Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/ANb8R9j2-02RgxidkX6we3ysGQE.roa
File: ANb8R9j2-02RgxidkX6we3ysGQE.roa (raw, json)
Hash identifier: PtyNaJPud8TrVLKjYWqb06NjCoREWDEBCKKVezOGEGI=
Subject key identifier: 00:D6:FC:47:D8:F6:FB:4D:91:83:18:9D:91:7E:B0:7B:7C:AC:19:01
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 0196202F49DC235161FBC5EA9F51BFC0E786
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/ANb8R9j2-02RgxidkX6we3ysGQE.roa
Signing time: Thu 10 Apr 2025 14:51:31 +0000
ROA not before: Thu 10 Apr 2025 14:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21056
IP address blocks: 185.97.218.0/24 maxlen: 24
185.97.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:2f:49:dc:23:51:61:fb:c5:ea:9f:51:bf:c0:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Apr 10 14:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00d6fc47d8f6fb4d9183189d917eb07b7cac1901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:e4:59:4c:80:0a:f9:3d:82:ab:e0:dd:88:
fd:38:51:12:f2:b5:32:ea:ab:a3:09:5f:b2:3a:0b:
40:ad:21:3b:67:88:94:24:8f:5f:ea:7a:87:f9:59:
52:99:53:ee:11:50:96:34:d5:ba:60:17:26:96:64:
63:02:ad:84:13:43:a0:80:af:b3:21:0c:7e:6c:43:
4b:cd:ca:13:1f:91:b1:5c:87:2a:a5:24:bf:06:a7:
6f:49:8f:45:94:81:2f:33:79:cb:95:aa:16:86:40:
f5:ca:d0:04:70:b6:a7:78:46:62:30:54:11:0c:ed:
50:9b:10:5a:89:c5:90:46:4f:68:f5:5a:22:ab:c2:
fe:d5:97:41:06:94:db:a8:a6:5a:54:a2:aa:cd:05:
0b:af:a8:a4:bc:f5:2a:c8:4a:13:6d:97:4b:5f:ba:
93:bb:17:b0:2c:e9:e3:a7:40:39:6b:aa:fd:ce:21:
79:bf:a7:fd:74:0f:4b:87:67:c8:71:f5:8e:00:a2:
38:08:67:f3:bb:54:86:65:69:31:5a:53:cc:75:44:
36:58:51:23:d2:6f:11:32:d6:75:da:fb:36:cb:9d:
9f:10:43:06:af:3d:47:6a:4d:d3:8d:4d:eb:08:a2:
18:ce:79:db:15:e2:5d:fc:94:44:95:5b:bd:48:57:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:FC:47:D8:F6:FB:4D:91:83:18:9D:91:7E:B0:7B:7C:AC:19:01
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/ANb8R9j2-02RgxidkX6we3ysGQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:02:ca:2f:e6:22:37:06:9c:5a:1a:18:88:ae:5e:cd:48:8b:
6c:a8:68:f6:23:b5:77:f1:29:23:74:65:aa:50:3f:f8:23:9f:
f7:88:18:2f:d5:96:2c:65:4a:de:dd:64:9d:be:67:e9:22:fd:
44:65:5f:59:2e:2c:a7:3c:b2:26:97:35:0b:1b:45:30:48:2e:
97:bd:ce:bc:f6:2e:68:6e:79:05:09:ef:47:3d:d4:0c:be:79:
d9:2b:cd:9c:d0:03:e2:6f:a9:c2:a5:8e:b8:d8:57:f9:ef:91:
e8:33:6b:32:dc:ec:32:a2:28:ca:4c:00:f0:9f:b6:af:36:2e:
60:aa:12:6a:6e:6b:75:40:45:90:58:f8:e6:43:ce:95:4d:29:
73:81:59:09:0b:00:a0:63:5d:cd:6c:24:32:09:40:29:4f:a8:
14:3b:7b:8e:ef:8d:73:4f:f6:26:f9:1b:26:bc:75:22:f8:79:
1c:4e:b1:53:17:f0:2d:a0:dd:f9:c2:77:2c:2a:a9:50:2c:db:
69:97:72:06:d8:28:d5:84:32:56:f7:d6:f9:5a:c9:3e:cc:9f:
d9:78:4e:6d:8b:45:1b:8d:3e:d9:ab:2e:7e:ad:de:e3:13:53:
a2:7f:7b:fc:7a:8d:18:b4:ce:0a:cf:b1:87:c3:49:b5:d3:33:
c3:78:00:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYgL0ncI1Fh+8Xqn1G/wOeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1
Zjg0YzUwHhcNMjUwNDEwMTQ1MTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGQ2ZmM0N2Q4ZjZmYjRkOTE4MzE4OWQ5MTdlYjA3YjdjYWMxOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjDkWUyACvk9gqvg3Yj9OFES8rUy
6qujCV+yOgtArSE7Z4iUJI9f6nqH+VlSmVPuEVCWNNW6YBcmlmRjAq2EE0OggK+z
IQx+bENLzcoTH5GxXIcqpSS/BqdvSY9FlIEvM3nLlaoWhkD1ytAEcLaneEZiMFQR
DO1QmxBaicWQRk9o9Voiq8L+1ZdBBpTbqKZaVKKqzQULr6ikvPUqyEoTbZdLX7qT
uxewLOnjp0A5a6r9ziF5v6f9dA9Lh2fIcfWOAKI4CGfzu1SGZWkxWlPMdUQ2WFEj
0m8RMtZ12vs2y52fEEMGrz1Hak3TjU3rCKIYznnbFeJd/JRElVu9SFe5YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADW/EfY9vtNkYMYnZF+sHt8rBkBMB8GA1UdIwQY
MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt
MzJhNDI3OGU1YmM1LzEvQU5iOFI5ajItMDJSZ3hpZGtYNndlM3lzR1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1
LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWHaMA0G
CSqGSIb3DQEBCwUAA4IBAQCLAsov5iI3BpxaGhiIrl7NSItsqGj2I7V38SkjdGWq
UD/4I5/3iBgv1ZYsZUre3WSdvmfpIv1EZV9ZLiynPLImlzULG0UwSC6Xvc689i5o
bnkFCe9HPdQMvnnZK82c0APib6nCpY642Ff575HoM2sy3OwyoijKTADwn7avNi5g
qhJqbmt1QEWQWPjmQ86VTSlzgVkJCwCgY13NbCQyCUApT6gUO3uO741zT/Ym+Rsm
vHUi+HkcTrFTF/AtoN35wncsKqlQLNtpl3IG2CjVhDJW99b5Wsk+zJ/ZeE5ti0Ub
jT7Zqy5+rd7jE1Oif3v8eo0YtM4Kz7GHw0m10zPDeAB/
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:26 2025 by rpki-client