Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa
File: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (raw, json)
Hash identifier: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=
Subject key identifier: 77:4E:D2:A5:06:D1:53:C1:82:E9:59:56:9B:BF:CB:6E:C9:FD:49:BF
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 0194228E15D5FF982E44BC5829A13E1748BC
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62856
IP address blocks: 185.81.100.0/22 maxlen: 22
185.81.100.0/24 maxlen: 24
185.81.101.0/24 maxlen: 24
185.81.102.0/24 maxlen: 24
2a05:8780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:15:d5:ff:98:2e:44:bc:58:29:a1:3e:17:48:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=774ed2a506d153c182e959569bbfcb6ec9fd49bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:f6:f6:c1:21:74:da:c9:00:39:de:cb:e7:
c2:6e:d2:ae:cb:1b:cb:a5:67:34:67:25:ce:56:84:
11:a6:ca:61:da:4a:9d:d2:6d:49:18:38:0a:c8:eb:
33:84:85:4c:e5:e0:14:06:13:fd:0e:24:04:df:9c:
11:36:cd:32:65:5f:bc:6e:22:db:40:f1:08:9e:06:
9a:f2:c9:08:4b:95:ac:3e:03:65:c8:d1:17:66:66:
13:a0:d5:2a:c3:08:c9:3d:d7:3e:2b:64:b9:a4:79:
06:c5:97:73:ef:d4:86:ce:18:74:36:e7:c5:c3:5a:
ee:20:70:1f:e3:1b:5c:bf:21:e4:56:15:14:ad:30:
97:b0:04:8c:cf:68:61:95:f9:88:9d:54:79:c8:0e:
ef:7d:86:0d:ec:6b:2f:f5:ee:62:8d:c7:23:8e:27:
7a:89:46:9f:d0:33:18:39:aa:fa:a7:91:45:0e:21:
ba:12:10:e6:f8:b3:65:de:19:9c:60:67:6e:63:a4:
22:ed:7b:63:c9:4c:8b:3c:14:85:29:fe:7a:61:9b:
f0:88:de:5c:fb:dc:16:4e:3b:74:31:55:05:36:75:
37:42:53:e1:c9:7b:96:54:37:3f:75:05:c1:25:e5:
46:7c:a8:e6:4a:5e:a2:ba:9f:ad:eb:14:fe:21:c8:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:D2:A5:06:D1:53:C1:82:E9:59:56:9B:BF:CB:6E:C9:FD:49:BF
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.100.0/22
IPv6:
2a05:8780::/29
Signature Algorithm: sha256WithRSAEncryption
37:ff:ef:64:e5:c3:53:50:bc:75:63:f2:5e:17:c7:93:37:c9:
55:fe:d3:93:68:ec:26:b5:c8:12:77:73:ea:bf:77:31:1f:07:
df:1d:ba:19:f8:fa:5d:74:50:2f:17:9d:19:be:03:8c:a0:fc:
9a:3e:51:8a:ee:cd:13:1d:37:6a:7a:29:9c:a9:a9:a5:05:bc:
9d:7f:3a:84:4b:5f:a2:89:11:82:f9:21:a6:2a:7e:71:18:23:
e5:b0:3b:9e:22:75:3b:22:14:03:fd:c0:9a:27:59:ca:8e:1d:
d4:e3:c8:6a:01:02:14:ea:25:94:04:63:23:3b:0a:a4:f5:f2:
6e:0a:69:5d:2d:93:0d:67:9c:39:8c:00:1f:f4:99:b7:04:42:
f4:16:10:6d:db:a4:c5:9a:3d:91:ad:ff:11:ff:65:f5:91:14:
6b:88:85:9f:ca:b5:75:7d:44:a1:af:ae:be:b4:b0:2c:6a:fe:
22:f7:a3:0d:94:94:da:07:36:dd:9c:13:28:f0:8f:82:00:b3:
02:76:0f:5b:48:be:8f:31:89:b6:39:57:04:d4:a9:e7:85:2a:
2d:41:ed:ca:0e:0e:15:ad:75:c1:77:05:d9:bd:d8:d8:2b:4b:
89:73:60:64:9a:a8:6d:5b:0a:74:52:8b:f0:51:ea:67:93:ed:
79:1d:90:c6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijhXV/5guRLxYKaE+F0i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5
NmZhMmQwHhcNMjUwMTAxMTU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzRlZDJhNTA2ZDE1M2MxODJlOTU5NTY5YmJmY2I2ZWM5ZmQ0OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a/29sEhdNrJADney+fCbtKuyxvL
pWc0ZyXOVoQRpsph2kqd0m1JGDgKyOszhIVM5eAUBhP9DiQE35wRNs0yZV+8biLb
QPEIngaa8skIS5WsPgNlyNEXZmYToNUqwwjJPdc+K2S5pHkGxZdz79SGzhh0NufF
w1ruIHAf4xtcvyHkVhUUrTCXsASMz2hhlfmInVR5yA7vfYYN7Gsv9e5ijccjjid6
iUaf0DMYOar6p5FFDiG6EhDm+LNl3hmcYGduY6Qi7XtjyUyLPBSFKf56YZvwiN5c
+9wWTjt0MVUFNnU3QlPhyXuWVDc/dQXBJeVGfKjmSl6iup+t6xT+IchaMwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHdO0qUG0VPBgulZVpu/y27J/Um/MB8GA1UdIwQY
MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt
ZDMyZTU2ZDc5YjJhLzEvZDA3U3BRYlJVOEdDNlZsV203X0xic245U2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh
LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVFkMA0E
AgACMAcDBQMqBYeAMA0GCSqGSIb3DQEBCwUAA4IBAQA3/+9k5cNTULx1Y/JeF8eT
N8lV/tOTaOwmtcgSd3Pqv3cxHwffHboZ+PpddFAvF50ZvgOMoPyaPlGK7s0THTdq
eimcqamlBbydfzqES1+iiRGC+SGmKn5xGCPlsDueInU7IhQD/cCaJ1nKjh3U48hq
AQIU6iWUBGMjOwqk9fJuCmldLZMNZ5w5jAAf9Jm3BEL0FhBt26TFmj2Rrf8R/2X1
kRRriIWfyrV1fUShr66+tLAsav4i96MNlJTaBzbdnBMo8I+CALMCdg9bSL6PMYm2
OVcE1KnnhSotQe3KDg4VrXXBdwXZvdjYK0uJc2BkmqhtWwp0UovwUepnk+15HZDG
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:26:05 2025 by rpki-client