Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/sWYhGXeqyssjSaIBaIHXBsJLaf0.roa
File: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (raw, json)
Hash identifier: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=
Subject key identifier: B1:66:21:19:77:AA:CA:CB:23:49:A2:01:68:81:D7:06:C2:4B:69:FD
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 01942828328B9B618C9E8B0B7C2F111B54B4
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/sWYhGXeqyssjSaIBaIHXBsJLaf0.roa
Signing time: Thu 02 Jan 2025 17:55:10 +0000
ROA not before: Thu 02 Jan 2025 17:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43242
IP address blocks: 78.135.0.0/22 maxlen: 22
78.135.4.0/22 maxlen: 22
78.135.8.0/21 maxlen: 21
78.135.16.0/20 maxlen: 20
78.135.32.0/19 maxlen: 19
78.135.32.0/22 maxlen: 22
78.135.36.0/22 maxlen: 22
78.135.40.0/22 maxlen: 22
78.135.44.0/22 maxlen: 22
78.135.48.0/22 maxlen: 22
78.135.52.0/22 maxlen: 22
78.135.56.0/22 maxlen: 22
78.135.60.0/22 maxlen: 22
2a0a:1900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:32:8b:9b:61:8c:9e:8b:0b:7c:2f:11:1b:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Jan 2 17:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b166211977aacacb2349a2016881d706c24b69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:26:55:a8:d7:de:fc:d0:a2:38:f4:bb:08:
37:a5:b1:00:f7:b2:39:a3:9c:8c:5a:58:82:96:3e:
0a:97:e9:0a:1f:2d:48:e3:21:ae:29:ba:33:74:51:
51:a1:83:3d:69:36:51:6d:d6:c5:6e:c3:0b:ca:c2:
71:9a:1f:81:a6:92:85:d4:4d:c6:bb:86:22:7b:89:
dd:8e:d9:17:c5:f1:13:6f:e6:a1:c1:c1:2b:71:44:
ac:38:fd:d6:8c:20:c0:cd:9c:78:3e:36:67:97:94:
84:71:b6:1b:e4:1f:74:ca:a9:12:e8:2b:4b:92:2f:
11:a0:43:fd:52:32:ab:0d:2b:79:9a:2a:e2:a2:8d:
65:63:0b:49:a3:61:84:51:10:e0:8f:32:df:b8:55:
ed:52:bb:62:4b:44:3d:da:d5:33:7c:77:17:2b:b9:
6b:83:f6:22:aa:9e:40:39:f3:9d:2f:6d:73:52:14:
be:13:cd:c7:84:e2:55:72:5f:f4:14:b5:95:4f:f2:
12:8c:29:7d:80:36:d7:d6:fb:6a:71:2d:42:a8:5c:
01:3c:75:7e:00:3f:33:87:64:3b:ad:77:a7:25:b4:
f5:a2:ed:e5:36:36:2d:6e:eb:ed:85:8a:79:d4:b9:
50:60:25:40:96:9f:5a:8a:7b:dc:28:b8:82:25:25:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:21:19:77:AA:CA:CB:23:49:A2:01:68:81:D7:06:C2:4B:69:FD
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/sWYhGXeqyssjSaIBaIHXBsJLaf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.0.0/18
IPv6:
2a0a:1900::/29
Signature Algorithm: sha256WithRSAEncryption
0b:29:a5:1d:3a:92:b1:96:41:8c:dc:31:bc:6a:eb:98:af:27:
5e:f0:da:ca:ff:0c:5a:ea:4b:f6:ed:3e:b1:2c:64:67:ba:8c:
b7:51:e2:fa:b2:c8:31:49:df:01:37:04:1b:09:50:2a:85:e4:
18:0a:2c:30:a3:15:a8:b2:be:b1:ab:79:72:2f:2b:98:0c:fe:
ba:b6:4a:97:47:51:f3:76:09:b8:e8:ab:e7:c5:78:93:49:4b:
31:4f:01:01:7f:dd:05:f9:c2:12:d7:d3:77:fb:b5:ad:b7:ff:
dc:ad:ff:f9:8f:a8:f2:5d:97:6a:71:b1:27:3b:bc:a6:54:b1:
6f:81:52:af:5b:68:2f:4b:e6:0a:97:a9:2a:bc:c4:9c:88:70:
e2:43:76:a9:e7:4a:2f:99:49:14:19:d0:11:9c:24:53:ff:96:
1f:03:30:c9:73:0d:da:45:90:27:83:61:ed:d8:a1:9e:94:60:
08:e3:50:1f:e5:84:d1:1a:d7:cc:73:70:bf:2d:f5:9b:71:8d:
39:78:10:41:db:86:8d:54:17:06:15:c5:91:38:09:af:db:8b:
19:80:f0:1d:4c:2e:b1:50:59:d7:ee:99:aa:40:7c:28:9e:fe:
ea:5c:f3:c4:df:09:3f:4a:b5:07:4a:8b:1a:fc:29:c7:2c:fe:
64:20:d5:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoKDKLm2GMnosLfC8RG1S0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky
YmM2MTIwHhcNMjUwMTAyMTc1NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTY2MjExOTc3YWFjYWNiMjM0OWEyMDE2ODgxZDcwNmMyNGI2OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8kmVajX3vzQojj0uwg3pbEA97I5
o5yMWliClj4Kl+kKHy1I4yGuKbozdFFRoYM9aTZRbdbFbsMLysJxmh+BppKF1E3G
u4Yie4ndjtkXxfETb+ahwcErcUSsOP3WjCDAzZx4PjZnl5SEcbYb5B90yqkS6CtL
ki8RoEP9UjKrDSt5mirioo1lYwtJo2GEURDgjzLfuFXtUrtiS0Q92tUzfHcXK7lr
g/Yiqp5AOfOdL21zUhS+E83HhOJVcl/0FLWVT/ISjCl9gDbX1vtqcS1CqFwBPHV+
AD8zh2Q7rXenJbT1ou3lNjYtbuvthYp51LlQYCVAlp9ainvcKLiCJSWLrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLFmIRl3qsrLI0miAWiB1wbCS2n9MB8GA1UdIwQY
MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It
OTdkY2RhM2EzY2E1LzEvc1dZaEdYZXF5c3NqU2FJQmFJSFhCc0pMYWYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1
LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGTocAMA0E
AgACMAcDBQMqChkAMA0GCSqGSIb3DQEBCwUAA4IBAQALKaUdOpKxlkGM3DG8auuY
ryde8NrK/wxa6kv27T6xLGRnuoy3UeL6ssgxSd8BNwQbCVAqheQYCiwwoxWosr6x
q3lyLyuYDP66tkqXR1Hzdgm46KvnxXiTSUsxTwEBf90F+cIS19N3+7Wtt//crf/5
j6jyXZdqcbEnO7ymVLFvgVKvW2gvS+YKl6kqvMSciHDiQ3ap50ovmUkUGdARnCRT
/5YfAzDJcw3aRZAng2Ht2KGelGAI41Af5YTRGtfMc3C/LfWbcY05eBBB24aNVBcG
FcWROAmv24sZgPAdTC6xUFnX7pmqQHwonv7qXPPE3wk/SrUHSosa/CnHLP5kINVO
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:23 2025 by rpki-client