Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa
File: XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa (raw, json)
Hash identifier: BSh/QG5V0PdqCQRHLmCsYPsMOLFQjX1Hat7fPJRL1hA=
Subject key identifier: 5E:74:64:2C:F9:CD:28:A9:12:1B:55:16:35:65:81:75:5E:E7:DE:B2
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1CD6864035A202FE9A1726B5E279F
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5588
IP address blocks: 84.2.79.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
194.88.32.0/19 maxlen: 19
194.88.37.0/24 maxlen: 24
194.149.0.0/19 maxlen: 19
195.56.0.0/16 maxlen: 16
195.56.202.0/23 maxlen: 23
195.56.203.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
217.20.128.0/20 maxlen: 20
217.116.32.0/20 maxlen: 20
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cd:68:64:03:5a:20:2f:e9:a1:72:6b:5e:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e74642cf9cd28a9121b5516356581755ee7deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:f2:12:a2:26:45:24:fc:1b:c2:73:76:ea:
d2:6b:1d:3c:90:71:80:8c:cb:9e:da:77:6f:e6:9c:
ab:fc:03:b1:a8:a6:f5:38:66:ed:be:e9:48:1d:bc:
80:c1:98:bb:73:d6:be:c5:67:02:4e:67:3f:1f:8b:
33:4b:9d:dc:ec:31:e5:63:af:db:df:54:3a:01:93:
7f:f5:09:f8:7f:0b:9d:5e:24:b6:b0:5d:ce:fd:6d:
2a:f0:a5:fe:de:97:03:85:61:4d:66:7c:48:45:3d:
c4:a8:74:e0:81:8d:da:2f:ec:47:6a:35:96:ec:6a:
91:94:14:54:47:3d:a1:82:ba:14:ec:25:e9:43:85:
2f:4c:29:8e:b2:dc:d0:9c:5d:dc:c1:72:07:68:6f:
a5:5a:a3:27:52:c8:b0:20:48:a7:34:b1:80:bf:63:
6d:a2:ac:ad:1f:55:bf:2b:4b:83:26:dd:3a:a6:27:
0e:07:47:e7:bb:29:5e:c2:88:f7:4f:a6:c6:8b:d1:
77:60:dc:31:99:a8:37:58:a6:40:d5:a7:02:0a:e4:
9a:08:f2:c6:38:0c:e1:b2:a6:ce:d0:79:5b:36:9c:
a1:de:ed:c6:83:b1:6f:53:6a:35:dd:dd:9c:35:f0:
7a:87:e0:77:86:0f:97:23:db:97:a8:27:08:a6:dc:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:64:2C:F9:CD:28:A9:12:1B:55:16:35:65:81:75:5E:E7:DE:B2
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/XnRkLPnNKKkSG1UWNWWBdV7n3rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.2.79.0/24
91.120.0.0/16
194.88.32.0/19
194.149.0.0/19
195.56.0.0/16
195.70.32.0/19
217.20.128.0/20
217.116.32.0/20
IPv6:
2a00:10d0::/32
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
76:74:c6:d8:22:95:c2:6e:dd:8f:04:d5:b8:d0:37:84:a4:15:
ed:3f:10:ac:61:fc:ed:0d:16:2b:83:ad:ec:1a:0a:ba:bc:87:
32:1f:18:13:19:e5:84:84:2f:59:1a:b3:ba:29:35:bc:5d:c6:
92:1c:7f:90:85:bd:e6:af:97:45:2e:87:44:cd:51:77:a0:93:
0c:c6:81:83:cc:b4:e7:22:48:13:4a:e9:86:13:18:e7:2d:92:
49:fc:05:6b:6f:2e:5f:08:2f:3e:52:f1:b5:33:80:af:7f:bf:
26:9a:f0:ca:a3:a0:72:2f:97:4e:e6:ee:47:c4:1d:d5:8b:f9:
6e:df:2e:5d:ad:58:05:14:17:25:85:51:b7:17:50:17:9c:70:
97:4d:e1:ae:90:32:27:ed:17:99:33:d0:b8:70:d0:ac:d9:a3:
6a:1a:82:be:89:49:7b:48:e5:87:d3:ac:79:85:66:41:58:74:
42:c4:07:89:92:f4:a1:2f:0d:4b:7a:ec:2a:ef:83:9a:59:c2:
a4:96:45:94:ca:f0:b9:31:52:9c:c0:eb:98:97:4e:ad:2d:21:
ef:15:fe:de:ec:73:09:d6:d4:76:1a:de:0a:47:46:27:61:71:
e1:ac:b8:b3:35:30:aa:55:0a:72:a8:94:50:c4:46:cf:a8:7a:
66:b8:22:fe
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZQhsc1oZANaIC/poXJrXiefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjUwMTAxMTE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTc0NjQyY2Y5Y2QyOGE5MTIxYjU1MTYzNTY1ODE3NTVlZTdkZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mryEqImRST8G8JzdurSax08kHGA
jMue2ndv5pyr/AOxqKb1OGbtvulIHbyAwZi7c9a+xWcCTmc/H4szS53c7DHlY6/b
31Q6AZN/9Qn4fwudXiS2sF3O/W0q8KX+3pcDhWFNZnxIRT3EqHTggY3aL+xHajWW
7GqRlBRURz2hgroU7CXpQ4UvTCmOstzQnF3cwXIHaG+lWqMnUsiwIEinNLGAv2Nt
oqytH1W/K0uDJt06picOB0fnuylewoj3T6bGi9F3YNwxmag3WKZA1acCCuSaCPLG
OAzhsqbO0HlbNpyh3u3Gg7FvU2o13d2cNfB6h+B3hg+XI9uXqCcIptxRNQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFF50ZCz5zSipEhtVFjVlgXVe596yMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvWG5Sa0xQbk5LS2tTRzFVV05XV0JkVjduM3JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDA0BAIAATAuAwQAVAJPAwMA
W3gDBAXCWCADBAXClQADAwDDOAMEBcNGIAMEBNkUgAMEBNl0IDAUBAIAAjAOAwUA
KgAQ0AMFACoCBzgwDQYJKoZIhvcNAQELBQADggEBAHZ0xtgilcJu3Y8E1bjQN4Sk
Fe0/EKxh/O0NFiuDrewaCrq8hzIfGBMZ5YSEL1kas7opNbxdxpIcf5CFveavl0Uu
h0TNUXegkwzGgYPMtOciSBNK6YYTGOctkkn8BWtvLl8ILz5S8bUzgK9/vyaa8Mqj
oHIvl07m7kfEHdWL+W7fLl2tWAUUFyWFUbcXUBeccJdN4a6QMiftF5kz0Lhw0KzZ
o2oagr6JSXtI5YfTrHmFZkFYdELEB4mS9KEvDUt67Crvg5pZwqSWRZTK8LkxUpzA
65iXTq0tIe8V/t7scwnW1HYa3gpHRidhceGsuLM1MKpVCnKolFDERs+oema4Iv4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:16 2025 by rpki-client