Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5TtTEnOmkanhTyR3jvoic_M4oOw.roa
File: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (raw, json)
Hash identifier: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=
Subject key identifier: E5:3B:53:12:73:A6:91:A9:E1:4F:24:77:8E:FA:22:73:F3:38:A0:EC
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB0F573060C4F6985916557E42FB1
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5TtTEnOmkanhTyR3jvoic_M4oOw.roa
Signing time: Wed 01 Jan 2025 01:48:21 +0000
ROA not before: Wed 01 Jan 2025 01:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60675
IP address blocks: 185.27.136.0/22 maxlen: 24
185.114.84.0/22 maxlen: 24
185.142.192.0/22 maxlen: 24
185.252.8.0/22 maxlen: 24
185.252.8.0/24 maxlen: 24
185.252.9.0/24 maxlen: 24
185.252.10.0/24 maxlen: 24
185.252.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b0:f5:73:06:0c:4f:69:85:91:65:57:e4:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e53b531273a691a9e14f24778efa2273f338a0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:20:37:41:af:b4:7f:2d:84:4f:4d:b8:39:
6f:fd:17:22:7b:78:46:60:ac:3b:03:eb:25:aa:33:
b0:db:0a:ce:3e:87:51:90:c7:26:82:22:23:58:07:
26:1a:d6:96:23:c0:a1:1b:ad:e9:44:e9:12:4a:0b:
25:ee:5a:0b:36:57:20:77:b0:a7:4d:ee:5c:1b:21:
05:22:f6:37:d4:e9:49:76:e1:60:da:2c:9e:3a:0e:
40:79:e4:97:78:29:8d:4d:7c:97:e5:23:5d:50:96:
e2:a4:ea:4a:a3:7d:fc:73:cd:b8:57:e1:8f:37:8c:
e0:af:7a:50:e7:de:05:f1:c4:ce:b3:7f:9c:99:0e:
ba:c9:c8:6c:43:5e:c8:84:e2:9e:57:08:9f:e0:2d:
74:4c:b2:89:e3:4f:02:1b:ca:e1:14:51:88:07:77:
08:9e:21:ae:4e:9e:2e:72:70:c4:74:a5:c5:51:e7:
21:38:22:91:c0:9e:d5:fb:32:13:c2:38:64:41:d8:
37:9a:be:1e:f2:bf:54:7b:4d:1d:46:a6:d1:5b:4a:
ef:08:69:f7:3f:1b:7d:70:92:3c:96:28:98:ee:87:
6a:c0:72:eb:47:43:32:c1:06:0f:80:cf:cf:88:d4:
59:5e:8c:cd:25:49:f3:7f:7b:ee:1b:d2:1b:b9:1c:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:53:12:73:A6:91:A9:E1:4F:24:77:8E:FA:22:73:F3:38:A0:EC
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5TtTEnOmkanhTyR3jvoic_M4oOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.136.0/22
185.114.84.0/22
185.142.192.0/22
185.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b4:c0:8a:71:e5:e7:df:52:1e:d6:60:b6:41:b8:7b:c9:a6:
bd:dc:97:b0:6b:34:04:82:1b:9c:c8:85:b3:6a:9e:f4:0e:70:
93:02:83:18:61:e1:4f:6b:fa:4d:18:f0:f0:46:bc:75:cf:d0:
9a:63:36:3c:7c:7d:fc:b6:8a:8d:99:40:98:33:a4:c7:8e:d5:
78:fa:7a:a8:f0:94:8f:7a:c1:89:1b:5e:4a:19:7e:86:0a:f7:
b7:e7:b6:8e:10:49:d1:5c:7f:73:9a:5c:29:4d:ea:36:01:39:
40:8f:79:30:b1:9b:b0:8b:95:0b:b8:6f:e2:b1:3b:2b:7e:6a:
3e:46:9c:7f:c2:a9:62:d6:de:de:cb:6e:38:bf:f8:0e:90:70:
c7:8a:a1:4d:dc:a8:33:35:db:eb:97:fb:e3:df:ac:fc:f8:b5:
62:e1:46:d0:e8:23:f6:41:a3:eb:2f:e2:9a:6f:b4:58:5a:85:
4c:b7:97:8f:13:8e:36:8a:23:1f:b9:20:6d:1b:2b:e1:b5:ed:
78:67:99:c4:ab:22:9b:58:dc:15:2b:1f:a0:ed:ba:4e:ed:f2:
02:6a:a3:00:9e:bb:7f:97:32:b8:f6:50:c4:6c:ec:6b:ea:54:
6f:80:26:c5:03:73:d3:bc:7b:56:95:6f:75:8f:f3:a0:04:8f:
ee:0d:d0:8a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQfjLD1cwYMT2mFkWVX5C+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjUwMTAxMDE0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTNiNTMxMjczYTY5MWE5ZTE0ZjI0Nzc4ZWZhMjI3M2YzMzhhMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zIgN0GvtH8thE9NuDlv/Rcie3hG
YKw7A+slqjOw2wrOPodRkMcmgiIjWAcmGtaWI8ChG63pROkSSgsl7loLNlcgd7Cn
Te5cGyEFIvY31OlJduFg2iyeOg5AeeSXeCmNTXyX5SNdUJbipOpKo338c824V+GP
N4zgr3pQ594F8cTOs3+cmQ66ychsQ17IhOKeVwif4C10TLKJ408CG8rhFFGIB3cI
niGuTp4ucnDEdKXFUechOCKRwJ7V+zITwjhkQdg3mr4e8r9Ue00dRqbRW0rvCGn3
Pxt9cJI8liiY7odqwHLrR0MywQYPgM/PiNRZXozNJUnzf3vuG9IbuRy8SwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOU7UxJzppGp4U8kd476InPzOKDsMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvNVR0VEVuT21rYW5oVHlSM2p2b2ljX000b093LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuRuIAwQC
uXJUAwQCuY7AAwQCufwIMA0GCSqGSIb3DQEBCwUAA4IBAQCGtMCKceXn31Ie1mC2
Qbh7yaa93JewazQEghucyIWzap70DnCTAoMYYeFPa/pNGPDwRrx1z9CaYzY8fH38
toqNmUCYM6THjtV4+nqo8JSPesGJG15KGX6GCve357aOEEnRXH9zmlwpTeo2ATlA
j3kwsZuwi5ULuG/isTsrfmo+Rpx/wqli1t7ey244v/gOkHDHiqFN3KgzNdvrl/vj
36z8+LVi4UbQ6CP2QaPrL+Kab7RYWoVMt5ePE442iiMfuSBtGyvhte14Z5nEqyKb
WNwVKx+g7bpO7fICaqMAnrt/lzK49lDEbOxr6lRvgCbFA3PTvHtWlW91j/OgBI/u
DdCK
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:23 2025 by rpki-client