Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/04AAIWN8CdjN6G01O3D_l5i-Jvk.roa
File: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (raw, json)
Hash identifier: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=
Subject key identifier: D3:80:00:21:63:7C:09:D8:CD:E8:6D:35:3B:70:FF:97:98:BE:26:F9
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019427B4697A14C14BB00F09EBE9A8D3FB0A
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/04AAIWN8CdjN6G01O3D_l5i-Jvk.roa
Signing time: Thu 02 Jan 2025 15:48:42 +0000
ROA not before: Thu 02 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209723
IP address blocks: 2.59.200.0/23 maxlen: 23
5.183.60.0/23 maxlen: 23
5.183.62.0/23 maxlen: 23
85.209.4.0/23 maxlen: 23
88.218.148.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
147.78.226.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:69:7a:14:c1:4b:b0:0f:09:eb:e9:a8:d3:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jan 2 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3800021637c09d8cde86d353b70ff9798be26f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:a2:71:9f:92:9c:f5:be:0d:ee:27:df:dc:
17:32:3a:6f:2e:4d:1b:b8:ca:56:c6:91:2c:0e:90:
ba:89:01:e0:49:c8:d7:82:15:b7:41:73:d6:d9:8c:
75:11:2f:4a:e2:c5:e3:06:dd:58:99:4e:5b:ad:dc:
0f:db:46:35:b6:4f:2f:36:03:4d:1b:3b:8e:a8:5f:
3a:6a:eb:1b:1a:7d:96:5c:e4:6b:11:02:d3:c2:28:
40:f9:71:eb:09:ac:76:30:b0:42:48:d6:2e:89:95:
06:cb:ac:6f:60:66:a4:c0:3b:88:50:d5:aa:93:2e:
dd:42:a9:2b:90:d7:75:cb:6d:46:f7:e5:fa:35:fc:
d4:c5:57:66:00:e5:07:68:d1:4a:4d:87:96:9c:3d:
ae:b5:78:8e:ec:9e:ed:ef:af:2c:d1:5a:88:65:b9:
d5:81:5d:34:de:a3:c2:2c:74:26:90:86:2f:73:7f:
8e:85:d5:e3:92:43:9a:23:d9:fe:62:71:e0:9a:dc:
aa:d2:42:f1:f0:fb:6b:55:28:74:c9:81:b5:ce:f5:
bd:47:39:a6:25:e2:71:2e:8d:49:3d:b0:b7:5e:14:
65:1d:83:47:20:97:ae:df:79:52:f5:91:f5:c6:a3:
4d:87:d2:15:9e:86:27:dc:e4:fb:e4:4d:ad:9d:a1:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:00:21:63:7C:09:D8:CD:E8:6D:35:3B:70:FF:97:98:BE:26:F9
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/04AAIWN8CdjN6G01O3D_l5i-Jvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.200.0/23
5.183.60.0/22
85.209.4.0/23
88.218.148.0/23
147.78.224.0/22
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
58:2f:58:c3:61:24:3b:ce:fb:0e:e2:af:f8:80:9c:ac:68:ed:
43:36:c6:63:9a:46:5f:05:63:17:b1:50:47:1d:ec:62:f2:e1:
11:4e:ea:d6:b0:76:85:b7:22:58:cf:e7:41:48:e6:b4:87:7f:
c3:32:15:d3:fe:64:0a:a9:4c:ad:eb:ec:3d:f7:05:9f:1b:48:
b8:24:a5:1b:a4:be:8a:c1:b7:e8:57:ff:7d:36:0f:3c:db:74:
1e:c9:69:96:a8:e4:ca:30:cd:0c:3b:03:34:52:1f:80:e0:7d:
31:98:d5:a0:b1:1c:7b:59:ff:17:25:cb:d4:5b:89:5b:ef:df:
83:25:c7:38:99:d8:03:39:fa:77:f0:1a:f1:7b:f2:b8:ab:82:
4f:4c:17:6a:ca:85:91:67:59:53:1d:d5:8b:52:de:7d:10:60:
c6:b3:0b:ec:ad:f7:e3:db:ed:56:f2:a5:91:c5:0c:21:ae:31:
99:07:7f:40:85:8e:08:1e:c5:f5:c3:c6:ec:b8:3f:b1:29:9f:
3a:cc:3e:a1:de:81:53:f0:c5:cb:3e:41:62:dd:1f:18:85:cd:
b4:cc:48:70:a1:09:0a:52:5b:b8:02:cd:8a:84:62:76:0f:e6:
c0:96:f1:04:9a:2b:ef:8e:4c:08:93:0c:8d:58:e7:e9:7d:0e:
36:27:db:d8
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQntGl6FMFLsA8J6+mo0/sKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjUwMTAyMTU0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzgwMDAyMTYzN2MwOWQ4Y2RlODZkMzUzYjcwZmY5Nzk4YmUyNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJiicZ+SnPW+De4n39wXMjpvLk0b
uMpWxpEsDpC6iQHgScjXghW3QXPW2Yx1ES9K4sXjBt1YmU5brdwP20Y1tk8vNgNN
GzuOqF86ausbGn2WXORrEQLTwihA+XHrCax2MLBCSNYuiZUGy6xvYGakwDuIUNWq
ky7dQqkrkNd1y21G9+X6NfzUxVdmAOUHaNFKTYeWnD2utXiO7J7t768s0VqIZbnV
gV003qPCLHQmkIYvc3+OhdXjkkOaI9n+YnHgmtyq0kLx8PtrVSh0yYG1zvW9Rzmm
JeJxLo1JPbC3XhRlHYNHIJeu33lS9ZH1xqNNh9IVnoYn3OT75E2tnaHnSQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFNOAACFjfAnYzehtNTtw/5eYvib5MB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvMDRBQUlXTjhDZGpONkcwMU8zRF9sNWktSnZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBAjvIAwQC
Bbc8AwQBVdEEAwQBWNqUAwQCk07gMA0EAgACMAcDBQMqCayAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYL1jDYSQ7zvsO4q/4gJysaO1DNsZjmkZfBWMXsVBHHexi8uERTurW
sHaFtyJYz+dBSOa0h3/DMhXT/mQKqUyt6+w99wWfG0i4JKUbpL6KwbfoV/99Ng88
23QeyWmWqOTKMM0MOwM0Uh+A4H0xmNWgsRx7Wf8XJcvUW4lb79+DJcc4mdgDOfp3
8Brxe/K4q4JPTBdqyoWRZ1lTHdWLUt59EGDGswvsrffj2+1W8qWRxQwhrjGZB39A
hY4IHsX1w8bsuD+xKZ86zD6h3oFT8MXLPkFi3R8Yhc20zEhwoQkKUlu4As2KhGJ2
D+bAlvEEmivvjkwIkwyNWOfpfQ42J9vY
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:29:26 2025 by rpki-client