Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/y9Bh0m6kauwP6kD0s73D8-vrbVM.roa
File: y9Bh0m6kauwP6kD0s73D8-vrbVM.roa (raw, json)
Hash identifier: fBYPL7fiPGaFShtarMcQPH8FKsxoKQThi2vjq34Xkk8=
Subject key identifier: CB:D0:61:D2:6E:A4:6A:EC:0F:EA:40:F4:B3:BD:C3:F3:EB:EB:6D:53
Certificate issuer: /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial: 01963066B5548DEAE4DE5544814DB1323143
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/y9Bh0m6kauwP6kD0s73D8-vrbVM.roa
Signing time: Sun 13 Apr 2025 18:25:59 +0000
ROA not before: Sun 13 Apr 2025 18:25:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16246
IP address blocks: 185.175.11.0/24 maxlen: 24
2a0d:187::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:66:b5:54:8d:ea:e4:de:55:44:81:4d:b1:32:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Validity
Not Before: Apr 13 18:25:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbd061d26ea46aec0fea40f4b3bdc3f3ebeb6d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:32:70:42:ee:aa:51:7f:38:4c:f0:e2:87:
d4:ec:b6:e0:be:46:ea:be:8f:04:25:54:e4:2a:41:
42:11:c7:6f:d6:e1:d8:98:7e:46:d3:50:e5:5e:e5:
9e:97:e8:c4:c2:d9:c8:7f:e6:f9:bf:7e:f0:9c:04:
b0:36:bb:2a:66:17:b9:d9:83:41:7d:66:d1:b7:f7:
e1:f4:14:1e:f6:3f:a7:74:4b:15:e9:8f:f5:a7:2f:
4d:6d:cc:b2:15:93:2e:45:2f:16:f7:82:68:2b:50:
ea:2c:bb:38:40:36:a3:fa:a9:68:51:57:e8:e1:1b:
58:93:4e:1f:cf:44:84:ac:22:d0:c0:b1:e7:cf:df:
b4:da:9f:fe:df:59:b7:74:36:08:5c:c0:83:5e:cb:
d5:cd:95:fd:32:ef:d5:6b:cb:d4:16:54:0b:ba:17:
9d:0a:38:80:75:99:a7:69:e3:8d:cb:d3:eb:00:a7:
f0:c4:4e:37:f4:39:4f:cf:b6:8f:43:bc:86:c2:57:
77:b6:19:1b:8b:1f:79:5d:41:e7:3c:16:1a:ef:3e:
3e:59:bd:6a:7d:57:fd:c1:94:f9:5f:3a:eb:a9:4e:
fd:46:82:dd:c2:33:f5:16:66:4d:8d:fe:e7:b2:11:
e8:36:3a:bc:d1:e7:d6:94:fb:3d:04:9e:4d:bb:1f:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:61:D2:6E:A4:6A:EC:0F:EA:40:F4:B3:BD:C3:F3:EB:EB:6D:53
X509v3 Authority Key Identifier:
keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/y9Bh0m6kauwP6kD0s73D8-vrbVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.11.0/24
IPv6:
2a0d:187::/32
Signature Algorithm: sha256WithRSAEncryption
1e:00:cf:3c:d4:f9:93:5e:9a:d2:88:1f:da:2f:0a:36:af:c3:
a8:f0:ac:cb:93:58:b9:79:0b:97:e4:7b:cf:aa:0c:08:4e:d7:
ef:43:43:ed:67:fc:e4:3a:30:fc:29:17:cc:73:7f:53:60:5a:
90:f1:f5:dc:0d:a0:df:3e:96:01:3c:49:25:9f:04:8b:c2:a0:
9c:47:86:e2:18:fa:e3:39:96:2a:c1:40:25:8c:18:38:3b:4c:
51:ad:b6:cc:44:dd:03:45:d7:18:a2:2f:b5:ab:2e:c2:61:38:
db:92:8f:0f:43:f7:94:da:04:b9:c2:6e:d1:4d:ce:56:a5:83:
70:e1:8d:86:76:f8:4f:6e:b2:b1:e7:fa:bc:9d:15:da:46:8b:
2b:f5:ac:05:76:8c:a3:17:f3:10:95:f3:59:f5:e4:f8:a2:02:
61:f7:a4:f0:22:6f:73:1b:7c:99:26:c5:33:04:c0:0f:a6:dc:
ec:36:0c:94:cb:6b:2b:69:2e:54:fd:0e:b5:36:96:4c:91:68:
c6:83:29:39:2b:38:60:b7:3b:18:ac:dc:ac:66:c7:51:25:5d:
65:3f:99:fd:63:ab:7c:45:2f:e4:50:8d:63:cc:d5:bd:7f:a7:
85:97:dc:65:ca:a2:bd:d2:38:ee:0c:96:dc:23:e6:6a:b2:83:
c7:c3:8f:8b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZYwZrVUjerk3lVEgU2xMjFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWQ4YjE2MDk5ZDZjZGY4YzNhODExY2E1ODYwZGYwZjZi
YWY2ZGUwHhcNMjUwNDEzMTgyNTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmQwNjFkMjZlYTQ2YWVjMGZlYTQwZjRiM2JkYzNmM2ViZWI2ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+MycELuqlF/OEzw4ofU7Lbgvkbq
vo8EJVTkKkFCEcdv1uHYmH5G01DlXuWel+jEwtnIf+b5v37wnASwNrsqZhe52YNB
fWbRt/fh9BQe9j+ndEsV6Y/1py9NbcyyFZMuRS8W94JoK1DqLLs4QDaj+qloUVfo
4RtYk04fz0SErCLQwLHnz9+02p/+31m3dDYIXMCDXsvVzZX9Mu/Va8vUFlQLuhed
CjiAdZmnaeONy9PrAKfwxE439DlPz7aPQ7yGwld3thkbix95XUHnPBYa7z4+Wb1q
fVf9wZT5XzrrqU79RoLdwjP1FmZNjf7nshHoNjq80efWlPs9BJ5Nux9w7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMvQYdJupGrsD+pA9LO9w/Pr621TMB8GA1UdIwQY
MBaAFN+tixYJnWzfjDqBHKWGDfD2uvbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEt
OGJjYTI3Y2IzMGMwLzEveTlCaDBtNmthdXdQNmtEMHM3M0Q4LXZyYlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEtOGJjYTI3Y2IzMGMw
LzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAua8LMA0E
AgACMAcDBQAqDQGHMA0GCSqGSIb3DQEBCwUAA4IBAQAeAM881PmTXprSiB/aLwo2
r8Oo8KzLk1i5eQuX5HvPqgwITtfvQ0PtZ/zkOjD8KRfMc39TYFqQ8fXcDaDfPpYB
PEklnwSLwqCcR4biGPrjOZYqwUAljBg4O0xRrbbMRN0DRdcYoi+1qy7CYTjbko8P
Q/eU2gS5wm7RTc5WpYNw4Y2GdvhPbrKx5/q8nRXaRosr9awFdoyjF/MQlfNZ9eT4
ogJh96TwIm9zG3yZJsUzBMAPptzsNgyUy2sraS5U/Q61NpZMkWjGgyk5KzhgtzsY
rNysZsdRJV1lP5n9Y6t8RS/kUI1jzNW9f6eFl9xlyqK90jjuDJbcI+ZqsoPHw4+L
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:42 2025 by rpki-client