Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S10tTcSVcarhD7wBrFTXJn5RziU.roa
File: S10tTcSVcarhD7wBrFTXJn5RziU.roa (raw, json)
Hash identifier: wUy4R9nxV3GS1NEDCRKCY/LwvH2FgBZPcqWGDMkD/VM=
Subject key identifier: 4B:5D:2D:4D:C4:95:71:AA:E1:0F:BC:01:AC:54:D7:26:7E:51:CE:25
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7290B4E1BAF9CC7ACF0022ADC09FE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S10tTcSVcarhD7wBrFTXJn5RziU.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 5.252.118.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
91.103.252.0/23 maxlen: 23
94.142.138.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.128.104.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.174.137.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
2a0e:d602::/48 maxlen: 48
2a0e:d602:1::/48 maxlen: 48
2a0e:d602:2::/48 maxlen: 48
2a0e:d602:3::/48 maxlen: 48
2a0e:d606::/48 maxlen: 48
2a0e:d607::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:0b:4e:1b:af:9c:c7:ac:f0:02:2a:dc:09:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b5d2d4dc49571aae10fbc01ac54d7267e51ce25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:39:6b:3f:70:ae:8c:34:c3:a0:84:fa:e9:
b7:db:f9:cf:4e:3d:45:75:a2:37:8e:02:40:5e:fc:
61:20:36:0f:6d:dd:c4:89:88:5d:00:07:f3:ae:1d:
5e:b1:17:cf:1a:bf:a2:d5:71:8e:21:ec:0c:de:a9:
80:f9:b6:6c:65:06:91:2a:85:24:16:b4:e6:39:df:
bf:ac:b6:af:f8:d1:59:77:45:17:01:e6:a2:d1:98:
69:cd:32:4c:af:c9:fb:bf:8f:9a:dc:55:0a:2d:93:
1c:79:8d:ee:4c:c7:dc:07:c9:8a:bc:b4:5c:3f:84:
c8:87:f8:21:fc:88:c0:33:64:77:ab:c8:b7:41:84:
18:73:77:73:2e:59:2d:60:ee:53:65:34:a7:01:62:
12:a1:c7:71:69:49:53:a1:66:4b:36:95:f0:fc:4c:
1c:cf:70:11:2f:f5:22:0f:81:95:90:c9:5b:9d:c7:
e0:10:15:5a:74:7d:d2:aa:75:d3:72:93:4e:0c:f0:
1f:61:67:44:ea:18:66:20:ef:a1:16:fa:1f:4c:13:
5d:df:df:8b:36:f1:74:30:ac:9a:69:56:9b:f9:fb:
04:e1:cb:70:de:8b:53:d3:b0:45:0f:44:8d:a0:f3:
7e:3f:bb:5a:a5:0e:f0:8e:ee:d0:60:14:08:9e:6e:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:2D:4D:C4:95:71:AA:E1:0F:BC:01:AC:54:D7:26:7E:51:CE:25
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S10tTcSVcarhD7wBrFTXJn5RziU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.118.0/24
45.138.74.0/24
45.142.122.0/24
91.103.252.0/23
94.142.138.0/24
185.17.0.0/24
185.106.93.0-185.106.94.255
185.112.83.0/24
185.125.230.0/24
185.128.104.0/24
185.174.136.0/23
