Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/gAy2L-yq3jv5ULydsY0WjO758DY.roa
File: gAy2L-yq3jv5ULydsY0WjO758DY.roa (raw, json)
Hash identifier: kDdF7XHhC12P2H5eVodHGu1h34gE1iEE5luu7KRRUlE=
Subject key identifier: 80:0C:B6:2F:EC:AA:DE:3B:F9:50:BC:9D:B1:8D:16:8C:EE:F9:F0:36
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01942445563DBB88F50208A7E7A0FFFBBE14
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/gAy2L-yq3jv5ULydsY0WjO758DY.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 185.221.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:56:3d:bb:88:f5:02:08:a7:e7:a0:ff:fb:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800cb62fecaade3bf950bc9db18d168ceef9f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:13:0e:46:52:04:e1:40:bd:d4:08:1c:12:
1a:6d:50:6e:5e:1c:a3:90:90:f5:de:85:9f:d8:6d:
2f:a6:1a:43:4a:66:ef:30:6f:4e:14:e1:9b:ab:2a:
a6:92:36:c0:6e:09:11:e6:3b:b8:f5:d7:1c:de:ca:
6e:85:0c:cb:4a:fe:e9:9b:8d:79:ae:f5:5c:9c:29:
3a:93:ca:49:47:1e:4c:ac:f6:68:7f:7d:59:47:7b:
b3:ce:f9:0b:ca:74:d5:d5:cf:81:23:3a:38:c6:ee:
fc:3f:85:1e:0e:e3:4c:1b:aa:16:24:0e:73:c1:3c:
ef:80:68:2d:6c:65:e7:b2:bd:a3:08:87:e7:7c:71:
f5:42:3e:e0:81:67:d1:e6:4f:3c:44:77:48:fb:c4:
17:4b:d3:ef:51:59:2a:1c:70:8d:2e:b8:55:d2:65:
9b:95:e5:4e:37:74:be:ab:ec:8d:11:d9:15:b7:22:
bf:8a:9c:24:c3:86:a1:88:3f:0f:a9:2e:12:bf:85:
ed:81:99:2e:60:ad:dc:e2:ea:d9:3e:b0:f1:ca:fc:
47:9b:80:8c:05:0e:4b:81:da:43:f2:5c:37:12:03:
37:35:20:c0:ec:b0:21:da:26:3f:78:36:9c:e1:bb:
18:09:ef:99:2e:8b:f5:24:5e:55:99:e3:18:f0:d0:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:B6:2F:EC:AA:DE:3B:F9:50:BC:9D:B1:8D:16:8C:EE:F9:F0:36
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/gAy2L-yq3jv5ULydsY0WjO758DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.25.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4e:b0:6b:fa:e8:23:49:ee:63:bf:88:c7:fd:92:24:d1:3b:
13:f6:6f:6b:e9:88:a0:4c:56:3f:ed:e9:5b:93:aa:40:7f:55:
e2:70:b7:0c:54:d8:4d:3c:c5:1b:e7:e5:37:0d:47:60:61:ca:
af:26:06:2e:af:53:aa:45:12:d0:29:38:52:25:7b:e3:ab:0f:
18:e6:1e:af:5c:1f:d3:27:fa:ff:51:a7:46:b6:c5:83:5d:cb:
ef:eb:6b:14:94:04:7f:01:ea:51:dc:de:e0:7c:ab:91:a6:f7:
aa:0b:9c:9f:12:62:fe:cb:c4:ed:98:3d:ef:16:b8:22:22:2e:
67:ee:99:c3:fc:ea:0f:61:0c:82:44:c4:f3:64:28:4f:16:5b:
06:7d:1a:fa:e4:91:6d:54:f4:41:ef:48:81:97:e6:af:e8:10:
69:9b:3a:2b:8d:8e:47:0d:d4:e7:e6:1d:6a:c8:cf:2c:21:13:
3b:e8:c3:1d:4a:fd:61:f8:1f:5b:1b:08:b4:49:a3:63:a4:dc:
d9:c5:35:b1:0d:aa:6e:26:33:bd:05:04:33:28:18:11:fe:51:
47:73:9d:9d:76:c5:75:22:59:53:36:7b:56:1a:9a:d6:35:19:
91:50:13:62:f7:7a:0d:19:fe:eb:8c:cc:f5:63:81:c7:96:ee:
8b:9f:ec:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRVY9u4j1Agin56D/+74UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjUwMTAxMjM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDBjYjYyZmVjYWFkZTNiZjk1MGJjOWRiMThkMTY4Y2VlZjlmMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLUTDkZSBOFAvdQIHBIabVBuXhyj
kJD13oWf2G0vphpDSmbvMG9OFOGbqyqmkjbAbgkR5ju49dcc3spuhQzLSv7pm415
rvVcnCk6k8pJRx5MrPZof31ZR3uzzvkLynTV1c+BIzo4xu78P4UeDuNMG6oWJA5z
wTzvgGgtbGXnsr2jCIfnfHH1Qj7ggWfR5k88RHdI+8QXS9PvUVkqHHCNLrhV0mWb
leVON3S+q+yNEdkVtyK/ipwkw4ahiD8PqS4Sv4XtgZkuYK3c4urZPrDxyvxHm4CM
BQ5LgdpD8lw3EgM3NSDA7LAh2iY/eDac4bsYCe+ZLov1JF5VmeMY8NDNAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIAMti/sqt47+VC8nbGNFozu+fA2MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvZ0F5MkwteXEzanY1VUx5ZHNZMFdqTzc1OERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud0ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBDTrBr+ugjSe5jv4jH/ZIk0TsT9m9r6YigTFY/7elb
k6pAf1XicLcMVNhNPMUb5+U3DUdgYcqvJgYur1OqRRLQKThSJXvjqw8Y5h6vXB/T
J/r/UadGtsWDXcvv62sUlAR/AepR3N7gfKuRpveqC5yfEmL+y8TtmD3vFrgiIi5n
7pnD/OoPYQyCRMTzZChPFlsGfRr65JFtVPRB70iBl+av6BBpmzorjY5HDdTn5h1q
yM8sIRM76MMdSv1h+B9bGwi0SaNjpNzZxTWxDapuJjO9BQQzKBgR/lFHc52ddsV1
IllTNntWGprWNRmRUBNi93oNGf7rjMz1Y4HHlu6Ln+yv
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:02:38 2025 by rpki-client