Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa
File: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (raw, json)
Hash identifier: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=
Subject key identifier: 03:0B:4A:10:77:D8:CB:19:D0:D6:D8:7E:56:56:71:4A:7A:FB:83:A4
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01941F8C8AE05E77F52F06B23B4C0C5B8980
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203108
IP address blocks: 185.144.220.0/22 maxlen: 24
2a07:5b00::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8a:e0:5e:77:f5:2f:06:b2:3b:4c:0c:5b:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=030b4a1077d8cb19d0d6d87e5656714a7afb83a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:ef:44:fe:37:b6:9e:50:75:c7:0c:32:ee:
ea:61:60:58:f6:22:be:9a:13:2b:ff:f1:04:87:63:
a1:24:6c:51:0b:c8:bd:02:c9:9a:86:90:bd:f9:02:
9f:e3:2a:bf:12:b5:90:2f:95:f0:19:e3:54:3c:e4:
7d:df:0e:79:72:bb:ce:7d:f1:2a:e5:cb:d8:06:ab:
dc:39:f4:0e:0b:bf:1a:3a:a4:ea:c6:ee:8d:fa:df:
a1:23:39:7e:1c:9f:64:74:56:79:ff:95:5a:89:2c:
29:31:70:81:83:3c:57:92:7a:ff:2a:33:a0:e6:b6:
96:05:c0:9e:18:c0:80:f0:47:e8:3b:a2:11:8e:e6:
aa:ec:7a:30:67:d6:ec:08:cc:d4:39:29:72:57:18:
ba:cc:62:0b:67:9d:96:5d:a3:4e:98:5e:8f:13:fc:
9b:32:96:c3:a0:e5:bb:46:7a:17:36:10:63:79:2b:
b3:0d:e0:4a:a1:05:7e:bd:cb:83:e7:b0:2f:6e:da:
48:95:0e:ec:22:b2:38:90:53:fe:32:36:53:60:49:
bc:e2:07:2e:6d:68:47:8a:c3:f9:fa:f9:5b:93:f0:
16:e6:09:f7:77:30:f7:2d:ac:8a:92:49:2d:5c:11:
5e:78:39:c6:0e:64:98:40:6d:a6:7d:24:d2:34:3a:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:4A:10:77:D8:CB:19:D0:D6:D8:7E:56:56:71:4A:7A:FB:83:A4
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.220.0/22
IPv6:
2a07:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:cb:8c:46:ba:21:0a:1a:6c:64:98:5a:e5:4e:1d:d3:ba:87:
43:19:a2:c8:28:75:be:3a:df:f5:cc:d1:31:14:96:55:5b:6e:
5f:c9:b0:a0:f1:2b:a1:3b:e4:8c:26:16:d8:f9:12:79:dd:85:
2e:2d:92:1e:60:c1:90:31:c3:44:e9:b0:ae:f0:18:aa:b6:b7:
0d:6b:5c:41:b8:81:95:98:9b:37:cd:c6:96:77:a7:5b:1f:00:
dd:ec:3d:7d:9f:1a:3f:1e:0d:12:6a:fe:1b:db:ce:7d:a6:a3:
b5:5a:39:ac:1b:14:5a:c4:ed:6f:36:75:3c:0b:70:23:ae:f6:
68:5a:0b:c0:b0:2b:c8:20:87:b5:4f:f7:2f:bf:b2:dc:58:6b:
a7:53:1b:70:f2:74:3b:3a:e4:6a:5e:ae:08:0f:26:3b:41:23:
e5:c1:82:98:a8:da:01:9f:68:30:4c:bc:6b:0f:d7:cd:5f:18:
f1:ef:36:a2:58:c5:07:cc:7a:cb:49:db:4e:98:6d:d1:67:46:
fa:31:19:a9:69:c9:92:52:e4:9d:8b:ae:22:fc:3e:80:dd:45:
9c:e8:cb:09:9b:07:d6:79:e9:f1:27:ba:ba:73:8c:a4:61:31:
1a:97:d4:96:c8:9e:67:91:88:bd:d1:62:a3:ac:ef:50:eb:23:
24:35:d3:7e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjIrgXnf1LwayO0wMW4mAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3
OWVmNzcwHhcNMjUwMTAxMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzBiNGExMDc3ZDhjYjE5ZDBkNmQ4N2U1NjU2NzE0YTdhZmI4M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI3vRP43tp5QdccMMu7qYWBY9iK+
mhMr//EEh2OhJGxRC8i9AsmahpC9+QKf4yq/ErWQL5XwGeNUPOR93w55crvOffEq
5cvYBqvcOfQOC78aOqTqxu6N+t+hIzl+HJ9kdFZ5/5VaiSwpMXCBgzxXknr/KjOg
5raWBcCeGMCA8EfoO6IRjuaq7HowZ9bsCMzUOSlyVxi6zGILZ52WXaNOmF6PE/yb
MpbDoOW7RnoXNhBjeSuzDeBKoQV+vcuD57AvbtpIlQ7sIrI4kFP+MjZTYEm84gcu
bWhHisP5+vlbk/AW5gn3dzD3LayKkkktXBFeeDnGDmSYQG2mfSTSNDpSzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAMLShB32MsZ0NbYflZWcUp6+4OkMB8GA1UdIwQY
MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt
ZGFhNzM5MGI1YmE3LzEvQXd0S0VIZll5eG5RMXRoLVZsWnhTbnI3ZzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3
LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZDcMA0E
AgACMAcDBQMqB1sAMA0GCSqGSIb3DQEBCwUAA4IBAQBuy4xGuiEKGmxkmFrlTh3T
uodDGaLIKHW+Ot/1zNExFJZVW25fybCg8SuhO+SMJhbY+RJ53YUuLZIeYMGQMcNE
6bCu8BiqtrcNa1xBuIGVmJs3zcaWd6dbHwDd7D19nxo/Hg0Sav4b2859pqO1Wjms
GxRaxO1vNnU8C3AjrvZoWgvAsCvIIIe1T/cvv7LcWGunUxtw8nQ7OuRqXq4IDyY7
QSPlwYKYqNoBn2gwTLxrD9fNXxjx7zaiWMUHzHrLSdtOmG3RZ0b6MRmpacmSUuSd
i64i/D6A3UWc6MsJmwfWeenxJ7q6c4ykYTEal9SWyJ5nkYi90WKjrO9Q6yMkNdN+
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:34 2025 by rpki-client