Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/aTc8S3bYqZoD9jiepL9oUB_LXc8.roa
File: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (raw, json)
Hash identifier: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=
Subject key identifier: 69:37:3C:4B:76:D8:A9:9A:03:F6:38:9E:A4:BF:68:50:1F:CB:5D:CF
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 0194214414530C422AA2E894F8F3AE18A7F3
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/aTc8S3bYqZoD9jiepL9oUB_LXc8.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 46.218.0.0/16 maxlen: 24
77.104.0.0/18 maxlen: 24
82.101.0.0/18 maxlen: 24
83.145.64.0/18 maxlen: 24
89.224.0.0/14 maxlen: 24
89.226.0.0/16 maxlen: 24
92.102.0.0/15 maxlen: 24
185.204.172.0/22 maxlen: 24
195.167.192.0/20 maxlen: 24
195.167.224.0/20 maxlen: 24
195.248.0.0/19 maxlen: 19
212.99.0.0/17 maxlen: 24
212.103.0.0/19 maxlen: 24
213.30.128.0/18 maxlen: 24
213.244.0.0/19 maxlen: 24
217.66.112.0/20 maxlen: 24
2a02:e000::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:14:53:0c:42:2a:a2:e8:94:f8:f3:ae:18:a7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69373c4b76d8a99a03f6389ea4bf68501fcb5dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:2a:1c:d0:9c:01:2f:84:20:cf:3d:8a:c9:
11:f0:f4:ce:97:cb:fb:2e:7f:3d:43:d5:78:a9:fe:
29:19:bb:8b:0c:ec:86:2c:b9:1c:27:83:ae:7f:f6:
f5:a7:4e:b4:6e:7f:d8:d0:be:61:7c:e8:0f:86:72:
f7:a1:38:92:a1:10:52:82:24:9a:cc:e6:b8:8c:d0:
27:03:54:f2:a9:d5:0b:0e:e4:ee:4e:32:ce:77:ff:
01:c3:4b:8b:a3:f4:ce:ae:da:3a:cf:65:55:81:a8:
34:80:7a:17:b7:9f:e8:78:59:de:f7:b1:39:05:8e:
45:2c:77:19:92:13:af:16:9e:4b:39:31:2c:e1:a0:
fc:8f:cb:e9:27:df:8d:37:ad:c3:97:d5:81:e3:da:
0d:d4:3a:99:0d:2e:d1:75:7a:15:65:5f:b0:d7:94:
55:f0:12:86:71:bc:ae:66:70:dd:13:45:b3:ec:1b:
c1:14:81:8b:b5:1c:3f:d0:e8:f1:29:6c:2e:4f:d3:
e4:df:9f:9e:c9:46:e4:d7:9b:1d:bf:9f:e0:db:7a:
0c:91:46:d6:9b:5b:59:98:bd:66:d1:97:0d:b5:f0:
24:71:cb:a7:51:0d:c6:ec:c1:12:11:9a:fe:82:48:
4c:34:93:41:61:4c:2f:64:9c:47:0b:05:aa:c6:83:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:3C:4B:76:D8:A9:9A:03:F6:38:9E:A4:BF:68:50:1F:CB:5D:CF
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/aTc8S3bYqZoD9jiepL9oUB_LXc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
89.224.0.0/14
92.102.0.0/15
185.204.172.0/22
195.167.192.0/20
195.167.224.0/20
195.248.0.0/19
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
