Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Dbw0YKXPol3saHGjQJtz9o_YK0E.roa
File: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (raw, json)
Hash identifier: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=
Subject key identifier: 0D:BC:34:60:A5:CF:A2:5D:EC:68:71:A3:40:9B:73:F6:8F:D8:2B:41
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019420D662C7EBB2141982D0EC895BDB0894
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Dbw0YKXPol3saHGjQJtz9o_YK0E.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61029
IP address blocks: 185.77.196.0/24 maxlen: 24
2a03:1980:d113::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:62:c7:eb:b2:14:19:82:d0:ec:89:5b:db:08:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dbc3460a5cfa25dec6871a3409b73f68fd82b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:e7:62:a6:26:5b:13:75:1a:05:49:c1:52:
d0:0e:dc:c2:4d:ec:b5:9c:1e:cd:8e:e7:fe:e4:c6:
3b:7a:93:be:88:fd:e6:00:1e:16:a4:34:e1:4e:fe:
f6:17:93:2d:f4:f2:b0:63:53:75:98:a4:0b:2e:3b:
53:bc:e1:3e:7b:b8:3b:f1:ad:87:7e:86:24:12:a5:
4b:06:3f:9f:32:e6:9d:b0:f0:90:a9:a8:d7:42:6a:
f7:c2:81:7f:a5:2b:0b:db:66:25:0c:5e:da:18:ea:
11:18:07:04:b5:c9:b2:91:61:91:67:e5:b2:da:5e:
65:b7:8c:58:30:fd:05:bc:54:5d:09:b9:18:82:db:
cb:59:af:1c:f8:99:ce:00:83:bb:ed:08:21:25:2f:
c1:04:23:93:ff:b4:7e:50:3e:d1:c5:d8:e1:21:a2:
f8:36:7d:4a:ef:dd:36:ff:02:92:44:4b:ee:be:60:
3c:75:a3:7b:42:25:b7:41:d2:42:d8:21:e5:7b:a7:
44:2b:44:36:d4:65:31:28:9a:d2:97:e6:ba:a8:08:
91:41:e3:f2:5e:b8:c9:09:f8:12:6b:64:16:cc:b1:
f1:f1:8c:3a:b2:b8:df:35:35:43:b2:ba:8e:42:af:
fd:f3:d2:4a:ec:6f:5e:2d:2e:88:ce:e2:f7:09:e8:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:34:60:A5:CF:A2:5D:EC:68:71:A3:40:9B:73:F6:8F:D8:2B:41
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Dbw0YKXPol3saHGjQJtz9o_YK0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.196.0/24
IPv6:
2a03:1980:d113::/48
Signature Algorithm: sha256WithRSAEncryption
1a:63:f5:d4:50:01:bf:e1:84:eb:b5:f0:9a:09:df:f7:3b:59:
be:c5:df:4a:2e:5e:e2:77:57:6d:3b:70:d7:2d:17:38:f0:11:
6e:32:d9:9c:3f:4c:f6:61:ff:ee:21:41:3c:77:2e:20:6c:c4:
ff:f1:db:1c:0c:41:10:9f:60:1e:6a:01:37:6f:e5:a5:5c:b0:
d9:db:d6:b1:58:de:cd:b2:f9:99:40:9e:7b:2a:5a:6f:f7:a9:
78:fe:db:90:35:e7:0f:43:67:4f:1a:d1:f0:71:cd:01:26:c2:
31:95:fe:30:f6:84:e4:b8:b7:31:9e:85:ae:31:a5:17:26:47:
44:3b:98:74:d9:76:05:10:a4:e6:03:91:90:9e:8e:74:54:65:
50:1b:4c:41:85:27:8b:95:ba:60:36:90:51:cb:14:d5:93:d5:
7a:43:26:a7:99:c3:be:dd:88:f6:a0:44:87:6b:ea:c0:a1:11:
02:72:9f:27:df:af:28:ea:8d:3f:65:81:cc:3d:41:a9:55:39:
5a:16:54:6d:47:b3:b5:41:c1:fc:45:93:1d:4f:97:00:a0:03:
95:6f:18:a5:1b:52:64:f2:12:d4:54:a8:b1:ba:9b:f3:b3:79:
c3:37:54:28:b9:92:24:6d:7e:1b:95:e7:81:66:ba:a3:c5:dd:
a2:73:f0:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQg1mLH67IUGYLQ7Ilb2wiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx
Y2IwZTIwHhcNMjUwMTAxMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGJjMzQ2MGE1Y2ZhMjVkZWM2ODcxYTM0MDliNzNmNjhmZDgyYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolvnYqYmWxN1GgVJwVLQDtzCTey1
nB7Njuf+5MY7epO+iP3mAB4WpDThTv72F5Mt9PKwY1N1mKQLLjtTvOE+e7g78a2H
foYkEqVLBj+fMuadsPCQqajXQmr3woF/pSsL22YlDF7aGOoRGAcEtcmykWGRZ+Wy
2l5lt4xYMP0FvFRdCbkYgtvLWa8c+JnOAIO77QghJS/BBCOT/7R+UD7RxdjhIaL4
Nn1K7902/wKSREvuvmA8daN7QiW3QdJC2CHle6dEK0Q21GUxKJrSl+a6qAiRQePy
XrjJCfgSa2QWzLHx8Yw6srjfNTVDsrqOQq/989JK7G9eLS6IzuL3CejtnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA28NGClz6Jd7Ghxo0Cbc/aP2CtBMB8GA1UdIwQY
MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut
NzYwM2U1ZGQ1NzA3LzEvRGJ3MFlLWFBvbDNzYUhHalFKdHo5b19ZSzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3
LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuU3EMA8E
AgACMAkDBwAqAxmA0RMwDQYJKoZIhvcNAQELBQADggEBABpj9dRQAb/hhOu18JoJ
3/c7Wb7F30ouXuJ3V207cNctFzjwEW4y2Zw/TPZh/+4hQTx3LiBsxP/x2xwMQRCf
YB5qATdv5aVcsNnb1rFY3s2y+ZlAnnsqWm/3qXj+25A15w9DZ08a0fBxzQEmwjGV
/jD2hOS4tzGeha4xpRcmR0Q7mHTZdgUQpOYDkZCejnRUZVAbTEGFJ4uVumA2kFHL
FNWT1XpDJqeZw77diPagRIdr6sChEQJynyffryjqjT9lgcw9QalVOVoWVG1Hs7VB
wfxFkx1PlwCgA5VvGKUbUmTyEtRUqLG6m/OzecM3VCi5kiRtfhuV54FmuqPF3aJz
8JI=
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:06:16 2025 by rpki-client