Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa
File: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (raw, json)
Hash identifier: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=
Subject key identifier: B5:6F:4A:D2:09:AB:DE:03:49:35:98:BA:1F:83:A3:F1:ED:C9:9F:5D
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019421446424EA62ECE681837C2A8990213A
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 185.121.224.0/24 maxlen: 24
185.188.141.0/24 maxlen: 24
185.188.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:24:ea:62:ec:e6:81:83:7c:2a:89:90:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56f4ad209abde03493598ba1f83a3f1edc99f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:2f:66:a4:cb:7e:a0:ef:4b:c2:88:1a:bc:
e2:3a:2e:4e:1c:06:50:86:b5:c7:f6:a7:5d:43:97:
82:d9:c4:4f:75:16:6b:57:76:f1:28:da:55:8d:ee:
66:02:0f:0d:fd:df:c6:2d:ae:53:9f:97:34:fd:ee:
ed:07:a8:6b:1e:2b:61:73:ce:43:f9:aa:a0:7e:81:
8d:dd:d8:11:3e:75:40:2a:26:46:8d:da:0a:00:1f:
46:3b:82:5c:12:14:6f:ed:3f:95:49:70:22:8a:66:
00:cc:eb:1a:be:63:5a:64:fa:f9:26:b4:10:3c:f2:
2b:ab:39:22:80:2b:c8:21:d6:45:a2:68:9e:9e:70:
9f:a9:93:bf:f6:83:9c:97:b7:3e:d4:65:4f:d2:0c:
0f:0d:4b:8f:e8:db:e6:a3:5b:bb:f6:8c:5a:54:bb:
87:19:c4:91:0e:0b:b4:6b:fa:2a:4a:09:d2:d8:53:
40:3e:4b:7b:76:33:6f:64:dd:51:5d:b7:59:f0:b7:
67:f1:ba:aa:2e:65:67:88:64:1a:01:17:8c:8c:7e:
51:67:c4:c0:e8:1b:71:58:35:95:76:49:94:a0:a5:
1b:cd:b5:2e:6f:f6:38:a3:44:f8:f0:04:f6:8f:af:
91:f1:db:77:61:13:ed:d4:34:2c:c8:08:d9:e2:b3:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:4A:D2:09:AB:DE:03:49:35:98:BA:1F:83:A3:F1:ED:C9:9F:5D
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/24
185.188.141.0-185.188.142.255
Signature Algorithm: sha256WithRSAEncryption
54:73:64:05:2f:71:80:5c:4f:20:60:67:6e:2c:92:af:78:0a:
c8:02:3f:df:d2:80:6f:e0:2a:3d:cf:88:4d:35:ef:34:63:7a:
72:99:23:19:76:4f:0e:c2:de:a8:d3:50:ca:3f:11:46:79:f7:
6f:14:09:6f:c4:30:80:2a:ed:5d:27:e8:df:29:57:6e:13:9c:
d2:0b:5a:6d:2b:4f:f8:40:19:39:25:d6:c2:ad:80:27:18:1a:
ed:7a:cb:19:5b:04:b2:97:30:99:ed:49:94:1b:30:9e:49:d2:
b1:60:be:37:a5:28:ec:d8:c2:f0:66:d1:f5:4a:a7:ba:a8:15:
06:14:62:76:7f:2c:b6:9e:b4:ef:f3:48:c3:0a:f8:61:8b:48:
fb:be:48:39:88:3f:3a:0e:3a:28:0a:13:1e:f2:46:f3:37:8b:
a5:65:09:d5:44:9d:af:aa:25:77:ef:dc:94:9a:97:df:93:f7:
09:68:61:4a:ff:8f:4f:a5:df:76:cc:db:c9:cc:2c:1a:08:a7:
07:97:62:c8:ff:e7:a3:9b:b4:be:55:a4:a0:14:11:ae:65:3c:
c2:dc:8f:b7:cb:e1:af:9b:cf:7d:57:a9:d1:8e:bd:8a:cc:ec:
e6:7a:ba:43:15:27:a0:92:04:42:47:fd:98:10:d0:96:79:8b:
b9:f0:e2:a8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQhRGQk6mLs5oGDfCqJkCE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2
OGFjNTUwHhcNMjUwMTAxMDk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTZmNGFkMjA5YWJkZTAzNDkzNTk4YmExZjgzYTNmMWVkYzk5ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD4vZqTLfqDvS8KIGrziOi5OHAZQ
hrXH9qddQ5eC2cRPdRZrV3bxKNpVje5mAg8N/d/GLa5Tn5c0/e7tB6hrHithc85D
+aqgfoGN3dgRPnVAKiZGjdoKAB9GO4JcEhRv7T+VSXAiimYAzOsavmNaZPr5JrQQ
PPIrqzkigCvIIdZFomiennCfqZO/9oOcl7c+1GVP0gwPDUuP6Nvmo1u79oxaVLuH
GcSRDgu0a/oqSgnS2FNAPkt7djNvZN1RXbdZ8Ldn8bqqLmVniGQaAReMjH5RZ8TA
6BtxWDWVdkmUoKUbzbUub/Y4o0T48AT2j6+R8dt3YRPt1DQsyAjZ4rNhhQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLVvStIJq94DSTWYuh+Do/HtyZ9dMB8GA1UdIwQY
MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt
NDBlYWViYzFjNDdlLzEvdFc5SzBnbXIzZ05KTlppNkg0T2o4ZTNKbjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl
LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuXngMAwD
BAC5vI0DBAC5vI4wDQYJKoZIhvcNAQELBQADggEBAFRzZAUvcYBcTyBgZ24skq94
CsgCP9/SgG/gKj3PiE017zRjenKZIxl2Tw7C3qjTUMo/EUZ5928UCW/EMIAq7V0n
6N8pV24TnNILWm0rT/hAGTkl1sKtgCcYGu16yxlbBLKXMJntSZQbMJ5J0rFgvjel
KOzYwvBm0fVKp7qoFQYUYnZ/LLaetO/zSMMK+GGLSPu+SDmIPzoOOigKEx7yRvM3
i6VlCdVEna+qJXfv3JSal9+T9wloYUr/j0+l33bM28nMLBoIpweXYsj/56ObtL5V
pKAUEa5lPMLcj7fL4a+bz31XqdGOvYrM7OZ6ukMVJ6CSBEJH/ZgQ0JZ5i7nw4qg=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:28 2025 by rpki-client