185.217.197.0/24
185.229.65.0-185.229.66.255
194.67.201.0/24
IPv6:
2a0e:d602::/46
2a0e:d606::/48
2a0e:d607::/48
Signature Algorithm: sha256WithRSAEncryption
c1:75:d5:fa:ab:29:64:da:4d:07:9b:c9:f7:43:73:87:cf:88:
30:f1:63:3a:77:ff:dc:74:50:9e:5f:72:10:62:00:e6:98:d0:
93:35:94:ef:87:fd:4b:18:31:28:73:2c:ca:88:f9:33:eb:44:
0b:20:3e:7d:19:bd:e3:ca:53:1f:59:bb:0c:76:26:66:35:bf:
ef:b4:e4:be:39:2b:56:2c:47:58:c9:71:cd:17:9a:53:ab:f2:
5d:01:b8:1e:5f:90:ce:95:ff:0f:28:97:2c:17:cb:ea:7b:1d:
de:b6:0c:f9:37:76:ad:bc:90:7c:cb:97:1b:cc:ea:f5:9a:51:
b2:5a:27:fd:71:9f:05:bd:9f:2c:21:73:68:7e:1b:27:51:85:
87:29:53:e6:11:57:d3:d7:09:56:eb:16:ca:4a:c1:9f:df:3c:
bb:12:99:06:4e:23:dd:43:e9:0f:c0:2c:bf:a6:49:2c:65:23:
0d:e4:cd:51:fe:fa:ce:4a:69:6e:01:08:eb:42:30:da:37:6f:
c4:f2:a6:a8:29:a3:21:8b:aa:f2:07:a9:aa:34:7c:f0:96:70:
92:14:c2:27:08:7a:b0:35:7a:31:97:f6:3c:97:9e:82:cb:97:
6a:74:98:e4:c4:8e:f0:20:b3:e3:17:30:6f:a1:f8:b7:13:e1:
cd:2a:9d:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgISAZQj1ykLThuvnMes8AIq3An+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjVkMmQ0ZGM0OTU3MWFhZTEwZmJjMDFhYzU0ZDcyNjdlNTFjZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jA5az9wrow0w6CE+um32/nPTj1F
daI3jgJAXvxhIDYPbd3EiYhdAAfzrh1esRfPGr+i1XGOIewM3qmA+bZsZQaRKoUk
FrTmOd+/rLav+NFZd0UXAeai0ZhpzTJMr8n7v4+a3FUKLZMceY3uTMfcB8mKvLRc
P4TIh/gh/IjAM2R3q8i3QYQYc3dzLlktYO5TZTSnAWISocdxaUlToWZLNpXw/Ewc
z3ARL/UiD4GVkMlbncfgEBVadH3SqnXTcpNODPAfYWdE6hhmIO+hFvofTBNd39+L
NvF0MKyaaVab+fsE4ctw3otT07BFD0SNoPN+P7tapQ7wju7QYBQInm5t8wIDAQAB
o4ICjTCCAokwHQYDVR0OBBYEFEtdLU3ElXGq4Q+8AaxU1yZ+Uc4lMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvUzEwdFRjU1ZjYXJoRDd3QnJGVFhKbjVSemlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzBqBAIAATBkAwQABfx2
AwQALYpKAwQALY56AwQBW2f8AwQAXo6KAwQAuREAMAwDBAC5al0DBAC5al4DBAC5
cFMDBAC5feYDBAC5gGgDBAG5rogDBAC52cUwDAMEALnlQQMEALnlQgMEAMJDyTAh
BAIAAjAbAwcCKg7WAgAAAwcAKg7WBgAAAwcAKg7WBwAAMA0GCSqGSIb3DQEBCwUA
A4IBAQDBddX6qylk2k0Hm8n3Q3OHz4gw8WM6d//cdFCeX3IQYgDmmNCTNZTvh/1L
GDEocyzKiPkz60QLID59Gb3jylMfWbsMdiZmNb/vtOS+OStWLEdYyXHNF5pTq/Jd
AbgeX5DOlf8PKJcsF8vqex3etgz5N3atvJB8y5cbzOr1mlGyWif9cZ8FvZ8sIXNo
fhsnUYWHKVPmEVfT1wlW6xbKSsGf3zy7EpkGTiPdQ+kPwCy/pkksZSMN5M1R/vrO
SmluAQjrQjDaN2/E8qaoKaMhi6ryB6mqNHzwlnCSFMInCHqwNXoxl/Y8l56Cy5dq
dJjkxI7wILPjFzBvofi3E+HNKp1a
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:17 2025 by rpki-client