Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/M6Kiusoj-vmcX-l1FvQ-whelTCY.roa
File: M6Kiusoj-vmcX-l1FvQ-whelTCY.roa (raw, json)
Hash identifier: PZnmBtue/4j7K73vwfKaOFXRKwScBqdnVIvN9DoCZyQ=
Subject key identifier: 33:A2:A2:BA:CA:23:FA:F9:9C:5F:E9:75:16:F4:3E:C2:17:A5:4C:26
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019423D7345C1EFAB0D7873DDD6B71C1371D
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/M6Kiusoj-vmcX-l1FvQ-whelTCY.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42943
IP address blocks: 77.240.80.0/22 maxlen: 22
77.240.80.0/24 maxlen: 24
77.240.81.0/24 maxlen: 24
77.240.82.0/24 maxlen: 24
77.240.83.0/24 maxlen: 24
77.240.86.0/23 maxlen: 23
77.240.86.0/24 maxlen: 24
77.240.87.0/24 maxlen: 24
77.240.88.0/21 maxlen: 21
77.240.88.0/24 maxlen: 24
77.240.89.0/24 maxlen: 24
77.240.90.0/24 maxlen: 24
77.240.91.0/24 maxlen: 24
77.240.92.0/24 maxlen: 24
77.240.93.0/24 maxlen: 24
77.240.94.0/24 maxlen: 24
77.240.95.0/24 maxlen: 24
85.184.232.0/22 maxlen: 22
85.184.232.0/24 maxlen: 24
85.184.233.0/24 maxlen: 24
85.184.234.0/24 maxlen: 24
85.184.235.0/24 maxlen: 24
85.184.236.0/23 maxlen: 23
185.109.176.0/22 maxlen: 22
185.109.176.0/24 maxlen: 24
185.109.177.0/24 maxlen: 24
185.109.178.0/24 maxlen: 24
185.109.179.0/24 maxlen: 24
2a0c:1a40:1000::/36 maxlen: 36
2a0c:1a40:2000::/36 maxlen: 36
2a0c:1a41:1000::/36 maxlen: 36
2a0c:1a41:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:34:5c:1e:fa:b0:d7:87:3d:dd:6b:71:c1:37:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a2a2baca23faf99c5fe97516f43ec217a54c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:b7:97:d2:be:30:8a:26:a4:6c:69:3d:c7:
94:3c:36:68:84:d2:f3:7f:39:4c:62:cd:1d:a7:3e:
2a:b8:da:e9:2c:a0:f9:94:64:d5:78:b8:3c:26:fd:
98:03:69:a6:34:01:56:29:51:f6:61:fa:93:f2:bc:
e4:69:69:de:fa:0a:7e:e5:f0:92:be:7e:bc:f4:f9:
85:a0:a4:db:7b:01:03:4b:22:48:4f:2c:4e:a2:39:
a8:58:1a:85:7f:64:70:b9:38:bb:3e:4d:fc:0e:60:
63:c7:a9:f2:b0:06:f5:c8:1e:02:7b:c5:77:9a:2b:
ad:33:d7:16:48:1c:7e:d3:f3:d0:05:3f:a6:53:87:
df:bc:27:37:a2:7d:f1:64:3d:80:0a:ca:93:75:78:
15:21:04:a4:8e:18:96:e0:1e:1d:90:de:fa:28:b5:
07:ce:04:05:c7:12:4c:7f:3a:82:89:6a:ab:f1:1f:
ea:5e:1c:c2:ba:57:44:94:e3:d9:a9:1e:82:6d:7f:
56:b1:10:1f:38:92:3b:4e:b2:e8:1a:d2:2f:e6:3c:
50:3e:b3:6b:5b:7b:bb:c1:90:21:a1:9b:c9:7f:dc:
94:59:79:05:c7:04:89:5a:73:f6:3f:b5:1e:eb:c8:
fb:28:0b:2d:69:70:a2:fa:50:c1:7a:9e:a0:a9:27:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A2:A2:BA:CA:23:FA:F9:9C:5F:E9:75:16:F4:3E:C2:17:A5:4C:26
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/M6Kiusoj-vmcX-l1FvQ-whelTCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.80.0/22
