Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/t4HOM7223cblLwASPVWvJxWa0P8.roa
File: t4HOM7223cblLwASPVWvJxWa0P8.roa (raw, json)
Hash identifier: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=
Subject key identifier: B7:81:CE:33:BD:B6:DD:C6:E5:2F:00:12:3D:55:AF:27:15:9A:D0:FF
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 0194266B623A0E0B25208097EE7471BFF3C8
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/t4HOM7223cblLwASPVWvJxWa0P8.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203603
IP address blocks: 185.113.236.0/22 maxlen: 22
185.249.233.0/24 maxlen: 24
185.249.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:62:3a:0e:0b:25:20:80:97:ee:74:71:bf:f3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b781ce33bdb6ddc6e52f00123d55af27159ad0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:2b:21:8a:49:9a:ce:7d:f6:0b:96:95:25:
73:43:5f:b8:b8:85:de:6c:c5:8a:88:17:66:bb:0b:
bc:22:53:41:fd:e4:50:89:50:79:00:28:9e:8b:b8:
79:f7:32:db:ce:00:ad:11:76:da:ae:fb:3e:c6:7e:
9c:e8:77:21:36:fb:b9:12:67:2f:53:ea:44:6d:a7:
e9:52:31:9e:d1:a8:eb:8f:86:76:1d:cf:11:ab:13:
ac:60:b7:6a:61:10:b7:64:08:60:5d:18:85:ce:dc:
34:a2:24:2a:3c:4f:54:43:42:dc:ac:79:b6:76:7a:
3b:70:11:d7:bd:cf:54:42:40:d9:02:07:38:f8:54:
36:45:6b:a3:a1:d8:9a:6b:1d:26:a1:34:a1:69:d5:
1b:bb:00:8b:01:09:0f:ee:17:e2:71:8e:5c:13:94:
3e:0b:1e:58:43:5f:43:9e:12:37:f2:19:8a:00:59:
d8:16:1d:f5:5c:18:86:49:2b:af:48:ff:ac:ed:e8:
f6:d9:8f:ef:65:53:56:e8:c0:c7:17:b2:d1:d8:8e:
67:22:86:6e:51:5b:4c:9c:30:6f:9d:35:30:18:1c:
81:ef:64:e6:7a:d0:61:05:e3:ed:6b:59:b6:2e:72:
31:e6:16:df:09:d8:7d:2a:3e:34:b6:2b:39:2a:a8:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:CE:33:BD:B6:DD:C6:E5:2F:00:12:3D:55:AF:27:15:9A:D0:FF
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/t4HOM7223cblLwASPVWvJxWa0P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.236.0/22
185.249.233.0-185.249.235.255
Signature Algorithm: sha256WithRSAEncryption
4d:5a:2b:90:08:b5:7f:e0:20:f9:35:4b:3d:23:91:68:86:8c:
0f:a5:3e:91:28:29:a9:8b:f6:20:c1:54:89:5f:fb:82:e3:5c:
53:1c:ed:53:d4:1c:96:65:ca:6e:c6:2f:cb:5e:f9:6d:16:61:
fc:74:95:65:0e:3c:ca:a5:37:c2:64:96:91:d3:c8:81:be:fc:
91:89:42:66:60:36:8a:53:bd:b8:c8:66:c0:17:e7:a1:4d:06:
51:96:98:c1:35:83:76:33:a3:8d:52:d7:fb:6b:56:94:eb:56:
18:68:4b:89:41:ab:b7:a0:cc:42:43:d5:43:ef:d1:03:70:1f:
26:d9:67:66:b4:9a:6d:85:90:e3:c2:51:93:7f:18:da:40:1b:
ef:ef:f5:cf:ad:52:bc:90:1e:4d:33:62:77:be:c1:90:92:2d:
44:b7:2f:60:28:64:c8:f0:f9:a4:f2:a7:fc:3e:bc:22:7a:3e:
d0:24:66:76:05:b0:ad:d8:9b:c1:4e:27:ca:2d:23:2b:9e:26:
04:a6:03:2a:20:20:4c:07:53:41:6f:df:98:c4:8f:f0:e6:62:
7e:1d:af:80:8c:88:16:28:ec:20:89:78:2b:23:e8:c8:da:da:
10:8d:09:e7:3c:3d:83:2d:80:1a:83:3f:38:94:bd:5e:77:96:
58:ad:c8:ad
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQma2I6DgslIICX7nRxv/PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjUwMTAyMDk0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzgxY2UzM2JkYjZkZGM2ZTUyZjAwMTIzZDU1YWYyNzE1OWFkMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtsrIYpJms599guWlSVzQ1+4uIXe
bMWKiBdmuwu8IlNB/eRQiVB5ACiei7h59zLbzgCtEXbarvs+xn6c6HchNvu5Emcv
U+pEbafpUjGe0ajrj4Z2Hc8RqxOsYLdqYRC3ZAhgXRiFztw0oiQqPE9UQ0LcrHm2
dno7cBHXvc9UQkDZAgc4+FQ2RWujodiaax0moTShadUbuwCLAQkP7hficY5cE5Q+
Cx5YQ19DnhI38hmKAFnYFh31XBiGSSuvSP+s7ej22Y/vZVNW6MDHF7LR2I5nIoZu
UVtMnDBvnTUwGByB72TmetBhBePta1m2LnIx5hbfCdh9Kj40tis5Kqg7WwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLeBzjO9tt3G5S8AEj1VrycVmtD/MB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvdDRIT003MjIzY2JsTHdBU1BWV3ZKeFdhMFA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuXHsMAwD
BAC5+ekDBAK5+egwDQYJKoZIhvcNAQELBQADggEBAE1aK5AItX/gIPk1Sz0jkWiG
jA+lPpEoKamL9iDBVIlf+4LjXFMc7VPUHJZlym7GL8te+W0WYfx0lWUOPMqlN8Jk
lpHTyIG+/JGJQmZgNopTvbjIZsAX56FNBlGWmME1g3Yzo41S1/trVpTrVhhoS4lB
q7egzEJD1UPv0QNwHybZZ2a0mm2FkOPCUZN/GNpAG+/v9c+tUryQHk0zYne+wZCS
LUS3L2AoZMjw+aTyp/w+vCJ6PtAkZnYFsK3Ym8FOJ8otIyueJgSmAyogIEwHU0Fv
35jEj/DmYn4dr4CMiBYo7CCJeCsj6Mja2hCNCec8PYMtgBqDPziUvV53llityK0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:38 2025 by rpki-client