Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/AGurEqahuQXSYhB8cXum_Yv4Rd4.roa
File: AGurEqahuQXSYhB8cXum_Yv4Rd4.roa (raw, json)
Hash identifier: 9mstL9tbyGVVJbVNg56M6jiduKmLjfDZJdQ9Gx6+gkY=
Subject key identifier: 00:6B:AB:12:A6:A1:B9:05:D2:62:10:7C:71:7B:A6:FD:8B:F8:45:DE
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0196A0475294E2B7F4CA2B5C5D71B50BAFA5
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/AGurEqahuQXSYhB8cXum_Yv4Rd4.roa
Signing time: Mon 05 May 2025 11:49:10 +0000
ROA not before: Mon 05 May 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24852
IP address blocks: 79.132.160.0/20 maxlen: 20
84.55.32.0/24 maxlen: 24
84.55.33.0/24 maxlen: 24
84.55.34.0/23 maxlen: 23
84.55.36.0/23 maxlen: 23
84.55.48.0/21 maxlen: 21
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
88.223.0.0/20 maxlen: 20
88.223.24.0/21 maxlen: 21
88.223.32.0/19 maxlen: 19
88.223.96.0/22 maxlen: 22
88.223.104.0/21 maxlen: 21
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
88.223.144.0/21 maxlen: 21
88.223.152.0/24 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/22 maxlen: 22
88.223.192.0/20 maxlen: 20
95.173.32.0/23 maxlen: 23
185.104.176.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
217.147.34.0/24 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.40.0/24 maxlen: 24
217.147.41.0/24 maxlen: 24
217.147.44.0/23 maxlen: 23
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
2a01:7c80::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:47:52:94:e2:b7:f4:ca:2b:5c:5d:71:b5:0b:af:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: May 5 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006bab12a6a1b905d262107c717ba6fd8bf845de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:43:22:0e:75:0e:51:b9:5a:49:c9:82:72:
94:1a:d9:c9:c8:06:9e:80:ef:1c:d7:55:9c:ca:27:
22:cd:86:ac:20:f7:03:0b:01:ab:e7:74:ee:6c:71:
31:ec:21:9e:eb:02:ba:e0:8b:01:41:fe:a8:b5:0f:
b8:94:a0:35:ef:51:75:a9:ac:f0:b0:46:25:40:b5:
b7:87:3f:6d:e3:46:43:3e:f2:7e:b3:cc:96:6b:a8:
f9:e6:4c:b9:4e:2b:46:58:a1:0d:34:f3:9b:68:6b:
76:6c:1e:06:66:e3:f5:ca:d0:d5:b3:c1:0b:3a:59:
26:56:20:1d:1d:c5:1f:54:f8:e3:d3:ba:bb:93:97:
b8:65:68:9b:64:eb:76:06:9c:05:42:34:53:71:30:
42:f4:d0:ff:1a:b1:fb:d1:70:c4:a8:84:dd:ef:d8:
f7:a4:29:c5:6c:f8:20:ee:79:5a:81:59:88:5e:51:
93:21:db:7b:0f:4d:52:72:a1:d0:e1:87:c0:17:19:
90:c5:82:f6:12:35:53:45:93:83:d1:51:7b:bf:ca:
3a:05:db:90:08:22:16:98:26:75:54:72:b2:75:59:
8c:52:7d:7f:ab:0a:20:fd:13:fa:a1:3b:46:d8:cc:
23:72:48:ee:67:9b:2f:7e:fb:da:aa:d2:bd:03:5b:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6B:AB:12:A6:A1:B9:05:D2:62:10:7C:71:7B:A6:FD:8B:F8:45:DE
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/AGurEqahuQXSYhB8cXum_Yv4Rd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/20
