Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/6SdikSl1jU5cpmKfnZzRmSDOHuU.roa
File: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (raw, json)
Hash identifier: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=
Subject key identifier: E9:27:62:91:29:75:8D:4E:5C:A6:62:9F:9D:9C:D1:99:20:CE:1E:E5
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 0194258F73550F1DC33BAD72FCAC88650E8A
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/6SdikSl1jU5cpmKfnZzRmSDOHuU.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 5.44.250.0/24 maxlen: 24
45.15.42.0/24 maxlen: 24
62.106.82.0/24 maxlen: 24
91.224.141.0/24 maxlen: 24
91.242.246.0/24 maxlen: 24
109.107.143.0/24 maxlen: 24
109.205.59.0/24 maxlen: 24
146.19.159.0/24 maxlen: 24
176.126.108.0/24 maxlen: 24
178.23.191.0/24 maxlen: 24
185.99.23.0/24 maxlen: 24
185.145.233.0/24 maxlen: 24
185.197.151.0/24 maxlen: 24
185.218.186.0/24 maxlen: 24
185.249.54.0/24 maxlen: 24
185.252.209.0/24 maxlen: 24
193.56.147.0/24 maxlen: 24
193.163.6.0/24 maxlen: 24
193.228.127.0/24 maxlen: 24
194.56.149.0/24 maxlen: 24
194.126.176.0/24 maxlen: 24
195.69.149.0/24 maxlen: 24
195.234.29.0/24 maxlen: 24
212.6.63.0/24 maxlen: 24
212.18.97.0/24 maxlen: 24
213.109.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:73:55:0f:1d:c3:3b:ad:72:fc:ac:88:65:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e927629129758d4e5ca6629f9d9cd19920ce1ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:2f:06:ca:49:7d:a6:6b:8d:e5:f3:2b:d3:
50:82:97:d4:dc:52:16:6e:f4:f4:5d:f3:ec:83:c0:
34:ec:cc:fd:66:3f:59:a4:b8:d3:73:55:73:d6:86:
47:98:af:cb:22:98:e1:04:43:bd:3f:a3:87:0b:67:
5f:a0:bc:87:eb:9d:f2:3f:c1:3a:bb:f0:97:d1:80:
cf:1f:28:27:e9:ac:fc:a8:5f:c5:54:4f:6e:94:b0:
d3:ea:77:4a:79:89:99:cb:7a:b9:13:b3:07:c0:36:
88:81:98:c4:91:e5:0d:1d:ff:16:b9:f0:b4:ae:48:
5f:b0:68:4d:0e:ce:43:47:78:90:a3:5f:b4:7b:53:
f3:df:f6:4d:ab:ab:0c:3a:2c:3b:d2:3d:4a:c7:9f:
b5:07:ce:23:8b:31:51:01:24:bb:07:ef:30:52:62:
c0:80:24:16:18:2d:58:dd:0d:ed:af:79:ea:6f:c5:
61:7c:f8:75:f1:65:3b:d5:d3:ba:91:4e:fe:dc:d2:
fb:cf:54:29:f6:f5:5f:ed:58:e5:ae:d9:df:80:b6:
b5:bd:36:d2:d4:0f:05:ea:d8:df:9c:cf:93:db:d2:
1b:12:a4:0a:e9:96:c2:47:52:a1:b1:77:96:23:1b:
f6:02:c2:50:07:33:cb:89:03:b7:32:a7:b6:b4:24:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:62:91:29:75:8D:4E:5C:A6:62:9F:9D:9C:D1:99:20:CE:1E:E5
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/6SdikSl1jU5cpmKfnZzRmSDOHuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.250.0/24
45.15.42.0/24
62.106.82.0/24
91.224.141.0/24
91.242.246.0/24
109.107.143.0/24
109.205.59.0/24
146.19.159.0/24
176.126.108.0/24
178.23.191.0/24
185.99.23.0/24
