Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/jf4WdQ24BygRnLqj51WchS5928k.roa
File: jf4WdQ24BygRnLqj51WchS5928k.roa (raw, json)
Hash identifier: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=
Subject key identifier: 8D:FE:16:75:0D:B8:07:28:11:9C:BA:A3:E7:55:9C:85:2E:7D:DB:C9
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 01954BCAD8CA90B6F85D3C30C370B1F00E5F
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/jf4WdQ24BygRnLqj51WchS5928k.roa
Signing time: Fri 28 Feb 2025 09:02:19 +0000
ROA not before: Fri 28 Feb 2025 09:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.121.140.0/24 maxlen: 24
185.121.141.0/24 maxlen: 24
185.121.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:ca:d8:ca:90:b6:f8:5d:3c:30:c3:70:b1:f0:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Feb 28 09:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dfe16750db80728119cbaa3e7559c852e7ddbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:03:07:60:39:8e:02:69:ab:42:ce:b2:2a:
ad:47:7d:61:aa:cc:78:fc:69:ff:53:80:1b:2b:57:
7d:c5:bc:2e:99:3d:58:a0:a7:c0:d4:89:b5:3a:40:
78:67:07:3c:80:14:a5:46:f6:d9:8b:be:92:f3:a0:
98:1e:88:78:92:f9:a9:20:21:2f:b6:a2:f9:26:0a:
e1:cf:31:87:8b:c4:8e:38:db:dc:58:a5:ec:bf:79:
81:de:97:e4:3c:42:ba:ab:d8:55:85:0e:7f:78:8e:
62:50:09:ea:bb:8d:b7:e9:19:3a:1b:e7:e8:4e:b5:
ef:8a:d9:1e:d6:66:a7:e3:dd:48:84:f6:4f:77:3e:
e9:b0:f6:7b:a7:93:6b:33:80:a4:49:93:b3:3f:0e:
11:63:e2:c5:0c:b4:cc:0b:6f:ad:3a:f9:3e:03:52:
66:2d:93:70:cd:28:89:85:03:5a:41:f5:1b:26:1e:
f5:08:b4:67:44:69:78:d0:70:9a:b3:5a:65:0d:11:
c1:0c:be:f0:c8:7d:09:95:08:fe:14:66:1a:f0:1e:
62:26:11:bb:08:01:d1:61:26:9a:29:c2:1a:9d:e5:
dc:81:29:2f:55:3e:63:b7:58:e0:4c:dd:36:29:a9:
df:59:42:75:e5:b0:80:91:77:07:a7:52:88:08:9c:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:16:75:0D:B8:07:28:11:9C:BA:A3:E7:55:9C:85:2E:7D:DB:C9
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/jf4WdQ24BygRnLqj51WchS5928k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.140.0/23
185.121.143.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c0:63:3e:40:15:70:f6:82:23:dd:1d:84:26:20:5e:94:f0:
26:6c:0a:96:d7:b6:e7:88:61:5b:9f:9f:d8:19:e9:72:f4:77:
33:d3:a2:1c:fd:8f:a6:40:9a:57:e4:11:88:e9:4b:c5:76:6d:
74:f6:1e:95:5d:f3:a7:b1:d1:cd:a2:54:b0:ff:ca:f0:cd:bd:
f8:8f:b5:69:72:64:aa:c2:a4:15:14:e5:a4:78:33:40:1c:c0:
32:62:4d:92:77:38:56:6a:39:65:6c:e8:6a:ef:a5:15:03:20:
f5:02:97:38:61:d5:2a:b0:5f:08:92:5a:2a:bb:f9:e9:8f:5c:
92:1b:ba:de:02:ba:de:5a:78:2e:0c:0d:ec:0f:f0:ee:9b:9d:
68:c9:0a:a5:b1:bf:a4:f7:33:91:6b:08:de:04:c0:57:8b:80:
3d:55:36:72:f1:19:1b:f2:4c:15:2e:aa:7f:e3:06:5c:5f:d6:
82:57:26:ad:34:3b:2a:c7:d2:ae:89:8f:4e:eb:11:eb:f2:58:
8c:4a:68:52:93:b6:92:e8:7d:8e:9a:12:1e:d8:59:4b:7a:8d:
73:47:99:dd:62:67:9d:0a:2b:6a:36:86:b1:9e:e6:b4:0f:fa:
44:ac:0a:7c:c3:d4:ba:6c:b5:15:73:03:42:1a:73:52:5e:0a:
13:c7:85:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVLytjKkLb4XTwww3Cx8A5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjUwMjI4MDkwMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGZlMTY3NTBkYjgwNzI4MTE5Y2JhYTNlNzU1OWM4NTJlN2RkYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMgDB2A5jgJpq0LOsiqtR31hqsx4
/Gn/U4AbK1d9xbwumT1YoKfA1Im1OkB4Zwc8gBSlRvbZi76S86CYHoh4kvmpICEv
tqL5JgrhzzGHi8SOONvcWKXsv3mB3pfkPEK6q9hVhQ5/eI5iUAnqu4236Rk6G+fo
TrXvitke1man491IhPZPdz7psPZ7p5NrM4CkSZOzPw4RY+LFDLTMC2+tOvk+A1Jm
LZNwzSiJhQNaQfUbJh71CLRnRGl40HCas1plDRHBDL7wyH0JlQj+FGYa8B5iJhG7
CAHRYSaaKcIaneXcgSkvVT5jt1jgTN02KanfWUJ15bCAkXcHp1KICJzubwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI3+FnUNuAcoEZy6o+dVnIUufdvJMB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvamY0V2RRMjRCeWdSbkxxajUxV2NoUzU5MjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXmMAwQA
uXmPMA0GCSqGSIb3DQEBCwUAA4IBAQCDwGM+QBVw9oIj3R2EJiBelPAmbAqW17bn
iGFbn5/YGely9Hcz06Ic/Y+mQJpX5BGI6UvFdm109h6VXfOnsdHNolSw/8rwzb34
j7VpcmSqwqQVFOWkeDNAHMAyYk2SdzhWajllbOhq76UVAyD1Apc4YdUqsF8Ikloq
u/npj1ySG7reArreWnguDA3sD/Dum51oyQqlsb+k9zORawjeBMBXi4A9VTZy8Rkb
8kwVLqp/4wZcX9aCVyatNDsqx9KuiY9O6xHr8liMSmhSk7aS6H2OmhIe2FlLeo1z
R5ndYmedCitqNoaxnua0D/pErAp8w9S6bLUVcwNCGnNSXgoTx4Vr
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:45 2025 by rpki-client