Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5KGQnSBqEjZ7lq6ESrazGcI0meY.roa
File: 5KGQnSBqEjZ7lq6ESrazGcI0meY.roa (raw, json)
Hash identifier: 8PFw2t9BWOAHN0IX2NGexVOxjRbtml+PqUPLAXaEowg=
Subject key identifier: E4:A1:90:9D:20:6A:12:36:7B:96:AE:84:4A:B6:B3:19:C2:34:99:E6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01966BB42656C6505091DC8236810F610037
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5KGQnSBqEjZ7lq6ESrazGcI0meY.roa
Signing time: Fri 25 Apr 2025 06:48:10 +0000
ROA not before: Fri 25 Apr 2025 06:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:b4:26:56:c6:50:50:91:dc:82:36:81:0f:61:00:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 25 06:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4a1909d206a12367b96ae844ab6b319c23499e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:39:47:8e:5b:06:8b:02:d3:f1:38:0b:85:
81:74:39:db:a2:89:2f:6c:db:d5:99:c3:3d:1d:ac:
af:1b:de:fb:41:50:46:f5:42:d7:36:b2:e6:05:67:
a6:99:3b:e8:13:ac:60:7d:24:6e:9a:06:25:1a:96:
22:ca:a7:d3:dc:35:c2:c2:ad:06:0f:5f:84:88:5b:
0b:83:85:81:c1:e1:a4:c3:1d:92:d0:c7:30:cf:e8:
94:54:36:1d:25:6f:67:b5:d8:a3:14:20:b6:28:b9:
97:d7:d1:54:c3:65:26:5f:97:cd:7e:fd:a2:ce:de:
e1:cd:27:6d:cf:1c:e3:02:eb:13:99:09:73:98:da:
9d:61:9a:26:a0:6b:69:3e:2b:b8:bb:08:cf:08:a7:
bd:47:99:ff:a8:2d:35:5f:e8:f2:05:2f:a7:79:3f:
d6:dc:ef:4a:dd:0d:68:e1:c9:5d:0d:d7:ab:19:c7:
5b:85:dd:7c:45:53:72:fb:8d:94:17:f1:90:93:8d:
49:35:13:b8:6a:0e:c6:b8:88:3c:56:b2:06:4a:4b:
bd:8d:be:ed:07:c3:37:0f:e7:ef:f9:8c:85:58:7c:
91:da:8b:42:0c:99:b6:33:bf:83:d9:42:ee:2d:90:
79:cd:7a:7c:40:58:e1:0d:c6:e8:f7:0c:a0:82:b7:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:90:9D:20:6A:12:36:7B:96:AE:84:4A:B6:B3:19:C2:34:99:E6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5KGQnSBqEjZ7lq6ESrazGcI0meY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
46.102.237.0/24
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
93.115.203.0/24
94.177.106.0/24
194.85.251.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5e:9a:e8:45:f1:89:e8:d0:b0:7c:89:76:0c:27:88:e4:6f:
7e:ff:74:70:ab:4a:bf:89:e7:f6:04:ef:42:ba:d7:9d:8c:0c:
4b:72:f3:4c:d6:69:3f:0b:a7:dc:b8:94:e1:77:da:09:dc:c8:
4c:08:d2:37:2c:d4:c3:d3:a8:de:45:b5:4a:fa:9e:44:9c:79:
bb:d7:b4:41:59:40:d2:9c:74:4d:d6:29:5c:26:86:35:be:3e:
7c:91:1a:28:3c:d4:ac:d0:74:75:ba:20:22:47:b4:e7:55:fa:
8f:6a:84:ce:28:fc:3c:97:49:47:05:f0:cb:0c:a8:db:7f:36:
32:5b:d8:18:d0:42:7a:19:6c:6b:b4:f9:24:c6:fa:4a:db:2c:
9f:de:97:6e:4a:02:ef:ab:6b:11:82:18:b3:a4:84:81:65:8b:
27:95:0b:0e:52:bd:9e:36:fb:57:d4:d4:b2:86:74:39:13:c3:
b5:65:93:2a:89:30:2a:3b:91:2c:44:0f:16:5a:56:e7:0f:08:
e6:bc:fe:87:5f:4b:3d:9a:d4:d9:c6:ed:6a:7e:1a:ac:d5:82:
cf:49:56:c5:bc:df:a7:b7:a2:88:5d:61:d4:44:81:d8:32:c5:
1e:6f:fc:07:48:79:aa:8c:a8:d5:43:c9:dd:92:a8:90:48:15:
dd:8d:ae:13
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZZrtCZWxlBQkdyCNoEPYQA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwNDI1MDY0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGExOTA5ZDIwNmExMjM2N2I5NmFlODQ0YWI2YjMxOWMyMzQ5OWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KQ5R45bBosC0/E4C4WBdDnbookv
bNvVmcM9HayvG977QVBG9ULXNrLmBWemmTvoE6xgfSRumgYlGpYiyqfT3DXCwq0G
D1+EiFsLg4WBweGkwx2S0Mcwz+iUVDYdJW9ntdijFCC2KLmX19FUw2UmX5fNfv2i
zt7hzSdtzxzjAusTmQlzmNqdYZomoGtpPiu4uwjPCKe9R5n/qC01X+jyBS+neT/W
3O9K3Q1o4cldDderGcdbhd18RVNy+42UF/GQk41JNRO4ag7GuIg8VrIGSku9jb7t
B8M3D+fv+YyFWHyR2otCDJm2M7+D2ULuLZB5zXp8QFjhDcbo9wyggrc+WwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFOShkJ0gahI2e5auhEq2sxnCNJnmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNUtHUW5TQnFFalo3bHE2RVNyYXpHY0kwbWVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLYe2AwQA
LmbtAwQAWSJqAwQAXXK3AwQAXXNqAwQAXXPLAwQAXrFqAwQAwlX7AwQA1MAGMA0G
CSqGSIb3DQEBCwUAA4IBAQBvXproRfGJ6NCwfIl2DCeI5G9+/3Rwq0q/ief2BO9C
utedjAxLcvNM1mk/C6fcuJThd9oJ3MhMCNI3LNTD06jeRbVK+p5EnHm717RBWUDS
nHRN1ilcJoY1vj58kRooPNSs0HR1uiAiR7TnVfqPaoTOKPw8l0lHBfDLDKjbfzYy
W9gY0EJ6GWxrtPkkxvpK2yyf3pduSgLvq2sRghizpISBZYsnlQsOUr2eNvtX1NSy
hnQ5E8O1ZZMqiTAqO5EsRA8WWlbnDwjmvP6HX0s9mtTZxu1qfhqs1YLPSVbFvN+n
t6KIXWHURIHYMsUeb/wHSHmqjKjVQ8ndkqiQSBXdja4T
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:12 2025 by rpki-client