185.145.233.0/24
185.197.151.0/24
185.218.186.0/24
185.249.54.0/24
185.252.209.0/24
193.56.147.0/24
193.163.6.0/24
193.228.127.0/24
194.56.149.0/24
194.126.176.0/24
195.69.149.0/24
195.234.29.0/24
212.6.63.0/24
212.18.97.0/24
213.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8e:b0:8b:03:11:3f:df:77:a2:85:7d:43:b0:6a:09:b7:bc:
27:91:e4:39:2f:04:ce:59:41:26:e5:74:94:b6:c9:7a:97:4e:
c0:f6:01:eb:2e:00:ea:7f:bc:e7:f0:3f:f8:90:7c:04:9a:3c:
47:4e:83:6b:f3:d6:4b:25:a9:b0:c0:6b:dd:26:00:60:d5:4e:
f1:1c:ed:53:27:9c:92:dc:6a:27:a1:84:d7:7d:fd:96:d1:be:
41:45:e1:18:ba:f5:18:36:ce:2c:ea:a2:de:e7:2e:d9:e0:5b:
c5:62:98:35:82:9e:eb:06:0b:03:7d:f8:53:4b:88:3f:a8:b1:
17:88:75:9a:56:a7:20:54:3e:8f:0c:46:96:14:ff:d0:4a:52:
27:fa:c0:20:fa:a5:14:7f:22:5e:35:21:7e:3a:91:6b:f6:ba:
c1:59:73:34:03:46:bd:a7:cc:58:d8:cb:80:e4:51:e3:db:c1:
5b:23:4b:98:a1:bc:60:87:4a:60:16:ad:ef:e2:e3:76:cf:90:
37:22:ad:9a:5e:02:ef:65:df:d6:10:29:e0:64:7f:56:22:96:
18:6d:53:01:97:4f:a8:f3:60:ab:61:e6:43:7f:e5:92:8d:e5:
b1:5c:4f:ec:6c:d7:29:ee:fa:05:4b:d6:0c:ad:99:cc:56:e5:
f6:db:8b:a4
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZQlj3NVDx3DO61y/KyIZQ6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjUwMTAyMDU0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTI3NjI5MTI5NzU4ZDRlNWNhNjYyOWY5ZDljZDE5OTIwY2UxZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwUvBspJfaZrjeXzK9NQgpfU3FIW
bvT0XfPsg8A07Mz9Zj9ZpLjTc1Vz1oZHmK/LIpjhBEO9P6OHC2dfoLyH653yP8E6
u/CX0YDPHygn6az8qF/FVE9ulLDT6ndKeYmZy3q5E7MHwDaIgZjEkeUNHf8WufC0
rkhfsGhNDs5DR3iQo1+0e1Pz3/ZNq6sMOiw70j1Kx5+1B84jizFRASS7B+8wUmLA
gCQWGC1Y3Q3tr3nqb8VhfPh18WU71dO6kU7+3NL7z1Qp9vVf7VjlrtnfgLa1vTbS
1A8F6tjfnM+T29IbEqQK6ZbCR1KhsXeWIxv2AsJQBzPLiQO3Mqe2tCSlUwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFOknYpEpdY1OXKZin52c0Zkgzh7lMB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEvNlNkaWtTbDFqVTVjcG1LZm5aelJtU0RPSHVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh
LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAF
LPoDBAAtDyoDBAA+alIDBABb4I0DBABb8vYDBABta48DBABtzTsDBACSE58DBACw
fmwDBACyF78DBAC5YxcDBAC5kekDBAC5xZcDBAC52roDBAC5+TYDBAC5/NEDBADB
OJMDBADBowYDBADB5H8DBADCOJUDBADCfrADBADDRZUDBADD6h0DBADUBj8DBADU
EmEDBADVbcMwDQYJKoZIhvcNAQELBQADggEBALyOsIsDET/fd6KFfUOwagm3vCeR
5DkvBM5ZQSbldJS2yXqXTsD2AesuAOp/vOfwP/iQfASaPEdOg2vz1kslqbDAa90m
AGDVTvEc7VMnnJLcaiehhNd9/ZbRvkFF4Ri69Rg2zizqot7nLtngW8VimDWCnusG
CwN9+FNLiD+osReIdZpWpyBUPo8MRpYU/9BKUif6wCD6pRR/Il41IX46kWv2usFZ
czQDRr2nzFjYy4DkUePbwVsjS5ihvGCHSmAWre/i43bPkDcirZpeAu9l39YQKeBk
f1YilhhtUwGXT6jzYKth5kN/5ZKN5bFcT+xs1ynu+gVL1gytmcxW5fbbi6Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:56:31 2025 by rpki-client