Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa
File: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (raw, json)
Hash identifier: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=
Subject key identifier: 4B:F7:75:CB:18:CF:0C:06:67:19:2A:E1:97:17:05:42:C1:E8:F0:1F
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 019420684BDAF8DA5F4D5E25FF3707E15982
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206616
IP address blocks: 185.149.92.0/22 maxlen: 29
212.15.88.0/21 maxlen: 21
2a07:7a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4b:da:f8:da:5f:4d:5e:25:ff:37:07:e1:59:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bf775cb18cf0c0667192ae197170542c1e8f01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:07:5e:48:f7:67:65:2d:66:26:b0:26:0e:
9b:86:17:7e:c4:82:2a:4f:66:cd:65:42:1a:58:91:
96:cf:27:56:fd:22:52:3f:23:e8:93:0f:e7:1a:f0:
49:7b:65:97:d8:1d:78:7b:55:48:7b:21:09:f1:af:
fe:d8:bf:40:b0:db:01:30:a6:72:66:12:61:8d:c1:
2d:00:4f:49:87:65:70:7c:a1:36:70:86:30:a7:3b:
bf:4b:8e:fe:97:33:e5:94:94:69:9c:2c:7f:83:51:
21:f1:8a:a3:c4:78:53:0d:2e:3f:28:d3:3e:85:98:
f4:37:07:50:0f:fe:ee:e1:6f:ce:e0:63:04:50:2f:
fa:d0:89:b4:d5:a9:c5:c9:6c:71:d2:d4:a7:72:5a:
f2:c9:9a:bb:4d:ae:20:3a:42:cd:69:5a:a6:09:86:
13:06:4d:0c:89:63:f8:87:a4:2e:ed:27:88:e0:11:
43:d7:11:ce:13:24:ba:0c:fe:8f:bd:12:9d:de:e9:
91:4e:f5:80:df:4e:e5:ee:a7:38:78:ba:10:08:b9:
12:d7:6d:2d:06:b8:d7:8a:2c:17:2f:22:ad:67:35:
1d:37:78:4c:25:b7:0e:5f:73:af:44:7a:2a:19:10:
89:57:13:74:2e:18:57:fc:b3:73:37:c4:12:0b:f9:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:75:CB:18:CF:0C:06:67:19:2A:E1:97:17:05:42:C1:E8:F0:1F
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.92.0/22
212.15.88.0/21
IPv6:
2a07:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
73:c5:08:26:b4:ff:cd:5a:c4:c7:8b:82:d0:2a:39:65:f7:7b:
b4:8c:89:5f:3a:0f:ca:2d:17:40:3a:fb:33:1b:c4:45:38:17:
2f:47:44:09:a3:19:8c:7b:cc:47:f0:10:80:21:76:53:e6:33:
4c:d3:91:83:af:ed:47:60:e3:8a:c0:a4:a2:9c:c1:44:ee:d7:
0c:44:0f:db:b9:07:f5:e0:02:26:4a:96:42:a3:5c:46:bc:e4:
28:48:d6:cb:57:ee:d9:54:ed:4d:47:20:f5:b7:97:e0:29:11:
6e:a9:96:1b:f9:a4:14:52:9d:22:43:0d:a4:40:59:98:8c:a7:
0b:a6:75:89:6a:2f:b5:0d:38:45:a5:78:75:d1:34:ed:92:e4:
26:4c:83:d9:58:e3:fd:b0:ca:bd:7c:16:9e:f3:5a:61:e6:ae:
90:2a:42:b5:69:6a:4e:19:c9:b0:3f:5a:9a:ee:31:bf:cd:c9:
ba:1c:b2:ed:ff:06:36:31:36:bf:b6:22:9a:52:e1:a5:12:0a:
32:21:80:0d:2b:38:6f:08:06:2b:5e:d7:bb:f3:f3:7b:f8:73:
82:be:63:24:97:a8:17:af:75:24:78:22:ca:92:a7:e1:d1:4a:
ef:b7:fc:25:b0:53:a7:60:80:ef:48:8e:53:bd:1d:4c:c3:5c:
ef:b7:b2:71
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQgaEva+NpfTV4l/zcH4VmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmE3MWU0NmM3NTkxNmI4ZTVkZTE5M2NjN2Y4MTA2OWRm
ODZmNzMwHhcNMjUwMTAxMDU0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY3NzVjYjE4Y2YwYzA2NjcxOTJhZTE5NzE3MDU0MmMxZThmMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZIHXkj3Z2UtZiawJg6bhhd+xIIq
T2bNZUIaWJGWzydW/SJSPyPokw/nGvBJe2WX2B14e1VIeyEJ8a/+2L9AsNsBMKZy
ZhJhjcEtAE9Jh2VwfKE2cIYwpzu/S47+lzPllJRpnCx/g1Eh8YqjxHhTDS4/KNM+
hZj0NwdQD/7u4W/O4GMEUC/60Im01anFyWxx0tSnclryyZq7Ta4gOkLNaVqmCYYT
Bk0MiWP4h6Qu7SeI4BFD1xHOEyS6DP6PvRKd3umRTvWA307l7qc4eLoQCLkS120t
BrjXiiwXLyKtZzUdN3hMJbcOX3OvRHoqGRCJVxN0LhhX/LNzN8QSC/mPTwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEv3dcsYzwwGZxkq4ZcXBULB6PAfMB8GA1UdIwQY
MBaAFCC6ceRsdZFrjl3hk8x/gQad+G9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEt
NDg0NTAwYmNmYjA3LzEvU19kMXl4alBEQVpuR1NyaGx4Y0ZRc0hvOEI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEtNDg0NTAwYmNmYjA3
LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZVcAwQD
1A9YMA0EAgACMAcDBQMqB3qAMA0GCSqGSIb3DQEBCwUAA4IBAQBzxQgmtP/NWsTH
i4LQKjll93u0jIlfOg/KLRdAOvszG8RFOBcvR0QJoxmMe8xH8BCAIXZT5jNM05GD
r+1HYOOKwKSinMFE7tcMRA/buQf14AImSpZCo1xGvOQoSNbLV+7ZVO1NRyD1t5fg
KRFuqZYb+aQUUp0iQw2kQFmYjKcLpnWJai+1DThFpXh10TTtkuQmTIPZWOP9sMq9
fBae81ph5q6QKkK1aWpOGcmwP1qa7jG/zcm6HLLt/wY2MTa/tiKaUuGlEgoyIYAN
KzhvCAYrXte78/N7+HOCvmMkl6gXr3UkeCLKkqfh0Urvt/wlsFOnYIDvSI5TvR1M
w1zvt7Jx
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:31 2025 by rpki-client