Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/02L_0yvjrj7KDTzjU6X6m1mtpQI.roa
File: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (raw, json)
Hash identifier: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=
Subject key identifier: D3:62:FF:D3:2B:E3:AE:3E:CA:0D:3C:E3:53:A5:FA:9B:59:AD:A5:02
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 019425FDA08870B89A0BE45623EA61841BAD
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/02L_0yvjrj7KDTzjU6X6m1mtpQI.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5432
IP address blocks: 37.62.0.0/16 maxlen: 16
37.184.0.0/15 maxlen: 16
46.178.0.0/15 maxlen: 16
62.4.128.0/17 maxlen: 17
62.235.0.0/16 maxlen: 16
80.200.0.0/15 maxlen: 16
80.236.128.0/17 maxlen: 17
81.11.128.0/17 maxlen: 17
81.169.0.0/17 maxlen: 17
81.240.0.0/14 maxlen: 16
81.244.0.0/14 maxlen: 16
83.134.0.0/16 maxlen: 16
87.64.0.0/14 maxlen: 16
88.197.128.0/17 maxlen: 17
91.176.0.0/14 maxlen: 16
91.180.0.0/14 maxlen: 16
92.48.128.0/18 maxlen: 18
109.128.0.0/14 maxlen: 16
109.132.0.0/14 maxlen: 16
109.136.0.0/14 maxlen: 16
109.140.0.0/14 maxlen: 16
178.144.0.0/15 maxlen: 16
188.5.0.0/16 maxlen: 16
193.74.0.0/16 maxlen: 16
193.75.128.0/17 maxlen: 17
193.91.96.0/19 maxlen: 19
193.121.0.0/16 maxlen: 16
194.78.0.0/16 maxlen: 16
194.119.224.0/19 maxlen: 19
195.0.0.0/17 maxlen: 17
195.13.0.0/19 maxlen: 19
195.74.192.0/19 maxlen: 19
195.95.0.0/17 maxlen: 17
195.207.0.0/16 maxlen: 16
195.238.0.0/19 maxlen: 19
212.233.0.0/19 maxlen: 19
212.239.128.0/17 maxlen: 17
213.49.0.0/16 maxlen: 16
213.177.128.0/19 maxlen: 19
213.181.32.0/19 maxlen: 19
217.136.0.0/16 maxlen: 16
2a02:a000::/26 maxlen: 26
2a04:6c40::/29 maxlen: 29
2a04:9f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a0:88:70:b8:9a:0b:e4:56:23:ea:61:84:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d362ffd32be3ae3eca0d3ce353a5fa9b59ada502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:05:2a:14:ae:75:9b:a5:f1:e5:2f:fe:ac:
16:17:fd:91:59:03:f6:55:0d:43:10:64:19:30:e5:
86:45:a5:be:16:b6:ac:df:76:13:95:57:86:e4:ad:
82:e4:61:90:00:74:8c:f9:84:47:ec:b7:7f:ad:e9:
61:9b:48:f0:c9:f8:cf:27:36:60:38:24:67:af:af:
76:88:6d:22:74:66:cf:a1:19:aa:f7:4b:ac:81:a0:
58:4e:05:7a:66:56:58:4b:c7:ef:cb:54:ef:1e:47:
ce:e8:b5:b4:9f:b9:ad:f9:4f:35:b1:f5:de:a6:9a:
04:b5:43:71:ec:c9:77:fb:8c:50:a3:81:65:db:ab:
f6:ce:7e:30:e8:4d:0c:2b:91:fd:92:35:53:54:cf:
e7:ee:72:fb:73:2e:e5:cc:d0:6a:6e:13:0e:5e:cb:
e4:bb:1b:82:70:2b:b8:cd:6b:15:60:0e:ef:a4:9d:
e6:d5:c8:21:33:d9:1a:20:36:f3:cd:8c:f2:67:71:
75:81:d1:62:4d:c1:85:a5:2a:fa:4d:34:66:54:8a:
40:1e:b0:ac:f0:b4:e0:8f:a3:9e:4f:45:bb:b7:86:
71:73:5d:06:72:7b:7a:8b:56:e8:4b:ce:9a:f8:21:
23:26:ac:05:cb:57:a7:b5:6b:e0:2f:b1:ff:04:a5:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:FF:D3:2B:E3:AE:3E:CA:0D:3C:E3:53:A5:FA:9B:59:AD:A5:02
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/02L_0yvjrj7KDTzjU6X6m1mtpQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.62.0.0/16
37.184.0.0/15
46.178.0.0/15
62.4.128.0/17
62.235.0.0/16
80.200.0.0/15
80.236.128.0/17
81.11.128.0/17
