Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa
File: Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa (raw, json)
Hash identifier: 8EFmYGHa2Ca7QupSPS4pv/DIhNTQn0ESKQFXQFpdKM4=
Subject key identifier: 2B:0B:F5:C9:4C:18:B5:C5:9C:68:D0:59:E8:A3:CE:F7:93:0A:C9:31
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B43B0526524D3AC3294743049540
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197726
IP address blocks: 212.86.110.0/24 maxlen: 24
212.86.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b4:3b:05:26:52:4d:3a:c3:29:47:43:04:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0bf5c94c18b5c59c68d059e8a3cef7930ac931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:85:ad:5c:3f:87:2b:b6:58:6f:06:d5:cc:
4b:17:34:5d:ec:23:cd:73:6c:e4:d7:75:13:fb:e2:
7e:13:83:d2:53:19:69:a3:e7:8d:39:37:43:ca:94:
4c:80:56:af:36:f8:52:b3:5d:09:c4:53:fc:c5:af:
09:02:c1:b8:2f:56:1a:a1:59:2f:46:05:2e:01:df:
4c:c0:0a:19:ae:9a:3e:3c:3a:f3:c0:7c:da:dd:c4:
1a:eb:38:5e:1d:81:86:4e:5e:3c:72:e3:fd:be:bc:
5b:6c:c6:2f:34:59:0d:2d:14:9f:70:d9:4e:b0:56:
8e:ce:74:bc:66:9b:1e:d6:b5:11:25:8c:e7:c7:99:
75:50:4e:9b:1a:7d:8e:e2:03:44:14:2f:78:1a:cb:
0e:bb:0d:26:75:7a:40:0d:2d:08:de:d6:9a:fc:51:
65:26:66:f2:c5:4e:3b:5f:5a:f5:08:e4:6c:52:3c:
5a:2d:8c:a6:6b:46:8a:5a:36:37:84:0f:eb:0e:99:
5c:99:54:19:36:52:3a:36:71:1d:03:7e:43:ec:5f:
cb:75:79:86:94:52:ab:2e:96:b5:7f:c3:2d:e4:18:
12:e6:e2:17:0a:33:88:83:37:3b:f8:22:97:6e:a0:
45:8b:0d:db:65:aa:df:a4:b6:c9:8a:29:94:d5:5c:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:F5:C9:4C:18:B5:C5:9C:68:D0:59:E8:A3:CE:F7:93:0A:C9:31
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Kwv1yUwYtcWcaNBZ6KPO95MKyTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.110.0/23
Signature Algorithm: sha256WithRSAEncryption
13:b9:a8:52:21:d1:a9:96:7f:3e:62:fe:73:1d:ee:97:f2:66:
58:43:81:14:7a:35:4a:c4:6b:ac:5d:28:3b:c6:65:10:cd:34:
2a:49:d7:96:7b:5e:e6:01:f0:ee:42:27:7e:98:e0:d6:8a:ae:
81:5a:0e:6e:f7:d1:4b:77:50:d3:75:29:5c:1c:58:8d:00:00:
08:49:db:f2:e1:61:64:83:89:d4:b9:d7:46:e0:5e:7c:86:97:
2a:11:20:c6:ee:d1:ce:89:c7:f8:ed:ee:a1:f4:62:57:c5:d7:
42:28:27:79:0c:ec:0e:2e:a7:66:2c:07:04:68:80:45:36:71:
b3:1a:78:22:e7:33:60:1e:ee:2e:e5:64:40:ae:58:9d:1e:d0:
6e:54:b8:23:23:74:79:bc:6d:4a:43:f2:c0:20:7a:b8:ef:03:
ae:0e:8e:0c:3d:96:a9:a0:32:0d:d2:ff:e4:c2:25:3a:5e:bd:
5e:5c:89:a9:66:d9:4c:9e:cc:aa:fb:6d:0d:ab:fc:36:b7:d0:
d7:fa:e3:c2:73:3b:f2:9f:fc:38:c9:fd:10:31:f4:20:a4:ce:
60:e8:25:52:29:32:d2:91:e3:a4:f3:ae:6a:dc:ce:d3:d4:e0:
54:6e:19:94:93:43:c9:ba:28:a9:24:f1:55:a5:94:15:85:09:
56:df:59:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks7Q7BSZSTTrDKUdDBJVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjBiZjVjOTRjMThiNWM1OWM2OGQwNTllOGEzY2VmNzkzMGFjOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSFrVw/hyu2WG8G1cxLFzRd7CPN
c2zk13UT++J+E4PSUxlpo+eNOTdDypRMgFavNvhSs10JxFP8xa8JAsG4L1YaoVkv
RgUuAd9MwAoZrpo+PDrzwHza3cQa6zheHYGGTl48cuP9vrxbbMYvNFkNLRSfcNlO
sFaOznS8Zpse1rURJYznx5l1UE6bGn2O4gNEFC94GssOuw0mdXpADS0I3taa/FFl
JmbyxU47X1r1CORsUjxaLYyma0aKWjY3hA/rDplcmVQZNlI6NnEdA35D7F/LdXmG
lFKrLpa1f8Mt5BgS5uIXCjOIgzc7+CKXbqBFiw3bZarfpLbJiimU1Vx2YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCsL9clMGLXFnGjQWeijzveTCskxMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvS3d2MXlVd1l0Y1djYU5CWjZLUE85NU1LeVRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FZuMA0G
CSqGSIb3DQEBCwUAA4IBAQATuahSIdGpln8+Yv5zHe6X8mZYQ4EUejVKxGusXSg7
xmUQzTQqSdeWe17mAfDuQid+mODWiq6BWg5u99FLd1DTdSlcHFiNAAAISdvy4WFk
g4nUuddG4F58hpcqESDG7tHOicf47e6h9GJXxddCKCd5DOwOLqdmLAcEaIBFNnGz
Gngi5zNgHu4u5WRArlidHtBuVLgjI3R5vG1KQ/LAIHq47wOuDo4MPZapoDIN0v/k
wiU6Xr1eXImpZtlMnsyq+20Nq/w2t9DX+uPCczvyn/w4yf0QMfQgpM5g6CVSKTLS
keOk865q3M7T1OBUbhmUk0PJuiipJPFVpZQVhQlW31kp
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:07:39 2025 by rpki-client