Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/Dx1gAqycGcxk0c3DOzDhmsNycjk.roa
File: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (raw, json)
Hash identifier: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=
Subject key identifier: 0F:1D:60:02:AC:9C:19:CC:64:D1:CD:C3:3B:30:E1:9A:C3:72:72:39
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019428265BF7A93D6FB105EBE6F3851DB199
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/Dx1gAqycGcxk0c3DOzDhmsNycjk.roa
Signing time: Thu 02 Jan 2025 17:53:10 +0000
ROA not before: Thu 02 Jan 2025 17:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205718
IP address blocks: 185.229.156.0/22 maxlen: 22
2a09:eb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:5b:f7:a9:3d:6f:b1:05:eb:e6:f3:85:1d:b1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Jan 2 17:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1d6002ac9c19cc64d1cdc33b30e19ac3727239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ae:ae:bb:db:68:49:7d:72:ae:5c:35:b9:6d:
4f:dc:f8:bc:da:c7:1a:24:65:43:c5:c9:61:49:99:
b1:4f:48:b9:49:c4:29:b3:12:d4:1d:e9:14:d1:fa:
e7:f1:a3:d7:92:aa:27:1d:d3:48:30:fa:6b:2a:fc:
ce:1b:df:8c:bf:23:a9:2b:2c:2e:41:27:3b:36:a5:
87:b6:4f:e3:bf:e3:d0:83:f8:ef:b2:e1:67:13:c2:
ce:b4:70:6d:8d:7f:91:a3:0d:53:ab:91:3a:19:aa:
e2:f0:49:27:f7:09:aa:a0:d6:23:c8:a5:c9:e6:b9:
8c:74:6a:61:ff:d7:27:61:88:1b:97:e6:15:9d:6d:
ce:71:2d:4f:b9:a2:20:14:99:e4:57:45:9a:a3:8d:
f8:65:03:2f:1e:95:6a:38:5b:7c:41:f8:c7:ad:de:
cc:70:eb:a9:fa:5d:02:e5:c2:94:5e:f9:d7:ae:1a:
fa:65:2e:9a:a8:a6:17:91:e1:81:76:38:4a:8a:cc:
a8:c4:5b:cf:29:ec:42:4b:53:6b:12:ce:42:35:67:
40:9a:fa:c4:a3:05:2f:c1:4d:5a:e4:e2:db:1b:dd:
a3:05:65:32:b4:ba:61:6c:a6:3e:20:d7:25:c9:90:
9a:b6:ef:04:34:81:77:b2:ab:23:6a:48:85:22:8d:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:60:02:AC:9C:19:CC:64:D1:CD:C3:3B:30:E1:9A:C3:72:72:39
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/Dx1gAqycGcxk0c3DOzDhmsNycjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.156.0/22
IPv6:
2a09:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
26:bb:94:e0:49:47:c2:85:2b:3f:f6:7d:36:33:e0:06:09:fb:
26:64:3e:01:a5:94:ba:af:af:01:60:7b:3f:47:77:96:cd:70:
72:20:dd:31:d6:39:7b:0b:a1:66:42:b4:0f:a5:cf:e2:b1:e1:
73:41:8f:b8:0e:af:54:8c:9d:29:57:af:f8:c1:e0:6b:bd:9d:
5b:48:78:81:54:16:36:f6:06:d9:ef:2a:3f:b2:7c:35:f6:f4:
9a:40:66:58:46:10:ee:df:30:3a:16:f0:c8:58:29:e8:d1:09:
87:75:9a:76:60:67:8d:d3:de:f1:a3:73:ec:75:1b:41:7c:05:
3c:e7:a4:26:14:cc:cf:fa:4b:43:79:cd:84:40:2d:63:2d:85:
ba:be:1c:cb:ba:70:ec:6c:51:4d:32:00:07:b4:a0:01:5e:52:
42:00:53:d0:9e:87:37:f7:d7:88:c1:2b:ed:02:9e:a1:d4:f1:
bc:b2:82:b2:9f:d7:1f:88:11:46:62:8a:de:54:64:b5:5e:34:
72:f2:46:6c:95:2c:f3:3d:82:4e:a8:70:47:49:e5:6e:38:02:
ee:6d:59:a5:91:fe:4a:7f:26:84:d5:97:24:51:f5:67:3f:42:
ca:3f:ee:01:0e:cb:4a:15:37:eb:1d:c7:96:c6:28:43:16:a6:
ec:a9:ff:59
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoJlv3qT1vsQXr5vOFHbGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODBiNzcxMGIxMzk4NDQyNzVjOWRlOWM4ZTc2NGViNjQy
ZTE4YzMwHhcNMjUwMTAyMTc1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjFkNjAwMmFjOWMxOWNjNjRkMWNkYzMzYjMwZTE5YWMzNzI3MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA266uu9toSX1yrlw1uW1P3Pi82sca
JGVDxclhSZmxT0i5ScQpsxLUHekU0frn8aPXkqonHdNIMPprKvzOG9+MvyOpKywu
QSc7NqWHtk/jv+PQg/jvsuFnE8LOtHBtjX+Row1Tq5E6Gari8Ekn9wmqoNYjyKXJ
5rmMdGph/9cnYYgbl+YVnW3OcS1PuaIgFJnkV0Wao434ZQMvHpVqOFt8QfjHrd7M
cOup+l0C5cKUXvnXrhr6ZS6aqKYXkeGBdjhKisyoxFvPKexCS1NrEs5CNWdAmvrE
owUvwU1a5OLbG92jBWUytLphbKY+INclyZCatu8ENIF3sqsjakiFIo260QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA8dYAKsnBnMZNHNwzsw4ZrDcnI5MB8GA1UdIwQY
MBaAFP+At3ELE5hEJ1yd6cjnZOtkLhjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQt
MTMzZWZmNzg0NDJiLzEvRHgxZ0FxeWNHY3hrMGMzRE96RGhtc055Y2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQtMTMzZWZmNzg0NDJi
LzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueWcMA0E
AgACMAcDBQAqCetAMA0GCSqGSIb3DQEBCwUAA4IBAQAmu5TgSUfChSs/9n02M+AG
CfsmZD4BpZS6r68BYHs/R3eWzXByIN0x1jl7C6FmQrQPpc/iseFzQY+4Dq9UjJ0p
V6/4weBrvZ1bSHiBVBY29gbZ7yo/snw19vSaQGZYRhDu3zA6FvDIWCno0QmHdZp2
YGeN097xo3PsdRtBfAU856QmFMzP+ktDec2EQC1jLYW6vhzLunDsbFFNMgAHtKAB
XlJCAFPQnoc399eIwSvtAp6h1PG8soKyn9cfiBFGYoreVGS1XjRy8kZslSzzPYJO
qHBHSeVuOALubVmlkf5KfyaE1ZckUfVnP0LKP+4BDstKFTfrHceWxihDFqbsqf9Z
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:29:16 2025 by rpki-client