Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/70HJo7jmffKHG2PpOcP0KSY9roI.roa
File: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (raw, json)
Hash identifier: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=
Subject key identifier: EF:41:C9:A3:B8:E6:7D:F2:87:1B:63:E9:39:C3:F4:29:26:3D:AE:82
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0194258EE790B29E794BFA47890B41EC9FBA
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/70HJo7jmffKHG2PpOcP0KSY9roI.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205982
IP address blocks: 185.200.108.0/22 maxlen: 32
185.200.108.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e7:90:b2:9e:79:4b:fa:47:89:0b:41:ec:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef41c9a3b8e67df2871b63e939c3f429263dae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:ae:3b:ae:31:47:ef:18:24:35:29:ba:c1:
e0:9b:4b:8c:e5:4f:4b:db:19:63:47:e1:4d:fb:8c:
ff:f2:b3:1f:02:dc:2c:b9:e6:a0:f9:de:b1:0b:98:
f8:79:73:c7:4f:31:af:a8:31:fb:14:fa:ff:e6:30:
51:2c:f5:4f:bc:cf:46:0c:69:bc:45:f2:95:83:6f:
ca:d6:c2:ff:78:fd:79:68:f8:df:a3:fe:99:6c:47:
9d:18:be:c3:4f:bc:19:5a:a2:07:f2:d6:20:36:43:
fc:63:c2:9f:4e:1f:16:d4:ca:da:ef:7a:c8:b5:88:
ef:ea:4f:ce:0f:da:23:3a:39:c7:da:7e:54:3b:ba:
5b:19:a5:9c:b5:91:4f:75:17:12:8d:d4:da:a4:67:
db:bc:56:90:b3:ca:73:a3:0a:78:52:c7:fa:3f:af:
ca:10:f3:8e:3e:1d:31:de:6d:c2:54:fc:df:ea:01:
6a:87:c6:6c:cf:14:d6:a3:aa:cd:3f:ab:72:c8:1c:
8e:6d:b9:92:45:c3:17:3b:6c:76:94:37:4d:4a:b6:
10:d8:2f:32:1d:85:9e:94:05:c2:f7:00:d1:01:5f:
bf:68:a4:73:96:b1:a8:a2:66:00:67:30:7d:f3:b8:
69:75:f6:9f:26:61:aa:39:ff:a0:84:bf:c1:9d:e2:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:41:C9:A3:B8:E6:7D:F2:87:1B:63:E9:39:C3:F4:29:26:3D:AE:82
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/70HJo7jmffKHG2PpOcP0KSY9roI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:ac:93:aa:3d:94:9d:ff:64:7d:57:c8:20:02:1c:9b:97:06:
8f:df:a6:ae:68:79:b9:b5:ed:18:94:c9:96:e5:d4:10:41:b6:
14:f4:b8:05:19:bb:51:37:b5:45:45:a7:9b:ff:ee:12:4b:8a:
d0:c8:bf:31:ee:da:f6:27:e9:e6:82:65:09:8f:44:5e:35:3c:
55:bc:49:19:66:72:21:5e:6f:5e:09:15:bb:b3:53:90:92:6c:
4f:44:c5:95:01:71:38:6f:66:4f:5f:06:45:c3:a2:ed:19:92:
06:83:98:ca:2c:c0:c5:38:60:17:65:64:f5:e1:7b:53:a6:f2:
a7:a8:fa:e9:c4:4b:33:f4:45:90:ac:d5:90:ba:75:42:f7:c9:
8c:89:4e:9b:e4:ce:79:c7:6a:68:be:1d:33:b1:bb:30:f7:b2:
57:ba:38:e0:c6:0b:b5:a3:5a:76:ff:6f:e0:09:1b:fe:29:ac:
6b:3b:6a:f0:a4:da:6a:ee:da:96:ec:71:78:54:15:09:3a:f1:
64:26:c3:97:05:ee:c2:02:d2:d2:3f:fe:86:ed:cc:67:71:4e:
59:cd:bf:b6:70:bb:f1:57:57:c0:72:91:46:8f:4c:1e:3b:fa:
28:3d:40:4b:f0:a9:f6:94:3a:dc:9a:44:11:3b:34:bd:28:de:
33:7e:40:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljueQsp55S/pHiQtB7J+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5
MjVhNzIwHhcNMjUwMTAyMDU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjQxYzlhM2I4ZTY3ZGYyODcxYjYzZTkzOWMzZjQyOTI2M2RhZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PCuO64xR+8YJDUpusHgm0uM5U9L
2xljR+FN+4z/8rMfAtwsueag+d6xC5j4eXPHTzGvqDH7FPr/5jBRLPVPvM9GDGm8
RfKVg2/K1sL/eP15aPjfo/6ZbEedGL7DT7wZWqIH8tYgNkP8Y8KfTh8W1Mra73rI
tYjv6k/OD9ojOjnH2n5UO7pbGaWctZFPdRcSjdTapGfbvFaQs8pzowp4Usf6P6/K
EPOOPh0x3m3CVPzf6gFqh8ZszxTWo6rNP6tyyByObbmSRcMXO2x2lDdNSrYQ2C8y
HYWelAXC9wDRAV+/aKRzlrGoomYAZzB987hpdfafJmGqOf+ghL/BneLiIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9ByaO45n3yhxtj6TnD9CkmPa6CMB8GA1UdIwQY
MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt
MTBkZTY3MTIxMTk3LzEvNzBISm83am1mZktIRzJQcE9jUDBLU1k5cm9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3
LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuchsMA0G
CSqGSIb3DQEBCwUAA4IBAQBNrJOqPZSd/2R9V8ggAhyblwaP36auaHm5te0YlMmW
5dQQQbYU9LgFGbtRN7VFRaeb/+4SS4rQyL8x7tr2J+nmgmUJj0ReNTxVvEkZZnIh
Xm9eCRW7s1OQkmxPRMWVAXE4b2ZPXwZFw6LtGZIGg5jKLMDFOGAXZWT14XtTpvKn
qPrpxEsz9EWQrNWQunVC98mMiU6b5M55x2povh0zsbsw97JXujjgxgu1o1p2/2/g
CRv+KaxrO2rwpNpq7tqW7HF4VBUJOvFkJsOXBe7CAtLSP/6G7cxncU5Zzb+2cLvx
V1fAcpFGj0weO/ooPUBL8Kn2lDrcmkQROzS9KN4zfkAD
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:52 2025 by rpki-client