Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/bilxvgHa_ortWdZiJoCPu9q2EO4.roa
File: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (raw, json)
Hash identifier: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=
Subject key identifier: 6E:29:71:BE:01:DA:FE:8A:ED:59:D6:62:26:80:8F:BB:DA:B6:10:EE
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019422FB60A10C01F18670B055571CB3C23A
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/bilxvgHa_ortWdZiJoCPu9q2EO4.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201920
IP address blocks: 194.183.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:60:a1:0c:01:f1:86:70:b0:55:57:1c:b3:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2971be01dafe8aed59d66226808fbbdab610ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:b9:84:e3:5f:ac:c9:4f:d3:2b:30:7e:42:
2d:50:86:9e:93:6e:4e:7d:ae:b3:3f:e1:22:4d:85:
8f:02:ee:66:c0:6c:29:bc:6b:64:ab:57:15:f8:73:
7e:ea:98:02:1c:8c:6f:0b:bf:ea:de:19:b2:9b:82:
06:86:26:52:51:ad:27:f1:ba:f4:f2:0d:be:87:60:
5a:39:48:f3:71:7c:0a:d1:04:a7:43:e4:51:e0:24:
de:3f:9e:f6:85:71:b4:75:a8:44:86:0b:22:4d:8d:
6b:18:82:69:00:ce:e8:72:cc:60:28:71:00:04:d2:
6d:b1:13:41:cc:ad:8f:9b:4c:10:a4:78:d1:f5:70:
53:52:b5:c5:b6:98:2d:f5:76:b0:7a:4b:28:b3:57:
c2:21:bf:3d:3a:e8:d3:d8:0e:cf:48:57:59:49:5a:
5c:e2:06:ec:72:75:9b:b3:35:82:66:82:44:a8:bb:
c1:8e:11:43:ce:97:68:19:50:05:91:b8:91:23:8a:
7e:72:c6:00:c0:aa:86:b9:6b:72:cb:0a:b8:f1:9c:
7f:67:35:3d:a1:06:29:74:60:1d:f0:0e:99:1b:52:
0d:d1:eb:79:95:83:75:e9:77:f8:86:a4:3c:e8:e4:
55:0d:5f:02:84:4e:96:46:6b:4c:ac:43:1b:ca:26:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:71:BE:01:DA:FE:8A:ED:59:D6:62:26:80:8F:BB:DA:B6:10:EE
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/bilxvgHa_ortWdZiJoCPu9q2EO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.186.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:84:3d:f6:03:02:a4:b2:3f:7b:e1:0c:8a:88:bb:e7:57:2a:
12:a9:25:56:5c:2e:a7:77:f4:8f:bb:2c:34:d3:31:f9:47:4d:
2e:37:30:6c:5e:ec:aa:15:57:ab:16:9f:e8:67:1d:57:5e:52:
f5:f6:bd:94:af:54:eb:92:a1:60:a0:83:51:83:76:14:d6:61:
06:fb:75:0e:16:39:d7:d9:d2:1e:31:46:3f:3c:ba:9c:6c:5d:
0e:10:b7:8c:4b:29:a7:b1:b8:dd:75:eb:46:18:e4:67:fa:77:
d5:79:46:b6:6f:fc:66:98:b0:48:b3:36:c7:61:19:fa:dc:57:
63:bf:0a:55:37:86:dc:2b:f3:00:d6:60:09:d8:ec:f2:5f:6a:
ca:b7:39:03:49:66:69:41:98:30:aa:e0:fe:8a:a7:ce:c7:b5:
14:ce:71:b5:8a:de:52:be:ab:2b:78:bd:d2:5e:8e:5b:75:80:
50:bc:cd:1b:8c:60:e9:b5:f5:8d:4e:35:57:4c:35:23:6a:eb:
9d:41:c2:c3:5b:b8:af:8a:b6:98:db:3a:17:df:f8:4b:14:d5:
a6:61:6e:2c:c7:65:a5:8c:52:8e:78:dc:b0:49:e7:07:82:e8:
7d:1b:f9:d6:9a:3d:3a:c4:09:60:d3:c0:59:cb:bb:f3:28:9c:
51:c0:bc:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+2ChDAHxhnCwVVccs8I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjUwMTAxMTc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTI5NzFiZTAxZGFmZThhZWQ1OWQ2NjIyNjgwOGZiYmRhYjYxMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXe5hONfrMlP0yswfkItUIaek25O
fa6zP+EiTYWPAu5mwGwpvGtkq1cV+HN+6pgCHIxvC7/q3hmym4IGhiZSUa0n8br0
8g2+h2BaOUjzcXwK0QSnQ+RR4CTeP572hXG0dahEhgsiTY1rGIJpAM7ocsxgKHEA
BNJtsRNBzK2Pm0wQpHjR9XBTUrXFtpgt9Xaweksos1fCIb89OujT2A7PSFdZSVpc
4gbscnWbszWCZoJEqLvBjhFDzpdoGVAFkbiRI4p+csYAwKqGuWtyywq48Zx/ZzU9
oQYpdGAd8A6ZG1IN0et5lYN16Xf4hqQ86ORVDV8ChE6WRmtMrEMbyiY2uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4pcb4B2v6K7VnWYiaAj7vathDuMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvYmlseHZnSGFfb3J0V2RaaUpvQ1B1OXEyRU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwre6MA0G
CSqGSIb3DQEBCwUAA4IBAQDNhD32AwKksj974QyKiLvnVyoSqSVWXC6nd/SPuyw0
0zH5R00uNzBsXuyqFVerFp/oZx1XXlL19r2Ur1TrkqFgoINRg3YU1mEG+3UOFjnX
2dIeMUY/PLqcbF0OELeMSymnsbjddetGGORn+nfVeUa2b/xmmLBIszbHYRn63Fdj
vwpVN4bcK/MA1mAJ2OzyX2rKtzkDSWZpQZgwquD+iqfOx7UUznG1it5SvqsreL3S
Xo5bdYBQvM0bjGDptfWNTjVXTDUjauudQcLDW7iviraY2zoX3/hLFNWmYW4sx2Wl
jFKOeNywSecHguh9G/nWmj06xAlg08BZy7vzKJxRwLwN
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:51 2025 by rpki-client