Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/80TfPnya6rYa4C3jiJ1me8mig78.roa
File: 80TfPnya6rYa4C3jiJ1me8mig78.roa (raw, json)
Hash identifier: t+XWfJ+9eUJ6+Y2O8HhpDuevQzR+/jo6bZ63Pi5QKw8=
Subject key identifier: F3:44:DF:3E:7C:9A:EA:B6:1A:E0:2D:E3:88:9D:66:7B:C9:A2:83:BF
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01955A7CC1D831D17E6D4665C36325F98340
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/80TfPnya6rYa4C3jiJ1me8mig78.roa
Signing time: Mon 03 Mar 2025 05:31:20 +0000
ROA not before: Mon 03 Mar 2025 05:31:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35177
IP address blocks: 5.139.192.0/21 maxlen: 21
5.139.204.0/23 maxlen: 23
5.139.207.0/24 maxlen: 24
5.139.208.0/20 maxlen: 20
62.183.100.0/22 maxlen: 22
62.183.104.0/21 maxlen: 21
62.183.112.0/22 maxlen: 22
85.173.136.0/21 maxlen: 21
94.233.128.0/21 maxlen: 21
94.233.176.0/21 maxlen: 24
178.35.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:7c:c1:d8:31:d1:7e:6d:46:65:c3:63:25:f9:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 3 05:31:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f344df3e7c9aeab61ae02de3889d667bc9a283bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:ba:77:ba:20:09:e2:2b:d9:00:2d:6a:34:
3d:20:d1:c9:df:c4:d7:c2:c7:c3:ae:5b:79:77:f5:
82:75:2c:ec:4d:93:80:7e:eb:fc:dd:c0:12:29:68:
2e:5e:3b:35:8b:86:17:8e:e0:f1:31:32:a9:21:9b:
1e:6e:e1:ef:59:71:84:8a:aa:6e:c0:a9:b2:ad:dc:
91:c5:35:e1:30:f4:e4:66:e4:13:16:db:a4:ff:c8:
19:bf:b9:fe:b8:d0:f2:9e:58:2e:dc:bb:03:c1:85:
57:bf:9d:47:12:d0:ca:1d:ec:60:9f:c2:79:ee:d2:
d6:9f:8d:58:45:e9:d3:6f:a7:e1:f8:f1:87:43:df:
a5:d7:d2:29:b5:55:8e:db:2e:6b:d7:ec:ac:d9:bb:
30:67:e7:72:65:f5:18:97:a0:ec:c6:f6:37:a5:17:
4e:e3:7b:48:65:13:29:b7:be:f6:34:bb:2d:79:9d:
52:93:c0:1c:f9:72:64:f4:f0:16:26:26:c3:15:28:
fd:bd:c2:72:de:15:33:f7:dd:45:30:5a:68:86:16:
6f:3d:56:1f:d6:91:e6:23:11:19:d3:44:4d:ef:23:
1c:9e:07:2f:0a:70:96:c5:48:55:f8:d9:a2:48:a2:
7c:ff:1b:ad:f4:35:05:9e:c2:2f:42:75:ea:02:d3:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:DF:3E:7C:9A:EA:B6:1A:E0:2D:E3:88:9D:66:7B:C9:A2:83:BF
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/80TfPnya6rYa4C3jiJ1me8mig78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.139.192.0/21
5.139.204.0/23
5.139.207.0-5.139.223.255
62.183.100.0-62.183.115.255
85.173.136.0/21
94.233.128.0/21
94.233.176.0/21
178.35.192.0/19
Signature Algorithm: sha256WithRSAEncryption
85:f6:62:45:5a:a1:d1:f9:74:f3:dd:6d:b1:73:1a:8c:9c:da:
2a:bc:1d:e8:0e:23:da:79:e5:13:87:43:bb:e6:f8:fd:f0:43:
b9:6c:12:9f:2a:af:7d:ee:be:9f:87:5b:0c:b2:ce:a2:e3:c0:
0f:50:ad:99:93:30:38:aa:83:19:35:2d:43:6b:13:50:e5:b2:
02:0c:e6:88:46:94:c4:f4:d2:fc:2c:ec:28:04:94:22:62:81:
a0:c3:db:43:b6:b4:e3:9d:62:43:b4:e7:d8:79:fa:59:ad:6e:
5d:88:11:56:03:a9:79:27:3b:78:8c:71:31:38:a8:9c:22:15:
c0:d6:f2:7d:54:6b:b4:fa:8b:93:a2:c7:7c:6d:e6:91:7b:06:
b3:51:63:88:7d:16:e8:ba:4f:8c:91:ff:bc:a6:36:92:24:56:
7f:20:2a:1f:c4:1a:0d:1c:29:d9:6a:82:8a:22:03:c6:44:ff:
38:1a:f9:2d:96:23:e1:cf:09:6f:94:0e:09:b6:3f:ec:ad:91:
2f:53:0c:97:ce:d8:e8:a3:77:bd:a5:51:6d:61:e0:be:e4:42:
1b:8e:56:31:7a:7e:32:cb:d5:c9:a7:b2:27:d8:f8:b3:4f:d4:
63:bb:69:a5:72:d7:8a:e8:3e:91:a6:fa:f0:ad:23:93:17:69:
55:03:b1:dd
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZVafMHYMdF+bUZlw2Ml+YNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMzAzMDUzMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzQ0ZGYzZTdjOWFlYWI2MWFlMDJkZTM4ODlkNjY3YmM5YTI4M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nq6d7ogCeIr2QAtajQ9INHJ38TX
wsfDrlt5d/WCdSzsTZOAfuv83cASKWguXjs1i4YXjuDxMTKpIZsebuHvWXGEiqpu
wKmyrdyRxTXhMPTkZuQTFtuk/8gZv7n+uNDynlgu3LsDwYVXv51HEtDKHexgn8J5
7tLWn41YRenTb6fh+PGHQ9+l19IptVWO2y5r1+ys2bswZ+dyZfUYl6DsxvY3pRdO
43tIZRMpt772NLsteZ1Sk8Ac+XJk9PAWJibDFSj9vcJy3hUz991FMFpohhZvPVYf
1pHmIxEZ00RN7yMcngcvCnCWxUhV+NmiSKJ8/xut9DUFnsIvQnXqAtOTFQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFPNE3z58muq2GuAt44idZnvJooO/MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvODBUZlBueWE2cllhNEMzamlKMW1lOG1pZzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQDBYvAAwQB
BYvMMAwDBAAFi88DBAUFi8AwDAMEAj63ZAMEAj63cAMEA1WtiAMEA17pgAMEA17p
sAMEBbIjwDANBgkqhkiG9w0BAQsFAAOCAQEAhfZiRVqh0fl0891tsXMajJzaKrwd
6A4j2nnlE4dDu+b4/fBDuWwSnyqvfe6+n4dbDLLOouPAD1CtmZMwOKqDGTUtQ2sT
UOWyAgzmiEaUxPTS/CzsKASUImKBoMPbQ7a0451iQ7Tn2Hn6Wa1uXYgRVgOpeSc7
eIxxMTionCIVwNbyfVRrtPqLk6LHfG3mkXsGs1FjiH0W6LpPjJH/vKY2kiRWfyAq
H8QaDRwp2WqCiiIDxkT/OBr5LZYj4c8Jb5QOCbY/7K2RL1MMl87Y6KN3vaVRbWHg
vuRCG45WMXp+MsvVyaeyJ9j4s0/UY7tppXLXiug+kab68K0jkxdpVQOx3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:14:31 2025 by rpki-client