Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa
File: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (raw, json)
Hash identifier: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=
Subject key identifier: 49:99:FC:84:DA:D9:2C:5C:FA:FE:37:7F:FD:C7:36:85:06:15:B0:9E
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 01942143EDD7AFFB965F7D57A92B7859FDBE
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
91.190.155.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
185.223.207.0/24 maxlen: 24
188.93.140.0/24 maxlen: 24
188.244.117.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
212.52.0.0/24 maxlen: 24
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:d7:af:fb:96:5f:7d:57:a9:2b:78:59:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4999fc84dad92c5cfafe377ffdc736850615b09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:2c:1c:89:77:1f:dc:38:9f:60:3b:dc:93:
ae:09:7d:ca:2e:a8:78:eb:e7:6c:fc:73:95:21:74:
f3:12:f6:ba:35:01:f7:11:a7:be:13:90:b9:6a:f1:
27:7a:b4:75:2d:91:88:37:f4:09:e2:4c:af:fb:82:
36:e2:b2:ee:4f:7c:75:36:f4:16:6c:7d:ee:1f:a9:
0a:d0:8a:af:75:fb:bd:49:fb:69:18:d9:7a:9b:ee:
a8:48:d5:db:92:6a:c6:44:76:9d:16:a1:84:82:e8:
b3:6d:d1:b0:d3:aa:bd:c8:bb:d5:24:a6:68:c2:2e:
11:ee:7f:8f:fb:7c:f7:bf:0c:de:3c:9c:f9:37:b5:
c6:52:e3:bf:a6:f5:36:da:23:49:51:47:37:a9:de:
e2:1b:bb:ad:f0:44:d8:3b:a0:75:67:6a:51:ea:9e:
63:86:14:76:75:2b:33:18:19:a5:c4:36:6c:46:88:
dd:1b:c3:25:53:c2:d9:a7:ff:a8:3f:17:6d:85:27:
9e:3a:9a:81:09:ca:60:92:75:e2:ac:d0:af:7e:55:
e6:04:d5:a6:b0:f6:90:3a:af:df:4d:cb:da:0d:93:
ca:34:17:a7:40:6f:a2:87:76:8c:20:fb:a2:93:c6:
bd:04:02:6a:64:a1:45:4c:21:a5:04:7a:e8:36:d6:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:FC:84:DA:D9:2C:5C:FA:FE:37:7F:FD:C7:36:85:06:15:B0:9E
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
91.190.155.0/24
109.205.61.0/24
185.223.207.0/24
188.93.140.0/24
188.244.117.0/24
194.29.100.0/23
194.29.186.0/23
212.52.0.0/24
IPv6:
2a0e:dc0:2::-2a0e:dc0:6:ffff:ffff:ffff:ffff:ffff
2a0e:dc0:8::/47
Signature Algorithm: sha256WithRSAEncryption
74:74:fb:7b:f8:64:77:49:20:e1:c0:9d:67:4a:f3:56:47:8d:
9e:66:a6:e8:13:38:de:a7:ce:6c:ea:ff:1d:80:be:99:bb:31:
e8:50:69:70:d6:a1:e1:21:cc:d5:10:99:82:22:b9:6c:82:95:
44:60:b1:c7:a8:30:9f:0a:2e:de:73:1a:eb:09:19:a2:03:81:
f6:f0:80:92:bb:e5:a4:b3:7e:13:b8:f2:66:df:aa:1e:2c:25:
bf:16:31:e3:e1:08:3d:6e:1d:51:93:ed:52:98:70:e1:f6:fd:
b2:f3:d7:7c:22:be:ac:f5:b4:59:d7:d4:1d:9e:e0:63:8e:c6:
3d:be:0e:12:2a:7d:97:67:cc:47:46:00:32:91:11:9e:fd:73:
c4:64:bf:a7:f3:05:54:25:a5:18:42:8d:fc:96:b2:87:60:c1:
3d:d5:23:84:a7:aa:32:72:85:43:f9:30:83:41:12:f9:e0:09:
4a:21:6c:86:c8:dd:95:ee:ac:83:30:66:0d:91:5b:53:c0:6a:
74:43:cf:aa:cd:84:8c:f7:3e:5b:33:7d:1b:11:de:bb:37:4d:
0c:7a:92:d0:a2:d7:de:df:5c:ff:6d:9b:15:78:ce:24:ca:de:
62:b8:56:f2:1c:c1:c7:cf:60:78:2e:d3:08:67:8b:a2:00:37:
a2:a4:4b:26
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAZQhQ+3Xr/uWX31XqSt4Wf2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjUwYzdlODFkOGNmMjY0ZDEyMDliNmFkNWEzY2NiODJj
MTZmZGQwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTk5ZmM4NGRhZDkyYzVjZmFmZTM3N2ZmZGM3MzY4NTA2MTViMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIAsHIl3H9w4n2A73JOuCX3KLqh4
6+ds/HOVIXTzEva6NQH3Eae+E5C5avEnerR1LZGIN/QJ4kyv+4I24rLuT3x1NvQW
bH3uH6kK0Iqvdfu9SftpGNl6m+6oSNXbkmrGRHadFqGEguizbdGw06q9yLvVJKZo
wi4R7n+P+3z3vwzePJz5N7XGUuO/pvU22iNJUUc3qd7iG7ut8ETYO6B1Z2pR6p5j
hhR2dSszGBmlxDZsRojdG8MlU8LZp/+oPxdthSeeOpqBCcpgknXirNCvflXmBNWm
sPaQOq/fTcvaDZPKNBenQG+ih3aMIPuik8a9BAJqZKFFTCGlBHroNtbFiQIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFEmZ/ITa2Sxc+v43f/3HNoUGFbCeMB8GA1UdIwQY
MBaAFPe1DH6B2M8mTRIJtq1aPMuCwW/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmIt
YWM0MDE2MTIwY2I5LzEvU1puOGhOclpMRno2X2pkX19jYzJoUVlWc0o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmItYWM0MDE2MTIwY2I5
LzEvOTdVTWZvSFl6eVpORWdtMnJWbzh5NExCYjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wSAQCAAEwQgMEAi1bXAME
AS2ESgMEAFOKNQMEAFu+mwMEAG3NPQMEALnfzwMEALxdjAMEALz0dQMEAcIdZAME
AcIdugMEANQ0ADAjBAIAAjAdMBIDBwEqDg3AAAIDBwAqDg3AAAYDBwEqDg3AAAgw
DQYJKoZIhvcNAQELBQADggEBAHR0+3v4ZHdJIOHAnWdK81ZHjZ5mpugTON6nzmzq
/x2Avpm7MehQaXDWoeEhzNUQmYIiuWyClURgsceoMJ8KLt5zGusJGaIDgfbwgJK7
5aSzfhO48mbfqh4sJb8WMePhCD1uHVGT7VKYcOH2/bLz13wivqz1tFnX1B2e4GOO
xj2+DhIqfZdnzEdGADKREZ79c8Rkv6fzBVQlpRhCjfyWsodgwT3VI4SnqjJyhUP5
MINBEvngCUohbIbI3ZXurIMwZg2RW1PAanRDz6rNhIz3PlszfRsR3rs3TQx6ktCi
197fXP9tmxV4ziTK3mK4VvIcwcfPYHgu0whni6IAN6KkSyY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:09:43 2025 by rpki-client