Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/kHVwAjV50K04XcEC52VZ9Z8xRlA.roa
File: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (raw, json)
Hash identifier: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=
Subject key identifier: 90:75:70:02:35:79:D0:AD:38:5D:C1:02:E7:65:59:F5:9F:31:46:50
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 01942369ADFA7F6D4727B69D263C9D882F21
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/kHVwAjV50K04XcEC52VZ9Z8xRlA.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24586
IP address blocks: 46.22.180.0/22 maxlen: 24
46.22.184.0/21 maxlen: 24
80.95.160.0/21 maxlen: 24
80.95.168.0/22 maxlen: 24
80.95.172.0/22 maxlen: 24
93.92.96.0/22 maxlen: 24
93.92.100.0/22 maxlen: 24
185.39.120.0/22 maxlen: 24
188.66.16.0/21 maxlen: 24
2001:4c10::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ad:fa:7f:6d:47:27:b6:9d:26:3c:9d:88:2f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=907570023579d0ad385dc102e76559f59f314650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:8d:df:3f:1d:be:d4:48:65:a0:e6:8e:8c:
11:70:cd:dd:41:b6:f0:1c:fa:1e:a1:4f:bc:18:c0:
6c:df:64:67:1f:af:16:77:cb:1c:a7:7a:7f:12:6d:
ef:c5:72:c8:e7:e3:91:b6:22:a8:4e:4a:ab:68:38:
6a:9a:67:42:85:0c:ee:19:c3:ab:65:a7:0d:53:0d:
c9:dc:6c:08:b6:cd:71:1c:d4:cc:9f:45:79:ed:58:
7e:10:8e:28:80:fe:34:f0:11:5f:a6:36:26:bb:0f:
3d:d1:ef:18:f4:a7:92:a5:11:26:ba:e1:65:68:29:
d0:d7:0b:89:46:40:b0:73:4c:17:9f:bc:19:48:92:
39:f8:fa:d7:45:43:08:fc:b8:59:64:1c:95:96:5f:
a5:d5:fa:e8:4b:36:87:39:d4:88:c5:1b:f2:23:1d:
30:87:b4:d0:bf:73:fd:dd:0c:25:32:db:43:eb:1e:
96:54:2b:df:3a:a0:5b:90:86:69:49:39:51:78:19:
12:06:cb:56:f9:f0:15:5c:cd:29:67:fc:e0:cc:89:
ec:df:2d:d3:15:19:39:a5:09:13:96:59:c8:93:88:
70:28:e2:bc:04:bb:a4:ce:44:8c:51:f5:5b:8b:76:
a6:bc:50:6a:2f:0a:71:41:dc:db:9d:57:43:21:b4:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:70:02:35:79:D0:AD:38:5D:C1:02:E7:65:59:F5:9F:31:46:50
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/kHVwAjV50K04XcEC52VZ9Z8xRlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.180.0-46.22.191.255
80.95.160.0/20
93.92.96.0/21
185.39.120.0/22
188.66.16.0/21
IPv6:
2001:4c10::/32
Signature Algorithm: sha256WithRSAEncryption
7e:e3:3f:08:3b:6b:5e:9e:8d:cf:28:14:84:1e:d9:5e:80:15:
ab:1a:b5:9f:a6:ee:e0:cd:c9:ce:d8:c3:b1:73:ef:d6:19:58:
0b:3e:5b:4a:af:12:91:1f:e0:10:62:05:e9:90:ac:05:3c:64:
49:f8:c0:13:f9:fd:a2:e9:e2:45:80:2a:3f:02:9d:4a:c4:8d:
cc:22:e9:f0:26:ee:3b:66:e8:b1:3e:f5:0b:77:c4:3a:b9:64:
38:4e:bd:e6:6e:45:65:83:63:a5:c6:e3:b7:17:1e:19:92:a8:
78:31:af:16:87:d3:8d:79:32:45:17:ae:72:39:78:ea:42:f3:
42:19:31:0b:c4:cb:99:2b:11:c6:9b:4a:b7:21:a9:be:ef:ba:
6f:c1:5c:70:9b:3d:b7:7c:b5:98:e1:b9:01:1a:95:dc:28:58:
b0:60:b3:36:f4:e0:21:96:80:25:3f:2f:3c:88:55:e7:c9:11:
4b:53:0a:f3:69:20:98:18:14:51:c4:6f:25:44:9d:d2:c2:16:
97:c3:a4:00:77:99:07:91:a5:7a:3d:a9:7d:c3:0f:71:59:db:
e2:0b:62:fb:22:a7:cd:a4:ad:61:12:48:1b:a2:d8:ef:78:a2:
0e:f9:da:be:11:a2:9d:09:f2:dc:d7:81:75:90:8e:b8:ea:11:
15:e7:db:13
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZQjaa36f21HJ7adJjydiC8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmJlZDNmMzdjZDcyODI2NTExYzU3NDU2MGRlYjU1NTQy
NTUwZTQwHhcNMjUwMTAxMTk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDc1NzAwMjM1NzlkMGFkMzg1ZGMxMDJlNzY1NTlmNTlmMzE0NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOWN3z8dvtRIZaDmjowRcM3dQbbw
HPoeoU+8GMBs32RnH68Wd8scp3p/Em3vxXLI5+ORtiKoTkqraDhqmmdChQzuGcOr
ZacNUw3J3GwIts1xHNTMn0V57Vh+EI4ogP408BFfpjYmuw890e8Y9KeSpREmuuFl
aCnQ1wuJRkCwc0wXn7wZSJI5+PrXRUMI/LhZZByVll+l1froSzaHOdSIxRvyIx0w
h7TQv3P93QwlMttD6x6WVCvfOqBbkIZpSTlReBkSBstW+fAVXM0pZ/zgzIns3y3T
FRk5pQkTllnIk4hwKOK8BLukzkSMUfVbi3amvFBqLwpxQdzbnVdDIbTPaQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFJB1cAI1edCtOF3BAudlWfWfMUZQMB8GA1UdIwQY
MBaAFPIr7T83zXKCZRHFdFYN61VUJVDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODkt
MjkwNjJlODcwYjY0LzEva0hWd0FqVjUwSzA0WGNFQzUyVlo5Wjh4UmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODktMjkwNjJlODcwYjY0
LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBAIuFrQD
BAYuFoADBARQX6ADBANdXGADBAK5J3gDBAO8QhAwDQQCAAIwBwMFACABTBAwDQYJ
KoZIhvcNAQELBQADggEBAH7jPwg7a16ejc8oFIQe2V6AFasatZ+m7uDNyc7Yw7Fz
79YZWAs+W0qvEpEf4BBiBemQrAU8ZEn4wBP5/aLp4kWAKj8CnUrEjcwi6fAm7jtm
6LE+9Qt3xDq5ZDhOveZuRWWDY6XG47cXHhmSqHgxrxaH0415MkUXrnI5eOpC80IZ
MQvEy5krEcabSrchqb7vum/BXHCbPbd8tZjhuQEaldwoWLBgszb04CGWgCU/LzyI
VefJEUtTCvNpIJgYFFHEbyVEndLCFpfDpAB3mQeRpXo9qX3DD3FZ2+ILYvsip82k
rWESSBui2O94og752r4Rop0J8tzXgXWQjrjqERXn2xM=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:28 2025 by rpki-client