Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/kLzXL1ZkV5i7SczjHie-nPdTakk.roa
File: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (raw, json)
Hash identifier: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=
Subject key identifier: 90:BC:D7:2F:56:64:57:98:BB:49:CC:E3:1E:27:BE:9C:F7:53:6A:49
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01942444EBC3C3F50FD37E662B6D3A2D00CB
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/kLzXL1ZkV5i7SczjHie-nPdTakk.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 46.226.125.0/24 maxlen: 24
176.118.34.0/24 maxlen: 24
185.21.131.0/24 maxlen: 24
185.25.104.0/24 maxlen: 24
185.248.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:eb:c3:c3:f5:0f:d3:7e:66:2b:6d:3a:2d:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90bcd72f56645798bb49cce31e27be9cf7536a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:7a:9c:6a:50:6d:c4:fd:89:49:97:eb:da:
f9:65:e2:52:39:80:d3:8c:42:64:51:68:f4:a2:67:
70:77:c6:21:9e:56:97:aa:8e:f9:a2:6e:07:6d:c2:
60:dd:72:65:15:6d:21:98:80:05:80:21:dd:3f:ed:
32:77:5c:7b:8f:70:f6:ab:c6:e1:c5:35:07:22:12:
50:bd:9f:7c:e4:68:f3:fa:44:52:41:a9:58:a8:25:
96:b1:60:2f:b0:1a:24:ee:6c:e0:77:28:cb:ec:ad:
27:5c:51:df:90:a6:22:c0:a0:7b:83:be:b3:e7:42:
89:f7:ad:76:d8:32:84:9d:20:7c:00:f6:f7:8c:93:
6e:48:d3:cf:4a:2b:21:25:fe:24:e5:60:7d:23:5c:
79:38:c1:14:f3:aa:10:02:5f:4c:4c:f9:85:f7:81:
64:77:18:59:be:69:88:06:7f:6a:cc:56:5c:98:3a:
6c:fa:20:d2:26:5a:9c:17:06:f8:39:04:a2:fc:b7:
12:27:8d:2a:13:98:87:ef:7f:12:46:fa:31:d9:a3:
4b:cd:8f:3b:7c:99:91:2c:98:71:dc:b0:71:4b:2e:
9c:73:a2:1d:b4:79:68:d8:b3:44:79:fd:7c:09:30:
f9:6d:63:f6:5f:6a:23:88:24:c8:94:6a:dc:21:d0:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:D7:2F:56:64:57:98:BB:49:CC:E3:1E:27:BE:9C:F7:53:6A:49
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/kLzXL1ZkV5i7SczjHie-nPdTakk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.125.0/24
176.118.34.0/24
185.21.131.0/24
185.25.104.0/24
185.248.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e1:e6:b6:df:18:6e:8d:73:5d:52:6e:10:9a:b8:e3:5d:dc:
08:9f:a0:9d:83:13:52:0b:9e:a9:41:bf:8a:69:af:a4:9e:dd:
5c:fb:48:27:55:b9:b1:e7:16:b2:46:c6:1e:50:b9:2c:9b:cd:
c0:25:f8:d2:2a:62:6d:0b:a4:8a:91:31:7b:b3:be:1b:26:77:
89:dc:c8:5b:da:55:67:57:be:1a:dc:35:c2:a7:d2:76:6a:7b:
f8:8a:d1:5e:a0:96:57:6f:5b:3f:d0:8f:61:75:4e:a3:c5:1c:
9f:41:36:fc:3f:91:b5:b0:15:c2:0e:e8:90:61:ef:4d:69:5f:
d0:61:2c:4c:c7:7e:45:87:02:18:fb:35:b5:8b:2a:f3:dc:dc:
14:e1:ea:41:a5:a9:d6:a1:97:a3:f6:dd:7d:8f:e6:e2:c1:2c:
1e:42:c6:ad:ea:dc:94:8f:02:f1:83:a8:71:78:92:7a:28:fb:
9c:5f:e1:62:3a:22:b5:dc:7a:85:9b:2e:e3:02:e1:52:1b:15:
02:5b:53:b7:9b:bd:cc:af:f7:10:65:d4:6b:cb:50:1b:97:fa:
d1:87:d3:5a:e9:f7:e7:ec:6d:62:b8:e5:a4:21:26:4e:13:c4:
52:01:5e:b6:07:da:9b:2a:86:d7:7c:53:00:b2:ee:32:6f:9c:
62:aa:6a:63
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQkROvDw/UP035mK206LQDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjUwMTAxMjM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGJjZDcyZjU2NjQ1Nzk4YmI0OWNjZTMxZTI3YmU5Y2Y3NTM2YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfN6nGpQbcT9iUmX69r5ZeJSOYDT
jEJkUWj0omdwd8YhnlaXqo75om4HbcJg3XJlFW0hmIAFgCHdP+0yd1x7j3D2q8bh
xTUHIhJQvZ985Gjz+kRSQalYqCWWsWAvsBok7mzgdyjL7K0nXFHfkKYiwKB7g76z
50KJ96122DKEnSB8APb3jJNuSNPPSishJf4k5WB9I1x5OMEU86oQAl9MTPmF94Fk
dxhZvmmIBn9qzFZcmDps+iDSJlqcFwb4OQSi/LcSJ40qE5iH738SRvox2aNLzY87
fJmRLJhx3LBxSy6cc6IdtHlo2LNEef18CTD5bWP2X2ojiCTIlGrcIdADVQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJC81y9WZFeYu0nM4x4nvpz3U2pJMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEva0x6WEwxWmtWNWk3U2N6akhpZS1uUGRUYWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALuJ9AwQA
sHYiAwQAuRWDAwQAuRloAwQAufiHMA0GCSqGSIb3DQEBCwUAA4IBAQAN4ea23xhu
jXNdUm4QmrjjXdwIn6CdgxNSC56pQb+Kaa+knt1c+0gnVbmx5xayRsYeULksm83A
JfjSKmJtC6SKkTF7s74bJneJ3Mhb2lVnV74a3DXCp9J2anv4itFeoJZXb1s/0I9h
dU6jxRyfQTb8P5G1sBXCDuiQYe9NaV/QYSxMx35FhwIY+zW1iyrz3NwU4epBpanW
oZej9t19j+biwSweQsat6tyUjwLxg6hxeJJ6KPucX+FiOiK13HqFmy7jAuFSGxUC
W1O3m73Mr/cQZdRry1Abl/rRh9Na6ffn7G1iuOWkISZOE8RSAV62B9qbKobXfFMA
su4yb5xiqmpj
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:32 2025 by rpki-client