Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa
File: IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa (raw, json)
Hash identifier: J6Aqupuzh1XHZTyQ8eqa5z/nXeBEsxyVOCdiPL4Sgt0=
Subject key identifier: 20:C9:19:56:54:FC:78:AF:B1:24:AF:04:6B:D4:9F:96:F4:24:14:26
Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial: 019425FC05C0223935DED6FEBF647F863D1A
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48631
IP address blocks: 185.162.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:05:c0:22:39:35:de:d6:fe:bf:64:7f:86:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c9195654fc78afb124af046bd49f96f4241426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:ce:53:59:e1:56:2b:2e:86:92:7f:64:9b:
4e:7c:53:91:2a:c8:1c:51:72:58:95:2e:d2:4c:6d:
17:7d:cd:cf:fe:1c:ea:06:3e:ba:c8:fd:1c:5d:a6:
cd:2d:85:ab:d2:43:74:72:f3:c7:ee:20:e8:69:0d:
8e:19:f2:f6:6e:31:30:fe:a2:c8:c3:c1:17:20:61:
c5:d3:63:6f:df:6b:bd:1c:b6:e2:ae:ae:62:a3:9f:
71:3c:23:7b:d1:c9:57:39:bd:35:4a:3d:bb:80:5d:
f0:f2:7f:4b:7e:45:94:b4:d4:1f:41:50:7e:55:43:
89:e2:f8:a4:e7:73:ec:fb:c8:c6:62:52:c9:7d:a2:
67:90:50:9c:fd:ed:bf:f6:28:ec:cb:76:2b:b6:26:
a5:db:e0:b5:1b:a7:fb:b0:0b:14:b6:15:e7:57:8a:
ae:30:d8:6c:67:98:17:ba:bc:9b:c4:50:d7:eb:b5:
0a:19:f5:1f:27:06:7e:7d:91:56:96:13:91:77:bd:
8f:71:0b:b7:fd:cf:e2:1e:4f:c8:39:a1:b3:4d:ec:
43:af:54:48:c3:f0:a7:3e:59:ed:f8:cc:cb:db:9d:
c5:70:bc:9f:30:30:38:21:ec:2f:3c:23:d5:4c:e5:
f1:98:e7:0f:ef:05:4a:1d:89:31:a6:2e:57:d8:94:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:19:56:54:FC:78:AF:B1:24:AF:04:6B:D4:9F:96:F4:24:14:26
X509v3 Authority Key Identifier:
keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8d:1d:f2:57:47:6d:cc:65:67:9a:d8:fb:64:ee:41:fa:ff:
6b:7a:d0:4c:e1:b9:cb:37:6a:cf:c8:62:82:61:b1:92:73:12:
a5:8e:10:e7:65:ab:2a:58:98:9b:01:3a:a4:74:3b:43:69:de:
08:1f:c9:f1:b6:e0:1b:36:e7:e9:1f:04:b5:c7:14:a0:2c:60:
d8:20:eb:13:c9:50:ec:ac:17:26:95:75:27:ae:9e:6e:ea:8d:
39:e0:a0:16:7d:39:97:8b:be:c7:17:7d:12:77:a4:86:35:65:
c9:f2:58:9a:50:cf:25:6c:f0:7d:13:91:e9:a0:6a:a4:93:c8:
49:f0:f9:72:47:14:88:34:3b:36:ea:e2:ee:8d:0c:47:eb:02:
c6:6e:0d:ba:eb:3f:5e:60:1e:a2:12:46:5e:8f:be:7d:0d:63:
0f:e9:a8:55:be:9d:77:73:f1:0c:3a:37:37:b2:bb:01:f7:b7:
d3:8f:c1:5b:28:01:38:b4:e5:fe:b8:06:b8:52:0f:7f:e2:8d:
b7:45:10:17:a0:99:a4:99:0e:d9:d0:77:c1:f7:6e:66:c0:66:
b7:5f:8b:c5:3c:78:c3:75:e9:5f:91:8d:39:37:24:d2:e7:95:
be:a4:a1:dc:9a:c4:40:30:70:eb:76:80:35:14:6b:45:05:57:
42:b9:a4:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/AXAIjk13tb+v2R/hj0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj
ZmJiNTEwHhcNMjUwMTAyMDc0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGM5MTk1NjU0ZmM3OGFmYjEyNGFmMDQ2YmQ0OWY5NmY0MjQxNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLnOU1nhVisuhpJ/ZJtOfFORKsgc
UXJYlS7STG0Xfc3P/hzqBj66yP0cXabNLYWr0kN0cvPH7iDoaQ2OGfL2bjEw/qLI
w8EXIGHF02Nv32u9HLbirq5io59xPCN70clXOb01Sj27gF3w8n9LfkWUtNQfQVB+
VUOJ4vik53Ps+8jGYlLJfaJnkFCc/e2/9ijsy3Yrtial2+C1G6f7sAsUthXnV4qu
MNhsZ5gXurybxFDX67UKGfUfJwZ+fZFWlhORd72PcQu3/c/iHk/IOaGzTexDr1RI
w/CnPlnt+MzL253FcLyfMDA4IewvPCPVTOXxmOcP7wVKHYkxpi5X2JQ57wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCDJGVZU/HivsSSvBGvUn5b0JBQmMB8GA1UdIwQY
MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct
N2UyMTdiZWYyZDllLzEvSU1rWlZsVDhlSy14Sks4RWE5U2ZsdlFrRkNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll
LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaJnMA0G
CSqGSIb3DQEBCwUAA4IBAQBKjR3yV0dtzGVnmtj7ZO5B+v9retBM4bnLN2rPyGKC
YbGScxKljhDnZasqWJibATqkdDtDad4IH8nxtuAbNufpHwS1xxSgLGDYIOsTyVDs
rBcmlXUnrp5u6o054KAWfTmXi77HF30Sd6SGNWXJ8liaUM8lbPB9E5HpoGqkk8hJ
8PlyRxSINDs26uLujQxH6wLGbg266z9eYB6iEkZej759DWMP6ahVvp13c/EMOjc3
srsB97fTj8FbKAE4tOX+uAa4Ug9/4o23RRAXoJmkmQ7Z0HfB925mwGa3X4vFPHjD
delfkY05NyTS55W+pKHcmsRAMHDrdoA1FGtFBVdCuaT5
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:01:52 2025 by rpki-client