA0GCSqGSIb3DQEBCwUAA4IBAQAtjLGmpSx0Z2yGtObZWtVMd8o6BoQ5
W+lzKmAbm6nhN+RzCEEbM59Vuy9YayZwLGhDl5Eweyn+breN5AR/jWdsTOE/At6O
6t6MrSPuM4zx4v8GMXJGwHRSnCHjpgqHuKAUdiQdF2nifX98XXloZeFWtVJFtAKD
y10WuyzAR52+ws1hXfwG+GrZ2oTPxcY7PDOMTY9xKL2Gn1YZDS18qU2gx9qiDRoz
Dpsy+wYDjAksU9cna7wYBjCig3nispSS3PdGUBzW7/+9dCwhgz2pJFLDufqkk+im
V124eQ7yCO/8wB1j9v3bXHWahh5WSJGdo/pxI0PNAgBXxlYhjc9XvZtY
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:13 2025 by rpki-client