Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/6hSnRR0poSKLkgYbDLBwSreCHXw.roa
File: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (raw, json)
Hash identifier: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=
Subject key identifier: EA:14:A7:45:1D:29:A1:22:8B:92:06:1B:0C:B0:70:4A:B7:82:1D:7C
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019425FC69261B8EE21EB86F4C16633D8600
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/6hSnRR0poSKLkgYbDLBwSreCHXw.roa
Signing time: Thu 02 Jan 2025 07:48:06 +0000
ROA not before: Thu 02 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62163
IP address blocks: 185.99.164.0/24 maxlen: 24
185.99.165.0/24 maxlen: 24
185.99.166.0/24 maxlen: 24
185.99.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:69:26:1b:8e:e2:1e:b8:6f:4c:16:63:3d:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Jan 2 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea14a7451d29a1228b92061b0cb0704ab7821d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:ce:a6:ee:c7:cc:47:c4:fe:18:36:a6:27:
7c:18:34:a3:a6:0b:fa:67:e7:51:95:89:7b:b5:74:
0a:0a:39:fa:38:be:21:92:2a:c5:14:ab:b9:14:c9:
ac:ff:fa:8e:73:be:32:48:a4:6a:5d:34:bc:f8:ff:
ad:09:41:7d:f1:c7:9a:86:d5:fc:af:c8:84:2e:5e:
36:ce:0f:88:f1:e7:ce:e9:4b:0b:f9:e2:88:cc:e7:
ee:2c:8c:be:53:04:44:ee:b7:d5:31:1d:90:56:78:
81:fa:6b:7b:66:0c:47:3a:f4:0e:77:17:2b:64:04:
92:bc:a2:7a:bd:65:59:3a:97:12:a5:fa:1e:8e:38:
5f:73:0a:25:d1:a4:bf:72:40:73:ad:d6:db:79:6f:
a0:02:6e:81:70:6e:3a:c5:3a:27:5b:c7:f3:84:7d:
2a:41:5b:ca:13:87:a2:9e:0c:cc:3c:fe:6c:29:c1:
06:3e:17:e8:e6:62:bf:be:73:b7:32:d7:6e:da:fb:
72:00:9a:9f:c0:be:ec:1f:c6:0f:60:aa:70:cc:49:
25:cd:9c:5e:7c:28:c4:53:d8:bc:c1:bc:2e:0b:ec:
a4:46:1e:05:49:18:fa:a1:41:93:24:c2:fc:a6:9d:
c5:7d:9b:02:bc:8c:77:a2:6f:94:9e:72:67:50:e1:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:A7:45:1D:29:A1:22:8B:92:06:1B:0C:B0:70:4A:B7:82:1D:7C
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/6hSnRR0poSKLkgYbDLBwSreCHXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.164.0/22
Signature Algorithm: sha256WithRSAEncryption
00:3f:34:c3:a2:42:7d:ab:21:f6:73:83:24:b4:18:e4:3e:c0:
bf:cc:4b:35:02:c9:08:82:23:cc:69:6a:5b:6a:1b:70:96:0c:
f9:37:bd:a4:37:de:ad:d3:73:8e:8d:97:2e:f7:d8:91:a1:87:
02:af:ec:8f:3e:90:ca:20:8b:57:42:b6:23:ba:73:93:82:cb:
a1:69:e1:39:30:b9:43:53:9f:1e:c1:20:9a:c1:ce:bf:72:49:
5b:b7:e2:2a:11:93:6c:aa:67:4f:ba:8c:11:23:64:4e:e3:77:
e9:f4:d9:ed:9a:fa:f9:22:12:21:8e:df:b2:1e:dc:77:d1:3a:
e9:89:ed:4b:38:9b:5c:88:c4:b7:c5:7c:a4:72:b6:4c:98:09:
33:78:9e:bf:73:f8:e5:52:c9:87:57:09:c8:46:b3:a4:d9:ba:
35:5d:1d:02:1a:27:67:3f:f3:aa:c3:56:0c:97:c7:ef:2f:8e:
c2:97:6e:75:07:d5:7f:49:9f:50:a1:32:b1:54:61:79:ed:1a:
d2:0b:07:c3:a7:b3:81:a2:ae:ac:97:6d:96:7f:11:7c:bd:e5:
94:84:3c:5c:39:97:0a:ee:a4:e3:92:54:53:a6:88:b5:ed:7d:
c7:28:ab:35:3f:23:17:8a:e4:6b:6d:e4:55:7b:87:92:db:f2:
ec:a0:f6:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/GkmG47iHrhvTBZjPYYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1
MTVkOTkwHhcNMjUwMTAyMDc0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTE0YTc0NTFkMjlhMTIyOGI5MjA2MWIwY2IwNzA0YWI3ODIxZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFrOpu7HzEfE/hg2pid8GDSjpgv6
Z+dRlYl7tXQKCjn6OL4hkirFFKu5FMms//qOc74ySKRqXTS8+P+tCUF98ceahtX8
r8iELl42zg+I8efO6UsL+eKIzOfuLIy+UwRE7rfVMR2QVniB+mt7ZgxHOvQOdxcr
ZASSvKJ6vWVZOpcSpfoejjhfcwol0aS/ckBzrdbbeW+gAm6BcG46xTonW8fzhH0q
QVvKE4eingzMPP5sKcEGPhfo5mK/vnO3Mtdu2vtyAJqfwL7sH8YPYKpwzEklzZxe
fCjEU9i8wbwuC+ykRh4FSRj6oUGTJML8pp3FfZsCvIx3om+UnnJnUOHjpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOoUp0UdKaEii5IGGwywcEq3gh18MB8GA1UdIwQY
MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt
Y2ZiMGQwNDkzYzNhLzEvNmhTblJSMHBvU0tMa2dZYkRMQndTcmVDSFh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh
LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWOkMA0G
CSqGSIb3DQEBCwUAA4IBAQAAPzTDokJ9qyH2c4MktBjkPsC/zEs1AskIgiPMaWpb
ahtwlgz5N72kN96t03OOjZcu99iRoYcCr+yPPpDKIItXQrYjunOTgsuhaeE5MLlD
U58ewSCawc6/cklbt+IqEZNsqmdPuowRI2RO43fp9Nntmvr5IhIhjt+yHtx30Trp
ie1LOJtciMS3xXykcrZMmAkzeJ6/c/jlUsmHVwnIRrOk2bo1XR0CGidnP/Oqw1YM
l8fvL47Cl251B9V/SZ9QoTKxVGF57RrSCwfDp7OBoq6sl22WfxF8veWUhDxcOZcK
7qTjklRTpoi17X3HKKs1PyMXiuRrbeRVe4eS2/LsoPb/
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:08 2025 by rpki-client