Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Fvd9uZJCb-rN-8Jzw8PIIJ6v6l8.roa
File: Fvd9uZJCb-rN-8Jzw8PIIJ6v6l8.roa (raw, json)
Hash identifier: pdnPd5b2IN8Z9WpA7xg66na9oZBFREbM/VEAYQVjTOU=
Subject key identifier: 16:F7:7D:B9:92:42:6F:EA:CD:FB:C2:73:C3:C3:C8:20:9E:AF:EA:5F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2321BDC2FC7D377670C88C7725AFE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Fvd9uZJCb-rN-8Jzw8PIIJ6v6l8.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18978
IP address blocks: 5.180.25.0/24 maxlen: 24
5.180.26.0/24 maxlen: 24
5.180.28.0/24 maxlen: 24
5.180.41.0/24 maxlen: 24
5.180.44.0/24 maxlen: 24
5.180.53.0/24 maxlen: 24
5.180.144.0/24 maxlen: 24
5.180.146.0/24 maxlen: 24
45.66.156.0/22 maxlen: 24
45.128.61.0/24 maxlen: 24
45.128.62.0/23 maxlen: 23
45.136.112.0/23 maxlen: 23
45.136.118.0/23 maxlen: 24
45.136.130.0/23 maxlen: 23
45.136.148.0/24 maxlen: 24
45.136.150.0/23 maxlen: 23
85.208.111.0/24 maxlen: 24
85.208.116.0/23 maxlen: 24
85.208.118.0/24 maxlen: 24
85.209.152.0/24 maxlen: 24
85.209.192.0/23 maxlen: 23
194.59.220.0/24 maxlen: 24
194.124.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:1b:dc:2f:c7:d3:77:67:0c:88:c7:72:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16f77db992426feacdfbc273c3c3c8209eafea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:5d:a6:da:b5:59:09:b0:24:0e:87:08:52:
23:16:61:00:ee:a7:29:98:4c:2f:3b:36:3f:f5:67:
27:29:09:5d:fd:b6:3d:e5:fb:08:df:d2:cd:20:4d:
dc:82:23:cf:20:76:c0:af:3d:a5:c6:7d:b5:a7:03:
86:2d:a8:c5:f7:87:68:24:11:54:29:43:17:56:38:
24:48:c4:9d:13:21:f8:0f:ee:1c:53:ea:a2:46:95:
2f:8f:1f:f0:ea:dc:72:74:7e:17:20:26:fc:0f:eb:
a5:e1:1d:34:f8:2d:d4:4d:7d:b1:bf:86:84:f0:72:
50:b2:82:81:f2:4b:00:d0:11:92:f5:e9:fb:16:98:
d5:24:b7:06:7f:55:3f:ac:78:2d:ea:d0:57:45:83:
3f:00:eb:cf:51:b2:75:a1:02:85:1f:76:2b:e0:8b:
d8:85:cd:43:19:6d:12:05:60:b0:4b:1b:cd:e1:ae:
9b:bd:40:59:03:d8:17:28:2d:b3:ae:2b:ef:c1:49:
28:2e:31:ff:64:c7:5e:cd:75:e6:fe:b3:6e:54:59:
0c:3c:44:b9:1e:b7:47:84:3d:56:c1:5a:fe:65:ff:
9a:26:41:08:6a:1f:41:9b:c8:6a:d6:fc:55:4f:7c:
05:85:6b:53:a3:0f:8d:c5:c9:15:b8:4a:d0:70:7c:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:7D:B9:92:42:6F:EA:CD:FB:C2:73:C3:C3:C8:20:9E:AF:EA:5F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Fvd9uZJCb-rN-8Jzw8PIIJ6v6l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.25.0-5.180.26.255
5.180.28.0/24
5.180.41.0/24
5.180.44.0/24
5.180.53.0/24
5.180.144.0/24
5.180.146.0/24
45.66.156.0/22
