Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa
File: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (raw, json)
Hash identifier: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=
Subject key identifier: 86:46:D4:55:F8:CD:38:F5:61:25:FA:B5:B9:01:47:FA:13:C1:E6:61
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 019425222D88183398E8EF856182ECAD3390
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201160
IP address blocks: 185.60.224.0/24 maxlen: 24
185.60.225.0/24 maxlen: 24
185.60.226.0/24 maxlen: 24
185.60.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2d:88:18:33:98:e8:ef:85:61:82:ec:ad:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8646d455f8cd38f56125fab5b90147fa13c1e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:96:0c:43:51:55:9b:90:bf:ee:bd:ac:73:
ee:0b:e9:e2:fa:e5:fe:dd:3b:8c:4c:c2:42:77:88:
14:87:a4:bc:f2:86:1d:3a:4a:8d:b2:70:0e:f2:fe:
3c:c8:1c:6e:b2:e9:03:8c:cd:e5:9b:35:23:8f:1b:
98:0e:c1:0c:a3:3e:29:4f:8d:bd:25:e2:31:22:7f:
7f:f4:f0:59:d7:4b:06:58:7f:79:ee:a0:9c:2a:27:
2d:b7:bf:4f:17:dc:23:7a:d9:6b:89:16:a8:76:47:
f9:fa:a6:88:49:9e:2b:7b:e5:3d:b7:5b:ed:19:6a:
82:02:9b:94:3e:5c:4b:3e:1f:06:ba:9e:70:ca:d7:
13:80:d1:f5:bd:c0:2d:1f:d4:79:72:c0:1f:8b:1b:
1a:2e:63:fe:6b:9d:86:e9:a9:a4:de:3a:3b:7b:95:
c9:7d:f3:13:9c:c6:25:07:2f:9d:0f:d8:31:6c:a0:
c0:79:85:f0:2b:77:94:b3:d7:f4:69:91:fe:85:d9:
44:3b:52:ad:f4:8b:b6:22:58:6f:3f:d0:5d:56:dc:
de:5f:cd:d1:bd:d5:96:ae:fe:6d:c2:48:af:72:28:
bb:93:91:b8:59:0c:7f:aa:ff:f7:33:61:f8:51:63:
5e:c9:bb:fa:2b:06:0b:4e:a8:eb:b9:1f:7f:a5:98:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:D4:55:F8:CD:38:F5:61:25:FA:B5:B9:01:47:FA:13:C1:E6:61
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.224.0/22
Signature Algorithm: sha256WithRSAEncryption
99:e1:56:70:21:e2:72:77:46:47:a3:3f:3f:c5:86:c8:1f:87:
05:2f:77:6f:4a:4e:55:bc:86:e5:87:92:85:8a:3c:80:14:c1:
eb:57:67:e6:cb:34:d6:c3:94:63:75:dc:72:7b:61:66:24:c2:
5c:ad:de:c0:bd:c6:54:d9:23:8d:b8:42:ee:d0:ec:c7:b9:8d:
b7:d2:f9:4c:ca:60:67:41:2b:55:ec:88:25:dd:44:41:f3:9f:
30:06:23:64:71:5c:13:f8:a6:0a:c3:0a:eb:25:50:52:21:be:
aa:80:a1:e6:f3:b4:7c:d7:2b:6a:d6:0c:e4:0c:25:c9:2e:0b:
79:73:86:a1:bf:57:10:bf:18:e9:20:e9:ab:4e:50:1f:97:bf:
91:a8:ab:79:28:ca:bd:86:21:a5:43:ff:01:55:60:0d:a1:38:
2a:b4:ff:dd:a0:14:25:0b:35:c9:35:88:3b:e1:7a:9f:df:2b:
52:c7:37:30:9f:38:8d:cf:0c:03:e9:84:27:c2:18:c1:1e:32:
73:79:f2:40:b7:b9:11:90:d3:4c:bb:04:2d:85:2c:a2:23:80:
67:a3:67:30:58:eb:39:c3:8b:d7:51:33:cd:2f:a6:db:1e:4c:
98:5d:34:89:39:ed:2e:7e:58:4e:1e:bb:3a:ed:e8:b0:1b:4b:
3f:be:78:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIi2IGDOY6O+FYYLsrTOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhODk2ZTc2ODU0MGYzODdhMWRkNGZmOWRhYTRiODViYTQ4
YTkwNmYwHhcNMjUwMTAyMDM0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjQ2ZDQ1NWY4Y2QzOGY1NjEyNWZhYjViOTAxNDdmYTEzYzFlNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1CWDENRVZuQv+69rHPuC+ni+uX+
3TuMTMJCd4gUh6S88oYdOkqNsnAO8v48yBxusukDjM3lmzUjjxuYDsEMoz4pT429
JeIxIn9/9PBZ10sGWH957qCcKictt79PF9wjetlriRaodkf5+qaISZ4re+U9t1vt
GWqCApuUPlxLPh8Gup5wytcTgNH1vcAtH9R5csAfixsaLmP+a52G6amk3jo7e5XJ
ffMTnMYlBy+dD9gxbKDAeYXwK3eUs9f0aZH+hdlEO1Kt9Iu2IlhvP9BdVtzeX83R
vdWWrv5twkivcii7k5G4WQx/qv/3M2H4UWNeybv6KwYLTqjruR9/pZibswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZG1FX4zTj1YSX6tbkBR/oTweZhMB8GA1UdIwQY
MBaAFIqJbnaFQPOHod1P+dqkuFukipBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEt
OGY2OTk0NTY2ZjY3LzEvaGtiVVZmak5PUFZoSmZxMXVRRkgtaFBCNW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEtOGY2OTk0NTY2ZjY3
LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTzgMA0G
CSqGSIb3DQEBCwUAA4IBAQCZ4VZwIeJyd0ZHoz8/xYbIH4cFL3dvSk5VvIblh5KF
ijyAFMHrV2fmyzTWw5Rjddxye2FmJMJcrd7AvcZU2SONuELu0OzHuY230vlMymBn
QStV7Igl3URB858wBiNkcVwT+KYKwwrrJVBSIb6qgKHm87R81ytq1gzkDCXJLgt5
c4ahv1cQvxjpIOmrTlAfl7+RqKt5KMq9hiGlQ/8BVWANoTgqtP/doBQlCzXJNYg7
4Xqf3ytSxzcwnziNzwwD6YQnwhjBHjJzefJAt7kRkNNMuwQthSyiI4Bno2cwWOs5
w4vXUTPNL6bbHkyYXTSJOe0uflhOHrs67eiwG0s/vnij
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:15:11 2025 by rpki-client