81.169.0.0/17
81.240.0.0/13
83.134.0.0/16
87.64.0.0/14
88.197.128.0/17
91.176.0.0/13
92.48.128.0/18
109.128.0.0/12
178.144.0.0/15
188.5.0.0/16
193.74.0.0/16
193.75.128.0/17
193.91.96.0/19
193.121.0.0/16
194.78.0.0/16
194.119.224.0/19
195.0.0.0/17
195.13.0.0/19
195.74.192.0/19
195.95.0.0/17
195.207.0.0/16
195.238.0.0/19
212.233.0.0/19
212.239.128.0/17
213.49.0.0/16
213.177.128.0/19
213.181.32.0/19
217.136.0.0/16
IPv6:
2a02:a000::/26
2a04:6c40::/29
2a04:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
7b:e2:a3:a5:d6:b5:66:9a:8d:1d:39:bf:bd:86:e2:2f:46:19:
5e:3c:16:f8:6b:f6:97:7f:77:30:12:22:5b:c5:bd:28:ad:95:
90:c6:db:73:ec:f1:9c:4d:dd:00:00:87:be:d2:20:5f:46:80:
5b:2b:75:8c:42:7a:9d:d1:81:08:1f:06:26:13:b6:d6:09:fd:
7a:c3:e0:57:b7:2f:62:56:5d:f2:66:da:26:b3:1d:e7:12:21:
16:9d:8c:c2:87:43:ad:c7:b3:b3:42:86:fd:5f:63:cf:2a:3e:
d9:bc:f9:64:74:b8:ab:ec:97:f7:54:17:32:ac:9b:b4:af:cc:
19:58:e7:88:42:25:0e:03:ea:ea:8c:25:16:b1:6c:a3:60:99:
05:57:ec:ec:41:de:df:c2:f0:ea:05:45:a5:5e:d8:8e:9e:5a:
ba:6c:0e:ef:80:b8:9f:6f:1f:21:fd:76:ae:89:a4:a0:1a:e3:
06:4e:6e:07:d2:07:84:5c:42:fe:4e:23:99:0f:72:43:b7:1d:
f8:64:52:27:72:d8:85:8a:7d:c3:eb:ae:8d:1c:3c:65:c9:a9:
2b:01:b5:ab:f2:d1:68:70:71:87:d6:d1:3d:8f:10:51:a6:26:
6b:cf:be:bc:ca:2d:06:80:5f:a8:b4:da:97:a2:fe:c8:22:84:
1c:03:e3:b1
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgISAZQl/aCIcLiaC+RWI+phhButMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky
ZmM5OWEwHhcNMjUwMTAyMDc0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzYyZmZkMzJiZTNhZTNlY2EwZDNjZTM1M2E1ZmE5YjU5YWRhNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQFKhSudZul8eUv/qwWF/2RWQP2
VQ1DEGQZMOWGRaW+Fras33YTlVeG5K2C5GGQAHSM+YRH7Ld/relhm0jwyfjPJzZg
OCRnr692iG0idGbPoRmq90usgaBYTgV6ZlZYS8fvy1TvHkfO6LW0n7mt+U81sfXe
ppoEtUNx7Ml3+4xQo4Fl26v2zn4w6E0MK5H9kjVTVM/n7nL7cy7lzNBqbhMOXsvk
uxuCcCu4zWsVYA7vpJ3m1cghM9kaIDbzzYzyZ3F1gdFiTcGFpSr6TTRmVIpAHrCs
8LTgj6OeT0W7t4Zxc10Gcnt6i1boS86a+CEjJqwFy1entWvgL7H/BKXUbwIDAQAB
o4IC7DCCAugwHQYDVR0OBBYEFNNi/9Mr464+yg0841Ol+ptZraUCMB8GA1UdIwQY
MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt
YWU3NzQ2ZjA5NjMwLzEvMDJMXzB5dmpyajdLRFR6alU2WDZtMW10cFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw
LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAAYIKwYBBQUHAQcBAf8EgfAwge0wgc0EAgABMIHGAwMA
JT4DAwEluAMDAS6yAwQHPgSAAwMAPusDAwFQyAMEB1DsgAMEB1ELgAMEB1GpAAMD
A1HwAwMAU4YDAwJXQAMEB1jFgAMDA1uwAwQGXDCAAwMEbYADAwGykAMDALwFAwMA
wUoDBAfBS4ADBAXBW2ADAwDBeQMDAMJOAwQFwnfgAwQHwwAAAwQFww0AAwQFw0rA
AwQHw18AAwMAw88DBAXD7gADBAXU6QADBAfU74ADAwDVMQMEBdWxgAMEBdW1IAMD
ANmIMBsEAgACMBUDBQYqAqAAAwUDKgRsQAMFAyoEn4AwDQYJKoZIhvcNAQELBQAD
ggEBAHvio6XWtWaajR05v72G4i9GGV48Fvhr9pd/dzASIlvFvSitlZDG23Ps8ZxN
3QAAh77SIF9GgFsrdYxCep3RgQgfBiYTttYJ/XrD4Fe3L2JWXfJm2iazHecSIRad
jMKHQ63Hs7NChv1fY88qPtm8+WR0uKvsl/dUFzKsm7SvzBlY54hCJQ4D6uqMJRax
bKNgmQVX7OxB3t/C8OoFRaVe2I6eWrpsDu+AuJ9vHyH9dq6JpKAa4wZObgfSB4Rc
Qv5OI5kPckO3HfhkUidy2IWKfcPrro0cPGXJqSsBtavy0WhwcYfW0T2PEFGmJmvP
vrzKLQaAX6i02pei/sgihBwD47E=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:19:46 2025 by rpki-client