Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ub3jhWL8KmU55QyzLWlOgggBar8.roa
File: ub3jhWL8KmU55QyzLWlOgggBar8.roa (raw, json)
Hash identifier: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=
Subject key identifier: B9:BD:E3:85:62:FC:2A:65:39:E5:0C:B3:2D:69:4E:82:08:01:6A:BF
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019427478F6D847F37D547C7F717DB8CDDA0
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ub3jhWL8KmU55QyzLWlOgggBar8.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196945
IP address blocks: 91.217.155.0/24 maxlen: 24
185.106.16.0/22 maxlen: 24
2a06:3ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8f:6d:84:7f:37:d5:47:c7:f7:17:db:8c:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9bde38562fc2a6539e50cb32d694e8208016abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b0:02:18:ef:23:ee:85:86:58:48:68:d0:1b:
80:8e:ed:5c:78:54:ed:6b:89:86:30:03:c9:14:59:
19:f2:f0:ba:2f:1c:9c:9c:76:75:dd:75:5e:16:0c:
30:b2:c0:29:2d:8f:83:11:dc:23:ae:2a:d2:10:a5:
b6:a4:b2:b9:c2:9a:53:65:84:2f:88:d8:08:61:a6:
c9:72:b3:99:84:43:1e:e3:ca:74:69:b5:69:eb:1c:
c3:98:a1:be:e2:56:eb:b4:74:27:45:cb:a7:6f:f0:
15:ce:da:9d:6f:6b:5b:8f:74:d4:7b:b9:e3:68:e6:
64:b0:66:25:46:dc:51:a7:66:e1:bc:c5:8c:08:9c:
74:b1:9d:63:1d:f1:3b:41:e9:76:0d:0f:e2:8a:95:
a4:20:21:8c:ad:77:b3:75:93:2f:46:fe:19:cc:3f:
27:91:54:f8:90:43:eb:74:c0:34:30:c9:95:30:16:
09:22:f4:d0:24:dc:4c:e2:2b:a0:d9:0b:87:c2:cf:
d5:1a:d4:d0:89:06:14:07:db:18:26:43:56:e5:d2:
ee:7c:82:1c:dd:68:03:31:3b:7a:04:1c:55:fb:20:
ec:78:07:00:32:8c:ef:43:cb:0f:28:7a:21:ea:3e:
5b:73:c8:e4:2f:d0:76:f4:5a:0c:f3:04:aa:03:e2:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:E3:85:62:FC:2A:65:39:E5:0C:B3:2D:69:4E:82:08:01:6A:BF
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ub3jhWL8KmU55QyzLWlOgggBar8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.155.0/24
185.106.16.0/22
IPv6:
2a06:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
de:ae:e5:12:c8:2d:a8:a8:5a:59:66:a4:5f:19:9c:1a:06:f5:
32:92:57:ea:fb:01:c1:ab:1a:e3:2c:c7:09:ac:79:38:a5:de:
94:e5:05:f0:0a:d1:cd:a3:2b:ec:37:bc:97:59:c8:b2:6a:8c:
e8:ff:3d:b1:82:e5:fd:f2:dd:35:aa:d0:4b:04:21:4e:d4:7b:
06:fa:c3:c5:b2:a5:be:dc:37:09:2c:7a:37:b5:01:c7:da:97:
9b:7e:aa:eb:e2:3a:dc:8b:b6:0e:c0:f6:e1:6e:af:c3:13:a6:
1b:3a:28:63:63:f1:bc:ff:61:1e:1f:c0:27:65:4b:b0:36:03:
cd:32:7b:7b:11:61:58:59:75:db:4f:40:ef:4e:5f:b2:f5:ed:
26:41:2e:6d:e3:cc:0d:2c:d0:68:b2:6d:a5:9a:ad:6c:dd:52:
59:6b:09:b5:a8:c1:3b:9c:10:42:87:7f:40:c8:96:5b:47:70:
03:65:d7:70:0e:62:ef:37:84:8b:1a:d9:47:61:d4:30:61:a5:
fc:aa:90:28:b0:37:f0:09:6e:65:1b:7e:9e:9c:49:e3:b8:ea:
3d:25:51:e8:54:04:ce:6e:6a:f4:c3:3f:30:56:d8:57:67:19:
32:f0:8a:76:13:f4:ed:7e:dd:33:5c:68:6e:a8:5c:d9:1b:a3:
ed:e4:ed:a6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnR49thH831UfH9xfbjN2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjUwMTAyMTM0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWJkZTM4NTYyZmMyYTY1MzllNTBjYjMyZDY5NGU4MjA4MDE2YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bACGO8j7oWGWEho0BuAju1ceFTt
a4mGMAPJFFkZ8vC6LxycnHZ13XVeFgwwssApLY+DEdwjrirSEKW2pLK5wppTZYQv
iNgIYabJcrOZhEMe48p0abVp6xzDmKG+4lbrtHQnRcunb/AVztqdb2tbj3TUe7nj
aOZksGYlRtxRp2bhvMWMCJx0sZ1jHfE7Qel2DQ/iipWkICGMrXezdZMvRv4ZzD8n
kVT4kEPrdMA0MMmVMBYJIvTQJNxM4iug2QuHws/VGtTQiQYUB9sYJkNW5dLufIIc
3WgDMTt6BBxV+yDseAcAMozvQ8sPKHoh6j5bc8jkL9B29FoM8wSqA+IHrQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLm944Vi/CplOeUMsy1pToIIAWq/MB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvdWIzamhXTDhLbVU1NVF5ekxXbE9nZ2dCYXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9mbAwQC
uWoQMA0EAgACMAcDBQMqBjrAMA0GCSqGSIb3DQEBCwUAA4IBAQDeruUSyC2oqFpZ
ZqRfGZwaBvUyklfq+wHBqxrjLMcJrHk4pd6U5QXwCtHNoyvsN7yXWciyaozo/z2x
guX98t01qtBLBCFO1HsG+sPFsqW+3DcJLHo3tQHH2pebfqrr4jrci7YOwPbhbq/D
E6YbOihjY/G8/2EeH8AnZUuwNgPNMnt7EWFYWXXbT0DvTl+y9e0mQS5t48wNLNBo
sm2lmq1s3VJZawm1qME7nBBCh39AyJZbR3ADZddwDmLvN4SLGtlHYdQwYaX8qpAo
sDfwCW5lG36enEnjuOo9JVHoVATObmr0wz8wVthXZxky8Ip2E/Ttft0zXGhuqFzZ
G6Pt5O2m
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:49:56 2025 by rpki-client