Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/ET2huy81m3aucqPbuMYcz_TF2tw.roa
File: ET2huy81m3aucqPbuMYcz_TF2tw.roa (raw, json)
Hash identifier: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=
Subject key identifier: 11:3D:A1:BB:2F:35:9B:76:AE:72:A3:DB:B8:C6:1C:CF:F4:C5:DA:DC
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0194266C40C9975DF325715981421181768C
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/ET2huy81m3aucqPbuMYcz_TF2tw.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206022
IP address blocks: 185.198.156.0/22 maxlen: 24
185.198.157.0/24 maxlen: 24
185.198.158.0/23 maxlen: 24
185.198.159.0/24 maxlen: 24
2a0a:8b40::/29 maxlen: 29
2a0a:8b40:fede::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:40:c9:97:5d:f3:25:71:59:81:42:11:81:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113da1bb2f359b76ae72a3dbb8c61ccff4c5dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:30:49:08:a8:36:4b:56:2e:64:30:94:aa:
d3:79:36:a1:a9:25:4e:cf:07:75:20:db:7d:4f:4a:
8d:df:87:7f:ea:79:8e:84:91:d4:8a:01:c1:ce:5b:
04:3d:a9:85:72:19:7e:7d:74:9f:61:e6:a6:be:1d:
0b:e2:b7:65:17:52:dc:09:48:63:a2:40:63:41:f8:
75:bf:eb:d0:1f:2d:f1:c9:37:fe:b8:88:73:99:e4:
7f:72:3a:0f:fa:53:89:17:12:1a:a3:2b:88:f7:53:
2e:c8:cd:d0:be:21:01:78:63:19:23:d4:ae:1b:3c:
f1:52:f8:4e:0c:8d:de:e0:c9:59:39:41:ff:d1:73:
67:f1:80:41:98:1e:d9:b6:c4:38:70:0d:a5:f6:e1:
1c:e7:fe:a1:ae:0a:a5:5f:82:ab:a1:ec:cc:0f:21:
98:d6:12:86:4e:54:64:80:d9:6d:c9:7f:37:8c:48:
d1:f5:19:62:75:00:62:07:b7:27:5e:6c:92:ec:9d:
4f:f5:a2:57:da:c3:b1:9f:60:c1:b5:74:b3:22:60:
eb:53:03:b8:1a:33:31:fa:77:33:41:1f:2a:1b:f4:
74:34:06:85:46:a9:1e:9b:f5:3c:60:80:95:fb:5d:
a3:01:26:ae:64:7e:b3:7d:03:35:67:33:92:5a:c8:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:A1:BB:2F:35:9B:76:AE:72:A3:DB:B8:C6:1C:CF:F4:C5:DA:DC
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/ET2huy81m3aucqPbuMYcz_TF2tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.156.0/22
IPv6:
2a0a:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
31:30:e5:eb:0e:44:9e:5f:65:0a:c0:37:98:56:50:08:a7:06:
c4:2c:43:ad:0e:61:32:6c:d6:ce:0e:1d:15:3e:11:e8:13:6f:
4c:cd:8a:27:9e:3f:c5:5a:3b:28:1d:4e:a6:61:0a:83:53:05:
ab:83:44:5c:18:33:84:f1:f3:22:7a:fd:bf:df:49:b8:b6:99:
6a:56:d3:79:91:e8:bc:d6:d0:b1:c1:36:6e:2e:ad:cd:86:93:
2f:cd:65:62:e8:f3:36:95:f8:ac:86:4e:23:a0:a1:37:7b:45:
03:a9:92:58:ec:9a:ca:0f:8c:db:6b:6d:ef:50:fe:a4:40:29:
00:c4:3d:4f:1f:13:1a:08:30:35:8d:da:96:b7:25:93:a7:31:
32:f7:41:2b:e2:84:93:a0:30:1e:88:19:08:74:39:15:44:87:
e6:5b:e9:c5:5e:38:69:f5:29:d1:3f:10:dc:88:df:a1:f6:36:
0a:84:5a:10:3c:0f:f2:8d:aa:13:56:6c:28:72:96:16:31:bf:
80:c9:84:98:2e:da:74:37:17:31:eb:bb:53:0c:c0:c2:8d:1b:
26:54:8d:36:00:a9:c5:4c:fc:bd:b8:1e:ea:09:50:45:67:fc:
7c:05:4a:c3:53:18:8d:19:b4:f0:be:a6:c3:19:ce:52:f1:8e:
ad:a5:38:24
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQmbEDJl13zJXFZgUIRgXaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTFlODNkYWUxMmEzNzFjMWRkNDlkYjM0ZDliZDUyYTk2
ODhiNGEwHhcNMjUwMTAyMDk1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTNkYTFiYjJmMzU5Yjc2YWU3MmEzZGJiOGM2MWNjZmY0YzVkYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuIwSQioNktWLmQwlKrTeTahqSVO
zwd1INt9T0qN34d/6nmOhJHUigHBzlsEPamFchl+fXSfYeamvh0L4rdlF1LcCUhj
okBjQfh1v+vQHy3xyTf+uIhzmeR/cjoP+lOJFxIaoyuI91MuyM3QviEBeGMZI9Su
GzzxUvhODI3e4MlZOUH/0XNn8YBBmB7ZtsQ4cA2l9uEc5/6hrgqlX4KroezMDyGY
1hKGTlRkgNltyX83jEjR9RlidQBiB7cnXmyS7J1P9aJX2sOxn2DBtXSzImDrUwO4
GjMx+nczQR8qG/R0NAaFRqkem/U8YICV+12jASauZH6zfQM1ZzOSWsi6gwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBE9obsvNZt2rnKj27jGHM/0xdrcMB8GA1UdIwQY
MBaAFERR6D2uEqNxwd1J2zTZvVKpaItKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUt
Zjk5N2RiZGMzZTU3LzEvRVQyaHV5ODFtM2F1Y3FQYnVNWWN6X1RGMnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUtZjk5N2RiZGMzZTU3
LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucacMA0E
AgACMAcDBQMqCotAMA0GCSqGSIb3DQEBCwUAA4IBAQAxMOXrDkSeX2UKwDeYVlAI
pwbELEOtDmEybNbODh0VPhHoE29MzYonnj/FWjsoHU6mYQqDUwWrg0RcGDOE8fMi
ev2/30m4tplqVtN5kei81tCxwTZuLq3NhpMvzWVi6PM2lfishk4joKE3e0UDqZJY
7JrKD4zba23vUP6kQCkAxD1PHxMaCDA1jdqWtyWTpzEy90Er4oSToDAeiBkIdDkV
RIfmW+nFXjhp9SnRPxDciN+h9jYKhFoQPA/yjaoTVmwocpYWMb+AyYSYLtp0Nxcx
67tTDMDCjRsmVI02AKnFTPy9uB7qCVBFZ/x8BUrDUxiNGbTwvqbDGc5S8Y6tpTgk
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:53 2025 by rpki-client