Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa
File: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (raw, json)
Hash identifier: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=
Subject key identifier: 80:47:0F:28:CC:97:B2:AF:04:9D:4E:0C:3E:81:5E:63:65:22:75:BD
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 01941FFAB583D9F06BF8A41E7E7C96067847
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20810
IP address blocks: 45.158.172.0/22 maxlen: 22
80.69.192.0/20 maxlen: 20
149.249.32.0/20 maxlen: 20
185.158.180.0/22 maxlen: 22
188.74.0.0/19 maxlen: 20
188.74.0.0/20 maxlen: 20
188.74.16.0/20 maxlen: 20
212.102.118.0/24 maxlen: 24
2a03:7500::/29 maxlen: 32
2a03:7500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b5:83:d9:f0:6b:f8:a4:1e:7e:7c:96:06:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80470f28cc97b2af049d4e0c3e815e63652275bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:1f:15:93:c6:7d:40:27:c8:00:cd:a9:01:
25:85:5a:02:5a:d8:c9:30:7d:81:89:7f:74:3a:02:
cc:d8:eb:15:57:45:67:49:92:46:b9:2a:36:4b:9d:
f6:07:4e:72:ea:bb:9b:c3:af:b9:44:08:fd:ab:a3:
61:1a:89:26:5b:7f:b3:38:f7:9d:fa:93:04:08:f8:
ae:f9:3f:e2:79:27:04:46:93:94:d3:95:46:8d:ea:
d3:94:46:c2:8f:34:8f:4c:f9:a0:11:2a:ff:3b:4c:
1f:81:8b:2f:4a:05:5b:0c:aa:2c:e0:fd:67:cd:0c:
73:85:e8:0e:cb:1a:65:d2:77:42:62:d2:00:f1:23:
cf:9c:91:ee:77:b2:86:b5:d8:d6:18:d3:50:bf:06:
10:87:9b:ec:ab:3e:63:6b:10:6a:89:af:45:c2:88:
f3:71:48:f3:6f:1a:6c:34:fa:03:b0:02:47:21:5f:
c9:03:cb:72:5d:53:a2:f6:83:c9:cc:f3:03:77:7e:
76:60:fb:c8:e8:1a:6d:ef:45:e5:03:fb:8a:60:9d:
69:4e:98:b9:50:b7:57:b5:92:d0:f9:17:10:31:de:
6e:8f:1c:14:75:65:ab:40:94:f3:4b:41:27:9c:e5:
00:d9:2d:da:b6:c3:93:60:f3:31:c3:55:7c:3c:cb:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:0F:28:CC:97:B2:AF:04:9D:4E:0C:3E:81:5E:63:65:22:75:BD
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.172.0/22
80.69.192.0/20
149.249.32.0/20
185.158.180.0/22
188.74.0.0/19
212.102.118.0/24
IPv6:
2a03:7500::/29
Signature Algorithm: sha256WithRSAEncryption
19:d3:fa:15:d8:c0:91:e0:ab:4b:93:9a:11:af:8a:71:6f:65:
70:d4:4a:a1:d5:5f:f6:94:05:81:cc:96:b0:fb:15:12:fe:d1:
2a:02:bf:a0:ce:7f:a3:f6:5a:32:bc:54:20:96:5a:43:d1:56:
01:59:71:d7:5c:5a:74:53:5f:ed:b9:e4:40:d8:e5:9c:68:26:
77:18:92:a4:5e:ff:6c:fa:8f:81:a4:61:46:87:f9:e2:f9:b6:
81:14:27:24:81:e9:be:29:cc:c9:bb:a2:55:40:c0:06:19:6d:
f2:8d:b4:bc:01:21:cb:9c:db:19:4e:f5:9c:ad:a7:6f:ec:6d:
be:cd:97:a3:f5:5c:88:d0:10:c6:da:3c:39:d9:11:a5:74:5b:
14:3a:c3:87:9d:ff:bc:1f:60:e9:5c:88:b0:bc:1b:be:5f:32:
c0:b1:aa:eb:aa:2c:4f:d2:a2:d9:15:38:22:4f:f2:9c:7a:64:
c4:c5:11:e1:7d:12:68:00:f3:47:8c:f5:9e:ae:4e:ea:65:b0:
7a:57:35:6d:a3:f6:a5:24:80:38:d2:f7:a1:f4:9c:6c:7f:b3:
c8:d7:ff:7d:ca:71:4b:20:b0:81:37:f3:a3:ed:c0:84:8b:28:
35:9d:8e:b6:ab:48:4f:bf:cc:14:50:f2:19:e8:e1:48:a7:40:
1e:eb:98:d3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQf+rWD2fBr+KQefnyWBnhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2Y3ZWU2YWI5Y2Y0NDhmOTk0OTM2N2ZiN2MwZWRlMTA3
M2Y5N2YwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDQ3MGYyOGNjOTdiMmFmMDQ5ZDRlMGMzZTgxNWU2MzY1MjI3NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj4fFZPGfUAnyADNqQElhVoCWtjJ
MH2BiX90OgLM2OsVV0VnSZJGuSo2S532B05y6rubw6+5RAj9q6NhGokmW3+zOPed
+pMECPiu+T/ieScERpOU05VGjerTlEbCjzSPTPmgESr/O0wfgYsvSgVbDKos4P1n
zQxzhegOyxpl0ndCYtIA8SPPnJHud7KGtdjWGNNQvwYQh5vsqz5jaxBqia9Fwojz
cUjzbxpsNPoDsAJHIV/JA8tyXVOi9oPJzPMDd352YPvI6Bpt70XlA/uKYJ1pTpi5
ULdXtZLQ+RcQMd5ujxwUdWWrQJTzS0EnnOUA2S3atsOTYPMxw1V8PMtsvQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFIBHDyjMl7KvBJ1ODD6BXmNlInW9MB8GA1UdIwQY
MBaAFHB/fuarnPRI+ZSTZ/t8Dt4Qc/l/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zYjQ1YjMtMThhNC00N2Y4LTgyNjQt
ZjcwOGJjNzBlNmVlLzEvZ0VjUEtNeVhzcThFblU0TVBvRmVZMlVpZGIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zYjQ1YjMtMThhNC00N2Y4LTgyNjQtZjcwOGJjNzBlNmVl
LzEvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLZ6sAwQE
UEXAAwQElfkgAwQCuZ60AwQFvEoAAwQA1GZ2MA0EAgACMAcDBQMqA3UAMA0GCSqG
SIb3DQEBCwUAA4IBAQAZ0/oV2MCR4KtLk5oRr4pxb2Vw1Eqh1V/2lAWBzJaw+xUS
/tEqAr+gzn+j9loyvFQgllpD0VYBWXHXXFp0U1/tueRA2OWcaCZ3GJKkXv9s+o+B
pGFGh/ni+baBFCckgem+KczJu6JVQMAGGW3yjbS8ASHLnNsZTvWcradv7G2+zZej
9VyI0BDG2jw52RGldFsUOsOHnf+8H2DpXIiwvBu+XzLAsarrqixP0qLZFTgiT/Kc
emTExRHhfRJoAPNHjPWerk7qZbB6VzVto/alJIA40veh9Jxsf7PI1/99ynFLILCB
N/Oj7cCEiyg1nY62q0hPv8wUUPIZ6OFIp0Ae65jT
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:49:27 2025 by rpki-client