Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/rO3rBHeUdzO45KEgLURgvLQ06xY.roa
File: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (raw, json)
Hash identifier: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=
Subject key identifier: AC:ED:EB:04:77:94:77:33:B8:E4:A1:20:2D:44:60:BC:B4:34:EB:16
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 0194266BCA3AADE97AAA08109F3739EB5352
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/rO3rBHeUdzO45KEgLURgvLQ06xY.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209646
IP address blocks: 185.63.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ca:3a:ad:e9:7a:aa:08:10:9f:37:39:eb:53:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acedeb0477947733b8e4a1202d4460bcb434eb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:ce:43:ef:2f:98:c3:1b:c5:16:dd:8b:0b:
b1:e8:c9:33:9d:0f:32:1d:1d:26:cb:3d:38:ee:cd:
8c:29:bb:b8:10:7e:0e:4a:eb:9e:e1:6b:0d:a4:27:
35:9f:23:8d:ec:d3:0f:ed:a1:cd:e7:12:e6:be:63:
cd:f7:55:92:b8:38:16:ec:8c:47:49:83:17:7c:89:
38:9c:ff:87:44:cf:ce:f9:49:ef:47:7c:5e:0c:25:
7c:1d:ee:40:b8:21:b9:85:18:d9:52:81:68:ec:b7:
ad:b1:5f:57:68:e8:85:65:a7:01:b5:5f:27:b5:35:
5d:4b:8d:53:ea:36:c8:c8:68:1d:f5:48:cf:88:5e:
9b:3b:eb:9f:7d:db:8d:10:cc:72:3f:8d:0d:23:9d:
cf:bc:bb:7b:49:d6:5f:40:b6:3f:4a:a9:64:0c:fa:
68:53:84:3e:c3:26:8c:ec:8e:d8:00:17:dd:ba:f0:
1f:7a:e7:e2:d1:97:eb:c1:e6:4b:83:82:60:07:82:
39:8d:fd:15:41:ba:fd:04:b6:0a:f3:77:b3:f4:1d:
10:f2:37:84:5f:3e:ce:1f:27:6a:9d:63:06:36:e6:
a1:6f:db:5b:58:fb:ef:4a:1f:9f:fc:a8:f8:ec:4b:
3b:54:7e:9c:86:f7:f0:94:07:eb:a6:0e:6f:65:32:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:EB:04:77:94:77:33:B8:E4:A1:20:2D:44:60:BC:B4:34:EB:16
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/rO3rBHeUdzO45KEgLURgvLQ06xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7d:a1:ee:d5:8e:82:24:4f:6f:71:17:59:b0:8d:04:6b:5a:
bc:e6:e8:55:ac:e6:79:0e:0c:54:37:7b:5d:eb:94:ec:83:59:
35:a9:b9:c1:c1:7e:ee:33:c4:3b:02:71:85:98:4a:a8:29:18:
8f:41:21:70:3b:ab:82:8f:cd:71:e2:34:ff:9b:86:d1:0f:34:
fb:1f:58:32:11:81:dc:60:88:0a:3d:78:53:74:da:11:67:0a:
f0:b8:b6:c3:ad:54:0b:01:d6:31:6f:66:5a:88:58:9e:eb:2f:
44:a7:30:1b:6d:b2:0f:8b:10:e2:30:4b:20:69:a1:00:ed:cb:
ba:96:72:c6:0a:7d:4b:ca:8d:c8:8d:18:9c:44:3a:46:53:97:
92:c0:c5:a6:0b:69:dd:55:f7:b9:42:6e:dd:35:4b:50:2a:1c:
f8:61:cc:ad:0d:18:fa:50:de:ba:79:98:48:99:a3:3e:a1:f0:
86:6c:1a:57:96:5d:f6:03:63:0e:ce:09:39:93:c5:fe:cb:48:
2b:9c:94:07:1e:12:1d:2d:30:c7:06:6c:df:95:87:5d:99:28:
b2:c8:77:88:0e:46:bf:66:c8:f1:57:81:66:85:1d:f8:e4:a5:
a1:d8:a6:ed:01:79:b3:8f:ee:cf:5d:6b:af:f7:e3:c4:0d:b8:
3a:90:d2:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8o6rel6qggQnzc561NSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGI4NWI1MWUzM2RmMGM2OTRkYmQ3N2JjOGMyYmEzZWFi
NGQ1MTkwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2VkZWIwNDc3OTQ3NzMzYjhlNGExMjAyZDQ0NjBiY2I0MzRlYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aDOQ+8vmMMbxRbdiwux6MkznQ8y
HR0myz047s2MKbu4EH4OSuue4WsNpCc1nyON7NMP7aHN5xLmvmPN91WSuDgW7IxH
SYMXfIk4nP+HRM/O+UnvR3xeDCV8He5AuCG5hRjZUoFo7LetsV9XaOiFZacBtV8n
tTVdS41T6jbIyGgd9UjPiF6bO+uffduNEMxyP40NI53PvLt7SdZfQLY/SqlkDPpo
U4Q+wyaM7I7YABfduvAfeufi0ZfrweZLg4JgB4I5jf0VQbr9BLYK83ez9B0Q8jeE
Xz7OHydqnWMGNuahb9tbWPvvSh+f/Kj47Es7VH6chvfwlAfrpg5vZTI94QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzt6wR3lHczuOShIC1EYLy0NOsWMB8GA1UdIwQY
MBaAFHmLhbUeM98MaU29d7yMK6PqtNUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEt
OTQwZGZiOTYxNjMwLzEvck8zckJIZVVkek80NUtFZ0xVUmd2TFEwNnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEtOTQwZGZiOTYxNjMw
LzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT+gMA0G
CSqGSIb3DQEBCwUAA4IBAQBufaHu1Y6CJE9vcRdZsI0Ea1q85uhVrOZ5DgxUN3td
65Tsg1k1qbnBwX7uM8Q7AnGFmEqoKRiPQSFwO6uCj81x4jT/m4bRDzT7H1gyEYHc
YIgKPXhTdNoRZwrwuLbDrVQLAdYxb2ZaiFie6y9EpzAbbbIPixDiMEsgaaEA7cu6
lnLGCn1Lyo3IjRicRDpGU5eSwMWmC2ndVfe5Qm7dNUtQKhz4YcytDRj6UN66eZhI
maM+ofCGbBpXll32A2MOzgk5k8X+y0grnJQHHhIdLTDHBmzflYddmSiyyHeIDka/
ZsjxV4FmhR345KWh2KbtAXmzj+7PXWuv9+PEDbg6kNLA
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:55:24 2025 by rpki-client