Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/iG5MloBb0rNBUXMwGnMdFUHFQBI.roa
File: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (raw, json)
Hash identifier: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=
Subject key identifier: 88:6E:4C:96:80:5B:D2:B3:41:51:73:30:1A:73:1D:15:41:C5:40:12
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 019422FB8D9672E525E3BD35FAAAF7FFDD9E
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/iG5MloBb0rNBUXMwGnMdFUHFQBI.roa
Signing time: Wed 01 Jan 2025 17:48:18 +0000
ROA not before: Wed 01 Jan 2025 17:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48390
IP address blocks: 185.20.3.0/24 maxlen: 24
2a0c:d0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8d:96:72:e5:25:e3:bd:35:fa:aa:f7:ff:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886e4c96805bd2b3415173301a731d1541c54012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:84:b7:64:8a:84:e8:82:d4:b3:91:c8:4d:e6:
a4:fa:52:a2:f5:3b:37:82:27:a3:5d:af:d1:43:f1:
05:73:5d:1e:7a:34:fb:15:de:35:04:40:83:42:0c:
c0:2b:33:04:22:3e:d1:dd:73:9e:f0:b8:2d:7a:59:
03:30:94:11:59:6d:55:ca:cf:1f:1c:6d:9c:97:9a:
61:ba:09:a1:30:4e:94:f2:c9:c3:d3:f4:c6:6e:f3:
24:d9:71:e5:bc:87:5e:d4:50:1d:13:5c:83:fa:6b:
58:cb:21:fa:4b:17:b4:4b:2a:de:38:4a:0a:ac:a3:
3b:9a:76:93:7d:46:f1:52:4e:ba:30:bd:c1:87:03:
c2:da:e2:33:d2:8f:1d:38:ca:21:9f:c5:c7:4e:35:
1a:fe:cd:9b:4d:82:b7:28:68:05:a0:43:86:6f:6d:
48:be:9b:87:a4:c0:dd:86:6a:4a:e0:f0:8a:59:b1:
83:79:35:1b:25:df:e4:3f:d5:9b:6a:48:5d:19:c6:
2a:ad:58:3d:85:f5:a5:30:9e:48:87:60:b6:b0:0c:
97:a6:14:5d:e2:1d:7e:32:ca:0f:e5:4c:6f:bd:bf:
d6:e9:4c:2e:11:2f:38:47:bb:b8:fc:e2:8c:89:c2:
31:7e:9f:f9:11:5d:77:f1:dd:b5:5a:59:89:81:ea:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:4C:96:80:5B:D2:B3:41:51:73:30:1A:73:1D:15:41:C5:40:12
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/iG5MloBb0rNBUXMwGnMdFUHFQBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.3.0/24
IPv6:
2a0c:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:f5:2b:f1:1a:bf:c7:08:69:11:1d:d3:46:93:6f:47:36:b4:
b2:b9:44:e8:46:64:0d:1a:64:ed:8c:5c:9f:1c:1b:8b:b2:fe:
85:e9:af:a3:a9:b5:f2:06:b4:ef:bc:68:f2:19:62:22:cc:98:
25:3e:cf:c3:10:9f:ab:62:82:c1:1b:52:1a:62:64:f4:09:ef:
b0:4d:32:24:70:da:72:f0:84:49:9d:6c:c9:37:50:56:6a:1d:
dc:5b:a6:7f:b2:42:e3:7d:11:de:ea:c3:d7:b8:50:0c:d6:ac:
c4:50:31:3c:42:5d:c9:18:76:b9:09:e6:5b:c8:fa:0e:3a:86:
5d:00:06:f3:b3:e7:a8:48:3d:7a:8a:17:3a:3d:71:1f:c9:4d:
6c:c9:54:32:19:5d:4a:f9:c0:46:ea:76:27:06:37:67:b6:36:
b0:1a:6c:c1:f2:c8:4d:7d:30:cc:ce:c0:5b:70:e2:4c:42:cb:
d8:a4:c4:c4:61:3e:17:e9:4a:cb:74:55:ff:84:dc:15:ff:76:
b1:46:9d:fa:d2:f0:e6:24:5f:de:56:c7:df:e3:9c:cc:a8:db:
2f:ec:83:ce:dd:f8:c3:1b:71:74:4e:50:9c:bb:e9:e1:07:11:
85:a7:0a:ac:f7:f8:49:f1:e5:7a:61:7c:16:fa:68:6c:73:99:
5b:27:aa:bc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQi+42WcuUl4701+qr3/92eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNGRiYmMwNjk2NjlmMmU3ZTg4MjJmNjM5OGY2YjM2YzQ0
OTM0NWMwHhcNMjUwMTAxMTc0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODZlNGM5NjgwNWJkMmIzNDE1MTczMzAxYTczMWQxNTQxYzU0MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YS3ZIqE6ILUs5HITeak+lKi9Ts3
giejXa/RQ/EFc10eejT7Fd41BECDQgzAKzMEIj7R3XOe8LgtelkDMJQRWW1Vys8f
HG2cl5phugmhME6U8snD0/TGbvMk2XHlvIde1FAdE1yD+mtYyyH6Sxe0SyreOEoK
rKM7mnaTfUbxUk66ML3BhwPC2uIz0o8dOMohn8XHTjUa/s2bTYK3KGgFoEOGb21I
vpuHpMDdhmpK4PCKWbGDeTUbJd/kP9WbakhdGcYqrVg9hfWlMJ5Ih2C2sAyXphRd
4h1+MsoP5Uxvvb/W6UwuES84R7u4/OKMicIxfp/5EV138d21WlmJgeqikQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIhuTJaAW9KzQVFzMBpzHRVBxUASMB8GA1UdIwQY
MBaAFG9Nu8BpZp8ufogi9jmPazbESTRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNzM0MzYtMjI1MS00OWI0LWIzNTct
OTg0Yzk1N2EzNTNlLzEvaUc1TWxvQmIwck5CVVhNd0duTWRGVUhGUUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lNzM0MzYtMjI1MS00OWI0LWIzNTctOTg0Yzk1N2EzNTNl
LzEvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRQDMA0E
AgACMAcDBQMqDNDAMA0GCSqGSIb3DQEBCwUAA4IBAQAp9SvxGr/HCGkRHdNGk29H
NrSyuUToRmQNGmTtjFyfHBuLsv6F6a+jqbXyBrTvvGjyGWIizJglPs/DEJ+rYoLB
G1IaYmT0Ce+wTTIkcNpy8IRJnWzJN1BWah3cW6Z/skLjfRHe6sPXuFAM1qzEUDE8
Ql3JGHa5CeZbyPoOOoZdAAbzs+eoSD16ihc6PXEfyU1syVQyGV1K+cBG6nYnBjdn
tjawGmzB8shNfTDMzsBbcOJMQsvYpMTEYT4X6UrLdFX/hNwV/3axRp360vDmJF/e
Vsff45zMqNsv7IPO3fjDG3F0TlCcu+nhBxGFpwqs9/hJ8eV6YXwW+mhsc5lbJ6q8
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:02 2025 by rpki-client