Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/hdAMTn4jDkrD2hHAq0_eM98drDA.roa
File: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (raw, json)
Hash identifier: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=
Subject key identifier: 85:D0:0C:4E:7E:23:0E:4A:C3:DA:11:C0:AB:4F:DE:33:DF:1D:AC:30
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 0194740E5F2E3550085DDFC55EEB2B8538A3
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/hdAMTn4jDkrD2hHAq0_eM98drDA.roa
Signing time: Fri 17 Jan 2025 11:38:06 +0000
ROA not before: Fri 17 Jan 2025 11:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216325
IP address blocks: 185.94.183.0/24 maxlen: 24
2a13:d940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:0e:5f:2e:35:50:08:5d:df:c5:5e:eb:2b:85:38:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jan 17 11:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85d00c4e7e230e4ac3da11c0ab4fde33df1dac30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:c1:e3:6d:a7:96:7b:39:d8:d5:cc:98:52:
bc:7f:f4:b8:ca:4e:4e:a9:61:e0:f4:bf:ef:3b:9d:
d6:11:bb:e7:9c:ee:e9:a1:79:ae:a1:de:d7:41:cf:
5d:3d:ae:c9:0f:3d:d0:c0:f3:ae:d9:4a:e8:03:a8:
d8:08:ec:d6:3d:08:8c:b8:a4:42:f4:89:94:fe:68:
6d:0b:b8:3d:71:d0:81:2e:35:d7:83:15:65:61:72:
cc:89:34:90:cc:29:fa:bc:88:1e:bd:93:1a:b7:ea:
2d:c3:57:9f:7d:c4:6b:b9:ba:bd:85:55:fe:59:96:
60:e3:6e:9c:e3:52:01:dd:19:6a:4e:d7:c3:19:a4:
50:92:da:5b:00:5a:94:91:62:a3:16:95:b1:e5:1c:
a1:bf:21:4b:a3:85:46:b5:9c:fd:ad:7a:49:7b:b5:
5c:e2:eb:33:99:8e:e8:e2:d5:cd:03:47:80:da:47:
2a:b2:ae:4f:b1:1b:75:7e:0a:3a:c1:d0:cc:be:5b:
2f:38:43:91:c7:78:22:92:cb:27:93:62:19:f1:78:
81:5a:32:70:b3:6c:be:b3:6b:22:75:55:7c:34:86:
03:03:30:28:d1:83:79:3a:63:43:49:b2:30:37:f3:
83:b3:69:9e:9e:60:db:a0:77:bf:e6:4f:63:8b:6f:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D0:0C:4E:7E:23:0E:4A:C3:DA:11:C0:AB:4F:DE:33:DF:1D:AC:30
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/hdAMTn4jDkrD2hHAq0_eM98drDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.183.0/24
IPv6:
2a13:d940::/29
Signature Algorithm: sha256WithRSAEncryption
b5:78:23:5f:34:83:2c:16:2f:36:a9:67:83:d1:a7:14:9c:c3:
87:20:53:f4:94:1d:01:f3:ab:0d:25:c0:b4:37:61:57:7b:fe:
58:34:ce:ca:18:a2:6b:98:40:91:0c:a7:eb:6e:33:df:b0:b9:
40:c1:44:6e:3b:a0:5b:ad:ad:36:87:27:68:1d:fd:1c:2b:82:
80:9e:77:16:d1:df:6d:57:04:b4:8a:20:03:b8:88:6e:2b:92:
d9:69:36:54:2e:f2:45:23:0a:c4:7c:ef:b1:4c:3f:af:c3:ea:
23:a9:97:9d:a8:47:8b:04:1a:08:8f:89:e7:25:7b:09:5d:21:
d1:96:23:87:7c:64:b4:f6:6b:2f:bf:c6:53:78:ec:35:21:23:
88:5a:13:c7:0a:7b:41:3d:5b:a0:7b:69:b4:32:37:20:b9:63:
9c:42:57:c2:2a:4b:68:1c:d6:82:4f:19:8d:cf:67:a9:16:83:
27:4c:87:76:aa:28:29:94:b8:0b:9e:05:46:c5:b4:fc:98:c5:
b2:06:bb:0a:fa:3d:f3:f2:f5:ec:75:45:c3:5c:75:7c:45:9f:
38:6e:3f:f8:2e:00:de:57:37:54:bb:4d:9d:d7:56:14:6f:72:
86:eb:17:49:00:a3:0b:be:a0:6d:b2:22:59:46:db:d6:76:c1:
4c:38:a5:35
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZR0Dl8uNVAIXd/FXusrhTijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MGI0OTdkNTFiZDlmNDdiODRmNjkzZDY4N2ZiZThjZjZj
ZmZiNzUwHhcNMjUwMTE3MTEzODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWQwMGM0ZTdlMjMwZTRhYzNkYTExYzBhYjRmZGUzM2RmMWRhYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspzB422nlns52NXMmFK8f/S4yk5O
qWHg9L/vO53WEbvnnO7poXmuod7XQc9dPa7JDz3QwPOu2UroA6jYCOzWPQiMuKRC
9ImU/mhtC7g9cdCBLjXXgxVlYXLMiTSQzCn6vIgevZMat+otw1effcRrubq9hVX+
WZZg426c41IB3RlqTtfDGaRQktpbAFqUkWKjFpWx5RyhvyFLo4VGtZz9rXpJe7Vc
4uszmY7o4tXNA0eA2kcqsq5PsRt1fgo6wdDMvlsvOEORx3gikssnk2IZ8XiBWjJw
s2y+s2sidVV8NIYDAzAo0YN5OmNDSbIwN/ODs2menmDboHe/5k9ji29FhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIXQDE5+Iw5Kw9oRwKtP3jPfHawwMB8GA1UdIwQY
MBaAFNgLSX1RvZ9HuE9pPWh/voz2z/t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMt
NGM4NTQ0NWEwMzZhLzEvaGRBTVRuNGpEa3JEMmhIQXEwX2VNOThkckRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMtNGM4NTQ0NWEwMzZh
LzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuV63MA0E
AgACMAcDBQMqE9lAMA0GCSqGSIb3DQEBCwUAA4IBAQC1eCNfNIMsFi82qWeD0acU
nMOHIFP0lB0B86sNJcC0N2FXe/5YNM7KGKJrmECRDKfrbjPfsLlAwURuO6Bbra02
hydoHf0cK4KAnncW0d9tVwS0iiADuIhuK5LZaTZULvJFIwrEfO+xTD+vw+ojqZed
qEeLBBoIj4nnJXsJXSHRliOHfGS09msvv8ZTeOw1ISOIWhPHCntBPVuge2m0Mjcg
uWOcQlfCKktoHNaCTxmNz2epFoMnTId2qigplLgLngVGxbT8mMWyBrsK+j3z8vXs
dUXDXHV8RZ84bj/4LgDeVzdUu02d11YUb3KG6xdJAKMLvqBtsiJZRtvWdsFMOKU1
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:04:13 2025 by rpki-client