Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/OVQ5uPkYukiV8dv56D7X8vrwp8E.roa
File: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (raw, json)
Hash identifier: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=
Subject key identifier: 39:54:39:B8:F9:18:BA:48:95:F1:DB:F9:E8:3E:D7:F2:FA:F0:A7:C1
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 0194228E3A1EEE7A44B67082CB0AA896547D
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/OVQ5uPkYukiV8dv56D7X8vrwp8E.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 185.157.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:1e:ee:7a:44:b6:70:82:cb:0a:a8:96:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395439b8f918ba4895f1dbf9e83ed7f2faf0a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:31:2c:63:fb:1a:e3:a6:97:fb:1a:bb:27:
d1:c1:04:bf:57:ea:4c:d4:d7:bb:ff:3f:e8:eb:d9:
a5:81:57:e9:16:7d:af:00:eb:cd:a1:a2:5e:d6:7f:
9a:99:44:44:70:33:10:3c:4d:7d:fd:a7:42:41:24:
7d:3c:5e:01:c9:ac:be:7a:9c:e6:29:6c:61:8b:6b:
c5:1b:bc:01:c2:91:13:2b:3a:36:81:d6:17:e0:81:
ef:3b:52:0a:41:11:23:5c:ee:60:e5:3f:c9:30:53:
01:a2:26:fd:ce:e7:f4:9b:9d:eb:bb:ef:c9:82:b2:
73:6d:4f:96:18:c2:f6:bd:fe:58:bb:df:a1:aa:8e:
cd:6e:3e:53:0f:bc:ec:34:4c:36:1d:05:a5:81:bb:
bd:e0:2b:42:9b:51:0d:c9:e3:84:c8:0a:17:d7:86:
dc:82:60:35:90:06:45:c7:73:e6:e9:57:d8:0c:01:
40:79:6c:d6:10:c0:8e:4d:23:26:a2:46:36:ff:1e:
27:62:4b:43:39:b8:db:98:71:7e:ef:92:ec:57:c8:
df:3c:ff:29:b7:c7:24:28:f0:ff:4a:89:a7:85:fd:
dd:c8:53:51:70:e5:34:56:56:eb:06:2c:a0:cf:e5:
db:9e:02:63:d0:e4:d8:43:a7:9e:c9:d4:29:a4:9a:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:39:B8:F9:18:BA:48:95:F1:DB:F9:E8:3E:D7:F2:FA:F0:A7:C1
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/OVQ5uPkYukiV8dv56D7X8vrwp8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d0:cc:22:72:79:b6:4a:e9:12:ce:f0:3a:3b:fd:f2:30:3d:
50:f5:20:52:02:48:53:1e:8d:77:4c:88:3c:f2:51:92:8f:3e:
ca:30:98:4a:f5:ce:7b:d7:20:4b:d0:a5:3a:19:27:99:ca:d7:
47:5f:88:01:bc:2a:9a:25:bf:77:6b:40:2b:3d:c4:02:57:cf:
b1:83:8c:8d:9e:ed:2c:ab:98:72:68:fb:f8:6b:65:8d:e7:70:
f0:f7:cc:94:08:02:b8:ca:69:01:95:b5:74:81:cf:b8:45:50:
9f:1e:86:a9:11:ee:30:e1:b7:a9:9f:9d:45:56:e6:0b:c7:4c:
3e:b8:c7:f9:a2:75:c6:74:15:d3:a3:e9:6c:1a:b8:b0:dd:8f:
0e:fa:ba:92:58:a3:70:63:e7:f1:ac:7c:0f:2a:73:0c:ae:28:
24:21:16:6d:ff:c2:d5:14:b8:45:41:55:39:f2:d0:f3:87:1f:
07:59:2d:1a:e2:3a:49:25:c8:2b:de:c2:10:6b:1a:74:45:3a:
68:13:c4:ce:b9:42:8e:ee:ad:6a:c2:be:f6:70:62:89:b1:f9:
86:45:b3:e5:94:bf:89:de:c1:65:08:25:c7:c7:28:37:12:4e:
eb:9e:1c:33:50:de:98:ab:c0:4e:32:b4:ed:4e:18:ab:45:96:
48:1c:59:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijjoe7npEtnCCywqollR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy
OTNmODEwHhcNMjUwMTAxMTU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTU0MzliOGY5MThiYTQ4OTVmMWRiZjllODNlZDdmMmZhZjBhN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RIxLGP7GuOml/sauyfRwQS/V+pM
1Ne7/z/o69mlgVfpFn2vAOvNoaJe1n+amUREcDMQPE19/adCQSR9PF4Byay+epzm
KWxhi2vFG7wBwpETKzo2gdYX4IHvO1IKQREjXO5g5T/JMFMBoib9zuf0m53ru+/J
grJzbU+WGML2vf5Yu9+hqo7Nbj5TD7zsNEw2HQWlgbu94CtCm1ENyeOEyAoX14bc
gmA1kAZFx3Pm6VfYDAFAeWzWEMCOTSMmokY2/x4nYktDObjbmHF+75LsV8jfPP8p
t8ckKPD/Somnhf3dyFNRcOU0VlbrBiygz+XbngJj0OTYQ6eeydQppJpG5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlUObj5GLpIlfHb+eg+1/L68KfBMB8GA1UdIwQY
MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt
NDM1MWJiZjc0YzBjLzEvT1ZRNXVQa1l1a2lWOGR2NTZEN1g4dnJ3cDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj
LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ14MA0G
CSqGSIb3DQEBCwUAA4IBAQDC0Mwicnm2SukSzvA6O/3yMD1Q9SBSAkhTHo13TIg8
8lGSjz7KMJhK9c571yBL0KU6GSeZytdHX4gBvCqaJb93a0ArPcQCV8+xg4yNnu0s
q5hyaPv4a2WN53Dw98yUCAK4ymkBlbV0gc+4RVCfHoapEe4w4bepn51FVuYLx0w+
uMf5onXGdBXTo+lsGriw3Y8O+rqSWKNwY+fxrHwPKnMMrigkIRZt/8LVFLhFQVU5
8tDzhx8HWS0a4jpJJcgr3sIQaxp0RTpoE8TOuUKO7q1qwr72cGKJsfmGRbPllL+J
3sFlCCXHxyg3Ek7rnhwzUN6Yq8BOMrTtThirRZZIHFkV
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:09:04 2025 by rpki-client