Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/745x39IaKKbeM9M_OPciAoFxiI4.roa
File: 745x39IaKKbeM9M_OPciAoFxiI4.roa (raw, json)
Hash identifier: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=
Subject key identifier: EF:8E:71:DF:D2:1A:28:A6:DE:33:D3:3F:38:F7:22:02:81:71:88:8E
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 01941FFA270A065F416375835E5FF60BC928
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/745x39IaKKbeM9M_OPciAoFxiI4.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40551
IP address blocks: 185.22.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:27:0a:06:5f:41:63:75:83:5e:5f:f6:0b:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef8e71dfd21a28a6de33d33f38f722028171888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c3:df:58:67:fd:f3:ab:52:06:c3:7b:0b:0c:
c3:3c:88:b1:31:63:8e:a0:c6:13:ed:4e:09:ff:c2:
2a:70:e4:1e:44:1c:4c:6e:f6:b9:39:23:fb:36:98:
08:50:20:73:68:ff:9f:30:14:a5:8c:e3:f8:3b:2e:
f7:dc:9e:44:24:43:c6:f6:02:3e:0a:89:8a:2d:30:
52:78:6c:fe:4c:a9:b2:83:22:22:fe:fb:7d:de:85:
97:72:27:df:d4:c7:75:75:e2:bb:6c:f8:dd:03:b5:
f8:ed:92:60:35:f8:d1:7d:29:7b:db:38:da:ca:b9:
af:65:bc:f6:02:4f:3b:cb:2c:e6:bc:17:58:7e:40:
19:5a:ba:5e:b4:f1:ca:94:11:c0:c7:9a:66:63:f8:
9b:83:38:f0:d3:41:b7:34:e3:3b:fb:f0:d2:59:60:
03:d2:db:49:9c:7a:7d:d0:5e:e0:84:b9:0e:6d:f1:
4d:d7:e6:bd:2d:7d:50:3d:4b:9f:02:f4:c3:58:d5:
81:55:03:11:bf:02:76:dd:ea:6b:dd:4e:0b:48:23:
bf:26:5c:45:65:09:48:08:b9:1b:91:85:df:dc:11:
0c:5f:90:b7:12:0c:e6:2f:37:74:3b:62:ce:72:08:
f5:0a:88:b3:d7:87:f8:99:b0:03:c4:70:dd:b1:37:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:71:DF:D2:1A:28:A6:DE:33:D3:3F:38:F7:22:02:81:71:88:8E
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/745x39IaKKbeM9M_OPciAoFxiI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d4:33:18:de:52:0b:c1:fb:50:13:8c:42:c9:99:79:9a:8e:
d7:17:16:b7:c6:0e:1d:0c:0b:2e:62:06:3f:2d:2e:b1:69:c3:
b3:94:83:b9:b1:14:e8:7e:36:7f:1b:1a:4b:b8:7f:eb:24:1d:
c3:b5:c7:3b:80:ee:31:01:2c:5e:9b:a2:b9:0d:f5:d0:ea:c7:
cb:b3:1a:40:b3:2d:4e:7a:1c:8b:ba:a1:77:1d:fc:6d:41:ee:
05:83:77:f9:ef:dd:4f:fc:f3:c6:b9:51:53:a1:f9:b4:7a:d4:
5d:99:a5:30:24:5e:10:41:27:ef:3a:bb:2b:e3:9e:e7:4c:e3:
ae:9e:3e:b6:e9:5a:c1:31:7b:6e:f9:91:25:9d:98:d9:09:14:
ab:6e:a4:7e:c8:33:35:b6:78:ee:7e:cf:3b:04:00:ff:c8:b7:
77:cf:14:52:29:71:51:7f:08:03:73:57:a8:51:6f:2a:43:4a:
9e:f4:9f:0b:0d:ff:ca:0d:10:d4:57:af:81:38:00:04:7a:f4:
eb:b1:9d:7d:40:58:25:44:1c:62:ba:9a:f4:b5:e8:48:9a:7e:
46:62:01:31:68:13:95:1d:62:b0:a5:2e:49:4d:e5:c0:bc:6c:
6d:c0:a3:c4:0f:b6:ca:ea:88:a3:44:8a:a3:e8:2d:8a:5d:ed:
f5:af:2b:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+icKBl9BY3WDXl/2C8koMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzczYTVkOGVjNjNiZWQ2NThhMzhmNWMyNmYxOTFmZGQ3
NGRmOTIwHhcNMjUwMTAxMDM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjhlNzFkZmQyMWEyOGE2ZGUzM2QzM2YzOGY3MjIwMjgxNzE4ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cPfWGf986tSBsN7CwzDPIixMWOO
oMYT7U4J/8IqcOQeRBxMbva5OSP7NpgIUCBzaP+fMBSljOP4Oy733J5EJEPG9gI+
ComKLTBSeGz+TKmygyIi/vt93oWXciff1Md1deK7bPjdA7X47ZJgNfjRfSl72zja
yrmvZbz2Ak87yyzmvBdYfkAZWrpetPHKlBHAx5pmY/ibgzjw00G3NOM7+/DSWWAD
0ttJnHp90F7ghLkObfFN1+a9LX1QPUufAvTDWNWBVQMRvwJ23epr3U4LSCO/JlxF
ZQlICLkbkYXf3BEMX5C3EgzmLzd0O2LOcgj1Coiz14f4mbADxHDdsTfHWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+Ocd/SGiim3jPTPzj3IgKBcYiOMB8GA1UdIwQY
MBaAFCHHOl2OxjvtZYo49cJvGR/ddN+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGIt
ZmQxMjBjMzFkYTcyLzEvNzQ1eDM5SWFLS2JlTTlNX09QY2lBb0Z4aUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGItZmQxMjBjMzFkYTcy
LzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRZTMA0G
CSqGSIb3DQEBCwUAA4IBAQCg1DMY3lILwftQE4xCyZl5mo7XFxa3xg4dDAsuYgY/
LS6xacOzlIO5sRTofjZ/GxpLuH/rJB3Dtcc7gO4xASxem6K5DfXQ6sfLsxpAsy1O
ehyLuqF3HfxtQe4Fg3f5791P/PPGuVFTofm0etRdmaUwJF4QQSfvOrsr457nTOOu
nj626VrBMXtu+ZElnZjZCRSrbqR+yDM1tnjufs87BAD/yLd3zxRSKXFRfwgDc1eo
UW8qQ0qe9J8LDf/KDRDUV6+BOAAEevTrsZ19QFglRBxiupr0tehImn5GYgExaBOV
HWKwpS5JTeXAvGxtwKPED7bK6oijRIqj6C2KXe31ryul
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:57 2025 by rpki-client