Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa
File: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (raw, json)
Hash identifier: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=
Subject key identifier: 00:A3:8C:41:97:99:37:29:54:EE:56:76:8D:F7:ED:7C:56:7F:67:85
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 019422FBAA7B6AE1BC2D95D6D6C3E3090118
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211986
IP address blocks: 185.234.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:aa:7b:6a:e1:bc:2d:95:d6:d6:c3:e3:09:01:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00a38c419799372954ee56768df7ed7c567f6785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:ac:e3:8c:92:07:f4:9b:53:98:ae:4e:c1:
7e:d1:3d:27:90:be:78:ce:59:2a:04:58:21:c2:bc:
89:19:e2:08:4d:46:85:60:07:f8:77:ae:61:80:98:
29:39:0c:6b:4f:5d:17:82:5d:d1:35:32:5e:37:f1:
40:46:89:cb:70:20:ef:b6:19:ea:d3:81:9f:ef:48:
49:e3:4b:d7:9c:c4:69:ff:03:1b:f9:9e:df:35:8b:
63:d5:23:6c:25:92:21:61:ae:a9:e3:59:23:6c:ce:
00:6e:6b:b9:0e:3a:3d:ce:45:d8:59:30:04:8d:24:
3b:fc:db:dd:f7:23:a4:96:03:29:64:43:16:cc:52:
ca:a0:76:a2:ea:a7:31:cb:ab:79:5f:36:90:f4:5d:
ff:05:d3:0c:78:52:b0:c2:94:58:8a:31:c0:cc:f6:
c5:b6:98:88:fc:f6:a8:2c:32:f7:32:df:3d:24:41:
27:0f:34:04:ef:42:4a:a4:12:72:77:28:69:44:50:
88:1c:52:64:9a:2f:96:68:6a:e7:f5:8e:9c:9f:49:
7e:44:86:a2:58:0c:a4:6d:f0:77:d2:70:ae:aa:30:
83:74:5a:65:52:0b:08:a6:f9:58:d6:48:25:00:53:
3e:85:e1:c5:f1:30:e6:97:33:76:6b:ab:30:f2:9e:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:8C:41:97:99:37:29:54:EE:56:76:8D:F7:ED:7C:56:7F:67:85
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.103.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a7:38:f0:fd:32:73:75:ab:e3:00:3e:94:e5:9b:32:66:67:
fd:e0:93:e2:fb:f0:c5:de:2a:e7:ca:10:b9:e2:c3:ca:7e:c6:
c6:31:7e:28:13:b7:b6:3f:98:40:f1:b5:13:12:93:8a:de:de:
3f:5c:b1:00:51:a9:6a:64:15:16:38:e3:10:6a:f3:8a:08:f2:
98:f3:b3:2d:08:a8:8c:3f:1b:93:e2:a6:f3:ea:bb:7c:1c:3b:
f7:19:28:8e:c3:4d:44:5d:2c:5f:8e:d2:5e:e8:81:bc:f4:4a:
f6:ac:5a:6e:72:06:e2:f6:9a:46:bf:f9:f1:f9:31:44:70:b1:
96:48:04:c7:17:50:f8:4c:00:c7:fd:80:c7:3c:23:80:a2:e5:
5f:35:b6:f7:b2:db:8b:07:a0:5b:7f:04:d2:49:f8:52:f0:a0:
4f:ba:63:62:a4:25:79:5e:56:2c:c9:de:35:03:e3:d2:a8:f2:
85:18:63:18:91:89:62:13:aa:2a:66:14:ae:5d:8f:ec:dc:fc:
aa:19:98:e5:84:70:f5:cd:e0:e9:c4:9e:74:b7:8a:86:01:6f:
89:e6:8e:fe:74:7c:15:6e:33:db:95:17:9c:7b:fd:44:16:74:
ba:ae:f1:ec:54:0a:4f:7d:82:ae:10:1c:a7:ad:7d:71:5d:d3:
c4:e3:9b:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+6p7auG8LZXW1sPjCQEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTQzOWIwY2E3ZjE0ZGFhOWI2MWIxMWJkMTdiZGNjMWJh
NzM4NmMwHhcNMjUwMTAxMTc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGEzOGM0MTk3OTkzNzI5NTRlZTU2NzY4ZGY3ZWQ3YzU2N2Y2Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bes44ySB/SbU5iuTsF+0T0nkL54
zlkqBFghwryJGeIITUaFYAf4d65hgJgpOQxrT10Xgl3RNTJeN/FARonLcCDvthnq
04Gf70hJ40vXnMRp/wMb+Z7fNYtj1SNsJZIhYa6p41kjbM4Abmu5Djo9zkXYWTAE
jSQ7/Nvd9yOklgMpZEMWzFLKoHai6qcxy6t5XzaQ9F3/BdMMeFKwwpRYijHAzPbF
tpiI/PaoLDL3Mt89JEEnDzQE70JKpBJydyhpRFCIHFJkmi+WaGrn9Y6cn0l+RIai
WAykbfB30nCuqjCDdFplUgsIpvlY1kglAFM+heHF8TDmlzN2a6sw8p749wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACjjEGXmTcpVO5Wdo337XxWf2eFMB8GA1UdIwQY
MBaAFEJUObDKfxTaqbYbEb0XvcwbpzhsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxRNXNNcF9GTnFwdGhzUnZSZTl6QnVuT0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOWM3NzAtOWU4Zi00MDA4LWI3Zjct
YzU1MGZhMjExZmI3LzEvQUtPTVFaZVpOeWxVN2xaMmpmZnRmRlpfWjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOWM3NzAtOWU4Zi00MDA4LWI3ZjctYzU1MGZhMjExZmI3
LzEvUWxRNXNNcF9GTnFwdGhzUnZSZTl6QnVuT0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuepnMA0G
CSqGSIb3DQEBCwUAA4IBAQAmpzjw/TJzdavjAD6U5ZsyZmf94JPi+/DF3irnyhC5
4sPKfsbGMX4oE7e2P5hA8bUTEpOK3t4/XLEAUalqZBUWOOMQavOKCPKY87MtCKiM
PxuT4qbz6rt8HDv3GSiOw01EXSxfjtJe6IG89Er2rFpucgbi9ppGv/nx+TFEcLGW
SATHF1D4TADH/YDHPCOAouVfNbb3stuLB6BbfwTSSfhS8KBPumNipCV5XlYsyd41
A+PSqPKFGGMYkYliE6oqZhSuXY/s3PyqGZjlhHD1zeDpxJ50t4qGAW+J5o7+dHwV
bjPblRece/1EFnS6rvHsVApPfYKuEBynrX1xXdPE45vJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:03 2025 by rpki-client