Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/dfoDkPClPolEQln8Wap-qSZl3mA.roa
File: dfoDkPClPolEQln8Wap-qSZl3mA.roa (raw, json)
Hash identifier: sAshvvzOYs0TqTXwL2VbwMq6B9+1UxkfXzngIBUZVgs=
Subject key identifier: 75:FA:03:90:F0:A5:3E:89:44:42:59:FC:59:AA:7E:A9:26:65:DE:60
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01965CBF69F03E93838D6A12D569B544BC43
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/dfoDkPClPolEQln8Wap-qSZl3mA.roa
Signing time: Tue 22 Apr 2025 09:06:10 +0000
ROA not before: Tue 22 Apr 2025 09:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 139.66.0.0/16 maxlen: 24
194.39.128.0/21 maxlen: 24
194.45.236.0/23 maxlen: 24
194.55.88.0/22 maxlen: 24
2a00:fe00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:bf:69:f0:3e:93:83:8d:6a:12:d5:69:b5:44:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Apr 22 09:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75fa0390f0a53e89444259fc59aa7ea92665de60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:0c:ec:b8:9e:5c:34:f8:c7:9d:88:1b:d5:
a8:23:a8:b1:19:43:11:08:00:ac:20:bf:96:8c:9c:
5b:02:3f:f3:3b:dd:c3:fc:a7:5c:7b:f3:25:9e:0c:
ff:7f:4a:82:73:63:dd:0c:0c:af:f7:02:fd:8b:82:
2e:e1:1f:6b:ca:0c:e9:51:67:67:6b:d0:c2:03:3b:
1f:df:87:05:17:fa:19:ae:2e:6c:7e:64:de:fd:4d:
43:82:c6:3e:99:c1:27:e6:93:67:9a:b5:ca:1d:4c:
a5:0a:d7:81:c8:2f:61:4a:de:20:e3:c1:75:fe:75:
75:02:d7:4a:6d:7b:f1:6d:b4:ee:89:09:7b:bb:6e:
06:72:0c:ff:9c:7b:1f:f1:d4:43:11:66:ec:e0:82:
f4:4a:ad:95:47:cf:46:a0:26:fd:db:df:f6:61:bd:
c8:3f:8c:71:c4:62:f1:53:ad:9c:98:c8:4f:ce:3d:
d1:9e:c0:09:1f:ed:ee:c9:dd:72:21:e0:d3:ff:8d:
4e:11:74:72:f0:77:c1:30:40:a6:b4:63:00:6b:ba:
cf:fd:87:70:f2:e6:83:ae:1c:61:73:ff:7f:7a:f9:
3b:54:2e:94:9b:a6:86:d9:a6:02:1e:16:ab:c4:ab:
41:1f:7e:9d:f4:3d:e9:02:ec:35:2a:14:e3:7f:dc:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:03:90:F0:A5:3E:89:44:42:59:FC:59:AA:7E:A9:26:65:DE:60
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/dfoDkPClPolEQln8Wap-qSZl3mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.66.0.0/16
194.39.128.0/21
194.45.236.0/23
194.55.88.0/22
IPv6:
2a00:fe00::/32
Signature Algorithm: sha256WithRSAEncryption
a5:6b:2a:2b:ea:72:38:d1:29:b0:76:9d:c9:2e:ee:9e:af:04:
aa:43:c1:ff:e4:46:ff:09:f5:c6:63:ba:a8:85:87:af:52:04:
78:b4:8c:99:c1:b6:2d:d1:46:39:75:66:35:30:e7:3f:47:ef:
4b:64:63:a6:be:64:17:7c:f9:62:3b:a7:5c:68:fa:f2:24:90:
ec:b1:09:37:10:c1:20:1e:9c:cc:a8:dd:97:11:6f:96:ca:95:
18:aa:44:be:75:e6:7a:4d:8e:78:0c:89:83:92:e9:4a:44:3c:
56:94:19:6a:2b:7e:31:18:c9:da:1f:12:4d:f7:38:b2:c0:82:
53:6b:d3:46:36:55:dc:ce:7d:3c:1e:b4:13:4f:88:d6:3d:3e:
1c:98:f6:45:f3:48:21:83:22:54:41:2f:82:dd:92:58:ca:f7:
e8:23:a6:33:fb:a5:87:c1:cf:1a:a6:56:2c:5a:99:70:da:a3:
ef:5d:e1:78:30:f9:69:a9:07:97:74:a2:93:4c:66:65:85:c2:
0b:c7:89:eb:36:37:2a:21:62:29:b9:63:f7:89:f9:99:3c:3a:
0b:aa:ca:e0:0f:a1:ba:7a:d0:4e:c7:87:04:26:f9:99:ef:bf:
82:4b:a9:da:80:d5:15:78:32:39:bf:07:da:2d:f0:cd:23:25:
88:2d:3a:88
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZZcv2nwPpODjWoS1Wm1RLxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUwNDIyMDkwNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWZhMDM5MGYwYTUzZTg5NDQ0MjU5ZmM1OWFhN2VhOTI2NjVkZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr78M7LieXDT4x52IG9WoI6ixGUMR
CACsIL+WjJxbAj/zO93D/Kdce/Mlngz/f0qCc2PdDAyv9wL9i4Iu4R9rygzpUWdn
a9DCAzsf34cFF/oZri5sfmTe/U1DgsY+mcEn5pNnmrXKHUylCteByC9hSt4g48F1
/nV1AtdKbXvxbbTuiQl7u24Gcgz/nHsf8dRDEWbs4IL0Sq2VR89GoCb929/2Yb3I
P4xxxGLxU62cmMhPzj3RnsAJH+3uyd1yIeDT/41OEXRy8HfBMECmtGMAa7rP/Ydw
8uaDrhxhc/9/evk7VC6Um6aG2aYCHharxKtBH36d9D3pAuw1KhTjf9wK3wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHX6A5DwpT6JREJZ/FmqfqkmZd5gMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvZGZvRGtQQ2xQb2xFUWxuOFdhcC1xU1psM21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMAi0IDBAPC
J4ADBAHCLewDBALCN1gwDQQCAAIwBwMFACoA/gAwDQYJKoZIhvcNAQELBQADggEB
AKVrKivqcjjRKbB2ncku7p6vBKpDwf/kRv8J9cZjuqiFh69SBHi0jJnBti3RRjl1
ZjUw5z9H70tkY6a+ZBd8+WI7p1xo+vIkkOyxCTcQwSAenMyo3ZcRb5bKlRiqRL51
5npNjngMiYOS6UpEPFaUGWorfjEYydofEk33OLLAglNr00Y2VdzOfTwetBNPiNY9
PhyY9kXzSCGDIlRBL4LdkljK9+gjpjP7pYfBzxqmVixamXDao+9d4Xgw+WmpB5d0
opNMZmWFwgvHies2NyohYim5Y/eJ+Zk8OguqyuAPobp60E7HhwQm+Znvv4JLqdqA
1RV4Mjm/B9ot8M0jJYgtOog=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:44 2025 by rpki-client