Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/IrihvyoC5WVtLyMsMa-SiimzVD4.roa
File: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (raw, json)
Hash identifier: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=
Subject key identifier: 22:B8:A1:BF:2A:02:E5:65:6D:2F:23:2C:31:AF:92:8A:29:B3:54:3E
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019425FC3F7EF8BD1BE9DC8DD4771C1F3DE5
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/IrihvyoC5WVtLyMsMa-SiimzVD4.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 80.65.48.0/20 maxlen: 20
80.65.56.0/24 maxlen: 24
88.87.32.0/19 maxlen: 19
109.239.224.0/20 maxlen: 20
146.247.128.0/17 maxlen: 17
146.247.154.0/24 maxlen: 24
146.247.160.0/19 maxlen: 19
146.247.192.0/19 maxlen: 19
146.247.226.0/24 maxlen: 24
146.247.246.0/24 maxlen: 24
185.166.204.0/22 maxlen: 22
185.166.205.0/24 maxlen: 24
185.168.240.0/22 maxlen: 22
213.166.160.0/19 maxlen: 19
2001:1ad8::/32 maxlen: 32
2a00:1b60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3f:7e:f8:bd:1b:e9:dc:8d:d4:77:1c:1f:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b8a1bf2a02e5656d2f232c31af928a29b3543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:77:17:c4:55:37:45:5f:e1:02:76:05:84:
6a:c1:60:af:db:c5:82:70:45:67:54:15:28:9f:fe:
0a:b3:92:6b:d3:62:53:77:cc:50:4c:c7:ad:cf:9e:
3e:5e:64:0e:8c:65:60:49:de:cd:12:58:ee:35:51:
e4:1b:ea:f3:e6:c1:77:c1:bd:6f:89:a6:da:d6:4b:
27:2f:61:aa:11:31:c3:3b:4f:fc:fb:91:20:fa:77:
c6:41:21:05:04:5e:60:42:76:9b:a9:b7:a1:d7:97:
23:78:dd:fe:6b:e1:52:08:2b:ef:a6:16:18:fe:45:
bd:89:32:9b:56:aa:b5:ae:4e:e1:51:cf:33:5c:c1:
95:02:8b:d1:a1:e8:5c:8f:7f:75:92:00:36:df:02:
1e:07:0c:7f:5b:12:0e:83:83:ef:73:0c:66:1b:d4:
9f:56:f8:8a:a3:9d:65:5e:54:11:98:6b:d9:03:2d:
75:25:ad:50:54:fb:5a:c4:5d:f5:53:6e:23:37:99:
8a:15:b4:11:57:bb:31:86:d6:ef:0e:34:79:58:80:
b2:2c:13:60:22:c4:43:f6:e0:58:09:92:7a:f7:18:
1a:3d:2b:53:f9:d3:86:90:8e:59:24:99:59:1e:1a:
15:10:d7:86:60:49:b6:2d:64:dc:47:18:e7:f7:e9:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:A1:BF:2A:02:E5:65:6D:2F:23:2C:31:AF:92:8A:29:B3:54:3E
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/IrihvyoC5WVtLyMsMa-SiimzVD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.48.0/20
88.87.32.0/19
109.239.224.0/20
146.247.128.0/17
185.166.204.0/22
185.168.240.0/22
213.166.160.0/19
IPv6:
2001:1ad8::/32
2a00:1b60::/32
Signature Algorithm: sha256WithRSAEncryption
28:3b:71:2e:d3:2e:88:d4:cf:20:5f:ff:77:63:7f:69:82:72:
9e:86:97:a8:ad:73:90:36:f1:24:32:be:98:ff:74:17:02:74:
9f:1a:f6:b4:99:3e:76:c1:b1:ee:90:aa:78:26:26:8e:f7:68:
dc:b5:10:35:3d:5e:4d:68:f6:21:b0:f4:22:8d:a9:90:68:cd:
e8:dc:6c:84:56:72:43:85:cb:d2:d6:ed:48:43:d6:1f:1e:a2:
c9:05:9f:a6:da:0a:be:34:f5:ee:58:d6:27:4b:e8:2f:a2:f3:
56:9a:50:d7:0e:df:c3:32:54:1a:ff:8f:2f:6c:4d:67:6a:5c:
d0:25:b5:20:ea:82:97:0b:9f:93:99:35:17:b7:e2:fd:d1:3c:
49:9f:39:15:43:d0:72:21:3a:6e:fc:bc:43:0d:69:0a:1b:c0:
66:65:4b:f7:11:e6:2c:30:70:fe:c6:b6:ef:fa:4e:59:ee:43:
67:0d:2e:e7:f5:2d:64:cf:09:20:e0:00:80:83:93:32:31:09:
91:9c:64:40:f5:ee:90:0f:8a:db:b4:23:55:d9:f4:2f:7f:59:
34:ef:53:33:32:33:4f:fc:fe:2c:6e:0e:15:7a:66:39:58:6b:
eb:3a:18:59:a5:24:f0:bc:9e:99:47:48:24:42:7b:2e:14:d5:
3a:2c:ae:5b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZQl/D9++L0b6dyN1HccHz3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey
YTYwZGUwHhcNMjUwMTAyMDc0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmI4YTFiZjJhMDJlNTY1NmQyZjIzMmMzMWFmOTI4YTI5YjM1NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB13F8RVN0Vf4QJ2BYRqwWCv28WC
cEVnVBUon/4Ks5Jr02JTd8xQTMetz54+XmQOjGVgSd7NEljuNVHkG+rz5sF3wb1v
iaba1ksnL2GqETHDO0/8+5Eg+nfGQSEFBF5gQnabqbeh15cjeN3+a+FSCCvvphYY
/kW9iTKbVqq1rk7hUc8zXMGVAovRoehcj391kgA23wIeBwx/WxIOg4PvcwxmG9Sf
VviKo51lXlQRmGvZAy11Ja1QVPtaxF31U24jN5mKFbQRV7sxhtbvDjR5WICyLBNg
IsRD9uBYCZJ69xgaPStT+dOGkI5ZJJlZHhoVENeGYEm2LWTcRxjn9+mPKQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFCK4ob8qAuVlbS8jLDGvkoops1Q+MB8GA1UdIwQY
MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt
ZjYwNzBhNGFkODNhLzEvSXJpaHZ5b0M1V1Z0THlNc01hLVNpaW16VkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh
LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQEUEEwAwQF
WFcgAwQEbe/gAwQHkveAAwQCuabMAwQCuajwAwQF1aagMBQEAgACMA4DBQAgARrY
AwUAKgAbYDANBgkqhkiG9w0BAQsFAAOCAQEAKDtxLtMuiNTPIF//d2N/aYJynoaX
qK1zkDbxJDK+mP90FwJ0nxr2tJk+dsGx7pCqeCYmjvdo3LUQNT1eTWj2IbD0Io2p
kGjN6NxshFZyQ4XL0tbtSEPWHx6iyQWfptoKvjT17ljWJ0voL6LzVppQ1w7fwzJU
Gv+PL2xNZ2pc0CW1IOqClwufk5k1F7fi/dE8SZ85FUPQciE6bvy8Qw1pChvAZmVL
9xHmLDBw/sa27/pOWe5DZw0u5/UtZM8JIOAAgIOTMjEJkZxkQPXukA+K27QjVdn0
L39ZNO9TMzIzT/z+LG4OFXpmOVhr6zoYWaUk8LyemUdIJEJ7LhTVOiyuWw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:23 2025 by rpki-client