6c:8c:d1:7c:e1:a3:8d:fd:33:43:aa:2a:c2:3f:69:c8:1a:98:
8e:92:d2:4f:aa:12:09:46:3c:e3:e5:9d:ff:47:e5:bd:3a:8b:
e4:9c:9a:41:de:fb:2c:be:16:7b:e0:73:ac:4b:12:00:22:61:
c8:ee:1e:f9:d9:9a:c4:1b:36:81:b8:a8:60:6f:7e:aa:0f:72:
6d:db:0e:00:d5:70:dd:22:bc:77:b1:93:b6:70:30:e9:c3:00:
c9:ea:19:cf:5d:f8:6c:b1:c6:1f:5a:30:d3:66:ba:9f:f3:72:
20:a8:22:90:86:27:bc:0a:1b:76:60:f4:24:19:3a:ac:ec:5c:
dc:02:e3:eb:8c:41:bd:1f:ac:e5:97:c8:98:48:2d:44:fc:66:
63:18:b4:b5:33:3c:fd:36:0a:da:e0:71:05:3d:6f:4c:e5:65:
58:59:48:44:1e:c1:60:2c:5c:75:a2:00:dd:10:df:a9:4f:68:
02:72:8b:58:c1:88:95:ba:d7:4d:49:49:73:84:a1:97:eb:1f:
d4:97:b3:b0:34:61:f2:dd:b6:77:95:b3:74:87:66:01:ea:fd:
6a:96:39:c1:40:77:37:c7:d0:d2:77:44:b2:f3:56:f8:12:27:
09:c9:c3:18:4d:45:fe:70:7f:c1:00:39:b6:95:b8:8e:5a:98:
1d:8c:a0:92
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZQhRBRTDEIqouiU+POuGKfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy
OGIwNDYwHhcNMjUwMTAxMDk0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTM3M2M0Yjc2ZDhhOTlhMDNmNjM4OWVhNGJmNjg1MDFmY2I1ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxsqHNCcAS+EIM89iskR8PTOl8v7
Ln89Q9V4qf4pGbuLDOyGLLkcJ4Ouf/b1p060bn/Y0L5hfOgPhnL3oTiSoRBSgiSa
zOa4jNAnA1TyqdULDuTuTjLOd/8Bw0uLo/TOrto6z2VVgag0gHoXt5/oeFne97E5
BY5FLHcZkhOvFp5LOTEs4aD8j8vpJ9+NN63Dl9WB49oN1DqZDS7RdXoVZV+w15RV
8BKGcbyuZnDdE0Wz7BvBFIGLtRw/0OjxKWwuT9Pk35+eyUbk15sdv5/g23oMkUbW
m1tZmL1m0ZcNtfAkccunUQ3G7MESEZr+gkhMNJNBYUwvZJxHCwWqxoMOOQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFGk3PEt22KmaA/Y4nqS/aFAfy13PMB8GA1UdIwQY
MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt
NTBkMmI3MGJjZjMxLzEvYVRjOFMzYllxWm9EOWppZXBMOW9VQl9MWGM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx
LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBdBAIAATBXAwMALtoDBAZN
aAADBAZSZQADBAZTkUADAwJZ4AMDAVxmAwQCucysAwQEw6fAAwQEw6fgAwQFw/gA
AwQH1GMAAwQF1GcAAwQG1R6AAwQF1fQAAwQE2UJwMA0EAgACMAcDBQMqAuAAMA0G
CSqGSIb3DQEBCwUAA4IBAQBsjNF84aON/TNDqirCP2nIGpiOktJPqhIJRjzj5Z3/
R+W9OovknJpB3vssvhZ74HOsSxIAImHI7h752ZrEGzaBuKhgb36qD3Jt2w4A1XDd
Irx3sZO2cDDpwwDJ6hnPXfhsscYfWjDTZrqf83IgqCKQhie8Cht2YPQkGTqs7Fzc
AuPrjEG9H6zll8iYSC1E/GZjGLS1Mzz9Ngra4HEFPW9M5WVYWUhEHsFgLFx1ogDd
EN+pT2gCcotYwYiVutdNSUlzhKGX6x/Ul7OwNGHy3bZ3lbN0h2YB6v1qljnBQHc3
x9DSd0Sy81b4EicJycMYTUX+cH/BADm2lbiOWpgdjKCS
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:31:07 2025 by rpki-client