84.55.32.0-84.55.37.255
84.55.48.0/20
88.223.0.0/20
88.223.24.0-88.223.63.255
88.223.96.0/22
88.223.104.0-88.223.131.255
88.223.144.0-88.223.153.255
88.223.160.0/22
88.223.192.0/20
95.173.32.0/23
185.104.176.0/22
213.164.112.0-213.164.118.255
217.147.34.0-217.147.38.255
217.147.40.0/23
217.147.44.0/22
IPv6:
2a01:7c80::/33
Signature Algorithm: sha256WithRSAEncryption
48:41:e5:c3:df:f3:3f:c1:0c:fc:dc:1a:f6:50:2c:72:59:9c:
72:1c:89:31:93:e4:50:96:98:46:f0:db:b7:32:ca:fb:09:26:
81:c7:7d:12:bb:f8:11:5d:8f:18:f8:bf:2c:e6:67:e6:2e:c7:
e1:f6:c8:c9:dc:62:c8:6e:5b:3c:92:ae:11:94:65:b1:d2:f0:
58:ce:21:a0:49:2f:08:2c:0c:d1:7f:41:d9:14:b7:45:2f:51:
e4:e9:cf:1d:9a:0a:bd:02:bc:bf:7e:80:ed:b5:d7:a4:5f:8a:
a1:79:f7:eb:f2:fa:d9:08:76:ea:35:1e:6f:d4:83:9b:d0:d5:
5b:dc:7f:6e:ac:7e:9a:b4:a0:68:89:c6:cb:4d:88:34:79:89:
6d:13:e0:75:6f:84:c3:33:38:58:6e:1e:c0:2e:5f:1f:5f:28:
54:27:0d:95:30:55:23:b0:4a:07:d8:c9:a3:75:6d:f2:6c:fb:
3e:d9:49:6f:e1:3c:c0:d5:2f:fc:d6:dd:dd:8e:05:27:42:ba:
be:04:63:1c:97:a6:90:14:85:25:0e:a2:48:e1:f1:72:81:08:
32:b7:d9:df:80:6e:7e:c4:4d:7a:bb:25:f0:fe:3a:8f:d0:e9:
f0:f3:bc:71:be:29:82:92:a2:99:d0:1a:b8:92:83:0d:f5:91:
11:8c:b2:b0
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZagR1KU4rf0yitcXXG1C6+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwNTA1MTE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDZiYWIxMmE2YTFiOTA1ZDI2MjEwN2M3MTdiYTZmZDhiZjg0NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L9DIg51DlG5WknJgnKUGtnJyAae
gO8c11WcyicizYasIPcDCwGr53TubHEx7CGe6wK64IsBQf6otQ+4lKA171F1qazw
sEYlQLW3hz9t40ZDPvJ+s8yWa6j55ky5TitGWKENNPObaGt2bB4GZuP1ytDVs8EL
OlkmViAdHcUfVPjj07q7k5e4ZWibZOt2BpwFQjRTcTBC9ND/GrH70XDEqITd79j3
pCnFbPgg7nlagVmIXlGTIdt7D01ScqHQ4YfAFxmQxYL2EjVTRZOD0VF7v8o6BduQ
CCIWmCZ1VHKydVmMUn1/qwog/RP6oTtG2MwjckjuZ5svfvvaqtK9A1ujDQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFABrqxKmobkF0mIQfHF7pv2L+EXeMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvQUd1ckVxYWh1UVhTWWhCOGNYdW1fWXY0UmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBlwQCAAEwgZADBARP
hKAwDAMEBVQ3IAMEAVQ3JAMEBFQ3MAMEBFjfADAMAwQDWN8YAwQGWN8AAwQCWN9g
MAwDBANY32gDBAJY34AwDAMEBFjfkAMEAVjfmAMEAljfoAMEBFjfwAMEAV+tIAME
ArlosDAMAwQE1aRwAwQA1aR2MAwDBAHZkyIDBADZkyYDBAHZkygDBALZkywwDgQC
AAIwCAMGByoBfIAAMA0GCSqGSIb3DQEBCwUAA4IBAQBIQeXD3/M/wQz83Br2UCxy
WZxyHIkxk+RQlphG8Nu3Msr7CSaBx30Su/gRXY8Y+L8s5mfmLsfh9sjJ3GLIbls8
kq4RlGWx0vBYziGgSS8ILAzRf0HZFLdFL1Hk6c8dmgq9Ary/foDttdekX4qheffr
8vrZCHbqNR5v1IOb0NVb3H9urH6atKBoicbLTYg0eYltE+B1b4TDMzhYbh7ALl8f
XyhUJw2VMFUjsEoH2MmjdW3ybPs+2Ulv4TzA1S/81t3djgUnQrq+BGMcl6aQFIUl
DqJI4fFygQgyt9nfgG5+xE16uyXw/jqP0Onw87xxvimCkqKZ0Bq4koMN9ZERjLKw
-----END CERTIFICATE-----
Generated at Sun May 11 15:01:04 2025 by rpki-client