Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa
File: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (raw, json)
Hash identifier: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=
Subject key identifier: 6D:C9:10:5E:76:F0:7C:A5:C1:B8:9D:9F:81:71:89:E9:5F:BA:41:F9
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 0194228D09264EA860BD06BBAB3160B204F4
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa
Signing time: Wed 01 Jan 2025 15:47:35 +0000
ROA not before: Wed 01 Jan 2025 15:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25591
IP address blocks: 5.183.68.0/22 maxlen: 22
92.118.200.0/22 maxlen: 22
185.140.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:09:26:4e:a8:60:bd:06:bb:ab:31:60:b2:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jan 1 15:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dc9105e76f07ca5c1b89d9f817189e95fba41f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:74:ab:b3:31:36:c2:fb:bc:73:77:4b:3a:
21:6c:ee:d7:48:2d:98:f8:bb:cc:33:9b:ba:62:2e:
a8:52:20:a7:36:f8:d0:ba:36:2c:73:56:14:1f:6b:
d0:4c:25:ab:4b:43:a1:1d:0c:26:cf:88:78:d3:f8:
71:6f:20:f7:37:ad:20:af:aa:f7:36:ec:88:fb:aa:
b3:1c:21:d0:98:50:05:a7:6b:f5:58:2b:42:49:df:
56:f3:e4:da:72:a2:82:53:ff:df:ee:75:9e:05:de:
e0:02:9a:42:f7:96:63:b5:84:7d:ab:5e:48:f1:52:
76:22:71:42:a9:55:d3:03:c5:5f:a9:5c:06:b6:69:
16:52:9c:08:93:05:30:3f:c2:51:65:3a:b0:e6:1a:
73:a9:0c:39:a9:d0:4a:ec:b3:e9:ca:4f:b9:7a:b8:
59:2a:6d:66:97:67:6b:4b:f0:70:85:c7:a1:8e:72:
84:40:cd:d9:37:6c:35:2e:a2:dd:d3:70:aa:9d:e6:
c2:f6:43:ec:e4:17:bf:bd:a8:03:56:3b:9a:bd:ba:
b5:39:a4:34:e3:17:a6:25:88:73:84:2f:ed:8a:b1:
d9:40:dd:4b:83:c7:ac:54:9b:46:df:04:52:7e:db:
40:ec:35:c4:32:a9:eb:e5:68:ad:2c:af:56:f8:a1:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:10:5E:76:F0:7C:A5:C1:B8:9D:9F:81:71:89:E9:5F:BA:41:F9
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.68.0/22
92.118.200.0/22
185.140.134.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:cc:23:77:c2:71:fe:c9:7a:23:f9:7e:ff:87:28:d3:e4:eb:
b6:7c:15:af:0b:b3:dc:49:e9:b4:24:52:fd:f6:77:57:d1:55:
44:c1:3e:24:13:6c:d5:62:8d:6c:2f:fe:a0:43:da:5a:0b:9e:
b4:76:8e:fb:e2:c3:96:c0:a6:0a:62:6b:8e:c3:82:1d:55:18:
5a:76:58:a9:a7:b9:d7:b8:f9:bd:d5:f8:77:51:c8:2e:c8:79:
6f:89:92:9f:91:26:2b:67:be:ff:6f:9a:f5:ac:ba:7d:b0:3f:
2d:03:74:db:79:20:b4:66:11:e8:2e:a8:b2:8e:4c:07:ae:f0:
6a:29:c2:a1:de:af:ff:0f:cd:ed:17:ba:a7:86:7b:f4:08:9a:
1c:27:af:85:df:38:b0:b8:82:a1:f6:c7:0a:33:8a:d4:c8:3c:
f5:3e:ab:9f:11:24:9a:a4:f1:95:12:80:97:64:2f:cf:00:f1:
e6:99:df:2c:48:cf:4c:b9:27:43:cc:bd:85:3f:88:51:6f:2e:
c3:62:db:70:c2:31:6c:e1:c5:dc:a5:4c:75:5a:4c:b5:fc:5b:
96:72:16:4e:36:a4:f5:b4:74:54:75:19:14:4d:ed:29:18:7a:
7b:90:77:47:26:a8:8e:c1:59:40:fb:4f:4b:6b:8b:7f:b5:fd:
a5:5c:12:d3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQijQkmTqhgvQa7qzFgsgT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj
NzZhMzQwHhcNMjUwMTAxMTU0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGM5MTA1ZTc2ZjA3Y2E1YzFiODlkOWY4MTcxODllOTVmYmE0MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY50q7MxNsL7vHN3SzohbO7XSC2Y
+LvMM5u6Yi6oUiCnNvjQujYsc1YUH2vQTCWrS0OhHQwmz4h40/hxbyD3N60gr6r3
NuyI+6qzHCHQmFAFp2v1WCtCSd9W8+TacqKCU//f7nWeBd7gAppC95ZjtYR9q15I
8VJ2InFCqVXTA8VfqVwGtmkWUpwIkwUwP8JRZTqw5hpzqQw5qdBK7LPpyk+5erhZ
Km1ml2drS/BwhcehjnKEQM3ZN2w1LqLd03CqnebC9kPs5Be/vagDVjuavbq1OaQ0
4xemJYhzhC/tirHZQN1Lg8esVJtG3wRSfttA7DXEMqnr5WitLK9W+KEJxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG3JEF528Hylwbidn4FxielfukH5MB8GA1UdIwQY
MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt
NzJhYjU5ODdmNjA5LzEvYmNrUVhuYndmS1hCdUoyZmdYR0o2Vi02UWZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5
LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBbdEAwQC
XHbIAwQBuYyGMA0GCSqGSIb3DQEBCwUAA4IBAQC0zCN3wnH+yXoj+X7/hyjT5Ou2
fBWvC7PcSem0JFL99ndX0VVEwT4kE2zVYo1sL/6gQ9paC560do774sOWwKYKYmuO
w4IdVRhadlipp7nXuPm91fh3UcguyHlviZKfkSYrZ77/b5r1rLp9sD8tA3TbeSC0
ZhHoLqiyjkwHrvBqKcKh3q//D83tF7qnhnv0CJocJ6+F3ziwuIKh9scKM4rUyDz1
PqufESSapPGVEoCXZC/PAPHmmd8sSM9MuSdDzL2FP4hRby7DYttwwjFs4cXcpUx1
Wky1/FuWchZONqT1tHRUdRkUTe0pGHp7kHdHJqiOwVlA+09La4t/tf2lXBLT
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:56:13 2025 by rpki-client