Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/vI1HVKVzSovdfnitP5UZ3coZhWk.roa
File: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (raw, json)
Hash identifier: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=
Subject key identifier: BC:8D:47:54:A5:73:4A:8B:DD:7E:78:AD:3F:95:19:DD:CA:19:85:69
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 01941F8C6DB8587F913CD0C1A76F939B86D2
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/vI1HVKVzSovdfnitP5UZ3coZhWk.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204136
IP address blocks: 185.242.212.0/24 maxlen: 24
185.242.213.0/24 maxlen: 24
185.242.214.0/24 maxlen: 24
185.242.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6d:b8:58:7f:91:3c:d0:c1:a7:6f:93:9b:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc8d4754a5734a8bdd7e78ad3f9519ddca198569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:e1:e6:0d:75:3e:72:c0:a2:15:9f:b0:87:
e0:bc:d9:af:05:e0:99:12:62:21:01:d2:f2:f6:0c:
f7:f2:49:93:fa:f7:1b:c7:01:0c:d6:5f:c4:1a:50:
45:47:81:5c:64:90:88:f9:33:13:e9:ee:d5:f9:08:
ce:d2:a2:f9:68:58:f0:90:c0:0d:a6:3c:dd:75:b3:
8a:24:ed:36:ca:7e:02:67:d8:81:1b:4f:9e:aa:e4:
21:88:7d:dc:9b:97:bb:02:7f:6d:1d:6c:00:59:dc:
e6:d0:c5:4e:41:56:59:fc:f9:72:cd:08:f4:7f:12:
84:a6:b2:ea:f8:51:fc:42:89:e3:0d:09:7b:43:2d:
39:0e:cb:90:1e:6d:46:e5:b3:f9:b3:6d:9a:28:fe:
c2:79:5d:21:ac:67:d9:e5:f5:60:ce:89:90:48:c9:
18:61:91:f1:54:a3:4b:35:02:f9:f9:f1:4f:0b:08:
b2:ea:3b:5e:4a:66:9f:e1:d0:ef:68:27:12:32:18:
40:bd:e5:6b:9c:3c:ba:ec:ed:5d:c8:cd:0d:d1:5f:
02:df:8a:94:e9:5e:1b:09:26:8a:1c:53:95:21:a5:
9d:f0:67:a9:04:4c:27:31:49:44:83:df:b4:15:a3:
f6:cc:67:dc:b8:fd:9b:03:3b:63:eb:b0:53:5a:db:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:47:54:A5:73:4A:8B:DD:7E:78:AD:3F:95:19:DD:CA:19:85:69
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/vI1HVKVzSovdfnitP5UZ3coZhWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.212.0/22
Signature Algorithm: sha256WithRSAEncryption
06:c1:6a:2a:38:ac:8e:87:a0:2a:2b:30:f9:10:e8:13:fe:6a:
fc:71:51:ed:8e:ba:10:d1:aa:02:78:f9:0f:db:2b:b5:d9:41:
f7:fe:9f:c7:75:3c:af:1b:48:89:a7:49:f5:d3:78:72:0b:8c:
65:49:6c:36:75:56:7a:ad:f4:0f:9b:54:ec:88:84:30:83:b9:
3d:c8:84:64:da:08:d5:22:ec:1d:ee:e9:b7:0e:3d:f9:a3:32:
b4:2a:b5:24:47:a5:b2:f1:09:d6:6f:10:f5:11:15:62:c5:4f:
10:b8:c3:a9:5c:34:9a:bf:4f:cb:10:60:b0:06:1c:73:5a:d5:
ad:5f:04:aa:ba:f0:9d:46:86:81:c9:5e:b7:91:3d:91:2c:cc:
67:36:ef:cb:05:93:0c:6c:42:e5:c4:70:39:ca:cb:2b:c1:ff:
cd:56:19:8c:cc:98:f2:fc:05:db:fb:1e:ce:f8:17:f6:50:a8:
7d:91:cd:b9:c6:a3:91:6c:86:8e:46:37:11:46:33:20:e2:d4:
62:ea:c4:fe:e2:8a:f3:ce:51:39:3d:88:a2:f5:e5:9e:e3:15:
47:7f:0c:6d:7b:fc:36:ed:3e:25:77:69:22:98:d3:24:c2:71:
64:d3:91:b2:69:fd:f0:79:aa:4e:80:97:7a:b3:2f:88:82:11:
99:7f:db:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjG24WH+RPNDBp2+Tm4bSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw
MGU3OTcwHhcNMjUwMTAxMDE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzhkNDc1NGE1NzM0YThiZGQ3ZTc4YWQzZjk1MTlkZGNhMTk4NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvzh5g11PnLAohWfsIfgvNmvBeCZ
EmIhAdLy9gz38kmT+vcbxwEM1l/EGlBFR4FcZJCI+TMT6e7V+QjO0qL5aFjwkMAN
pjzddbOKJO02yn4CZ9iBG0+equQhiH3cm5e7An9tHWwAWdzm0MVOQVZZ/PlyzQj0
fxKEprLq+FH8QonjDQl7Qy05DsuQHm1G5bP5s22aKP7CeV0hrGfZ5fVgzomQSMkY
YZHxVKNLNQL5+fFPCwiy6jteSmaf4dDvaCcSMhhAveVrnDy67O1dyM0N0V8C34qU
6V4bCSaKHFOVIaWd8GepBEwnMUlEg9+0FaP2zGfcuP2bAztj67BTWtv45wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyNR1Slc0qL3X54rT+VGd3KGYVpMB8GA1UdIwQY
MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt
ZjA4NmU2Zjk2Y2JiLzEvdkkxSFZLVnpTb3ZkZm5pdFA1VVozY29aaFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji
LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufLUMA0G
CSqGSIb3DQEBCwUAA4IBAQAGwWoqOKyOh6AqKzD5EOgT/mr8cVHtjroQ0aoCePkP
2yu12UH3/p/HdTyvG0iJp0n103hyC4xlSWw2dVZ6rfQPm1TsiIQwg7k9yIRk2gjV
Iuwd7um3Dj35ozK0KrUkR6Wy8QnWbxD1ERVixU8QuMOpXDSav0/LEGCwBhxzWtWt
XwSquvCdRoaByV63kT2RLMxnNu/LBZMMbELlxHA5yssrwf/NVhmMzJjy/AXb+x7O
+Bf2UKh9kc25xqORbIaORjcRRjMg4tRi6sT+4orzzlE5PYii9eWe4xVHfwxte/w2
7T4ld2kimNMkwnFk05Gyaf3weapOgJd6sy+IghGZf9uy
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:43 2025 by rpki-client