Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa
File: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (raw, json)
Hash identifier: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=
Subject key identifier: 94:8C:E5:CD:A0:7D:31:F6:12:3A:F2:6D:6E:6B:E6:B3:82:5B:49:74
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01944ADE7076DA98B4D5041EB5AAE18115A2
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa
Signing time: Thu 09 Jan 2025 11:41:19 +0000
ROA not before: Thu 09 Jan 2025 11:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60032
IP address blocks: 2.59.68.0/22 maxlen: 22
2.59.72.0/22 maxlen: 22
5.252.60.0/22 maxlen: 22
5.252.88.0/22 maxlen: 22
45.11.148.0/22 maxlen: 22
45.65.104.0/21 maxlen: 21
45.85.176.0/22 maxlen: 22
45.90.224.0/22 maxlen: 22
45.129.48.0/22 maxlen: 22
45.152.184.0/22 maxlen: 22
80.240.176.0/21 maxlen: 21
80.240.184.0/21 maxlen: 21
91.92.18.0/23 maxlen: 23
95.214.44.0/22 maxlen: 22
109.70.16.0/21 maxlen: 22
128.127.16.0/21 maxlen: 22
185.13.180.0/22 maxlen: 22
185.61.144.0/22 maxlen: 22
185.107.84.0/22 maxlen: 24
185.128.140.0/22 maxlen: 23
185.163.60.0/22 maxlen: 22
185.189.20.0/22 maxlen: 24
185.203.180.0/22 maxlen: 22
185.229.176.0/22 maxlen: 22
185.253.36.0/22 maxlen: 22
188.92.64.0/21 maxlen: 22
193.8.116.0/22 maxlen: 22
193.56.168.0/22 maxlen: 22
194.36.137.0/24 maxlen: 24
194.36.167.0/24 maxlen: 24
194.36.169.0/24 maxlen: 24
194.36.221.0/24 maxlen: 24
194.182.112.0/20 maxlen: 22
212.104.240.0/20 maxlen: 20
2a02:79e0::/32 maxlen: 32
2a02:cfc0::/29 maxlen: 32
2a06:4280::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:de:70:76:da:98:b4:d5:04:1e:b5:aa:e1:81:15:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jan 9 11:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948ce5cda07d31f6123af26d6e6be6b3825b4974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:02:13:fe:38:88:2d:fd:c9:55:9a:49:28:
df:ab:9c:a3:48:0f:20:c9:43:1d:ca:f1:42:f8:e7:
14:d4:01:bc:bd:ce:ca:25:69:4e:36:6e:d3:47:eb:
a9:07:61:3c:b6:a8:3b:da:e0:d9:35:f0:34:4f:73:
38:ab:72:d5:4c:ba:bb:ea:5e:b2:f3:83:47:63:00:
8c:3e:d2:3a:b9:88:69:6f:1c:bd:df:68:f5:31:a3:
8b:6c:93:b1:ac:3f:de:e6:69:ff:ef:af:b3:b2:9c:
13:b6:fa:91:ee:6f:94:c9:14:65:12:09:35:db:f3:
df:65:70:83:39:c6:43:d2:4d:91:11:af:10:7d:ee:
82:dc:47:82:55:0f:97:fe:0b:d9:ca:99:de:fa:97:
a0:1c:e8:51:79:a6:a6:6c:d7:32:1b:10:d4:a5:2a:
a5:88:e0:b9:d3:1b:d9:2d:03:c1:df:48:e0:ac:e0:
2b:71:9e:ba:ec:6a:3e:1f:ee:ca:04:e1:83:de:4c:
e9:a7:1d:16:54:d1:05:6f:7a:b5:9a:4c:af:b1:58:
69:09:ef:ae:91:dd:64:15:7d:7e:d2:85:a4:6a:3c:
17:52:39:ae:d4:86:e3:c7:31:e7:f6:fa:bc:d1:bb:
4f:69:3e:87:b5:14:8c:db:08:21:0d:37:88:7f:0c:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:E5:CD:A0:7D:31:F6:12:3A:F2:6D:6E:6B:E6:B3:82:5B:49:74
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.68.0-2.59.75.255
5.252.60.0/22
5.252.88.0/22
45.11.148.0/22
45.65.104.0/21
45.85.176.0/22
45.90.224.0/22
