Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/dz5PrO-ksQipuN7JJpM04omvh6c.roa
File: dz5PrO-ksQipuN7JJpM04omvh6c.roa (raw, json)
Hash identifier: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=
Subject key identifier: 77:3E:4F:AC:EF:A4:B1:08:A9:B8:DE:C9:26:93:34:E2:89:AF:87:A7
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0194C3ACC2610644FE7A8C6632632A48B17A
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/dz5PrO-ksQipuN7JJpM04omvh6c.roa
Signing time: Sat 01 Feb 2025 22:41:06 +0000
ROA not before: Sat 01 Feb 2025 22:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44966
IP address blocks: 185.84.226.0/24 maxlen: 27
2a13:76c0::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:ac:c2:61:06:44:fe:7a:8c:66:32:63:2a:48:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Feb 1 22:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=773e4facefa4b108a9b8dec9269334e289af87a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:44:34:24:28:39:0a:28:b1:e3:13:f1:6c:
f0:c3:77:cd:29:4c:b0:31:e7:33:ae:5f:04:82:5e:
2b:ab:59:59:96:83:f8:be:b0:da:6e:6f:19:5c:9d:
20:64:94:5b:88:f2:95:db:5b:9c:19:19:30:41:71:
db:02:4c:bb:74:80:c2:3e:06:3d:16:c3:da:9e:28:
8d:c2:34:39:af:0f:2c:b9:bc:48:39:21:b7:5f:ab:
55:76:3b:c0:5b:35:49:4b:3d:39:96:4c:17:43:7c:
be:c4:95:0d:04:f3:90:6d:dc:86:7d:c6:14:c6:2b:
dc:ae:59:ac:92:fa:08:72:bb:6c:25:78:6d:1f:95:
f2:78:6c:ce:ef:47:63:a6:71:aa:91:c1:2c:6d:29:
60:73:e7:75:62:ed:77:1f:fa:f0:9b:dc:8e:13:48:
4b:53:a7:76:54:61:29:2d:b1:0d:5c:20:d6:e5:6a:
c2:cd:40:65:45:5f:3e:70:31:c9:75:09:b6:e0:1d:
19:e3:c6:e6:07:76:4d:22:34:1c:2e:fc:ec:95:3e:
30:46:bf:b8:b5:09:e0:25:37:bd:ac:d2:61:20:0d:
8c:6f:13:6b:65:83:e5:91:3e:bb:b1:59:15:df:b1:
5d:b3:ad:07:66:fb:7c:bb:b8:08:2b:61:a5:01:64:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:4F:AC:EF:A4:B1:08:A9:B8:DE:C9:26:93:34:E2:89:AF:87:A7
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/dz5PrO-ksQipuN7JJpM04omvh6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.226.0/24
IPv6:
2a13:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:46:64:12:35:18:1f:02:e8:51:f0:79:17:2d:cc:e4:2b:71:
ba:61:fb:c2:7e:04:33:63:6d:90:69:ab:68:93:f2:6b:b7:08:
64:65:a2:94:0d:ea:b0:40:86:ab:fc:47:d1:61:f0:18:08:3b:
6f:bf:57:d4:89:71:8b:8c:fa:0d:75:9c:37:bb:04:51:ae:93:
90:71:e2:b6:c3:0e:b4:a2:62:d5:2e:2d:45:52:a8:93:5a:7a:
c1:37:5a:c6:55:de:16:9e:ce:a2:ea:50:64:b1:a2:98:be:6c:
19:93:97:87:90:33:4a:b1:e5:bc:b8:e7:ce:90:bf:97:16:b2:
38:5e:27:9b:1f:25:61:b7:1c:83:94:b7:1d:5d:8d:2d:e7:69:
0f:ed:88:69:08:6e:25:99:0c:cd:1b:e5:f2:67:b5:6f:33:3d:
ef:00:0c:b8:64:73:32:ca:47:4b:7a:67:ba:74:ef:b3:4c:66:
ba:24:f3:47:f7:a8:e5:78:42:65:59:30:50:af:1d:7f:ba:12:
26:55:3b:21:47:26:66:05:b0:6b:df:41:55:3e:e4:f1:ff:cc:
00:f5:f1:f5:ee:ea:6a:4b:cd:63:f2:11:1e:8d:9d:72:cd:23:
10:0b:9e:dd:3c:9c:de:b9:59:2c:fe:cc:9c:31:ff:ed:2e:a3:
48:39:e5:f4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZTDrMJhBkT+eoxmMmMqSLF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk
ZmRkZmQwHhcNMjUwMjAxMjI0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzNlNGZhY2VmYTRiMTA4YTliOGRlYzkyNjkzMzRlMjg5YWY4N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKpENCQoOQooseMT8Wzww3fNKUyw
Meczrl8Egl4rq1lZloP4vrDabm8ZXJ0gZJRbiPKV21ucGRkwQXHbAky7dIDCPgY9
FsPaniiNwjQ5rw8subxIOSG3X6tVdjvAWzVJSz05lkwXQ3y+xJUNBPOQbdyGfcYU
xivcrlmskvoIcrtsJXhtH5XyeGzO70djpnGqkcEsbSlgc+d1Yu13H/rwm9yOE0hL
U6d2VGEpLbENXCDW5WrCzUBlRV8+cDHJdQm24B0Z48bmB3ZNIjQcLvzslT4wRr+4
tQngJTe9rNJhIA2MbxNrZYPlkT67sVkV37Fds60HZvt8u7gIK2GlAWSKgQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHc+T6zvpLEIqbjeySaTNOKJr4enMB8GA1UdIwQY
MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt
NjkyM2E3ZTYxYTZiLzEvZHo1UHJPLWtzUWlwdU43SkpwTTA0b212aDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi
LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuVTiMA0E
AgACMAcDBQMqE3bAMA0GCSqGSIb3DQEBCwUAA4IBAQBhRmQSNRgfAuhR8HkXLczk
K3G6YfvCfgQzY22Qaatok/JrtwhkZaKUDeqwQIar/EfRYfAYCDtvv1fUiXGLjPoN
dZw3uwRRrpOQceK2ww60omLVLi1FUqiTWnrBN1rGVd4Wns6i6lBksaKYvmwZk5eH
kDNKseW8uOfOkL+XFrI4XiebHyVhtxyDlLcdXY0t52kP7YhpCG4lmQzNG+XyZ7Vv
Mz3vAAy4ZHMyykdLeme6dO+zTGa6JPNH96jleEJlWTBQrx1/uhImVTshRyZmBbBr
30FVPuTx/8wA9fH17upqS81j8hEejZ1yzSMQC57dPJzeuVks/sycMf/tLqNIOeX0
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:43:45 2025 by rpki-client