Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa
File: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (raw, json)
Hash identifier: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=
Subject key identifier: 6A:70:80:54:5A:D4:E9:05:34:59:79:BE:4D:FF:51:81:DD:A5:0A:39
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019425FD4DC8AEA228F0E8DF0FAB79E4F866
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207456
IP address blocks: 185.239.204.0/22 maxlen: 22
185.239.204.0/24 maxlen: 24
185.239.205.0/24 maxlen: 24
185.239.206.0/24 maxlen: 24
185.239.207.0/24 maxlen: 24
185.241.156.0/22 maxlen: 22
185.241.156.0/23 maxlen: 23
185.241.156.0/24 maxlen: 24
185.241.157.0/24 maxlen: 24
185.241.158.0/23 maxlen: 23
185.241.158.0/24 maxlen: 24
185.241.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4d:c8:ae:a2:28:f0:e8:df:0f:ab:79:e4:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a7080545ad4e905345979be4dff5181dda50a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:eb:8b:93:28:9a:a3:dc:ce:27:4b:20:b0:
ad:8a:97:12:2c:9c:cf:3b:5c:67:bf:ee:76:3d:b0:
45:67:ae:88:c3:00:bd:3b:31:0c:a2:da:31:90:b2:
43:4f:14:60:c5:d4:15:6d:ad:52:73:25:66:3e:ce:
11:f3:cc:9e:8c:86:f3:2b:6a:42:eb:f9:ea:74:03:
5e:c3:7f:49:e7:7e:98:62:14:59:7d:0e:b8:3a:a0:
33:df:3c:33:d0:24:55:18:7d:b5:42:9b:97:e1:1c:
e4:7e:20:13:75:98:72:85:c8:19:95:05:30:9f:89:
40:d3:0c:52:88:db:d4:c3:a3:c1:50:8f:c3:4e:49:
dc:55:bd:47:04:69:b0:65:ec:18:87:49:ad:d4:1e:
72:0c:09:62:89:73:4f:32:1c:13:36:f9:ed:0a:20:
a6:f7:50:97:9b:e3:23:1f:3a:08:79:78:c4:62:2a:
bf:c9:50:01:d3:06:ed:fc:e9:01:4f:9a:01:48:b7:
f5:d4:f9:56:3e:3b:80:f2:6c:a3:97:c7:63:ac:92:
6a:08:ad:1e:0a:5d:4b:f9:42:2b:de:c9:ad:f6:d2:
d8:78:a0:c3:16:31:b8:98:87:da:8b:e7:c5:e6:2d:
2a:90:f2:ac:af:b0:ae:b3:b7:1e:94:65:a1:71:df:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:80:54:5A:D4:E9:05:34:59:79:BE:4D:FF:51:81:DD:A5:0A:39
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.204.0/22
185.241.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:db:ac:95:d2:02:db:1b:b1:e4:1d:10:08:e7:d7:b1:0f:b6:
f9:81:00:91:5f:26:bc:d4:65:68:02:18:26:11:65:11:4f:ec:
c9:6f:93:2d:31:55:e6:93:65:da:08:c7:94:f4:0d:a3:c3:21:
5e:e8:b3:24:40:97:04:7f:cf:e0:ab:74:f7:17:73:79:db:e1:
b9:c7:ca:9f:af:c0:64:ce:98:ec:4d:86:af:49:95:2b:35:a1:
46:63:fc:2d:d3:60:99:3f:25:30:bc:da:6d:54:96:b6:d5:e9:
af:79:57:3d:93:3e:08:2d:c3:11:41:e1:f5:99:99:fa:5f:5e:
cc:3a:33:e5:12:77:80:33:dc:5a:3a:17:a1:1d:84:25:92:30:
9e:49:94:ba:e1:41:e7:dd:dd:8d:25:90:c8:31:38:c0:52:fc:
4c:79:a1:18:80:70:09:ea:32:e0:ae:e5:37:a7:0d:3a:1c:fe:
98:ca:67:e3:4b:7f:ec:17:e4:a0:08:01:5c:07:ef:c4:fc:4a:
e4:a2:59:12:49:f8:41:25:b0:d2:d7:94:9f:27:e8:ff:04:7d:
e3:25:c5:a9:0f:f6:21:57:83:a9:b0:5a:83:b9:32:eb:64:2f:
e1:b1:97:1c:52:0c:d4:ae:48:f3:e2:ab:90:50:f0:16:2f:94:
fa:a3:2c:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/U3IrqIo8OjfD6t55PhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjUwMTAyMDc0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTcwODA1NDVhZDRlOTA1MzQ1OTc5YmU0ZGZmNTE4MWRkYTUwYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvXri5MomqPczidLILCtipcSLJzP
O1xnv+52PbBFZ66IwwC9OzEMotoxkLJDTxRgxdQVba1ScyVmPs4R88yejIbzK2pC
6/nqdANew39J536YYhRZfQ64OqAz3zwz0CRVGH21QpuX4RzkfiATdZhyhcgZlQUw
n4lA0wxSiNvUw6PBUI/DTkncVb1HBGmwZewYh0mt1B5yDAliiXNPMhwTNvntCiCm
91CXm+MjHzoIeXjEYiq/yVAB0wbt/OkBT5oBSLf11PlWPjuA8myjl8djrJJqCK0e
Cl1L+UIr3smt9tLYeKDDFjG4mIfai+fF5i0qkPKsr7Cus7celGWhcd/3GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGpwgFRa1OkFNFl5vk3/UYHdpQo5MB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvYW5DQVZGclU2UVUwV1htLVRmOVJnZDJsQ2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCue/MAwQC
ufGcMA0GCSqGSIb3DQEBCwUAA4IBAQBf26yV0gLbG7HkHRAI59exD7b5gQCRXya8
1GVoAhgmEWURT+zJb5MtMVXmk2XaCMeU9A2jwyFe6LMkQJcEf8/gq3T3F3N52+G5
x8qfr8BkzpjsTYavSZUrNaFGY/wt02CZPyUwvNptVJa21emveVc9kz4ILcMRQeH1
mZn6X17MOjPlEneAM9xaOhehHYQlkjCeSZS64UHn3d2NJZDIMTjAUvxMeaEYgHAJ
6jLgruU3pw06HP6YymfjS3/sF+SgCAFcB+/E/ErkolkSSfhBJbDS15SfJ+j/BH3j
JcWpD/YhV4OpsFqDuTLrZC/hsZccUgzUrkjz4quQUPAWL5T6oywf
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:14:42 2025 by rpki-client