Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/m8BwxDuDoDpqepSxNOe4PWRnwWA.roa
File: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (raw, json)
Hash identifier: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=
Subject key identifier: 9B:C0:70:C4:3B:83:A0:3A:6A:7A:94:B1:34:E7:B8:3D:64:67:C1:60
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 0195C82DBDE00938B5282CDD30C1CD1BEA88
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/m8BwxDuDoDpqepSxNOe4PWRnwWA.roa
Signing time: Mon 24 Mar 2025 12:43:15 +0000
ROA not before: Mon 24 Mar 2025 12:43:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211483
IP address blocks: 185.60.76.0/24 maxlen: 24
185.60.77.0/24 maxlen: 24
185.60.78.0/24 maxlen: 24
192.109.198.0/24 maxlen: 24
193.29.3.0/24 maxlen: 24
2a04:5b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:2d:bd:e0:09:38:b5:28:2c:dd:30:c1:cd:1b:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Mar 24 12:43:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bc070c43b83a03a6a7a94b134e7b83d6467c160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:c9:af:c8:5b:8c:03:7f:bc:5a:54:76:94:
c7:d7:a2:8a:3b:ab:86:1c:bf:09:22:93:f8:48:57:
48:44:22:1e:a0:8f:7e:a7:89:69:ab:93:37:b2:5f:
e6:10:0b:03:43:8a:3e:19:ac:86:65:0a:d3:54:d6:
ea:b3:3e:52:4d:76:9a:14:ed:f0:34:2e:86:93:e1:
62:17:da:38:0a:c2:e9:7e:62:9c:d1:55:23:0b:ac:
db:d7:1c:cb:04:0e:4f:2c:6d:be:fb:66:4e:1a:77:
8d:8a:3b:88:3e:1e:fb:be:1f:b7:12:34:cd:3a:88:
79:00:4b:2a:c8:cc:bb:8b:4f:6a:61:bc:8a:d2:2f:
33:0c:e6:b4:37:2b:37:de:3d:ab:63:fb:96:1d:a2:
98:29:ee:fa:1e:78:b9:9e:0a:1a:a6:df:f4:c0:7c:
6c:cc:4e:00:16:4f:85:64:3d:46:a5:c7:19:bc:2d:
62:af:a5:93:c2:2e:ed:10:60:15:8b:4e:34:d7:a2:
1b:f0:36:e0:3a:fe:a3:e2:8a:67:a2:eb:d5:19:da:
4e:fc:46:41:0e:21:bc:ab:58:50:ca:5b:ad:e3:b5:
11:b0:02:b4:38:15:63:27:ff:7b:ee:58:eb:93:38:
33:13:f5:9a:90:81:e6:dd:5d:31:3a:18:a3:98:08:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:70:C4:3B:83:A0:3A:6A:7A:94:B1:34:E7:B8:3D:64:67:C1:60
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/m8BwxDuDoDpqepSxNOe4PWRnwWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.76.0-185.60.78.255
192.109.198.0/24
193.29.3.0/24
IPv6:
2a04:5b40::/32
Signature Algorithm: sha256WithRSAEncryption
b0:d3:69:1a:58:df:66:9b:53:1c:a7:69:fd:65:89:dd:a7:52:
dc:82:53:8a:8d:46:18:69:90:96:36:4d:68:9d:5d:fc:83:f9:
e9:c5:e3:c8:90:79:91:05:0c:0d:21:71:0c:f0:e7:e6:e8:8e:
da:42:6c:8f:98:04:ac:3a:02:1c:79:ad:47:93:d4:bf:95:fa:
d8:b4:cf:58:4d:1d:39:f0:98:ac:e2:34:37:03:f2:1d:59:e0:
c5:ce:2b:08:6b:c3:5a:2a:b6:86:cc:64:e8:d9:b6:33:e9:2e:
33:f6:bc:28:c3:0b:0d:ad:a3:81:81:4c:d1:94:18:61:ad:f4:
48:1c:ad:4c:8d:a2:01:3e:93:f6:4f:2e:7a:f2:4c:ff:f6:1d:
af:f7:5b:41:6b:b0:b7:98:4c:f7:81:cd:23:a8:46:a1:21:10:
55:97:43:78:05:2a:fc:72:bc:a9:52:dc:35:20:3f:4f:c3:39:
04:ec:b9:59:be:f0:b2:1b:8b:c2:3f:d8:e6:39:1d:d6:cd:06:
f0:ae:7f:3e:c2:08:d9:38:9e:ef:8e:e0:aa:6a:d5:ed:2a:c2:
e6:dd:50:6c:eb:17:36:59:75:1e:01:41:a5:ea:b2:d2:9a:ae:
0c:74:5f:43:61:07:09:57:1c:da:c4:7f:8b:d0:65:c2:9d:02:
c8:6e:bc:8d
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZXILb3gCTi1KCzdMMHNG+qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw
ZWIxMjkwHhcNMjUwMzI0MTI0MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmMwNzBjNDNiODNhMDNhNmE3YTk0YjEzNGU3YjgzZDY0NjdjMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11vJr8hbjAN/vFpUdpTH16KKO6uG
HL8JIpP4SFdIRCIeoI9+p4lpq5M3sl/mEAsDQ4o+GayGZQrTVNbqsz5STXaaFO3w
NC6Gk+FiF9o4CsLpfmKc0VUjC6zb1xzLBA5PLG2++2ZOGneNijuIPh77vh+3EjTN
Ooh5AEsqyMy7i09qYbyK0i8zDOa0Nys33j2rY/uWHaKYKe76Hni5ngoapt/0wHxs
zE4AFk+FZD1GpccZvC1ir6WTwi7tEGAVi04016Ib8DbgOv6j4opnouvVGdpO/EZB
DiG8q1hQylut47URsAK0OBVjJ/977ljrkzgzE/WakIHm3V0xOhijmAhTEwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFJvAcMQ7g6A6anqUsTTnuD1kZ8FgMB8GA1UdIwQY
MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt
OTg0NDE2MDdiMjI4LzEvbThCd3hEdURvRHBxZXBTeE5PZTRQV1Jud1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4
LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAK5PEwD
BAC5PE4DBADAbcYDBADBHQMwDQQCAAIwBwMFACoEW0AwDQYJKoZIhvcNAQELBQAD
ggEBALDTaRpY32abUxynaf1lid2nUtyCU4qNRhhpkJY2TWidXfyD+enF48iQeZEF
DA0hcQzw5+bojtpCbI+YBKw6Ahx5rUeT1L+V+ti0z1hNHTnwmKziNDcD8h1Z4MXO
Kwhrw1oqtobMZOjZtjPpLjP2vCjDCw2to4GBTNGUGGGt9EgcrUyNogE+k/ZPLnry
TP/2Ha/3W0FrsLeYTPeBzSOoRqEhEFWXQ3gFKvxyvKlS3DUgP0/DOQTsuVm+8LIb
i8I/2OY5HdbNBvCufz7CCNk4nu+O4Kpq1e0qwubdUGzrFzZZdR4BQaXqstKargx0
X0NhBwlXHNrEf4vQZcKdAshuvI0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:01 2025 by rpki-client