Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rWh6uVSMJt_xkaSM216qUBHim-8.roa
File: rWh6uVSMJt_xkaSM216qUBHim-8.roa (raw, json)
Hash identifier: c4Acwj4drIgOFQ3VZmbI283MTtSdUiXGWas5j8v5AoA=
Subject key identifier: AD:68:7A:B9:54:8C:26:DF:F1:91:A4:8C:DB:5E:AA:50:11:E2:9B:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195F2F30F745CE451A85547F0D7F8B40B25
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rWh6uVSMJt_xkaSM216qUBHim-8.roa
Signing time: Tue 01 Apr 2025 20:02:50 +0000
ROA not before: Tue 01 Apr 2025 20:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:f3:0f:74:5c:e4:51:a8:55:47:f0:d7:f8:b4:0b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 1 20:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad687ab9548c26dff191a48cdb5eaa5011e29bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:9c:81:16:c6:de:70:5c:a4:0c:4d:19:66:
dc:6a:1a:b3:39:97:df:20:f1:3f:4c:37:d8:6d:65:
f4:83:d2:bb:56:ab:a3:5c:d7:be:a8:9e:d8:66:73:
66:b7:d2:24:c4:0e:e0:15:22:9b:e8:17:4d:50:23:
db:4e:d5:06:da:07:77:c3:55:89:1e:19:dd:8c:81:
5e:2c:7c:96:27:49:f9:07:bc:92:21:e5:59:47:9f:
cf:cb:87:e1:8f:02:75:47:29:9b:a0:20:df:c1:66:
2d:35:7e:00:07:79:da:2b:82:a7:4b:74:b7:6f:d5:
17:73:bc:69:7c:f0:b9:ef:22:d7:b0:ff:e0:d4:6a:
75:1b:f2:94:db:6c:dc:94:f8:4b:e1:bb:db:5c:d5:
0b:c1:cc:76:74:35:0d:30:84:31:00:67:ea:4e:6d:
1f:38:56:41:ab:b8:bc:58:1e:19:54:19:45:e6:22:
a2:0d:a6:48:f8:4b:b0:86:eb:3b:cc:02:48:0e:c4:
b7:0e:04:35:1e:38:26:d7:fa:c0:0b:7c:60:11:b2:
75:16:be:4f:b0:41:46:4c:b9:1d:78:60:dd:78:77:
b6:5a:5b:5b:eb:1b:7e:1f:72:18:9f:da:d0:89:14:
24:78:26:17:be:48:eb:70:70:5e:cb:c8:10:06:dd:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:7A:B9:54:8C:26:DF:F1:91:A4:8C:DB:5E:AA:50:11:E2:9B:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rWh6uVSMJt_xkaSM216qUBHim-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
74:02:13:6a:1f:01:01:b6:0d:2d:f6:19:01:7b:24:7f:7c:c8:
6e:d0:a0:1e:d6:af:5b:e3:5f:31:98:2b:d8:21:b1:ec:47:2b:
51:30:4b:1d:ad:48:07:62:89:53:45:d8:91:fe:bd:a7:84:3b:
d7:0d:99:d9:65:da:ed:f2:7c:90:d2:3a:d0:c5:29:df:1c:bb:
13:06:14:e7:ae:91:2f:8a:f1:84:67:e4:69:a5:49:7f:0e:42:
85:f1:ee:f3:1f:27:9c:2c:82:de:d8:00:6b:a7:b5:0f:04:d9:
50:2f:8a:ac:c8:a7:42:ad:e6:79:b4:dd:4e:2e:ef:84:ae:e2:
d5:20:64:76:5f:bf:f5:5a:22:5f:54:6f:5e:5f:91:2a:d7:02:
de:55:ba:c5:a6:1c:69:3d:bf:92:88:a1:99:42:b3:25:ef:2f:
84:13:51:a3:55:dd:9e:08:05:e5:1d:d6:11:c3:ac:99:53:f3:
7d:14:91:c2:b8:a4:6c:15:6c:54:5d:7c:77:cd:21:b3:2c:f8:
6b:53:e4:03:25:19:1d:f9:c4:13:f3:e4:31:1e:df:1c:dc:a1:
58:d4:a1:40:65:6a:47:cc:20:f5:b5:5e:33:57:46:57:53:64:
84:77:4b:f7:69:d2:78:a1:55:68:3d:7b:1c:74:60:27:0f:ae:
dd:3d:5f:24
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZXy8w90XORRqFVH8Nf4tAslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNDAxMjAwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDY4N2FiOTU0OGMyNmRmZjE5MWE0OGNkYjVlYWE1MDExZTI5YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3OcgRbG3nBcpAxNGWbcahqzOZff
IPE/TDfYbWX0g9K7VqujXNe+qJ7YZnNmt9IkxA7gFSKb6BdNUCPbTtUG2gd3w1WJ
HhndjIFeLHyWJ0n5B7ySIeVZR5/Py4fhjwJ1RymboCDfwWYtNX4AB3naK4KnS3S3
b9UXc7xpfPC57yLXsP/g1Gp1G/KU22zclPhL4bvbXNULwcx2dDUNMIQxAGfqTm0f
OFZBq7i8WB4ZVBlF5iKiDaZI+Euwhus7zAJIDsS3DgQ1Hjgm1/rAC3xgEbJ1Fr5P
sEFGTLkdeGDdeHe2Wltb6xt+H3IYn9rQiRQkeCYXvkjrcHBey8gQBt1KzwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK1oerlUjCbf8ZGkjNteqlAR4pvvMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcldoNnVWU01KdF94a2FTTTIxNnFVQkhpbS04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBV3hEAwQB
V3k8AwQBXXtKAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQB0AhNqHwEBtg0t9hkB
eyR/fMhu0KAe1q9b418xmCvYIbHsRytRMEsdrUgHYolTRdiR/r2nhDvXDZnZZdrt
8nyQ0jrQxSnfHLsTBhTnrpEvivGEZ+RppUl/DkKF8e7zHyecLILe2ABrp7UPBNlQ
L4qsyKdCreZ5tN1OLu+EruLVIGR2X7/1WiJfVG9eX5Eq1wLeVbrFphxpPb+SiKGZ
QrMl7y+EE1GjVd2eCAXlHdYRw6yZU/N9FJHCuKRsFWxUXXx3zSGzLPhrU+QDJRkd
+cQT8+QxHt8c3KFY1KFAZWpHzCD1tV4zV0ZXU2SEd0v3adJ4oVVoPXscdGAnD67d
PV8k
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:22:42 2025 by rpki-client