45.129.48.0/22
45.152.184.0/22
80.240.176.0/20
91.92.18.0/23
95.214.44.0/22
109.70.16.0/21
128.127.16.0/21
185.13.180.0/22
185.61.144.0/22
185.107.84.0/22
185.128.140.0/22
185.163.60.0/22
185.189.20.0/22
185.203.180.0/22
185.229.176.0/22
185.253.36.0/22
188.92.64.0/21
193.8.116.0/22
193.56.168.0/22
194.36.137.0/24
194.36.167.0/24
194.36.169.0/24
194.36.221.0/24
194.182.112.0/20
212.104.240.0/20
IPv6:
2a02:79e0::/32
2a02:cfc0::/29
2a06:4280::/29
Signature Algorithm: sha256WithRSAEncryption
30:96:ca:50:55:27:fa:9a:93:4a:37:60:23:8a:e7:c9:c6:49:
8c:e9:ef:52:59:96:e9:1c:34:25:0a:b7:58:3a:0d:0e:22:0e:
0c:2b:e9:e6:c1:c2:fa:3a:c7:2b:72:80:0b:b7:0d:36:a5:bb:
5e:76:46:81:16:2c:3a:43:87:5d:3a:2e:21:54:17:2b:1a:ee:
4a:ca:27:c2:f1:20:da:f9:24:df:d1:ad:45:2c:f9:78:88:63:
dc:61:05:b1:88:34:81:29:38:09:57:4e:86:1d:77:f5:72:75:
b8:c0:f8:58:57:c5:33:b4:7f:24:ee:0a:01:55:00:7a:f3:89:
2a:a6:34:f4:4b:3f:b5:81:be:f3:e8:58:07:da:73:d0:59:67:
ee:b4:93:79:3a:eb:7f:b5:89:80:35:88:82:5a:ca:25:df:07:
05:68:df:1b:ff:a3:10:aa:2a:6c:02:b1:d9:78:ea:33:ca:85:
4e:37:d7:29:2a:bd:ae:d6:e8:2f:0d:63:c6:e3:c5:cd:2f:a0:
45:9f:26:c9:6e:a2:8e:8a:01:06:b7:09:2c:ea:df:b7:9c:03:
6b:57:dd:9d:cc:d9:03:b6:b1:31:4b:2e:27:ad:12:ab:6f:43:
a5:37:47:c1:a8:4c:74:82:39:47:76:75:fd:17:20:21:95:f0:
b9:e3:a9:fa
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgISAZRK3nB22pi01QQetarhgRWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjUwMTA5MTE0MTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDhjZTVjZGEwN2QzMWY2MTIzYWYyNmQ2ZTZiZTZiMzgyNWI0OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4oCE/44iC39yVWaSSjfq5yjSA8g
yUMdyvFC+OcU1AG8vc7KJWlONm7TR+upB2E8tqg72uDZNfA0T3M4q3LVTLq76l6y
84NHYwCMPtI6uYhpbxy932j1MaOLbJOxrD/e5mn/76+zspwTtvqR7m+UyRRlEgk1
2/PfZXCDOcZD0k2REa8Qfe6C3EeCVQ+X/gvZypne+pegHOhReaambNcyGxDUpSql
iOC50xvZLQPB30jgrOArcZ667Go+H+7KBOGD3kzppx0WVNEFb3q1mkyvsVhpCe+u
kd1kFX1+0oWkajwXUjmu1IbjxzHn9vq80btPaT6HtRSM2wghDTeIfwxqjwIDAQAB
o4IC7jCCAuowHQYDVR0OBBYEFJSM5c2gfTH2EjrybW5r5rOCW0l0MB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEvbEl6bHphQjlNZllTT3ZKdGJtdm1zNEpiU1hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wgc8EAgABMIHIMAwD
BAICO0QDBAICO0gDBAIF/DwDBAIF/FgDBAItC5QDBAMtQWgDBAItVbADBAItWuAD
BAItgTADBAItmLgDBARQ8LADBAFbXBIDBAJf1iwDBANtRhADBAOAfxADBAK5DbQD
BAK5PZADBAK5a1QDBAK5gIwDBAK5ozwDBAK5vRQDBAK5y7QDBAK55bADBAK5/SQD
BAO8XEADBALBCHQDBALBOKgDBADCJIkDBADCJKcDBADCJKkDBADCJN0DBATCtnAD
BATUaPAwGwQCAAIwFQMFACoCeeADBQMqAs/AAwUDKgZCgDANBgkqhkiG9w0BAQsF
AAOCAQEAMJbKUFUn+pqTSjdgI4rnycZJjOnvUlmW6Rw0JQq3WDoNDiIODCvp5sHC
+jrHK3KAC7cNNqW7XnZGgRYsOkOHXTouIVQXKxruSsonwvEg2vkk39GtRSz5eIhj
3GEFsYg0gSk4CVdOhh139XJ1uMD4WFfFM7R/JO4KAVUAevOJKqY09Es/tYG+8+hY
B9pz0Fln7rSTeTrrf7WJgDWIglrKJd8HBWjfG/+jEKoqbAKx2XjqM8qFTjfXKSq9
rtboLw1jxuPFzS+gRZ8myW6ijooBBrcJLOrft5wDa1fdnczZA7axMUsuJ60Sq29D
pTdHwahMdII5R3Z1/RcgIZXwueOp+g==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:28 2025 by rpki-client