77.240.86.0-77.240.95.255
85.184.232.0-85.184.237.255
185.109.176.0/22
IPv6:
2a0c:1a40:1000::-2a0c:1a40:2fff:ffff:ffff:ffff:ffff:ffff
2a0c:1a41:1000::-2a0c:1a41:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:74:14:43:e2:f2:bc:d1:33:5a:8b:82:c3:90:71:04:b2:85:
62:0e:f2:29:aa:ed:b9:37:35:f4:9b:32:4b:e3:5c:81:9b:8a:
f3:c5:25:7f:68:01:2a:8b:f3:a5:7f:87:39:9a:3c:ab:72:f6:
d0:d6:80:8d:5a:72:f6:fa:b7:60:10:cd:03:34:6c:30:e2:ab:
6b:43:72:7d:d9:1c:85:d5:ed:8c:9f:a4:9c:2c:24:ad:8f:ee:
96:5f:3e:0a:d5:9a:04:0c:0c:bf:5d:f2:49:fc:2a:31:9d:5c:
af:91:8d:bc:79:ce:e5:b5:ac:62:4f:72:ce:21:19:79:cb:15:
9b:21:12:2c:90:08:20:30:ab:6b:92:d4:8b:f4:16:9a:67:8d:
5d:f2:51:9e:c4:72:41:47:d9:24:13:6a:b4:b3:6e:32:ac:72:
1f:05:a2:56:ef:95:20:7f:82:db:27:ff:e6:3f:fa:41:33:38:
f7:4c:96:6a:1c:1a:74:bb:95:4b:f9:88:2c:71:b9:d4:01:2d:
52:5e:ff:1f:4a:c9:88:ad:1d:96:e0:f3:27:d9:f7:be:ec:2d:
d1:a6:88:85:91:b4:eb:a8:14:e4:5d:d8:94:7a:ae:a1:e6:47:
66:3e:25:f6:e8:8d:0d:ce:26:47:c3:75:7d:ee:56:3a:09:c1:
eb:b7:cb:cb
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZQj1zRcHvqw14c93WtxwTcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4
YTIxYTkwHhcNMjUwMTAxMjE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2EyYTJiYWNhMjNmYWY5OWM1ZmU5NzUxNmY0M2VjMjE3YTU0YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu663l9K+MIompGxpPceUPDZohNLz
fzlMYs0dpz4quNrpLKD5lGTVeLg8Jv2YA2mmNAFWKVH2YfqT8rzkaWne+gp+5fCS
vn689PmFoKTbewEDSyJITyxOojmoWBqFf2RwuTi7Pk38DmBjx6nysAb1yB4Ce8V3
miutM9cWSBx+0/PQBT+mU4ffvCc3on3xZD2ACsqTdXgVIQSkjhiW4B4dkN76KLUH
zgQFxxJMfzqCiWqr8R/qXhzCuldElOPZqR6CbX9WsRAfOJI7TrLoGtIv5jxQPrNr
W3u7wZAhoZvJf9yUWXkFxwSJWnP2P7Ue68j7KAstaXCi+lDBep6gqSfBNwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFDOiorrKI/r5nF/pdRb0PsIXpUwmMB8GA1UdIwQY
MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt
ZWNhOTc4YzNjYjg1LzEvTTZLaXVzb2otdm1jWC1sMUZ2US13aGVsVENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1
LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAuBAIAATAoAwQCTfBQMAwD
BAFN8FYDBAVN8EAwDAMEA1W46AMEAVW47AMEArltsDAqBAIAAjAkMBADBgQqDBpA
EAMGBCoMGkAgMBADBgQqDBpBEAMGBCoMGkEgMA0GCSqGSIb3DQEBCwUAA4IBAQBB
dBRD4vK80TNai4LDkHEEsoViDvIpqu25NzX0mzJL41yBm4rzxSV/aAEqi/Olf4c5
mjyrcvbQ1oCNWnL2+rdgEM0DNGww4qtrQ3J92RyF1e2Mn6ScLCStj+6WXz4K1ZoE
DAy/XfJJ/CoxnVyvkY28ec7ltaxiT3LOIRl5yxWbIRIskAggMKtrktSL9BaaZ41d
8lGexHJBR9kkE2q0s24yrHIfBaJW75Ugf4LbJ//mP/pBMzj3TJZqHBp0u5VL+Ygs
cbnUAS1SXv8fSsmIrR2W4PMn2fe+7C3RpoiFkbTrqBTkXdiUeq6h5kdmPiX26I0N
ziZHw3V97lY6CcHrt8vL
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:11 2025 by rpki-client