Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa
File: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (raw, json)
Hash identifier: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=
Subject key identifier: 00:D5:E7:61:3A:8A:4E:BF:68:57:90:25:CE:6C:BE:1B:B6:75:8E:BE
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0194221F854CD3939288F50B9D66A14D6553
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9664
IP address blocks: 185.217.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:85:4c:d3:93:92:88:f5:0b:9d:66:a1:4d:65:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00d5e7613a8a4ebf68579025ce6cbe1bb6758ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:21:53:bb:22:f0:c6:38:41:c7:f9:1b:6e:
67:8e:db:7d:56:54:3e:eb:04:5f:8d:e2:3d:3c:3d:
b6:6c:97:f1:8c:01:35:78:35:7a:61:43:cc:b5:98:
1b:45:39:bf:5d:2e:a5:c0:5a:ef:2d:07:66:3e:12:
9d:2e:bf:55:e9:74:01:74:a4:c9:c0:63:e6:d7:ec:
cd:a5:13:2b:d7:49:e9:81:7e:a0:8e:cb:38:1a:2e:
1b:f9:b0:75:44:cc:d6:d3:a3:b9:75:a4:37:52:e3:
6e:64:ce:f6:bd:b3:97:9f:13:ca:fe:59:bf:b8:13:
b9:6d:df:36:9b:97:32:7a:ee:32:70:13:03:31:c0:
e2:0f:9e:e3:fd:87:74:24:8d:45:20:e6:22:8f:99:
9e:20:9c:5d:69:76:96:fe:f4:da:29:c0:24:0a:7e:
57:46:20:c1:65:ea:dc:e7:fe:96:09:b4:09:76:fc:
09:09:6a:33:41:af:7f:8a:55:b5:06:f4:7e:2e:2f:
65:86:88:db:31:1b:4d:97:ad:f6:c6:55:11:40:39:
86:3f:35:10:14:62:2e:8f:c3:9e:53:2d:53:7c:99:
e0:71:9d:08:ac:c3:d5:de:6a:0f:93:99:b8:bb:03:
85:d1:5a:56:ea:8a:5a:fd:cb:e8:ba:ae:45:5d:f9:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:E7:61:3A:8A:4E:BF:68:57:90:25:CE:6C:BE:1B:B6:75:8E:BE
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.5.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f5:92:3c:01:42:53:7e:dc:b1:40:b8:35:a7:86:91:40:ba:
2a:5b:98:6b:42:5a:ad:0b:29:72:65:c4:5f:22:9e:2d:38:e1:
01:d8:65:6b:52:b8:8b:c7:c0:e0:1d:26:3b:7b:a5:e8:0c:40:
8b:bd:44:95:bd:92:24:b6:80:18:0d:f6:a8:e3:08:7f:72:d2:
4e:70:94:67:2f:61:67:69:89:7f:d3:03:d6:3e:99:99:01:87:
c7:87:e5:b1:8e:4a:d2:61:50:d2:d5:3a:37:7c:7f:66:81:40:
36:14:fc:1e:d4:36:3f:58:51:bc:a3:ab:95:d8:df:02:04:6b:
cd:72:d1:d9:61:76:a8:35:c1:2f:95:26:3e:14:86:55:7b:20:
22:36:1e:f8:c5:e5:37:0c:d8:86:9f:9b:90:bc:40:bb:45:57:
c3:90:6d:49:21:d0:4f:88:51:73:8b:4f:80:94:b4:b9:10:66:
64:ec:52:54:43:51:07:b6:83:f1:38:b9:51:1c:ec:7f:4d:9b:
71:d6:fa:ec:a4:b1:c9:29:34:c1:24:1b:14:1c:85:03:41:14:
d2:c0:0f:fb:c9:54:9d:97:bf:02:a0:0d:5d:fe:15:37:00:a0:
d5:59:57:75:fa:a5:79:f3:6a:82:f2:80:ef:92:f7:2e:11:5b:
a6:1a:5e:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH4VM05OSiPULnWahTWVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2FiOTIyNTY1ZTJiM2UyY2M2M2Q0ODVhNTVkZDRmYzQx
ZDM1N2UwHhcNMjUwMTAxMTM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGQ1ZTc2MTNhOGE0ZWJmNjg1NzkwMjVjZTZjYmUxYmI2NzU4ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0hU7si8MY4Qcf5G25njtt9VlQ+
6wRfjeI9PD22bJfxjAE1eDV6YUPMtZgbRTm/XS6lwFrvLQdmPhKdLr9V6XQBdKTJ
wGPm1+zNpRMr10npgX6gjss4Gi4b+bB1RMzW06O5daQ3UuNuZM72vbOXnxPK/lm/
uBO5bd82m5cyeu4ycBMDMcDiD57j/Yd0JI1FIOYij5meIJxdaXaW/vTaKcAkCn5X
RiDBZerc5/6WCbQJdvwJCWozQa9/ilW1BvR+Li9lhojbMRtNl632xlURQDmGPzUQ
FGIuj8OeUy1TfJngcZ0IrMPV3moPk5m4uwOF0VpW6opa/cvouq5FXfla4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADV52E6ik6/aFeQJc5svhu2dY6+MB8GA1UdIwQY
MBaAFLB6uSJWXis+LMY9SFpV3U/EHTV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUt
MTNiY2M3NTIxMTlhLzEvQU5YbllUcUtUcjlvVjVBbHpteS1HN1oxanI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUtMTNiY2M3NTIxMTlh
LzEvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudkFMA0G
CSqGSIb3DQEBCwUAA4IBAQA29ZI8AUJTftyxQLg1p4aRQLoqW5hrQlqtCylyZcRf
Ip4tOOEB2GVrUriLx8DgHSY7e6XoDECLvUSVvZIktoAYDfao4wh/ctJOcJRnL2Fn
aYl/0wPWPpmZAYfHh+WxjkrSYVDS1To3fH9mgUA2FPwe1DY/WFG8o6uV2N8CBGvN
ctHZYXaoNcEvlSY+FIZVeyAiNh74xeU3DNiGn5uQvEC7RVfDkG1JIdBPiFFzi0+A
lLS5EGZk7FJUQ1EHtoPxOLlRHOx/TZtx1vrspLHJKTTBJBsUHIUDQRTSwA/7yVSd
l78CoA1d/hU3AKDVWVd1+qV582qC8oDvkvcuEVumGl4l
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:47:06 2025 by rpki-client