Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa
File: A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa (raw, json)
Hash identifier: woiA9rRwDxAjmj0pEa4K5XOpCIKapMbaEdUIwATG6G0=
Subject key identifier: 03:A5:97:4D:91:33:5E:62:10:FC:D8:1F:52:89:F3:53:63:D4:C2:00
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 0195EE7D64A6B6E9516116F716B193D7C465
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa
Signing time: Mon 31 Mar 2025 23:15:49 +0000
ROA not before: Mon 31 Mar 2025 23:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
159.254.0.0/24 maxlen: 24
159.254.1.0/24 maxlen: 24
159.254.2.0/24 maxlen: 24
159.254.3.0/24 maxlen: 24
159.254.4.0/24 maxlen: 24
159.254.5.0/24 maxlen: 24
159.254.6.0/24 maxlen: 24
159.254.7.0/24 maxlen: 24
159.254.8.0/24 maxlen: 24
159.254.9.0/24 maxlen: 24
159.254.10.0/24 maxlen: 24
159.254.11.0/24 maxlen: 24
159.254.12.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:7d:64:a6:b6:e9:51:61:16:f7:16:b1:93:d7:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Mar 31 23:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03a5974d91335e6210fcd81f5289f35363d4c200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:19:6a:1f:cf:4e:ad:09:52:c1:e0:d7:80:
64:9d:26:a9:c3:a0:bd:a1:21:15:e6:f7:b6:b5:d0:
55:e7:76:8e:86:5a:90:d7:a2:df:0f:84:d1:dc:4e:
46:1c:e4:64:90:9d:a0:9b:b6:c6:9b:2b:47:7f:8b:
38:9d:86:f1:a8:b1:83:ff:73:7c:22:6a:da:03:4d:
38:09:d7:61:57:e4:7a:61:99:54:ab:a1:c3:ad:cc:
fd:07:42:cb:b2:5f:41:d1:51:2d:72:f4:52:90:d7:
57:47:81:23:f1:d3:f1:08:30:1b:5e:8c:4c:21:f7:
09:69:69:ba:5b:e6:c7:4d:a1:86:74:45:4b:53:81:
af:65:e8:e4:ec:2b:0c:67:90:9c:3a:02:fc:8d:13:
f0:b6:ed:a1:11:26:a4:2a:59:1e:bd:3e:ba:2f:3d:
02:00:10:11:21:5f:75:b3:9b:c2:56:1e:d1:34:18:
25:95:3c:c4:30:1a:aa:96:b1:9e:ed:a1:c2:85:d7:
de:f7:00:2b:e7:2f:b2:ee:c3:9f:5c:fa:c9:70:4a:
52:9b:b7:f0:b8:79:2d:4d:9e:b9:27:54:25:c4:b7:
1e:cb:1c:b9:60:27:67:1c:20:b2:53:d7:f6:d3:a9:
44:0c:ee:26:25:02:ef:62:5f:6c:36:c0:9c:68:9b:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:97:4D:91:33:5E:62:10:FC:D8:1F:52:89:F3:53:63:D4:C2:00
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
159.254.0.0-159.254.12.255
194.9.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:50:d6:11:89:3d:ad:1d:9a:71:f0:b5:12:1b:41:0f:c1:e1:
cc:a2:4b:ea:27:44:dd:cc:56:1a:ae:98:ca:3a:03:e8:22:6b:
3c:7c:7b:14:2f:6b:71:8d:72:f7:eb:ed:61:c3:3f:64:8a:f6:
d9:18:34:15:0e:53:d4:82:cb:d7:0c:bf:dc:63:0f:fd:7e:82:
6a:40:cb:2a:7b:ae:fa:ce:a8:ab:cd:b7:d9:de:10:94:c4:2a:
4d:cb:a1:b7:66:ca:1b:fa:87:67:bf:f1:9a:fc:b3:9a:6e:d7:
88:2a:21:ae:4c:48:01:cf:33:a2:cf:2a:dc:76:33:f6:4c:a7:
b6:59:d3:c0:61:45:de:f6:6a:83:8b:96:76:75:3f:aa:5f:4d:
1f:c0:67:f4:7f:db:c8:78:9e:a5:74:46:36:28:59:40:f3:ec:
44:7c:39:a5:c7:40:7e:8a:5e:89:78:d6:4b:96:84:20:5d:03:
9f:9f:bc:33:ad:27:1c:ba:46:75:a5:44:63:0a:3a:fe:c6:a0:
f4:9b:5a:dc:31:db:5b:41:54:82:ed:c6:5a:d5:da:91:95:87:
76:43:67:39:1f:1c:11:a1:90:a8:7b:c5:ab:cf:3e:51:d5:bb:
c7:7b:07:6c:a4:f2:70:cc:ce:5e:10:46:7e:35:94:61:b9:cf:
38:3a:bb:7a
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZXufWSmtulRYRb3FrGT18RlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjUwMzMxMjMxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2E1OTc0ZDkxMzM1ZTYyMTBmY2Q4MWY1Mjg5ZjM1MzYzZDRjMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA060Zah/PTq0JUsHg14BknSapw6C9
oSEV5ve2tdBV53aOhlqQ16LfD4TR3E5GHORkkJ2gm7bGmytHf4s4nYbxqLGD/3N8
ImraA004CddhV+R6YZlUq6HDrcz9B0LLsl9B0VEtcvRSkNdXR4Ej8dPxCDAbXoxM
IfcJaWm6W+bHTaGGdEVLU4GvZejk7CsMZ5CcOgL8jRPwtu2hESakKlkevT66Lz0C
ABARIV91s5vCVh7RNBgllTzEMBqqlrGe7aHChdfe9wAr5y+y7sOfXPrJcEpSm7fw
uHktTZ65J1QlxLceyxy5YCdnHCCyU9f206lEDO4mJQLvYl9sNsCcaJvXgQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFAOll02RM15iEPzYH1KJ81Nj1MIAMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvQTZXWFRaRXpYbUlRX05nZlVvbnpVMlBVd2dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQBVzpAMAsD
AwGf/gMEAJ/+DAMEAMIJdDANBgkqhkiG9w0BAQsFAAOCAQEAO1DWEYk9rR2acfC1
EhtBD8HhzKJL6idE3cxWGq6YyjoD6CJrPHx7FC9rcY1y9+vtYcM/ZIr22Rg0FQ5T
1ILL1wy/3GMP/X6CakDLKnuu+s6oq8232d4QlMQqTcuht2bKG/qHZ7/xmvyzmm7X
iCohrkxIAc8zos8q3HYz9kyntlnTwGFF3vZqg4uWdnU/ql9NH8Bn9H/byHiepXRG
NihZQPPsRHw5pcdAfopeiXjWS5aEIF0Dn5+8M60nHLpGdaVEYwo6/sag9Jta3DHb
W0FUgu3GWtXakZWHdkNnOR8cEaGQqHvFq88+UdW7x3sHbKTycMzOXhBGfjWUYbnP
ODq7eg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:03 2025 by rpki-client