Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/GIPybF1nvDpVQajMG8DWoYzoWhc.roa
File: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (raw, json)
Hash identifier: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=
Subject key identifier: 18:83:F2:6C:5D:67:BC:3A:55:41:A8:CC:1B:C0:D6:A1:8C:E8:5A:17
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 0194222020B060222BD7361AFEB7DD1B2F50
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/GIPybF1nvDpVQajMG8DWoYzoWhc.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34134
IP address blocks: 185.25.144.0/23 maxlen: 23
185.25.146.0/23 maxlen: 23
195.160.212.0/23 maxlen: 23
195.160.214.0/23 maxlen: 23
2a04:15c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:20:b0:60:22:2b:d7:36:1a:fe:b7:dd:1b:2f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1883f26c5d67bc3a5541a8cc1bc0d6a18ce85a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:8c:f0:80:24:22:69:d2:4d:1e:80:dc:96:
c6:ea:3e:04:61:2f:f6:e5:93:1e:78:97:3d:68:30:
58:a2:2e:f3:6e:aa:a6:cc:25:00:32:96:af:34:20:
c0:3b:60:37:dc:df:5e:af:22:5c:3a:f6:15:14:a9:
71:26:6f:36:10:24:a4:f0:5f:4b:6d:c1:a1:8a:75:
77:c4:8e:ce:a5:07:60:79:4d:19:ea:b4:f2:e8:a4:
46:55:57:63:6e:39:26:47:29:0f:33:d8:c5:39:86:
7d:95:32:0f:e4:3e:d5:84:ee:ca:92:47:87:ab:c6:
bd:b0:cd:71:36:ea:9f:41:ec:18:19:cf:58:0c:ae:
b5:aa:76:ae:f6:c9:31:cb:b4:03:3e:1e:a6:a3:94:
49:af:29:50:46:e5:9b:c9:be:4b:4f:bc:22:14:76:
d1:4c:fa:50:26:62:02:4d:75:b0:d1:9b:ac:bf:c9:
d2:ef:0d:65:9d:dd:f1:19:3d:32:11:fb:c1:ab:fe:
da:a8:22:b9:25:c1:b3:d4:77:27:c0:87:7d:13:6b:
99:b9:ed:f3:9a:38:3b:4b:0d:79:ee:fc:0f:fa:24:
cc:f2:fb:e7:7b:63:52:12:28:f0:a7:6e:25:35:96:
71:1d:22:de:c4:27:4c:ef:23:42:5a:67:25:89:f2:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:83:F2:6C:5D:67:BC:3A:55:41:A8:CC:1B:C0:D6:A1:8C:E8:5A:17
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/GIPybF1nvDpVQajMG8DWoYzoWhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.144.0/22
195.160.212.0/22
IPv6:
2a04:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:73:89:93:dc:38:d0:fa:de:c7:0b:29:9e:51:95:56:50:ed:
da:5c:98:a7:ab:16:7a:d9:63:42:6f:9f:38:8f:f2:a1:b5:6a:
88:98:a7:ae:ec:b0:ee:31:23:3b:27:fd:77:7a:3f:54:b3:f8:
8c:c2:cd:5d:0b:ed:20:b2:4b:ec:f6:0d:20:44:ea:18:dd:c4:
15:f8:f0:a4:40:cb:f0:27:42:41:a3:00:00:2e:9f:fc:96:67:
4b:65:c7:3a:82:cc:ac:19:b4:7d:d8:c9:e6:70:b6:f3:d4:c1:
31:f1:53:cc:49:f2:7b:7f:5e:4d:de:3e:68:dd:45:dd:f6:ad:
ce:08:a5:1b:11:b8:66:ed:bb:ea:46:cb:39:2f:09:35:8b:9e:
54:6b:ec:2f:f2:da:7b:a3:4a:17:9c:f1:b9:e7:64:72:70:0c:
4a:17:be:2d:61:ba:8a:76:01:ee:90:6e:97:d1:d7:1f:c6:66:
46:79:e0:00:ce:48:c1:d8:2b:3a:c7:91:8a:68:81:35:d5:f7:
0f:cb:5d:0d:40:f6:77:da:68:92:41:31:8c:a8:3e:a7:2d:09:
a7:b4:ef:83:b9:e1:60:0b:dc:4f:81:37:41:f2:63:b6:d7:32:
6f:a0:7c:70:84:a5:ee:7a:88:bf:7e:3f:6b:23:e5:63:31:0e:
a1:ee:c5:ff
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiICCwYCIr1zYa/rfdGy9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi
NjgxOWIwHhcNMjUwMTAxMTM0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODgzZjI2YzVkNjdiYzNhNTU0MWE4Y2MxYmMwZDZhMThjZTg1YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/2M8IAkImnSTR6A3JbG6j4EYS/2
5ZMeeJc9aDBYoi7zbqqmzCUAMpavNCDAO2A33N9eryJcOvYVFKlxJm82ECSk8F9L
bcGhinV3xI7OpQdgeU0Z6rTy6KRGVVdjbjkmRykPM9jFOYZ9lTIP5D7VhO7KkkeH
q8a9sM1xNuqfQewYGc9YDK61qnau9skxy7QDPh6mo5RJrylQRuWbyb5LT7wiFHbR
TPpQJmICTXWw0Zusv8nS7w1lnd3xGT0yEfvBq/7aqCK5JcGz1HcnwId9E2uZue3z
mjg7Sw157vwP+iTM8vvne2NSEijwp24lNZZxHSLexCdM7yNCWmclifITJwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBiD8mxdZ7w6VUGozBvA1qGM6FoXMB8GA1UdIwQY
MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt
MjRhZmNlZjRmM2Y1LzEvR0lQeWJGMW52RHBWUWFqTUc4RFdvWXpvV2hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1
LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRmQAwQC
w6DUMA0EAgACMAcDBQMqBBXAMA0GCSqGSIb3DQEBCwUAA4IBAQAyc4mT3DjQ+t7H
CymeUZVWUO3aXJinqxZ62WNCb584j/KhtWqImKeu7LDuMSM7J/13ej9Us/iMws1d
C+0gskvs9g0gROoY3cQV+PCkQMvwJ0JBowAALp/8lmdLZcc6gsysGbR92MnmcLbz
1MEx8VPMSfJ7f15N3j5o3UXd9q3OCKUbEbhm7bvqRss5Lwk1i55Ua+wv8tp7o0oX
nPG552RycAxKF74tYbqKdgHukG6X0dcfxmZGeeAAzkjB2Cs6x5GKaIE11fcPy10N
QPZ32miSQTGMqD6nLQmntO+DueFgC9xPgTdB8mO21zJvoHxwhKXueoi/fj9rI+Vj
MQ6h7sX/
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:29:08 2025 by rpki-client