Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/ytASscQl-jcvF2Td7QzFghuuoNE.roa
File: ytASscQl-jcvF2Td7QzFghuuoNE.roa (raw, json)
Hash identifier: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=
Subject key identifier: CA:D0:12:B1:C4:25:FA:37:2F:17:64:DD:ED:0C:C5:82:1B:AE:A0:D1
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 0194282400CB3F8633393B8980B4BE2158F5
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/ytASscQl-jcvF2Td7QzFghuuoNE.roa
Signing time: Thu 02 Jan 2025 17:50:35 +0000
ROA not before: Thu 02 Jan 2025 17:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60169
IP address blocks: 185.39.20.0/22 maxlen: 22
2a04:6100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:00:cb:3f:86:33:39:3b:89:80:b4:be:21:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Jan 2 17:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cad012b1c425fa372f1764dded0cc5821baea0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:f0:e2:fd:56:e9:6a:5c:ac:da:22:0d:28:
9a:2e:55:43:c6:41:eb:da:4c:76:91:7f:23:25:06:
4c:c0:bb:8a:54:57:38:18:c7:25:99:88:1b:45:45:
96:42:f6:39:d2:a8:85:4c:b0:35:33:85:7c:56:2a:
1a:b0:28:45:80:99:03:7e:c7:17:9f:69:67:5b:d8:
f8:4a:67:f7:4a:88:a9:98:27:49:1b:9d:11:1f:16:
ad:cd:49:69:c6:21:13:4a:50:9e:cf:c5:25:6a:5e:
dc:67:f0:78:71:c0:37:47:74:c1:c6:7e:27:6c:dc:
9b:bd:c3:d2:27:56:6f:a6:f0:84:c0:fc:7e:da:98:
e1:5f:ae:e4:d1:ff:b1:55:27:cf:41:49:98:21:dc:
87:46:d4:b7:e7:ac:24:07:c3:59:35:f5:1e:d5:5f:
f5:bf:da:55:97:6a:21:40:95:f4:5b:f1:54:42:fa:
7c:8c:06:34:62:1a:ee:46:09:13:e5:3f:af:3a:7e:
45:6b:18:54:63:38:14:cb:5e:4a:40:c9:e1:60:f5:
5b:ee:7e:46:4b:0d:96:50:25:d4:ef:25:ac:a5:47:
e4:74:59:e9:5a:63:f1:ad:6c:92:8b:d7:5f:19:91:
41:1c:71:b1:84:b7:51:83:0b:63:84:0f:a3:7b:57:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:12:B1:C4:25:FA:37:2F:17:64:DD:ED:0C:C5:82:1B:AE:A0:D1
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/ytASscQl-jcvF2Td7QzFghuuoNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.20.0/22
IPv6:
2a04:6100::/29
Signature Algorithm: sha256WithRSAEncryption
43:f8:9e:2d:a1:12:82:9c:e7:db:fe:fd:c4:80:f3:76:0b:02:
02:13:ac:a6:1c:9c:2a:a6:25:ed:49:cc:e1:9b:42:e8:1d:b4:
25:4e:bf:4f:eb:63:c8:62:76:8a:c4:7a:5b:01:46:ac:1b:a8:
c5:f8:da:45:f2:5d:f0:2c:aa:50:a6:b0:f6:9a:32:45:df:0f:
68:81:cd:6d:bc:ed:c5:68:8c:1c:1b:3c:8e:c0:2a:ea:9f:d2:
15:c8:cb:d5:9d:bd:89:c0:cb:c3:12:c9:e5:5c:94:62:63:96:
be:f3:7e:25:fa:0c:62:1c:b6:b6:d9:76:5a:5a:50:09:15:e2:
0f:39:bd:6c:ae:35:72:e9:68:55:49:71:24:89:7f:b5:ae:19:
ca:09:e9:ed:bd:7b:6b:dd:e3:45:f4:7e:a0:ad:41:a8:26:b3:
4b:5a:a2:2b:c3:b0:91:24:00:51:44:ba:61:ba:b9:db:29:e4:
12:80:59:3f:e3:81:49:99:c4:2f:55:86:9c:bb:64:41:d7:97:
12:f5:d5:b5:02:af:25:14:98:38:b7:6d:7c:56:fb:7e:87:2e:
6b:d5:80:dc:c6:20:9b:cf:84:67:0d:2d:94:fb:e8:9a:b0:8b:
f3:2d:ab:22:c3:91:68:0a:f0:41:c8:9e:f7:76:ba:f4:cd:43:
ba:e1:4c:f3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoJADLP4YzOTuJgLS+IVj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2IyYjUwYmYwYzE4YTUzMWU2ZGIxNTY2N2JlN2VkNzZi
YjI4MjEwHhcNMjUwMTAyMTc1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWQwMTJiMWM0MjVmYTM3MmYxNzY0ZGRlZDBjYzU4MjFiYWVhMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qjw4v1W6WpcrNoiDSiaLlVDxkHr
2kx2kX8jJQZMwLuKVFc4GMclmYgbRUWWQvY50qiFTLA1M4V8VioasChFgJkDfscX
n2lnW9j4Smf3SoipmCdJG50RHxatzUlpxiETSlCez8Ulal7cZ/B4ccA3R3TBxn4n
bNybvcPSJ1ZvpvCEwPx+2pjhX67k0f+xVSfPQUmYIdyHRtS356wkB8NZNfUe1V/1
v9pVl2ohQJX0W/FUQvp8jAY0YhruRgkT5T+vOn5FaxhUYzgUy15KQMnhYPVb7n5G
Sw2WUCXU7yWspUfkdFnpWmPxrWySi9dfGZFBHHGxhLdRgwtjhA+je1dUiQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMrQErHEJfo3Lxdk3e0MxYIbrqDRMB8GA1UdIwQY
MBaAFCN7K1C/DBilMebbFWZ75+12uyghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2Yt
YjYxNWRmN2ZjZTllLzEveXRBU3NjUWwtamN2RjJUZDdRekZnaHV1b05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2YtYjYxNWRmN2ZjZTll
LzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuScUMA0E
AgACMAcDBQMqBGEAMA0GCSqGSIb3DQEBCwUAA4IBAQBD+J4toRKCnOfb/v3EgPN2
CwICE6ymHJwqpiXtSczhm0LoHbQlTr9P62PIYnaKxHpbAUasG6jF+NpF8l3wLKpQ
prD2mjJF3w9ogc1tvO3FaIwcGzyOwCrqn9IVyMvVnb2JwMvDEsnlXJRiY5a+834l
+gxiHLa22XZaWlAJFeIPOb1srjVy6WhVSXEkiX+1rhnKCentvXtr3eNF9H6grUGo
JrNLWqIrw7CRJABRRLphurnbKeQSgFk/44FJmcQvVYacu2RB15cS9dW1Aq8lFJg4
t218Vvt+hy5r1YDcxiCbz4RnDS2U++iasIvzLasiw5FoCvBByJ73drr0zUO64Uzz
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:09 2025 by rpki-client