Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1C93yQN0iWRBiUOVFJjFbjSOzww.roa
File: 1C93yQN0iWRBiUOVFJjFbjSOzww.roa (raw, json)
Hash identifier: iBce0B2HW3PFFYXrKyI+lSaKUt8iFdMyJ46t3xVkq+0=
Subject key identifier: D4:2F:77:C9:03:74:89:64:41:89:43:95:14:98:C5:6E:34:8E:CF:0C
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01965DAAB4368AF2C648EAA6A3F026A17DC1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1C93yQN0iWRBiUOVFJjFbjSOzww.roa
Signing time: Tue 22 Apr 2025 13:23:10 +0000
ROA not before: Tue 22 Apr 2025 13:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:aa:b4:36:8a:f2:c6:48:ea:a6:a3:f0:26:a1:7d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 22 13:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42f77c903748964418943951498c56e348ecf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:f5:81:f8:58:ad:3d:8f:1e:28:9b:0d:f5:
42:96:3f:a1:a1:84:e8:7a:2d:af:2e:e2:55:38:33:
bc:d7:3b:9d:43:25:31:46:83:95:b7:a6:f5:e0:6f:
b4:af:c9:e8:52:7f:15:d6:9a:ed:2e:72:91:0f:de:
98:6f:eb:4b:d9:c5:dc:fe:dd:0a:f6:37:53:6b:1d:
43:d2:59:e1:e3:ea:13:a9:fe:a9:a8:1b:c3:3c:b2:
6c:67:48:ec:0e:8e:6d:99:52:66:41:98:4d:0f:19:
ab:26:ba:3f:71:bb:b0:37:89:27:25:59:72:bf:3e:
3c:af:89:e2:d3:76:18:e8:b6:55:9f:ff:bf:25:f4:
68:28:ef:7a:e7:ad:d5:c7:6d:67:0a:20:42:5f:eb:
c6:e0:bd:14:b4:43:66:db:b2:c5:57:33:5f:76:a7:
b9:de:9b:2c:21:16:3a:01:e9:5b:a7:16:65:03:db:
54:39:18:31:f4:e8:00:28:c6:bb:de:4b:1c:67:1d:
73:71:aa:26:ec:55:66:77:96:d4:91:5b:7d:5f:77:
42:66:30:cd:ba:97:e8:cf:84:33:43:c8:07:fe:20:
da:08:3d:81:53:8a:22:99:00:e6:77:48:90:bb:8b:
d3:d7:5c:71:4b:83:a6:88:72:1e:bd:07:41:cf:8e:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:77:C9:03:74:89:64:41:89:43:95:14:98:C5:6E:34:8E:CF:0C
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1C93yQN0iWRBiUOVFJjFbjSOzww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.139.0-46.38.140.255
46.38.151.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
b6:d7:90:08:4c:ca:11:a4:5a:d9:cf:a4:a6:c9:33:88:dc:e7:
aa:e2:4d:68:79:98:f9:0d:05:62:d0:26:96:01:01:15:a1:c0:
b3:f8:ae:ac:67:5c:b4:d2:6e:83:c2:40:f5:22:3d:f4:a0:ac:
bb:f3:ac:16:5d:a3:d1:84:99:56:81:78:cb:f5:66:15:5e:c1:
d5:8f:e7:9f:e5:f4:f2:a6:7e:3b:7f:8b:83:e9:35:d5:55:71:
7e:59:4e:c4:af:48:cc:0b:c3:11:2f:c7:83:de:0a:39:f9:2f:
33:dc:46:ca:6d:12:fd:fe:40:46:43:83:86:01:4b:5f:ff:29:
aa:74:30:34:93:a3:4b:76:07:8f:e4:38:47:f2:83:14:3e:e2:
53:3d:15:79:eb:ad:6b:7f:51:e8:c3:96:00:8b:c3:cb:a5:ea:
5a:a0:8c:08:a0:59:03:ac:4a:ea:bc:38:ab:3b:ff:90:20:d3:
a6:0f:1e:a6:29:66:ab:7d:af:e8:7a:d6:53:58:37:3c:c7:8e:
b5:db:2b:96:a5:4e:af:b0:d0:ee:6b:d5:2c:4e:7b:11:63:4d:
a8:9c:e1:3a:40:4b:ee:2f:29:70:0b:f0:ff:4a:8b:6b:bb:69:
91:5f:56:bd:38:a2:33:df:fa:73:44:a5:4a:38:a6:77:ff:1d:
55:de:fe:c7
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZZdqrQ2ivLGSOqmo/AmoX3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwNDIyMTMyMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDJmNzdjOTAzNzQ4OTY0NDE4OTQzOTUxNDk4YzU2ZTM0OGVjZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8/1gfhYrT2PHiibDfVClj+hoYTo
ei2vLuJVODO81zudQyUxRoOVt6b14G+0r8noUn8V1prtLnKRD96Yb+tL2cXc/t0K
9jdTax1D0lnh4+oTqf6pqBvDPLJsZ0jsDo5tmVJmQZhNDxmrJro/cbuwN4knJVly
vz48r4ni03YY6LZVn/+/JfRoKO96563Vx21nCiBCX+vG4L0UtENm27LFVzNfdqe5
3pssIRY6AelbpxZlA9tUORgx9OgAKMa73kscZx1zcaom7FVmd5bUkVt9X3dCZjDN
upfoz4QzQ8gH/iDaCD2BU4oimQDmd0iQu4vT11xxS4OmiHIevQdBz45C0wIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFNQvd8kDdIlkQYlDlRSYxW40js8MMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvMUM5M3lRTjBpV1JCaVVPVkZKakZialNPend3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQALiaBAwQA
LiaDMAwDBAAuJosDBAAuJowDBAAuJpcDBAC5GJYDBAG5HdwDBAXUEEADBAXUUAAw
DQQCAAIwBwMFAyoAfYAwDQYJKoZIhvcNAQELBQADggEBALbXkAhMyhGkWtnPpKbJ
M4jc56riTWh5mPkNBWLQJpYBARWhwLP4rqxnXLTSboPCQPUiPfSgrLvzrBZdo9GE
mVaBeMv1ZhVewdWP55/l9PKmfjt/i4PpNdVVcX5ZTsSvSMwLwxEvx4PeCjn5LzPc
RsptEv3+QEZDg4YBS1//Kap0MDSTo0t2B4/kOEfygxQ+4lM9FXnrrWt/UejDlgCL
w8ul6lqgjAigWQOsSuq8OKs7/5Ag06YPHqYpZqt9r+h61lNYNzzHjrXbK5alTq+w
0O5r1SxOexFjTaic4TpAS+4vKXAL8P9Ki2u7aZFfVr04ojPf+nNEpUo4pnf/HVXe
/sc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:48:02 2025 by rpki-client