Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa
File: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (raw, json)
Hash identifier: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=
Subject key identifier: F4:86:09:DC:94:FD:B8:0B:31:C6:DD:A5:CA:31:A3:25:5A:97:1B:7F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 019427B69735E9C58367E578416D4D6FCA12
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39396
IP address blocks: 85.187.216.0/23 maxlen: 24
185.138.176.0/22 maxlen: 23
185.138.176.0/23 maxlen: 23
185.138.178.0/23 maxlen: 23
185.218.64.0/22 maxlen: 23
185.251.39.0/24 maxlen: 24
2a10:bac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:97:35:e9:c5:83:67:e5:78:41:6d:4d:6f:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f48609dc94fdb80b31c6dda5ca31a3255a971b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:cd:84:55:01:58:7b:47:28:f4:5b:bc:d1:
9a:a4:09:41:aa:f8:19:62:5b:da:aa:e5:ac:30:7c:
96:f7:2e:02:77:48:ea:2a:9a:32:97:01:54:9e:f5:
63:20:d3:4d:5f:9a:81:44:1e:12:04:81:95:2a:78:
bf:0f:0e:52:aa:2a:4c:14:b1:c3:bd:4d:e0:89:0b:
f6:2e:1b:f3:2d:74:7b:ba:28:1a:15:7e:f2:ad:37:
6d:7a:6c:b7:fc:c6:1c:48:03:46:0b:c3:0b:c7:3b:
90:b8:21:19:96:b3:a4:9a:53:a8:28:35:c6:c4:6d:
90:7b:29:62:e6:dd:40:be:d5:88:6f:53:15:fb:1c:
71:df:49:19:7a:4c:0d:cb:b2:d9:14:bc:1a:a2:5b:
6c:b1:59:8c:a6:94:bd:da:33:cc:b0:b6:4a:c5:02:
0c:f9:51:80:32:5a:1d:3f:0b:d7:21:75:4a:ae:60:
81:6c:27:c7:c3:67:7a:2d:8a:4e:2b:0b:92:24:89:
3f:be:59:40:9c:c3:a6:16:07:f3:01:d9:5a:e2:d3:
60:f5:31:d1:f3:c7:05:0c:71:1b:a4:c2:d3:ec:17:
16:45:40:c3:45:45:11:fa:8e:ad:d7:12:4e:f1:13:
bd:8b:e1:70:59:08:71:84:c8:1a:a9:f2:40:6c:37:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:86:09:DC:94:FD:B8:0B:31:C6:DD:A5:CA:31:A3:25:5A:97:1B:7F
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.216.0/23
185.138.176.0/22
185.218.64.0/22
185.251.39.0/24
IPv6:
2a10:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:2b:ba:b8:bb:87:48:4a:57:ff:88:cf:58:83:4c:d5:f8:d5:
0d:9d:24:b7:b0:f7:b2:b9:49:65:e5:5e:51:ba:6f:3b:a9:70:
7d:0a:42:f9:35:3f:7d:80:b3:a4:a2:1c:89:bc:69:08:3c:0a:
87:ec:a6:26:de:51:dd:ac:15:6a:06:ea:2b:ca:b1:d9:88:dd:
e6:1d:8a:8e:d7:16:a3:68:19:04:a2:b4:83:82:35:01:a7:8e:
5f:76:fa:e3:5e:89:94:73:e8:d0:01:2f:f3:84:c1:6f:1b:b8:
4f:dd:a5:77:f4:91:6c:26:8a:6b:fc:1e:ab:7a:6d:01:d9:c1:
98:ca:a2:e2:23:5a:f3:00:ef:3a:f6:c9:ef:7f:fb:4d:ba:35:
26:19:df:d2:2c:8c:9d:4b:f7:a2:25:38:21:db:97:5b:69:7e:
f1:da:22:8e:0b:da:da:c8:71:3c:b4:58:a4:22:56:93:67:b0:
91:e2:f7:cf:f1:09:09:27:b1:86:5d:fd:43:6e:fc:4c:23:00:
8e:2f:a0:3c:bf:77:30:a4:1f:9c:9a:91:f5:12:eb:e5:8d:a7:
e2:1e:01:98:eb:d3:b2:48:1b:c7:1c:64:ed:27:79:28:de:05:
78:7f:de:c8:0a:37:f9:5e:66:59:00:84:d4:d0:68:c0:49:d9:
4e:b0:64:bd
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQntpc16cWDZ+V4QW1Nb8oSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjQzMGQ5YWQ5Y2I5YzQyYzRiZDY2OTBlOWY1ODEyYTQ1
N2EwMmYwHhcNMjUwMTAyMTU1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDg2MDlkYzk0ZmRiODBiMzFjNmRkYTVjYTMxYTMyNTVhOTcxYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyHNhFUBWHtHKPRbvNGapAlBqvgZ
YlvaquWsMHyW9y4Cd0jqKpoylwFUnvVjINNNX5qBRB4SBIGVKni/Dw5SqipMFLHD
vU3giQv2LhvzLXR7uigaFX7yrTdtemy3/MYcSANGC8MLxzuQuCEZlrOkmlOoKDXG
xG2Qeyli5t1AvtWIb1MV+xxx30kZekwNy7LZFLwaoltssVmMppS92jPMsLZKxQIM
+VGAMlodPwvXIXVKrmCBbCfHw2d6LYpOKwuSJIk/vllAnMOmFgfzAdla4tNg9THR
88cFDHEbpMLT7BcWRUDDRUUR+o6t1xJO8RO9i+FwWQhxhMgaqfJAbDcF9QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPSGCdyU/bgLMcbdpcoxoyValxt/MB8GA1UdIwQY
MBaAFIT0MNmtnLnELEvWaQ6fWBKkV6AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQt
YjkwNTZlYmJjNTc2LzEvOUlZSjNKVDl1QXN4eHQybHlqR2pKVnFYRzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQtYjkwNTZlYmJjNTc2
LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBVbvYAwQC
uYqwAwQCudpAAwQAufsnMA0EAgACMAcDBQAqELrAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbK7q4u4dISlf/iM9Yg0zV+NUNnSS3sPeyuUll5V5Rum87qXB9CkL5NT99gLOk
ohyJvGkIPAqH7KYm3lHdrBVqBuoryrHZiN3mHYqO1xajaBkEorSDgjUBp45fdvrj
XomUc+jQAS/zhMFvG7hP3aV39JFsJopr/B6rem0B2cGYyqLiI1rzAO869snvf/tN
ujUmGd/SLIydS/eiJTgh25dbaX7x2iKOC9rayHE8tFikIlaTZ7CR4vfP8QkJJ7GG
Xf1DbvxMIwCOL6A8v3cwpB+cmpH1EuvljafiHgGY69OySBvHHGTtJ3ko3gV4f97I
Cjf5XmZZAITU0GjASdlOsGS9
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:35 2025 by rpki-client