Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/c3go-15xGcBaQkyMFCkLYeR3zYQ.roa
File: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (raw, json)
Hash identifier: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=
Subject key identifier: 73:78:28:FB:5E:71:19:C0:5A:42:4C:8C:14:29:0B:61:E4:77:CD:84
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 019422FBADA4D1CCEED23EE5A47FFFE989A1
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/c3go-15xGcBaQkyMFCkLYeR3zYQ.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208035
IP address blocks: 185.35.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ad:a4:d1:cc:ee:d2:3e:e5:a4:7f:ff:e9:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737828fb5e7119c05a424c8c14290b61e477cd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:22:02:75:1e:21:16:8e:14:9a:ba:45:68:
ed:80:f6:74:a8:26:45:4d:c7:05:71:fe:89:f7:e1:
d9:03:59:47:99:23:e3:b1:0b:f8:8f:7f:54:d4:43:
83:06:3d:e2:35:02:5f:bd:c1:22:52:12:45:f8:84:
00:14:b9:91:84:dc:38:c8:97:e1:13:6f:6c:7f:b8:
13:c4:e7:85:84:74:92:64:68:f5:16:81:57:f4:d4:
70:c2:95:af:a6:fc:60:7e:4d:db:ff:09:a8:9d:76:
c3:59:33:1f:66:1c:e9:dd:27:7a:06:a1:c1:2c:44:
e0:16:ed:d9:d3:f2:62:de:3b:9d:55:73:bb:3e:8d:
6d:fe:28:0b:49:cf:2e:52:51:a9:28:c9:88:83:fd:
8f:e0:ee:dd:d8:49:bf:23:77:7a:d8:e9:15:e5:6d:
81:fa:1a:a9:c0:8d:05:2c:ff:7c:6f:23:b3:8d:2c:
fd:0a:c6:f2:e2:e5:5d:8f:e3:fa:99:cb:5c:bb:36:
fc:db:a2:32:b8:89:eb:67:5c:04:6b:ec:06:16:f2:
68:d8:7a:3f:a7:6e:dc:9f:b3:a1:db:61:9d:9e:c6:
1c:57:04:70:69:e0:b6:f2:32:5e:98:27:ff:a7:70:
dc:11:5d:f9:4a:36:e4:f4:18:96:4e:4e:44:65:42:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:28:FB:5E:71:19:C0:5A:42:4C:8C:14:29:0B:61:E4:77:CD:84
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/c3go-15xGcBaQkyMFCkLYeR3zYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
40:a6:19:ca:ac:59:5a:df:3b:ce:5e:4b:37:a7:e5:38:1e:ed:
52:49:e9:49:7b:a9:54:09:51:7b:41:6c:41:23:2d:ab:a8:b8:
e2:4e:52:24:85:1e:f0:15:e0:97:8f:0a:fb:bd:58:df:ca:be:
d2:08:4a:86:0c:c3:53:b2:f5:20:a5:09:a4:91:4b:44:89:84:
cd:25:ee:0d:09:aa:c4:bc:fa:a0:37:7d:52:e7:b4:2b:5e:e7:
90:a1:e9:2b:24:2a:15:87:50:64:fd:95:8a:1f:24:f4:f8:6a:
64:98:4b:a0:a6:f6:5f:df:0b:61:28:5e:f4:d0:59:b7:5c:ad:
25:cc:fb:6a:75:7c:9f:8c:21:49:25:ae:b7:36:19:10:64:10:
19:b6:b0:0b:a9:76:86:b0:58:b6:1c:8e:ed:95:4d:ef:af:c5:
5f:3c:f3:fa:c7:86:2c:36:42:fb:56:d2:ac:69:f2:0a:8e:65:
78:04:1f:bf:5e:b5:fd:49:21:07:e1:d0:86:eb:ce:98:55:41:
cf:60:fc:d4:dd:57:10:ed:35:be:71:98:38:25:cd:1e:e8:9c:
9e:e4:50:f4:46:05:88:77:a2:84:80:9b:67:20:4c:e8:ba:8c:
d2:a6:45:0e:4e:1f:b9:d4:76:51:f9:f4:0d:4f:75:63:1b:fe:
7e:ed:1e:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+62k0czu0j7lpH//6YmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDZiNGY5ZmQ1MTY4ZWI3NzgxZTgyNGIxNDUzZTk5ZjVl
NjU1M2MwHhcNMjUwMTAxMTc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzc4MjhmYjVlNzExOWMwNWE0MjRjOGMxNDI5MGI2MWU0NzdjZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMiAnUeIRaOFJq6RWjtgPZ0qCZF
TccFcf6J9+HZA1lHmSPjsQv4j39U1EODBj3iNQJfvcEiUhJF+IQAFLmRhNw4yJfh
E29sf7gTxOeFhHSSZGj1FoFX9NRwwpWvpvxgfk3b/wmonXbDWTMfZhzp3Sd6BqHB
LETgFu3Z0/Ji3judVXO7Po1t/igLSc8uUlGpKMmIg/2P4O7d2Em/I3d62OkV5W2B
+hqpwI0FLP98byOzjSz9Csby4uVdj+P6mctcuzb826IyuInrZ1wEa+wGFvJo2Ho/
p27cn7Oh22GdnsYcVwRwaeC28jJemCf/p3DcEV35Sjbk9BiWTk5EZULHpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHN4KPtecRnAWkJMjBQpC2Hkd82EMB8GA1UdIwQY
MBaAFBQGtPn9UWjrd4HoJLFFPpn15lU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAt
YzE2MTI0NmM4MjVhLzEvYzNnby0xNXhHY0JhUWt5TUZDa0xZZVIzellRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAtYzE2MTI0NmM4MjVh
LzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSM4MA0G
CSqGSIb3DQEBCwUAA4IBAQBAphnKrFla3zvOXks3p+U4Hu1SSelJe6lUCVF7QWxB
Iy2rqLjiTlIkhR7wFeCXjwr7vVjfyr7SCEqGDMNTsvUgpQmkkUtEiYTNJe4NCarE
vPqgN31S57QrXueQoekrJCoVh1Bk/ZWKHyT0+GpkmEugpvZf3wthKF700Fm3XK0l
zPtqdXyfjCFJJa63NhkQZBAZtrALqXaGsFi2HI7tlU3vr8VfPPP6x4YsNkL7VtKs
afIKjmV4BB+/XrX9SSEH4dCG686YVUHPYPzU3VcQ7TW+cZg4Jc0e6Jye5FD0RgWI
d6KEgJtnIEzouozSpkUOTh+51HZR+fQNT3VjG/5+7R56
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:06 2025 by rpki-client