Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/mrO_skF5U6ZGJqbgAfNZfugggNM.roa
File: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (raw, json)
Hash identifier: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=
Subject key identifier: 9A:B3:BF:B2:41:79:53:A6:46:26:A6:E0:01:F3:59:7E:E8:20:80:D3
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 0194206847F2A0686A3FA429CB60DB9B35AC
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/mrO_skF5U6ZGJqbgAfNZfugggNM.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204645
IP address blocks: 185.94.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:f2:a0:68:6a:3f:a4:29:cb:60:db:9b:35:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ab3bfb2417953a64626a6e001f3597ee82080d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:10:46:f6:81:4c:67:ec:8b:ad:ca:3a:a1:
1d:63:7d:62:12:3a:cb:5a:7f:8e:4e:dc:57:23:a7:
1c:a8:a2:08:6e:9a:63:09:78:69:8e:6b:71:0e:76:
d0:6f:31:ff:93:67:dc:c3:fc:be:78:21:c8:d4:a4:
14:b7:6e:23:f6:ce:5a:de:9f:78:26:47:96:4a:01:
5b:d6:01:56:15:3d:f4:61:37:1e:59:36:ed:45:37:
03:e6:7e:a6:2f:79:5f:40:20:52:d5:88:ff:6f:b0:
eb:76:85:cd:16:97:45:8e:d4:76:09:e8:96:b2:60:
2e:7a:41:51:06:1f:55:84:be:f5:18:43:a9:06:9a:
cd:7f:45:12:f3:f2:3f:f5:f5:0a:cd:7e:10:5d:77:
bf:cd:a2:0d:55:b8:5b:dd:d5:83:a0:a7:13:8d:0b:
61:9d:61:09:db:02:12:2b:f4:53:3e:8a:8f:39:6f:
54:37:27:f6:ac:35:53:8d:10:a8:b8:67:e4:a5:81:
e3:6f:c3:4f:19:b5:ce:dd:26:d1:d6:de:53:9a:f5:
5c:13:86:44:48:51:b7:dc:33:64:f5:2c:66:d9:2e:
14:99:e3:be:a8:80:0a:5c:fb:6e:55:b5:37:ac:27:
bd:b7:68:96:bc:f3:64:01:b8:19:1f:1a:09:ab:05:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:BF:B2:41:79:53:A6:46:26:A6:E0:01:F3:59:7E:E8:20:80:D3
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/mrO_skF5U6ZGJqbgAfNZfugggNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.220.0/22
Signature Algorithm: sha256WithRSAEncryption
41:f2:b4:80:fc:60:e2:60:e1:e1:86:4d:9a:61:51:54:b6:c1:
ce:fa:9e:57:d0:b2:c4:bd:e9:7b:7a:9f:f1:99:2c:f3:59:4f:
ad:70:4b:77:8b:21:7d:4f:43:22:d4:2a:75:1d:37:cb:63:b2:
3b:e3:16:ce:7a:e5:37:b3:c9:b5:85:5a:9b:f5:41:a7:48:4b:
9a:22:c9:86:4b:0f:37:68:c8:47:12:9a:a3:4b:b9:f8:f9:12:
88:ac:a8:65:f4:80:29:3b:8b:fb:fa:ad:08:26:ec:b0:52:08:
4e:cc:01:3c:ec:8f:24:04:55:b4:3a:4d:a4:a7:f0:cc:bf:72:
c3:d8:b9:58:78:15:e8:95:e9:5f:e1:9b:dc:bc:0a:ac:3e:6d:
a5:a5:38:58:a9:13:38:ba:43:d6:55:3f:3b:1e:5f:93:13:4a:
b4:71:7f:05:42:82:80:fb:ad:37:ce:11:62:c8:62:2e:03:8f:
10:d1:17:d8:3d:14:b8:2c:fe:ad:90:0b:dd:dc:1c:f8:bf:cf:
2c:da:62:9d:3a:e6:53:e7:f1:08:26:14:b0:e8:41:f1:37:8b:
da:fd:d2:14:44:be:f1:da:0c:b9:79:bc:bd:b2:0d:c0:c8:cd:
b3:b4:99:21:14:03:82:5e:ce:70:6e:59:f9:6e:e2:3f:7d:79:
b8:17:29:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaEfyoGhqP6Qpy2DbmzWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi
MjVmZDcwHhcNMjUwMTAxMDU0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWIzYmZiMjQxNzk1M2E2NDYyNmE2ZTAwMWYzNTk3ZWU4MjA4MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMoQRvaBTGfsi63KOqEdY31iEjrL
Wn+OTtxXI6ccqKIIbppjCXhpjmtxDnbQbzH/k2fcw/y+eCHI1KQUt24j9s5a3p94
JkeWSgFb1gFWFT30YTceWTbtRTcD5n6mL3lfQCBS1Yj/b7DrdoXNFpdFjtR2CeiW
smAuekFRBh9VhL71GEOpBprNf0US8/I/9fUKzX4QXXe/zaINVbhb3dWDoKcTjQth
nWEJ2wISK/RTPoqPOW9UNyf2rDVTjRCouGfkpYHjb8NPGbXO3SbR1t5TmvVcE4ZE
SFG33DNk9Sxm2S4UmeO+qIAKXPtuVbU3rCe9t2iWvPNkAbgZHxoJqwU4pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqzv7JBeVOmRiam4AHzWX7oIIDTMB8GA1UdIwQY
MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt
NGJlZGQzYmQ2ZWExLzEvbXJPX3NrRjVVNlpHSnFiZ0FmTlpmdWdnZ05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx
LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV7cMA0G
CSqGSIb3DQEBCwUAA4IBAQBB8rSA/GDiYOHhhk2aYVFUtsHO+p5X0LLEvel7ep/x
mSzzWU+tcEt3iyF9T0Mi1Cp1HTfLY7I74xbOeuU3s8m1hVqb9UGnSEuaIsmGSw83
aMhHEpqjS7n4+RKIrKhl9IApO4v7+q0IJuywUghOzAE87I8kBFW0Ok2kp/DMv3LD
2LlYeBXolelf4ZvcvAqsPm2lpThYqRM4ukPWVT87Hl+TE0q0cX8FQoKA+603zhFi
yGIuA48Q0RfYPRS4LP6tkAvd3Bz4v88s2mKdOuZT5/EIJhSw6EHxN4va/dIURL7x
2gy5eby9sg3AyM2ztJkhFAOCXs5wbln5buI/fXm4Fyl5
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:24 2025 by rpki-client