Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/OB1GsVdt7iCzhWhmgirUwJgGaak.roa
File: OB1GsVdt7iCzhWhmgirUwJgGaak.roa (raw, json)
Hash identifier: HNRDkQU9zd4iAZZaAQcAxCYiJZDSBKH3pYjhla6LGLs=
Subject key identifier: 38:1D:46:B1:57:6D:EE:20:B3:85:68:66:82:2A:D4:C0:98:06:69:A9
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019421446C729C797189BE1EDD9589F5378F
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/OB1GsVdt7iCzhWhmgirUwJgGaak.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49206
IP address blocks: 185.24.175.0/24 maxlen: 24
2a00:6fa0::/32 maxlen: 32
2a00:6fa0:3100::/40 maxlen: 40
2a00:6fa0:4200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6c:72:9c:79:71:89:be:1e:dd:95:89:f5:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=381d46b1576dee20b3856866822ad4c0980669a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:42:17:9f:36:c1:34:ce:91:67:8e:db:d4:
ca:7c:ec:f5:e6:8a:47:db:46:1b:a0:72:42:5c:25:
a3:32:b9:6b:02:9a:8a:bf:29:ec:a0:ce:ab:e7:1e:
50:9e:8e:b3:7a:48:ae:ab:05:6a:96:f1:6e:ad:12:
46:48:a8:c4:28:7b:b3:db:13:af:22:9f:f8:90:cd:
ee:3e:07:1f:bb:3b:b3:a6:df:26:30:9a:4f:14:e8:
1b:ed:e3:ba:bd:7b:4b:4e:e9:ae:4c:f8:ad:b9:d1:
1e:1f:60:97:aa:9c:04:31:03:f3:63:94:8a:de:67:
ad:de:d8:93:0e:4d:43:f6:f5:32:2e:ce:79:c9:56:
05:cf:f6:78:7e:ce:b8:57:74:63:ab:01:32:60:fe:
3c:94:11:81:8f:b0:3d:28:88:53:6f:c9:26:f6:e8:
4d:3e:0a:39:1f:8e:64:c2:3d:0a:08:cd:e4:96:dc:
9c:86:7b:70:49:f1:c7:cc:ed:84:c2:7d:37:57:f0:
51:f2:1e:06:6c:d3:3a:0e:1c:f0:72:98:bc:ef:08:
8c:8e:8e:3e:93:91:aa:05:9d:f2:04:a5:98:98:fd:
65:e2:ce:16:05:c0:44:14:22:49:b7:92:eb:ae:52:
59:be:78:2b:08:9e:f0:19:21:f5:20:b3:28:d9:22:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:46:B1:57:6D:EE:20:B3:85:68:66:82:2A:D4:C0:98:06:69:A9
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/OB1GsVdt7iCzhWhmgirUwJgGaak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.175.0/24
IPv6:
2a00:6fa0::/32
Signature Algorithm: sha256WithRSAEncryption
97:ef:df:16:57:8d:dc:af:25:85:16:38:82:5b:fa:b1:88:d8:
34:84:fa:4c:bf:32:b1:0a:32:b5:57:c3:27:6f:69:9d:c0:a3:
43:81:60:50:57:49:23:c2:8d:db:05:fc:23:6e:b9:82:ec:e0:
e2:98:9d:62:35:af:84:ed:75:79:12:97:ec:60:8e:a5:7e:6b:
cc:c5:a9:fa:d1:7e:96:85:c2:52:4a:bd:74:a4:6b:48:5c:f5:
51:38:47:82:31:c4:6e:78:40:2a:01:64:5e:95:0f:56:68:f8:
c7:93:1b:ae:a1:20:41:b3:cd:c3:9c:05:df:03:72:cb:0c:a4:
af:0f:d9:81:d9:c6:e4:22:0b:2c:ed:82:1a:b9:ce:d5:f0:13:
bf:57:6d:73:7d:fc:42:de:4d:a8:46:69:e6:24:85:73:69:5e:
f2:e1:21:de:13:e1:a4:8c:8f:03:c0:e1:e1:d2:0c:6e:18:0c:
c8:86:eb:92:78:e6:a6:f2:c3:d9:7d:be:66:a1:ed:7f:c0:66:
6e:0d:53:23:66:3f:ab:01:46:dd:c5:fc:89:0e:9e:0e:11:d9:
40:75:96:2e:aa:f6:80:4f:9b:27:e2:f5:79:b2:5a:90:4d:a2:
98:3f:f6:eb:ee:a9:71:79:15:94:ea:7c:18:23:42:ad:ef:74:
8d:35:dd:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhRGxynHlxib4e3ZWJ9TePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODFkNDZiMTU3NmRlZTIwYjM4NTY4NjY4MjJhZDRjMDk4MDY2OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HpCF582wTTOkWeO29TKfOz15opH
20YboHJCXCWjMrlrApqKvynsoM6r5x5Qno6zekiuqwVqlvFurRJGSKjEKHuz2xOv
Ip/4kM3uPgcfuzuzpt8mMJpPFOgb7eO6vXtLTumuTPitudEeH2CXqpwEMQPzY5SK
3met3tiTDk1D9vUyLs55yVYFz/Z4fs64V3RjqwEyYP48lBGBj7A9KIhTb8km9uhN
Pgo5H45kwj0KCM3kltychntwSfHHzO2Ewn03V/BR8h4GbNM6Dhzwcpi87wiMjo4+
k5GqBZ3yBKWYmP1l4s4WBcBEFCJJt5LrrlJZvngrCJ7wGSH1ILMo2SKGmwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDgdRrFXbe4gs4VoZoIq1MCYBmmpMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvT0IxR3NWZHQ3aUN6aFdobWdpclV3SmdHYWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRivMA0E
AgACMAcDBQAqAG+gMA0GCSqGSIb3DQEBCwUAA4IBAQCX798WV43cryWFFjiCW/qx
iNg0hPpMvzKxCjK1V8Mnb2mdwKNDgWBQV0kjwo3bBfwjbrmC7ODimJ1iNa+E7XV5
EpfsYI6lfmvMxan60X6WhcJSSr10pGtIXPVROEeCMcRueEAqAWRelQ9WaPjHkxuu
oSBBs83DnAXfA3LLDKSvD9mB2cbkIgss7YIauc7V8BO/V21zffxC3k2oRmnmJIVz
aV7y4SHeE+GkjI8DwOHh0gxuGAzIhuuSeOam8sPZfb5moe1/wGZuDVMjZj+rAUbd
xfyJDp4OEdlAdZYuqvaAT5sn4vV5slqQTaKYP/br7qlxeRWU6nwYI0Kt73SNNd3H
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:23:52 2025 by rpki-client