45.128.61.0-45.128.63.255
45.136.112.0/23
45.136.118.0/23
45.136.130.0/23
45.136.148.0/24
45.136.150.0/23
85.208.111.0/24
85.208.116.0-85.208.118.255
85.209.152.0/24
85.209.192.0/23
194.59.220.0/24
194.124.244.0/23
Signature Algorithm: sha256WithRSAEncryption
67:2d:36:3b:15:39:6a:9f:b3:d8:6c:6d:b7:62:9b:6f:15:f4:
b4:07:d6:c9:58:ce:4c:aa:2f:2a:da:e7:b3:c8:fc:84:f7:6c:
7c:8a:b9:96:b5:6c:67:e3:ad:bb:90:31:f2:dc:40:4c:4f:3c:
4b:0e:77:ea:42:b5:b8:d3:dd:d2:9a:36:94:7d:58:61:63:d9:
73:25:ae:bf:9f:19:6a:4d:a9:46:3d:dd:30:18:8d:5a:54:5a:
bd:85:66:37:4c:80:f2:93:8d:2e:07:0e:ea:47:d2:94:d8:67:
4d:48:9c:19:6f:44:7e:46:32:b2:e1:29:21:61:4c:63:f4:1f:
bd:5b:32:c5:86:f1:c6:73:83:33:93:da:c1:ad:31:ed:32:9e:
3f:17:42:cf:e6:b0:b5:c5:86:41:20:4e:7e:c1:21:53:2e:e6:
d1:2f:fa:4b:b2:4d:e3:c2:71:76:b1:4e:3b:6b:bb:dd:f8:3b:
81:98:a0:42:63:b9:be:52:62:37:1e:bf:56:60:e1:e4:48:e5:
78:92:45:59:a0:76:d5:e6:2c:f7:49:a5:6d:02:ae:64:91:ea:
05:3f:e2:2b:36:1e:7f:48:cf:da:22:56:10:49:23:f3:a7:ec:
76:44:39:d1:0a:66:7c:fa:e1:36:0c:2d:0e:e3:c0:8d:b8:2d:
5a:65:1e:56
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZQhsjIb3C/H03dnDIjHclr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmY3N2RiOTkyNDI2ZmVhY2RmYmMyNzNjM2MzYzgyMDllYWZlYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN1dptq1WQmwJA6HCFIjFmEA7qcp
mEwvOzY/9WcnKQld/bY95fsI39LNIE3cgiPPIHbArz2lxn21pwOGLajF94doJBFU
KUMXVjgkSMSdEyH4D+4cU+qiRpUvjx/w6txydH4XICb8D+ul4R00+C3UTX2xv4aE
8HJQsoKB8ksA0BGS9en7FpjVJLcGf1U/rHgt6tBXRYM/AOvPUbJ1oQKFH3Yr4IvY
hc1DGW0SBWCwSxvN4a6bvUBZA9gXKC2zrivvwUkoLjH/ZMdezXXm/rNuVFkMPES5
HrdHhD1WwVr+Zf+aJkEIah9Bm8hq1vxVT3wFhWtTow+NxckVuErQcHzWGQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFBb3fbmSQm/qzfvCc8PDyCCer+pfMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRnZkOXVaSkNiLXJOLThKenc4UElJSjZ2Nmw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME
AAW0GQMEAAW0GgMEAAW0HAMEAAW0KQMEAAW0LAMEAAW0NQMEAAW0kAMEAAW0kgME
Ai1CnDAMAwQALYA9AwQGLYAAAwQBLYhwAwQBLYh2AwQBLYiCAwQALYiUAwQBLYiW
AwQAVdBvMAwDBAJV0HQDBABV0HYDBABV0ZgDBAFV0cADBADCO9wDBAHCfPQwDQYJ
KoZIhvcNAQELBQADggEBAGctNjsVOWqfs9hsbbdim28V9LQH1slYzkyqLyra57PI
/IT3bHyKuZa1bGfjrbuQMfLcQExPPEsOd+pCtbjT3dKaNpR9WGFj2XMlrr+fGWpN
qUY93TAYjVpUWr2FZjdMgPKTjS4HDupH0pTYZ01InBlvRH5GMrLhKSFhTGP0H71b
MsWG8cZzgzOT2sGtMe0ynj8XQs/msLXFhkEgTn7BIVMu5tEv+kuyTePCcXaxTjtr
u934O4GYoEJjub5SYjcev1Zg4eRI5XiSRVmgdtXmLPdJpW0CrmSR6gU/4is2Hn9I
z9oiVhBJI/On7HZEOdEKZnz64TYMLQ7jwI24LVplHlY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:48 2025 by rpki-client