Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa
File: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (raw, json)
Hash identifier: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=
Subject key identifier: 22:1D:F5:B2:0F:2E:08:96:FF:29:BA:52:6B:52:FA:3B:19:9C:E1:9F
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 0194258FA7888CF45A313A0FD94A2BA8F2EA
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204694
IP address blocks: 185.243.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a7:88:8c:f4:5a:31:3a:0f:d9:4a:2b:a8:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=221df5b20f2e0896ff29ba526b52fa3b199ce19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:7c:15:b6:ef:8f:19:9c:ba:ef:42:16:df:
d2:c4:12:47:45:2b:89:87:68:fd:48:9a:74:76:76:
8f:cd:9c:94:0d:2a:04:bf:8c:d2:d4:f4:74:c2:32:
a0:32:80:15:6c:a1:d2:3c:09:82:24:cd:59:64:8d:
dd:33:94:43:6d:26:ae:7e:ff:97:e0:5a:ca:15:53:
85:39:c7:e1:ca:f1:af:48:1e:81:44:f2:6c:c4:5b:
91:9c:75:bf:f7:0f:ab:d2:3d:13:05:0d:f4:27:76:
b8:c0:3d:80:e9:e3:ef:fd:97:b4:94:63:23:4c:8f:
1f:e1:e2:93:bf:d3:bc:43:00:cb:b4:5b:c8:d4:1b:
86:7c:e1:02:3f:41:92:60:cf:e0:42:15:cb:bc:f0:
f8:b0:2a:8a:4f:23:a6:32:22:92:98:0b:67:fd:33:
42:26:c5:28:25:aa:ef:10:b9:a0:eb:3c:11:ed:83:
55:92:0f:e7:85:3a:dc:bc:c3:de:98:31:2b:3e:2e:
65:8c:92:93:9a:0e:4c:a3:e4:e9:89:86:dd:81:4c:
31:de:6a:32:f3:8d:47:31:3f:6d:60:c7:5e:13:4b:
76:73:44:33:69:44:3c:01:c4:f4:87:50:06:1b:72:
d5:ab:0e:95:63:e9:87:26:d3:df:7c:54:97:29:f8:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:F5:B2:0F:2E:08:96:FF:29:BA:52:6B:52:FA:3B:19:9C:E1:9F
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.72.0/22
Signature Algorithm: sha256WithRSAEncryption
78:9a:d6:a4:3f:0a:9e:d3:2c:3d:1c:00:09:d4:02:31:03:a2:
e0:95:d3:1e:b6:6e:48:23:66:17:50:ff:96:a0:ae:e8:ba:61:
09:a6:43:5d:84:e3:dd:4a:4b:3e:4b:2c:ee:d7:ce:f8:f2:95:
c5:4d:80:ae:bb:4a:62:fd:ab:e8:74:fb:72:e9:b6:09:a6:39:
f2:59:ce:36:d0:5d:2a:55:4f:49:0f:e4:eb:57:8d:31:6e:b1:
5c:f0:08:4a:8a:b5:4b:d1:14:9e:87:c4:30:06:e7:a6:d3:4e:
15:54:6c:28:01:cb:ae:08:1c:81:db:69:4b:d2:d0:01:86:34:
cb:de:35:0e:4b:ab:79:b6:d1:4f:32:5c:05:da:2e:6d:cb:55:
30:39:60:e5:08:13:37:19:a6:be:37:87:33:8e:3d:9e:da:7d:
d4:95:69:e5:95:00:dc:21:f5:d3:95:e4:db:87:78:f1:f8:53:
88:58:c0:ef:c8:da:66:92:45:74:17:88:84:02:88:0f:ec:1a:
50:ff:01:63:ae:f8:31:3c:7d:fe:12:00:4e:91:d0:e4:5b:f8:
82:2e:78:03:4e:4c:0c:88:04:d0:12:08:5a:4c:46:d2:e0:4d:
67:1d:de:21:bd:08:d3:d1:8c:06:ec:8f:e6:83:32:66:d6:ea:
1f:6d:7c:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6eIjPRaMToP2UorqPLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjUwMTAyMDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjFkZjViMjBmMmUwODk2ZmYyOWJhNTI2YjUyZmEzYjE5OWNlMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6R8Fbbvjxmcuu9CFt/SxBJHRSuJ
h2j9SJp0dnaPzZyUDSoEv4zS1PR0wjKgMoAVbKHSPAmCJM1ZZI3dM5RDbSaufv+X
4FrKFVOFOcfhyvGvSB6BRPJsxFuRnHW/9w+r0j0TBQ30J3a4wD2A6ePv/Ze0lGMj
TI8f4eKTv9O8QwDLtFvI1BuGfOECP0GSYM/gQhXLvPD4sCqKTyOmMiKSmAtn/TNC
JsUoJarvELmg6zwR7YNVkg/nhTrcvMPemDErPi5ljJKTmg5Mo+TpiYbdgUwx3moy
841HMT9tYMdeE0t2c0QzaUQ8AcT0h1AGG3LVqw6VY+mHJtPffFSXKfhieQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCId9bIPLgiW/ym6UmtS+jsZnOGfMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvSWgzMXNnOHVDSmJfS2JwU2ExTDZPeG1jNFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufNIMA0G
CSqGSIb3DQEBCwUAA4IBAQB4mtakPwqe0yw9HAAJ1AIxA6LgldMetm5II2YXUP+W
oK7oumEJpkNdhOPdSks+Syzu18748pXFTYCuu0pi/avodPty6bYJpjnyWc420F0q
VU9JD+TrV40xbrFc8AhKirVL0RSeh8QwBuem004VVGwoAcuuCByB22lL0tABhjTL
3jUOS6t5ttFPMlwF2i5ty1UwOWDlCBM3Gaa+N4czjj2e2n3UlWnllQDcIfXTleTb
h3jx+FOIWMDvyNpmkkV0F4iEAogP7BpQ/wFjrvgxPH3+EgBOkdDkW/iCLngDTkwM
iATQEghaTEbS4E1nHd4hvQjT0YwG7I/mgzJm1uofbXzI
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:10 2025 by rpki-client