Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa
File: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (raw, json)
Hash identifier: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=
Subject key identifier: 85:00:63:4E:AE:4A:32:42:22:26:09:D0:1B:C2:30:27:03:2A:5A:47
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 0194258F58515085381D7F0CBB64BB270094
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200600
IP address blocks: 185.101.220.0/22 maxlen: 22
2a06:2140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:58:51:50:85:38:1d:7f:0c:bb:64:bb:27:00:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8500634eae4a3242222609d01bc23027032a5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:b1:e2:43:d8:e5:8f:52:49:e5:f0:9c:da:
01:0f:11:e9:9b:02:67:7c:3e:df:06:a2:30:e5:a5:
d5:6e:dd:77:a1:23:cd:c0:7d:18:b7:4f:bd:1a:89:
2c:bf:cd:a9:ae:35:09:a1:25:22:98:34:f3:33:12:
6b:12:a0:b1:e1:d9:54:25:84:e5:c3:95:13:e8:82:
d2:3d:64:ed:d8:84:47:9d:09:de:d8:5a:9b:90:77:
02:c3:95:2d:56:e1:41:b4:a0:7d:ff:26:56:bf:be:
b3:3c:86:6d:10:04:a0:8a:11:57:20:5d:1f:32:4d:
94:53:f7:8b:d3:c4:7d:df:0c:81:4d:96:21:3d:76:
72:95:fc:6e:5f:fe:59:ea:31:f3:b4:31:11:6d:0d:
2b:f4:ea:d1:bb:1b:fc:dc:2a:e6:fe:67:9e:b6:36:
2c:d1:81:38:10:30:f6:91:2d:7c:90:28:5c:cd:1a:
db:b5:53:2a:12:23:45:3b:51:de:e6:0e:1a:99:ce:
60:5c:62:8f:52:7a:2a:e6:8d:2a:72:73:cf:de:26:
73:92:58:b6:b3:55:2f:a1:4f:ff:d2:46:82:94:5f:
95:e9:67:be:20:de:b4:4f:11:d4:a9:b6:15:62:92:
68:cd:15:b1:68:da:6a:9c:ad:d4:df:33:21:c7:cb:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:63:4E:AE:4A:32:42:22:26:09:D0:1B:C2:30:27:03:2A:5A:47
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.220.0/22
IPv6:
2a06:2140::/29
Signature Algorithm: sha256WithRSAEncryption
7b:a6:ec:85:bc:e2:bc:cf:77:e6:ef:55:e8:74:de:99:74:6c:
25:88:72:ac:ed:eb:0c:4f:e7:2e:1c:94:03:12:f5:ce:c4:d7:
46:dd:23:cf:70:71:0e:12:a5:59:01:33:47:59:16:4d:8b:25:
1d:53:58:3e:d8:ef:f5:8a:bf:7e:54:cb:15:2c:8f:03:35:52:
2f:74:ad:85:ea:ca:26:9e:44:1b:ac:2a:20:0c:a5:e5:57:07:
92:f3:c0:b3:94:88:fe:e8:0a:36:0e:69:69:9d:75:ad:e5:3a:
a3:ec:b5:1e:0e:ad:26:24:e5:a1:f5:bc:0c:85:e0:82:4c:b9:
b7:91:fc:1e:18:95:b9:27:53:e5:9e:a4:21:e5:10:52:bc:75:
3b:b5:6d:9b:cc:12:b7:6a:9b:6b:6b:28:6e:3b:91:64:e2:6e:
41:2b:2c:c0:b4:45:83:35:63:21:6a:57:aa:97:e4:3c:25:56:
ac:ed:de:3a:4b:dd:b8:4f:de:43:98:91:74:66:93:36:28:22:
5e:cf:38:c9:51:75:7d:95:aa:63:82:94:ee:5f:6d:a9:8a:2e:
03:3e:a6:54:e9:67:e7:8a:c6:db:b5:e5:ce:fc:3e:7b:0a:61:
c8:20:03:d8:7e:14:0b:b7:3e:12:87:5d:26:a0:c2:1e:1c:67:
59:2b:92:86
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj1hRUIU4HX8Mu2S7JwCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmY0MWEyNGZjNDgyNzFiOTkyMzI3YTJkYWU1YTQzM2Jk
ZWQwNTAwHhcNMjUwMTAyMDU0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTAwNjM0ZWFlNGEzMjQyMjIyNjA5ZDAxYmMyMzAyNzAzMmE1YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5mx4kPY5Y9SSeXwnNoBDxHpmwJn
fD7fBqIw5aXVbt13oSPNwH0Yt0+9Goksv82prjUJoSUimDTzMxJrEqCx4dlUJYTl
w5UT6ILSPWTt2IRHnQne2FqbkHcCw5UtVuFBtKB9/yZWv76zPIZtEASgihFXIF0f
Mk2UU/eL08R93wyBTZYhPXZylfxuX/5Z6jHztDERbQ0r9OrRuxv83Crm/meetjYs
0YE4EDD2kS18kChczRrbtVMqEiNFO1He5g4amc5gXGKPUnoq5o0qcnPP3iZzkli2
s1UvoU//0kaClF+V6We+IN60TxHUqbYVYpJozRWxaNpqnK3U3zMhx8sXnQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIUAY06uSjJCIiYJ0BvCMCcDKlpHMB8GA1UdIwQY
MBaAFGT/QaJPxIJxuZIyei2uWkM73tBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQt
ZjAxYTYyNDAwODIxLzEvaFFCalRxNUtNa0lpSmduUUc4SXdKd01xV2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQtZjAxYTYyNDAwODIx
LzEvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWXcMA0E
AgACMAcDBQMqBiFAMA0GCSqGSIb3DQEBCwUAA4IBAQB7puyFvOK8z3fm71XodN6Z
dGwliHKs7esMT+cuHJQDEvXOxNdG3SPPcHEOEqVZATNHWRZNiyUdU1g+2O/1ir9+
VMsVLI8DNVIvdK2F6somnkQbrCogDKXlVweS88CzlIj+6Ao2DmlpnXWt5Tqj7LUe
Dq0mJOWh9bwMheCCTLm3kfweGJW5J1PlnqQh5RBSvHU7tW2bzBK3aptrayhuO5Fk
4m5BKyzAtEWDNWMhaleql+Q8JVas7d46S924T95DmJF0ZpM2KCJezzjJUXV9lapj
gpTuX22pii4DPqZU6WfnisbbteXO/D57CmHIIAPYfhQLtz4Sh10moMIeHGdZK5KG
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:25:42 2025 by rpki-client