Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/7yUkmk2a1THyX00hTlndTIVmtLc.roa
File: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (raw, json)
Hash identifier: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=
Subject key identifier: EF:25:24:9A:4D:9A:D5:31:F2:5F:4D:21:4E:59:DD:4C:85:66:B4:B7
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 01942067B5A3B844EC6EEC00E1DCD59773CA
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/7yUkmk2a1THyX00hTlndTIVmtLc.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203969
IP address blocks: 185.110.152.0/22 maxlen: 22
185.110.154.0/24 maxlen: 24
185.110.155.0/24 maxlen: 24
2a06:5880:dd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b5:a3:b8:44:ec:6e:ec:00:e1:dc:d5:97:73:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef25249a4d9ad531f25f4d214e59dd4c8566b4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:95:f0:fa:ff:e5:4e:a9:b6:a7:25:d2:28:
83:85:8b:60:63:36:60:a5:61:1c:bb:f8:f9:90:0f:
ad:ba:4f:23:5c:aa:ba:29:06:f2:4e:fc:b7:42:bb:
13:64:f0:0d:28:a0:53:56:10:36:f1:8c:e5:5f:6b:
1d:6b:aa:79:39:ed:e3:5b:c4:53:51:ce:fc:74:09:
da:45:59:e5:4b:ed:5c:ef:fa:cf:d2:6c:81:84:55:
0e:eb:82:6c:18:46:a1:8e:dd:8d:93:36:57:37:1b:
aa:ad:0a:0c:9e:9d:fb:81:f5:5e:48:8c:a4:ab:27:
8f:87:f9:97:b4:54:f0:15:fb:2f:17:29:69:39:b8:
37:c0:23:84:a5:72:21:c4:71:80:30:26:80:62:21:
28:07:bc:43:0d:bb:07:ed:a0:eb:5f:f6:0c:85:96:
3e:5f:71:1d:4b:e5:74:1f:56:ca:d8:d7:5e:55:e4:
47:3d:b5:f8:11:40:95:54:29:bd:99:e4:52:fb:8c:
ac:b5:34:56:54:f3:e2:09:69:92:e1:80:c3:b4:4a:
4c:2c:a0:ce:ef:0b:18:3c:13:7d:97:bd:b5:93:e1:
1c:3b:bb:43:30:f3:ae:fe:cb:d9:41:d1:72:e6:61:
76:26:7c:3c:b8:88:85:9d:e7:66:77:ff:c7:7f:33:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:25:24:9A:4D:9A:D5:31:F2:5F:4D:21:4E:59:DD:4C:85:66:B4:B7
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/7yUkmk2a1THyX00hTlndTIVmtLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.152.0/22
IPv6:
2a06:5880:dd::/48
Signature Algorithm: sha256WithRSAEncryption
23:41:09:7c:cc:76:bc:41:7e:b5:94:0d:e6:12:fd:9c:b3:57:
58:74:11:90:ff:68:4f:bf:33:51:ad:61:09:6a:1b:41:20:6e:
a6:b2:28:e4:8a:a2:fc:15:ca:87:cc:a3:18:9b:81:ba:48:87:
0d:d4:dd:97:b2:b4:5b:f6:9a:b9:88:4e:de:32:2d:e3:ed:f0:
ab:0a:32:10:9a:91:1d:3d:6d:03:b3:c5:68:e1:01:50:7a:68:
f0:4c:69:e0:aa:c6:cf:57:5c:3f:12:eb:19:10:d6:29:38:ef:
3f:3d:50:0e:26:28:53:ab:eb:b2:b8:9a:88:e8:f2:13:18:03:
74:f1:70:fc:a0:32:88:aa:c8:e1:c5:f8:42:e7:59:a7:ab:13:
c3:17:10:44:a7:e9:14:88:4c:d7:ce:77:25:fb:92:7c:54:cf:
49:03:8f:75:7e:cf:96:fc:29:49:4e:a9:e7:8d:5b:63:d8:92:
3f:c7:ab:15:59:91:4c:88:d0:c0:44:af:77:59:f3:8d:2d:69:
a0:bf:7f:83:a2:92:00:ad:cf:db:ff:3c:8c:98:3e:8d:c6:ca:
2d:c0:54:3c:e1:53:cf:d6:20:f6:33:2c:d1:8c:98:a4:ea:22:
90:a0:7b:c0:15:7a:21:e4:e1:9e:51:e1:b0:fe:91:ff:e4:df:
e7:95:91:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQgZ7WjuETsbuwA4dzVl3PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODk2MmJjNWRhMjcxMmYyMDhmYzhiMTVlYmRjMjQ2YWY0
Y2JlY2YwHhcNMjUwMTAxMDU0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjI1MjQ5YTRkOWFkNTMxZjI1ZjRkMjE0ZTU5ZGQ0Yzg1NjZiNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVuV8Pr/5U6ptqcl0iiDhYtgYzZg
pWEcu/j5kA+tuk8jXKq6KQbyTvy3QrsTZPANKKBTVhA28YzlX2sda6p5Oe3jW8RT
Uc78dAnaRVnlS+1c7/rP0myBhFUO64JsGEahjt2NkzZXNxuqrQoMnp37gfVeSIyk
qyePh/mXtFTwFfsvFylpObg3wCOEpXIhxHGAMCaAYiEoB7xDDbsH7aDrX/YMhZY+
X3EdS+V0H1bK2NdeVeRHPbX4EUCVVCm9meRS+4ystTRWVPPiCWmS4YDDtEpMLKDO
7wsYPBN9l721k+EcO7tDMPOu/svZQdFy5mF2Jnw8uIiFnedmd//HfzM/MQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO8lJJpNmtUx8l9NIU5Z3UyFZrS3MB8GA1UdIwQY
MBaAFBWJYrxdonEvII/IsV69wkavTL7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUt
NWE2MDEzMTAwNGU4LzEvN3lVa21rMmExVEh5WDAwaFRsbmRUSVZtdExjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUtNWE2MDEzMTAwNGU4
LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuW6YMA8E
AgACMAkDBwAqBliAAN0wDQYJKoZIhvcNAQELBQADggEBACNBCXzMdrxBfrWUDeYS
/ZyzV1h0EZD/aE+/M1GtYQlqG0EgbqayKOSKovwVyofMoxibgbpIhw3U3ZeytFv2
mrmITt4yLePt8KsKMhCakR09bQOzxWjhAVB6aPBMaeCqxs9XXD8S6xkQ1ik47z89
UA4mKFOr67K4mojo8hMYA3TxcPygMoiqyOHF+ELnWaerE8MXEESn6RSITNfOdyX7
knxUz0kDj3V+z5b8KUlOqeeNW2PYkj/HqxVZkUyI0MBEr3dZ840taaC/f4OikgCt
z9v/PIyYPo3Gyi3AVDzhU8/WIPYzLNGMmKTqIpCge8AVeiHk4Z5R4bD+kf/k3+eV
kXE=
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:12 2025 by rpki-client