Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/yJHEdUxsuxE5hka9evM6UogprJA.roa
File: yJHEdUxsuxE5hka9evM6UogprJA.roa (raw, json)
Hash identifier: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=
Subject key identifier: C8:91:C4:75:4C:6C:BB:11:39:86:46:BD:7A:F3:3A:52:88:29:AC:90
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 01942686DCCD8A5B5D53088E2BF11FC77410
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/yJHEdUxsuxE5hka9evM6UogprJA.roa
Signing time: Thu 02 Jan 2025 10:19:20 +0000
ROA not before: Thu 02 Jan 2025 10:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203241
IP address blocks: 185.141.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:86:dc:cd:8a:5b:5d:53:08:8e:2b:f1:1f:c7:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 2 10:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c891c4754c6cbb11398646bd7af33a528829ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:08:16:db:94:b0:47:19:14:88:93:e4:5e:
b4:1e:75:4b:1e:93:9e:54:d3:4f:fd:b8:da:f2:67:
2f:e6:ee:6f:e6:fb:c9:62:f9:55:b8:cf:0e:06:60:
a8:87:79:26:23:97:2a:13:68:1b:05:09:86:8e:cd:
db:5c:d7:39:be:a1:3b:81:37:81:dd:38:f9:82:35:
13:3f:34:2d:51:22:47:ee:9f:ba:09:6c:24:20:1d:
1c:19:7a:92:34:e8:07:f2:17:c8:bc:df:74:42:a6:
00:f0:c7:f8:ad:81:01:db:3a:63:4a:5a:15:1f:b3:
ec:b6:5f:28:43:91:12:5c:40:ce:c2:ef:b8:bb:fc:
fb:0a:1c:c5:60:75:b4:c3:c7:0f:0f:f9:bc:b5:ee:
8c:38:25:75:e0:03:91:77:0f:e4:cc:32:14:24:18:
df:be:2b:6a:3c:0b:eb:68:04:f9:db:16:cc:80:f6:
0a:18:ff:13:b5:b2:b5:ea:ef:64:91:54:af:c5:8f:
e6:e7:66:fb:b8:72:af:39:3c:80:23:fe:d7:8d:d9:
22:b0:67:35:dd:3b:66:c7:0d:9e:30:23:67:7a:80:
2c:03:41:eb:2d:19:45:88:21:31:c9:04:a6:bd:b3:
6c:9a:a6:be:62:a6:52:12:b1:03:43:a1:67:1b:12:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:C4:75:4C:6C:BB:11:39:86:46:BD:7A:F3:3A:52:88:29:AC:90
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/yJHEdUxsuxE5hka9evM6UogprJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:6b:2d:27:46:16:2c:f3:9a:18:55:cb:4e:11:78:17:6e:96:
b9:b3:b5:c6:86:88:77:76:c9:19:bc:57:b6:4c:45:9b:f2:fe:
ba:b7:9b:91:94:44:4c:67:9a:43:cf:35:30:b8:aa:c3:b8:d3:
cf:72:48:34:e8:0e:ae:9d:46:b8:8e:b9:e4:be:35:ab:c2:76:
9b:db:39:aa:88:03:b2:38:da:73:0c:5a:06:cd:f9:17:fa:e3:
1d:cd:92:1c:6a:23:4f:fe:e7:75:4d:ee:2e:1f:12:13:e3:21:
8d:34:9d:bd:ab:3d:f7:51:93:d9:0c:15:15:15:b7:a4:33:53:
e2:fa:17:73:dc:27:84:af:0a:0d:45:7b:24:88:7b:a2:8f:26:
fe:fd:a4:a7:ff:69:c5:bd:99:f6:43:d7:05:a4:c3:01:dc:41:
8a:7c:04:c1:a9:f6:d6:cd:e0:2e:9c:88:f6:01:79:51:92:1d:
5f:54:89:80:ce:e8:34:17:d2:97:fe:ce:ad:f0:9b:08:a5:51:
63:e3:5f:68:df:60:67:80:9c:4f:50:67:bd:95:33:6f:fa:f2:
f1:66:95:67:95:7c:29:88:84:56:e7:95:79:46:b4:e6:5b:7a:
74:8f:5b:b2:ea:61:c7:9b:de:ec:57:bf:23:2e:8a:5d:ee:2d:
21:02:6e:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmhtzNiltdUwiOK/Efx3QQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjUwMTAyMTAxOTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODkxYzQ3NTRjNmNiYjExMzk4NjQ2YmQ3YWYzM2E1Mjg4MjlhYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn0IFtuUsEcZFIiT5F60HnVLHpOe
VNNP/bja8mcv5u5v5vvJYvlVuM8OBmCoh3kmI5cqE2gbBQmGjs3bXNc5vqE7gTeB
3Tj5gjUTPzQtUSJH7p+6CWwkIB0cGXqSNOgH8hfIvN90QqYA8Mf4rYEB2zpjSloV
H7Pstl8oQ5ESXEDOwu+4u/z7ChzFYHW0w8cPD/m8te6MOCV14AORdw/kzDIUJBjf
vitqPAvraAT52xbMgPYKGP8TtbK16u9kkVSvxY/m52b7uHKvOTyAI/7XjdkisGc1
3Ttmxw2eMCNneoAsA0HrLRlFiCExyQSmvbNsmqa+YqZSErEDQ6FnGxI5awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMiRxHVMbLsROYZGvXrzOlKIKayQMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEveUpIRWRVeHN1eEU1aGthOWV2TTZVb2dwckpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY1IMA0G
CSqGSIb3DQEBCwUAA4IBAQA6ay0nRhYs85oYVctOEXgXbpa5s7XGhoh3dskZvFe2
TEWb8v66t5uRlERMZ5pDzzUwuKrDuNPPckg06A6unUa4jrnkvjWrwnab2zmqiAOy
ONpzDFoGzfkX+uMdzZIcaiNP/ud1Te4uHxIT4yGNNJ29qz33UZPZDBUVFbekM1Pi
+hdz3CeErwoNRXskiHuijyb+/aSn/2nFvZn2Q9cFpMMB3EGKfATBqfbWzeAunIj2
AXlRkh1fVImAzug0F9KX/s6t8JsIpVFj419o32BngJxPUGe9lTNv+vLxZpVnlXwp
iIRW55V5RrTmW3p0j1uy6mHHm97sV78jLopd7i0hAm47
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:45 2025 by rpki-client