Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/k1_vQBbHzbDSZOjVFYSurblTDtM.roa
File: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (raw, json)
Hash identifier: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=
Subject key identifier: 93:5F:EF:40:16:C7:CD:B0:D2:64:E8:D5:15:84:AE:AD:B9:53:0E:D3
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 0194CD05F1E4D07E4F49E446DA7336A4EAB8
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/k1_vQBbHzbDSZOjVFYSurblTDtM.roa
Signing time: Mon 03 Feb 2025 18:15:06 +0000
ROA not before: Mon 03 Feb 2025 18:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211594
IP address blocks: 185.254.123.0/24 maxlen: 24
2a0c:1880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:05:f1:e4:d0:7e:4f:49:e4:46:da:73:36:a4:ea:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Feb 3 18:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=935fef4016c7cdb0d264e8d51584aeadb9530ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:17:18:c6:ec:19:99:7b:bd:6e:bb:8c:c6:4f:
2d:74:43:7f:65:e2:ee:9f:d7:31:d4:82:71:7d:c9:
55:05:0e:92:93:55:b7:73:69:2c:2e:04:c6:f1:59:
09:5d:23:ae:cf:34:1f:f6:c7:39:bd:29:8a:67:b3:
ff:d1:b7:0f:9c:f0:d5:e4:b3:d9:90:a3:aa:ee:84:
da:90:36:98:30:24:c3:54:d0:d7:54:63:b5:8b:7d:
2c:43:3a:6a:75:76:10:03:06:cd:a6:4f:89:29:af:
ca:b1:67:35:0c:ba:7d:81:1a:7b:bb:ac:ee:46:6d:
c0:fe:3e:23:d3:27:3a:a2:e7:ea:be:d8:4c:05:d0:
42:bc:85:a5:df:13:68:8e:5f:25:96:9a:82:d8:75:
23:f8:b5:c5:2b:42:b2:78:2a:6e:c1:a6:09:ba:e6:
d8:4c:e9:1b:e4:9f:c9:a3:e7:c5:02:7f:1e:bb:cb:
ec:ad:66:30:6b:99:05:82:c5:21:4e:7c:57:a1:fe:
a9:61:16:2f:fc:d0:4d:2f:81:54:62:93:ce:e7:6b:
a8:44:d3:84:c3:39:1e:7f:f3:24:3f:62:98:da:8a:
ee:fc:ec:dc:c0:de:4d:9b:dc:ae:12:f8:a3:d5:9a:
7c:5c:53:30:f1:f6:98:b1:8b:47:15:56:a3:ac:7c:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:EF:40:16:C7:CD:B0:D2:64:E8:D5:15:84:AE:AD:B9:53:0E:D3
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/k1_vQBbHzbDSZOjVFYSurblTDtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.123.0/24
IPv6:
2a0c:1880::/29
Signature Algorithm: sha256WithRSAEncryption
1a:1b:1d:fd:6c:da:72:27:e9:4c:6c:09:6d:e1:15:c8:11:20:
da:71:59:38:e1:46:47:63:bb:20:93:66:12:08:d6:df:d3:88:
d1:49:ca:16:82:bb:95:6b:a9:14:30:66:64:f0:28:e3:0e:c4:
17:54:22:a1:c4:0a:8c:ec:cd:4d:1c:48:88:d5:b3:84:86:a5:
2a:ae:07:b4:9d:66:07:0c:d2:95:ce:66:5f:81:f6:88:36:50:
52:9d:90:05:96:6d:41:06:00:02:26:aa:25:b1:29:35:ed:0b:
21:5d:70:cd:54:65:85:89:29:2a:28:ca:a6:a3:01:c5:c8:14:
ac:d4:fc:bd:68:d2:ec:07:48:e5:f8:b4:7e:78:d2:a1:15:c3:
76:36:7c:e9:ce:a5:15:fa:7a:18:f8:0d:0a:29:48:4a:c7:ab:
d2:10:95:35:2d:3a:ca:82:4b:48:5a:86:d0:18:b2:dc:54:0b:
00:ee:4a:20:cb:af:d7:e7:aa:5e:dc:4b:7f:fd:6b:f9:a5:ad:
ea:86:c9:59:eb:33:17:06:fa:60:1a:5b:d1:a3:75:af:01:d9:
8d:81:d3:c9:36:a6:6e:ef:af:4d:c7:68:71:52:65:74:92:94:
ca:07:87:ae:44:dd:7e:29:85:dc:a8:e3:84:eb:9d:60:6f:ab:
bd:59:36:1c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZTNBfHk0H5PSeRG2nM2pOq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTRiNmU1ZmNjYTMwOGIzNmRjOGYxNjc2MDZiMmQ2NTk4
MzljZjEwHhcNMjUwMjAzMTgxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzVmZWY0MDE2YzdjZGIwZDI2NGU4ZDUxNTg0YWVhZGI5NTMwZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BcYxuwZmXu9bruMxk8tdEN/ZeLu
n9cx1IJxfclVBQ6Sk1W3c2ksLgTG8VkJXSOuzzQf9sc5vSmKZ7P/0bcPnPDV5LPZ
kKOq7oTakDaYMCTDVNDXVGO1i30sQzpqdXYQAwbNpk+JKa/KsWc1DLp9gRp7u6zu
Rm3A/j4j0yc6oufqvthMBdBCvIWl3xNojl8llpqC2HUj+LXFK0KyeCpuwaYJuubY
TOkb5J/Jo+fFAn8eu8vsrWYwa5kFgsUhTnxXof6pYRYv/NBNL4FUYpPO52uoRNOE
wzkef/MkP2KY2oru/OzcwN5Nm9yuEvij1Zp8XFMw8faYsYtHFVajrHzEpwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJNf70AWx82w0mTo1RWErq25Uw7TMB8GA1UdIwQY
MBaAFLpUtuX8yjCLNtyPFnYGstZZg5zxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQt
NTI2ZjdjYzUyOWI3LzEvazFfdlFCYkh6YkRTWk9qVkZZU3VyYmxURHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQtNTI2ZjdjYzUyOWI3
LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuf57MA0E
AgACMAcDBQMqDBiAMA0GCSqGSIb3DQEBCwUAA4IBAQAaGx39bNpyJ+lMbAlt4RXI
ESDacVk44UZHY7sgk2YSCNbf04jRScoWgruVa6kUMGZk8CjjDsQXVCKhxAqM7M1N
HEiI1bOEhqUqrge0nWYHDNKVzmZfgfaINlBSnZAFlm1BBgACJqolsSk17QshXXDN
VGWFiSkqKMqmowHFyBSs1Py9aNLsB0jl+LR+eNKhFcN2NnzpzqUV+noY+A0KKUhK
x6vSEJU1LTrKgktIWobQGLLcVAsA7kogy6/X56pe3Et//Wv5pa3qhslZ6zMXBvpg
GlvRo3WvAdmNgdPJNqZu769Nx2hxUmV0kpTKB4euRN1+KYXcqOOE651gb6u9WTYc
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:03 2025 by rpki-client