Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa
File: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (raw, json)
Hash identifier: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=
Subject key identifier: C3:40:60:56:BC:6F:41:59:E3:5B:65:F7:AA:30:50:DE:4A:3D:C4:E7
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 0194E01874549669527DDBD7A182AF3D5F13
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa
Signing time: Fri 07 Feb 2025 11:08:06 +0000
ROA not before: Fri 07 Feb 2025 11:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.228.132.0/23 maxlen: 24
91.229.46.0/23 maxlen: 24
185.80.198.0/23 maxlen: 24
185.80.199.0/24 maxlen: 24
185.147.176.0/22 maxlen: 24
188.209.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:18:74:54:96:69:52:7d:db:d7:a1:82:af:3d:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Feb 7 11:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3406056bc6f4159e35b65f7aa3050de4a3dc4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:c0:2d:8c:c2:d8:c5:4d:b1:c1:bb:60:47:
62:28:1e:ec:52:3c:b1:66:3e:ba:3e:ec:48:ce:81:
20:c5:9a:c8:c7:8a:cd:23:22:3f:37:83:3e:e7:74:
96:05:d9:26:78:a8:bf:5d:d8:cc:a8:ed:c6:55:cd:
9f:af:92:52:17:57:ec:3c:fc:e5:01:93:a3:59:36:
8b:54:7f:9a:1f:22:9c:fb:9a:17:04:bd:ca:c6:d3:
c7:4a:4b:70:f6:71:2a:99:a4:6f:01:3b:92:a9:c0:
2f:3d:6a:e2:cc:76:cd:a2:eb:4d:13:30:1a:d5:8a:
24:68:86:39:34:d8:e2:6f:bd:bd:2d:0e:1b:4f:5e:
fc:fb:6c:73:3e:3f:ba:d8:b7:06:c0:67:2b:17:44:
27:2c:b5:42:f7:b6:49:31:9e:79:02:b3:af:9a:2e:
3c:41:34:e1:ae:94:77:dc:95:53:96:73:9d:33:a2:
b2:81:18:b9:af:cb:17:df:42:b8:28:6b:79:55:79:
b8:5b:3c:b2:db:a5:34:33:8e:73:17:dc:55:11:f2:
90:f4:98:d6:5f:5c:ee:01:11:94:74:a3:7b:13:4a:
67:70:17:b4:05:0f:9a:a9:ed:de:5f:b4:d2:32:fa:
4c:f7:aa:33:99:7c:31:da:6e:2b:39:98:9d:fa:c9:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:40:60:56:BC:6F:41:59:E3:5B:65:F7:AA:30:50:DE:4A:3D:C4:E7
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.132.0/23
91.229.46.0/23
185.80.198.0/23
185.147.176.0/22
188.209.116.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:11:15:39:41:f5:a2:53:f0:12:48:4f:b8:17:a9:c1:29:4b:
82:ea:e2:20:b6:7c:27:95:36:f0:d6:7e:9c:a7:8c:40:8a:3c:
f5:88:67:12:a9:0f:17:76:0a:bb:a3:08:e5:f9:be:11:1a:a6:
9d:74:8f:37:0b:15:8f:cc:f5:c7:75:53:a9:06:91:d0:70:63:
24:c7:a2:dc:a8:4b:2a:30:51:5d:4c:ea:5c:30:db:92:31:9f:
e9:5b:2a:19:04:90:0a:78:13:de:9e:18:45:fd:4c:d9:f1:85:
10:ba:7f:f3:37:6b:b5:af:d3:c0:c3:ba:f3:e6:1c:26:9c:e6:
dd:d9:ae:31:f0:80:10:6d:27:7f:08:24:99:6c:34:02:3d:b9:
31:3f:27:a5:d6:50:71:a6:a8:69:33:aa:5f:62:dc:7a:c1:fa:
9b:d5:38:3a:f3:05:39:74:a1:83:ef:d5:bf:3e:be:4e:5f:ad:
37:39:8b:e7:98:f7:b1:45:92:b4:a8:a4:7f:9b:1e:a9:86:e5:
98:35:ab:bb:6d:d7:6b:09:6c:3d:c7:8b:66:4f:80:f9:68:6d:
ef:9b:ad:0d:6d:c2:fc:07:eb:ce:85:e3:3f:a2:4f:86:4f:03:
43:ac:b6:50:13:fd:79:cf:12:d2:ba:c8:8c:75:02:24:c1:ec:
10:01:c1:e9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZTgGHRUlmlSfdvXoYKvPV8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjUwMjA3MTEwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQwNjA1NmJjNmY0MTU5ZTM1YjY1ZjdhYTMwNTBkZTRhM2RjNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkfALYzC2MVNscG7YEdiKB7sUjyx
Zj66PuxIzoEgxZrIx4rNIyI/N4M+53SWBdkmeKi/XdjMqO3GVc2fr5JSF1fsPPzl
AZOjWTaLVH+aHyKc+5oXBL3KxtPHSktw9nEqmaRvATuSqcAvPWrizHbNoutNEzAa
1YokaIY5NNjib729LQ4bT178+2xzPj+62LcGwGcrF0QnLLVC97ZJMZ55ArOvmi48
QTThrpR33JVTlnOdM6KygRi5r8sX30K4KGt5VXm4Wzyy26U0M45zF9xVEfKQ9JjW
X1zuARGUdKN7E0pncBe0BQ+aqe3eX7TSMvpM96ozmXwx2m4rOZid+smGYwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMNAYFa8b0FZ41tl96owUN5KPcTnMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvdzBCZ1ZyeHZRVm5qVzJYM3FqQlEza285eE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBW+SEAwQB
W+UuAwQBuVDGAwQCuZOwAwQCvNF0MA0GCSqGSIb3DQEBCwUAA4IBAQC8ERU5QfWi
U/ASSE+4F6nBKUuC6uIgtnwnlTbw1n6cp4xAijz1iGcSqQ8Xdgq7owjl+b4RGqad
dI83CxWPzPXHdVOpBpHQcGMkx6LcqEsqMFFdTOpcMNuSMZ/pWyoZBJAKeBPenhhF
/UzZ8YUQun/zN2u1r9PAw7rz5hwmnObd2a4x8IAQbSd/CCSZbDQCPbkxPyel1lBx
pqhpM6pfYtx6wfqb1Tg68wU5dKGD79W/Pr5OX603OYvnmPexRZK0qKR/mx6phuWY
Nau7bddrCWw9x4tmT4D5aG3vm60NbcL8B+vOheM/ok+GTwNDrLZQE/15zxLSusiM
dQIkwewQAcHp
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:27 2025 by rpki-client