Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/HROKUTUR5gMY3n6zglHSVCbZS_I.roa
File: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (raw, json)
Hash identifier: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=
Subject key identifier: 1D:13:8A:51:35:11:E6:03:18:DE:7E:B3:82:51:D2:54:26:D9:4B:F2
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 01942444B63109BA15F9A5AA59FC2B6A5875
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/HROKUTUR5gMY3n6zglHSVCbZS_I.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204411
IP address blocks: 185.235.160.0/22 maxlen: 22
185.235.160.0/24 maxlen: 24
185.235.161.0/24 maxlen: 24
185.235.162.0/24 maxlen: 24
185.235.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b6:31:09:ba:15:f9:a5:aa:59:fc:2b:6a:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d138a513511e60318de7eb38251d25426d94bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:89:11:d3:5f:81:7f:16:7b:21:00:3d:82:
f3:d5:73:f9:9f:86:66:96:1c:f5:a6:c3:c7:3e:8e:
1a:31:8e:ac:33:c7:03:84:49:18:13:12:55:3e:d3:
6f:43:9b:91:fb:30:fe:8f:97:41:11:fa:62:69:4c:
6a:29:14:24:f3:77:1e:dc:33:27:f6:f8:0b:cd:92:
a4:e2:28:57:09:e9:46:92:1e:b7:c5:70:ed:9a:4a:
5b:84:00:b0:d4:55:8d:14:32:f1:2e:84:80:41:32:
82:6c:76:11:58:af:2a:cc:9e:66:46:19:78:01:10:
17:e5:52:52:df:43:12:84:b2:ee:0f:da:cf:e2:80:
19:76:58:ba:9e:04:3a:6b:97:c4:61:aa:84:c4:26:
29:10:04:14:b8:8d:00:5c:b4:bf:dd:83:1c:4c:ab:
bc:d1:09:69:af:65:6f:84:48:1c:32:49:d7:7b:b9:
50:ac:c8:d4:96:7f:67:4d:94:e4:29:e0:4e:fa:8a:
ee:e7:90:44:7b:20:d6:c5:e6:bb:c4:85:f3:19:47:
41:5c:0f:b0:a9:c4:cb:d3:85:33:de:96:16:9d:3e:
91:0a:09:09:00:a5:38:24:03:9f:bd:cb:92:84:33:
25:6c:7a:54:4a:23:7f:b9:a7:22:20:36:62:22:f4:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:8A:51:35:11:E6:03:18:DE:7E:B3:82:51:D2:54:26:D9:4B:F2
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/HROKUTUR5gMY3n6zglHSVCbZS_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.160.0/22
Signature Algorithm: sha256WithRSAEncryption
66:8a:04:d3:45:51:43:a3:31:6c:c3:50:f6:83:1c:aa:c0:4c:
13:57:84:12:ce:7a:ee:09:8a:ac:26:63:a3:f3:9a:da:67:8d:
d9:ba:87:0b:41:e7:3e:b3:b5:99:67:fc:9a:de:6f:ad:9c:fb:
2b:78:32:f2:24:2d:c8:67:5a:d0:b5:14:75:6a:94:c4:bd:0d:
3d:97:76:68:18:4a:ff:ca:3e:ee:ec:5d:7a:01:2c:b1:1e:dd:
f3:d3:d5:6f:c9:46:00:bd:73:c7:4b:5a:05:77:75:d2:f7:c0:
6a:79:2c:9c:12:88:43:72:32:d1:f8:81:59:57:5f:e4:d8:f7:
3b:b9:87:4a:ce:83:22:b7:07:33:6c:ff:00:9f:6d:67:1d:2e:
50:8a:4e:a8:d2:7c:fe:e7:85:5f:16:a2:12:c7:19:7b:d0:fa:
fd:e5:f4:a5:80:50:ab:10:ca:50:23:b4:4b:36:f3:65:3f:f8:
a7:23:ce:f4:97:ca:fb:7a:bb:f3:9b:1c:eb:47:58:f6:53:be:
87:65:80:69:10:df:e6:ce:e9:93:75:61:f9:e7:85:cd:db:29:
c1:d5:cf:6f:79:9d:0f:3c:28:c5:fd:f5:c7:60:fb:43:d8:df:
02:89:d3:9d:ff:03:6e:eb:e2:ec:02:16:db:5b:ba:a4:62:de:
23:9f:72:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRLYxCboV+aWqWfwralh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZDY4NDM2YTc2MzM5ZjY3MTQ0MWNmYmQ1MGFkNDAxZDNj
MDBmZmYwHhcNMjUwMTAxMjM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDEzOGE1MTM1MTFlNjAzMThkZTdlYjM4MjUxZDI1NDI2ZDk0YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuKJEdNfgX8WeyEAPYLz1XP5n4Zm
lhz1psPHPo4aMY6sM8cDhEkYExJVPtNvQ5uR+zD+j5dBEfpiaUxqKRQk83ce3DMn
9vgLzZKk4ihXCelGkh63xXDtmkpbhACw1FWNFDLxLoSAQTKCbHYRWK8qzJ5mRhl4
ARAX5VJS30MShLLuD9rP4oAZdli6ngQ6a5fEYaqExCYpEAQUuI0AXLS/3YMcTKu8
0Qlpr2VvhEgcMknXe7lQrMjUln9nTZTkKeBO+oru55BEeyDWxea7xIXzGUdBXA+w
qcTL04Uz3pYWnT6RCgkJAKU4JAOfvcuShDMlbHpUSiN/uaciIDZiIvQrKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0TilE1EeYDGN5+s4JR0lQm2UvyMB8GA1UdIwQY
MBaAFLbWhDanYzn2cUQc+9UK1AHTwA//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NGE1ZGQtNWNmMi00ODU3LWJkOTMt
M2M3MTFhMTVmYTVjLzEvSFJPS1VUVVI1Z01ZM242emdsSFNWQ2JaU19JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84NGE1ZGQtNWNmMi00ODU3LWJkOTMtM2M3MTFhMTVmYTVj
LzEvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueugMA0G
CSqGSIb3DQEBCwUAA4IBAQBmigTTRVFDozFsw1D2gxyqwEwTV4QSznruCYqsJmOj
85raZ43ZuocLQec+s7WZZ/ya3m+tnPsreDLyJC3IZ1rQtRR1apTEvQ09l3ZoGEr/
yj7u7F16ASyxHt3z09VvyUYAvXPHS1oFd3XS98BqeSycEohDcjLR+IFZV1/k2Pc7
uYdKzoMitwczbP8An21nHS5Qik6o0nz+54VfFqISxxl70Pr95fSlgFCrEMpQI7RL
NvNlP/inI870l8r7ervzmxzrR1j2U76HZYBpEN/mzumTdWH554XN2ynB1c9veZ0P
PCjF/fXHYPtD2N8CidOd/wNu6+LsAhbbW7qkYt4jn3LL
-----END CERTIFICATE-----
Generated at Mon Mar 10 00:39:15 2025 by rpki-client