Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/86SMIEiK0Ch3SSLutOJGHOACZpM.roa
File: 86SMIEiK0Ch3SSLutOJGHOACZpM.roa (raw, json)
Hash identifier: N/4j5IFaekUu2qPcJuDP5gxqPturpJYkJfoc6jm47ws=
Subject key identifier: F3:A4:8C:20:48:8A:D0:28:77:49:22:EE:B4:E2:46:1C:E0:02:66:93
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C72C73220A61818D8543C70631B7C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/86SMIEiK0Ch3SSLutOJGHOACZpM.roa
Signing time: Thu 02 Jan 2025 09:50:29 +0000
ROA not before: Thu 02 Jan 2025 09:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38951
IP address blocks: 46.252.160.0/20 maxlen: 20
77.241.32.0/20 maxlen: 20
87.237.112.0/21 maxlen: 21
93.185.176.0/20 maxlen: 20
109.205.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:72:c7:32:20:a6:18:18:d8:54:3c:70:63:1b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a48c20488ad028774922eeb4e2461ce0026693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:6c:d8:60:af:32:8e:54:8d:17:ae:e5:57:
d7:d4:b6:93:06:aa:6d:35:18:11:80:fc:31:dd:38:
04:2c:65:3b:71:c7:a0:b3:a3:97:f0:72:47:21:6b:
c7:aa:a1:df:55:bd:ab:93:44:09:2c:48:31:c1:85:
d7:e0:c9:d1:32:25:ba:bb:f8:be:9d:4c:e7:06:35:
34:09:3c:c0:2d:5b:14:90:b6:57:f1:f3:f9:6e:78:
28:dd:2c:3a:ef:d0:2d:cd:53:ee:6c:55:8d:9e:79:
7a:60:30:9b:ae:15:2f:84:2f:ae:bc:83:6e:ef:3e:
a9:c2:d5:05:93:81:6f:6a:45:0b:5b:db:8f:50:25:
8d:8c:37:2b:a9:08:24:9c:46:3d:f2:19:62:dd:87:
ce:36:5a:1f:07:90:fc:2f:7a:c9:e1:84:87:48:8a:
c5:0b:ba:78:40:c3:b4:5a:7b:0c:b2:2a:f8:aa:02:
9e:cb:38:a8:76:a3:81:a8:da:fb:51:7f:e6:a1:d6:
b3:76:34:29:ff:cb:b8:cc:36:0e:6a:f4:8f:a3:de:
a9:99:c6:40:b4:f5:24:3c:26:3e:76:f1:50:4d:34:
42:b6:73:6e:19:80:2f:98:ae:6a:02:e1:e1:6e:44:
9f:71:ad:50:99:68:5c:d3:26:de:53:03:2d:31:90:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:8C:20:48:8A:D0:28:77:49:22:EE:B4:E2:46:1C:E0:02:66:93
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/86SMIEiK0Ch3SSLutOJGHOACZpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.160.0/20
77.241.32.0/20
87.237.112.0/21
93.185.176.0/20
109.205.248.0/21
Signature Algorithm: sha256WithRSAEncryption
10:81:04:e9:19:a3:84:ca:e9:d0:05:2b:cc:df:02:3d:d7:b1:
d7:33:73:95:a8:27:1e:c8:0f:e5:08:df:c5:27:e9:f8:46:f4:
ec:29:95:b5:2d:3e:d3:73:8f:9c:00:5e:99:04:8c:6a:48:b5:
a4:35:a8:f6:8f:94:35:8a:e2:39:31:2a:87:ef:b2:8e:0b:98:
0d:3d:31:38:7c:68:cd:ad:6b:5e:cb:6f:61:9a:09:cd:d5:de:
9f:b4:71:0d:ce:55:73:c3:21:fe:88:e2:4e:21:38:a8:0a:38:
6a:bf:8f:eb:57:39:06:45:b0:df:60:25:7c:c7:f9:a2:36:f0:
70:21:01:f8:39:90:39:a3:d7:8a:0c:c0:51:4e:83:1c:79:f3:
d2:33:97:b1:12:1b:36:c9:12:95:dd:f3:8d:ed:97:0b:c8:23:
70:f0:08:d6:a0:50:2a:76:ed:09:fe:a4:d5:45:1d:22:c1:bf:
95:17:28:04:34:88:c9:d4:70:f7:81:62:41:97:f0:70:01:f5:
8a:f4:33:02:2d:ac:d3:8b:7c:ad:18:96:3f:b1:56:5f:0c:8b:
60:c7:bc:d5:a0:58:a7:f5:6f:36:e2:5c:c3:f9:6b:3e:f7:0b:
ca:f1:a9:e7:1a:0d:6c:a5:4c:fd:3a:67:78:b3:ba:ae:70:a8:
a7:a7:c3:e2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQmbHLHMiCmGBjYVDxwYxt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMTAyMDk1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2E0OGMyMDQ4OGFkMDI4Nzc0OTIyZWViNGUyNDYxY2UwMDI2NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ls2GCvMo5UjReu5VfX1LaTBqpt
NRgRgPwx3TgELGU7ccegs6OX8HJHIWvHqqHfVb2rk0QJLEgxwYXX4MnRMiW6u/i+
nUznBjU0CTzALVsUkLZX8fP5bngo3Sw679AtzVPubFWNnnl6YDCbrhUvhC+uvINu
7z6pwtUFk4FvakULW9uPUCWNjDcrqQgknEY98hli3YfONlofB5D8L3rJ4YSHSIrF
C7p4QMO0WnsMsir4qgKeyziodqOBqNr7UX/modazdjQp/8u4zDYOavSPo96pmcZA
tPUkPCY+dvFQTTRCtnNuGYAvmK5qAuHhbkSfca1QmWhc0ybeUwMtMZB30QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPOkjCBIitAod0ki7rTiRhzgAmaTMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvODZTTUlFaUswQ2gzU1NMdXRPSkdIT0FDWnBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQELvygAwQE
TfEgAwQDV+1wAwQEXbmwAwQDbc34MA0GCSqGSIb3DQEBCwUAA4IBAQAQgQTpGaOE
yunQBSvM3wI917HXM3OVqCceyA/lCN/FJ+n4RvTsKZW1LT7Tc4+cAF6ZBIxqSLWk
Naj2j5Q1iuI5MSqH77KOC5gNPTE4fGjNrWtey29hmgnN1d6ftHENzlVzwyH+iOJO
ITioCjhqv4/rVzkGRbDfYCV8x/miNvBwIQH4OZA5o9eKDMBRToMcefPSM5exEhs2
yRKV3fON7ZcLyCNw8AjWoFAqdu0J/qTVRR0iwb+VFygENIjJ1HD3gWJBl/BwAfWK
9DMCLazTi3ytGJY/sVZfDItgx7zVoFin9W824lzD+Ws+9wvK8annGg1spUz9Omd4
s7qucKinp8Pi
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:27:36 2025 by rpki-client