Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/SL6led1HI-RxeSBiRf_KwOsdWMw.roa
File: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (raw, json)
Hash identifier: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=
Subject key identifier: 48:BE:A5:79:DD:47:23:E4:71:79:20:62:45:FF:CA:C0:EB:1D:58:CC
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 0194221F6BFAF63C179EE4A958E9DD5FC83A
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/SL6led1HI-RxeSBiRf_KwOsdWMw.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61010
IP address blocks: 185.20.120.0/22 maxlen: 22
185.20.120.0/24 maxlen: 24
185.20.121.0/24 maxlen: 24
185.20.122.0/24 maxlen: 24
185.20.123.0/24 maxlen: 24
2a00:47a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6b:fa:f6:3c:17:9e:e4:a9:58:e9:dd:5f:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48bea579dd4723e47179206245ffcac0eb1d58cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:0a:07:fc:91:bf:37:af:15:c3:0c:59:9b:
b4:04:73:cf:9d:f0:1d:53:b3:a8:2b:19:c6:fd:80:
ef:99:93:d7:c8:27:84:c4:ab:db:2d:a0:ea:6f:8d:
34:46:f4:4c:a0:59:67:d7:69:c9:95:f3:86:e8:6d:
72:8b:88:5b:1f:5c:c8:9f:d9:ff:db:f8:31:8c:1f:
3f:66:c5:df:b3:7f:ed:ea:2d:00:4b:b4:da:77:f1:
20:94:9a:4d:23:d0:2a:f5:05:c4:65:92:51:a1:15:
e5:28:50:6a:d1:9c:8f:64:ac:77:88:16:eb:b4:8c:
e6:4f:24:19:f3:33:ca:f2:00:1c:6a:32:6d:04:3e:
f6:18:1f:ba:91:48:a3:f1:56:8e:43:50:91:50:2a:
bc:fe:6c:8f:27:b8:e3:b3:86:c7:4d:2b:35:d2:0d:
69:55:d8:0a:7c:8c:14:32:4e:79:1c:fd:ce:cc:38:
6d:91:47:83:61:07:82:3f:42:d0:62:fc:61:68:3c:
04:12:8e:7a:aa:b6:c5:fc:01:64:67:82:24:2d:0e:
34:5e:33:2a:83:62:17:20:c2:9b:e1:0b:c3:3b:a3:
44:81:db:90:ab:18:58:1f:03:94:e9:3b:1b:9b:a6:
82:d7:08:c7:c6:b9:dc:2d:1b:9f:f1:69:d5:80:f6:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:A5:79:DD:47:23:E4:71:79:20:62:45:FF:CA:C0:EB:1D:58:CC
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/SL6led1HI-RxeSBiRf_KwOsdWMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.120.0/22
IPv6:
2a00:47a0::/32
Signature Algorithm: sha256WithRSAEncryption
bf:b9:a9:90:5e:86:39:a7:ce:8d:aa:c4:fa:1f:79:72:d4:75:
07:e4:ea:bd:3b:cc:40:f8:82:1a:8a:a1:03:1c:5d:4c:a9:d9:
f9:da:27:ed:d0:dd:ce:5b:76:14:3a:6c:45:e4:c1:5f:c8:82:
38:a6:4b:6a:90:d4:42:2a:36:61:2a:b0:ee:0a:6d:a9:3c:74:
6a:37:c0:4d:73:20:51:4c:ce:91:a8:25:d2:0d:77:eb:6e:55:
50:91:0a:0a:9e:d1:1c:d8:52:91:9e:2b:26:5a:e0:e4:ff:44:
bc:14:3e:29:8d:27:ee:c0:a2:bf:f7:da:15:71:41:84:d8:69:
a4:58:f0:10:7e:3a:29:40:14:63:3b:55:87:16:2c:61:32:cf:
36:ce:0e:0b:62:37:14:15:d6:61:f4:b5:8e:2e:2c:b3:91:19:
b3:0a:9f:35:51:49:55:10:d9:14:e2:e6:a8:95:c8:51:0a:a7:
fe:83:30:bc:82:39:0f:db:fb:dc:92:8b:36:23:6c:39:30:5c:
0d:67:5b:a6:f8:01:e0:63:cb:5e:ad:9d:a0:eb:c1:c6:ec:5b:
54:f1:a3:14:b5:0c:eb:16:b1:4e:f9:ee:17:4f:12:d1:4c:52:
e9:de:95:c6:dc:a7:59:bb:4b:b4:89:a9:7a:bf:80:e0:24:f8:
6f:49:12:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH2v69jwXnuSpWOndX8g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWNhZmU2MTM0M2Q3MTBkZjYwY2Q5MWRlMDg5MDFmZGJi
YTZmOGYwHhcNMjUwMTAxMTM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGJlYTU3OWRkNDcyM2U0NzE3OTIwNjI0NWZmY2FjMGViMWQ1OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVoKB/yRvzevFcMMWZu0BHPPnfAd
U7OoKxnG/YDvmZPXyCeExKvbLaDqb400RvRMoFln12nJlfOG6G1yi4hbH1zIn9n/
2/gxjB8/ZsXfs3/t6i0AS7Tad/EglJpNI9Aq9QXEZZJRoRXlKFBq0ZyPZKx3iBbr
tIzmTyQZ8zPK8gAcajJtBD72GB+6kUij8VaOQ1CRUCq8/myPJ7jjs4bHTSs10g1p
VdgKfIwUMk55HP3OzDhtkUeDYQeCP0LQYvxhaDwEEo56qrbF/AFkZ4IkLQ40XjMq
g2IXIMKb4QvDO6NEgduQqxhYHwOU6Tsbm6aC1wjHxrncLRuf8WnVgPaESQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEi+pXndRyPkcXkgYkX/ysDrHVjMMB8GA1UdIwQY
MBaAFEasr+YTQ9cQ32DNkd4IkB/bum+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYt
ZDNhODVhNzFiMDI5LzEvU0w2bGVkMUhJLVJ4ZVNCaVJmX0t3T3NkV013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYtZDNhODVhNzFiMDI5
LzEvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRR4MA0E
AgACMAcDBQAqAEegMA0GCSqGSIb3DQEBCwUAA4IBAQC/uamQXoY5p86NqsT6H3ly
1HUH5Oq9O8xA+IIaiqEDHF1Mqdn52ift0N3OW3YUOmxF5MFfyII4pktqkNRCKjZh
KrDuCm2pPHRqN8BNcyBRTM6RqCXSDXfrblVQkQoKntEc2FKRnismWuDk/0S8FD4p
jSfuwKK/99oVcUGE2GmkWPAQfjopQBRjO1WHFixhMs82zg4LYjcUFdZh9LWOLiyz
kRmzCp81UUlVENkU4uaolchRCqf+gzC8gjkP2/vckos2I2w5MFwNZ1um+AHgY8te
rZ2g68HG7FtU8aMUtQzrFrFO+e4XTxLRTFLp3pXG3KdZu0u0ial6v4DgJPhvSRIs
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:45 2025 by rpki-client