Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa
File: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (raw, json)
Hash identifier: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=
Subject key identifier: 22:98:2F:66:CE:91:AF:08:C9:48:2A:E3:2E:D5:69:4C:FC:79:02:D2
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019425FC547F2B11BB85EF32859DB1186BFE
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa
Signing time: Thu 02 Jan 2025 07:48:01 +0000
ROA not before: Thu 02 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 185.39.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:54:7f:2b:11:bb:85:ef:32:85:9d:b1:18:6b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22982f66ce91af08c9482ae32ed5694cfc7902d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:2a:ac:2b:5c:a1:d3:ef:10:49:4b:d0:1f:
fc:d3:89:0e:22:80:28:ec:18:7f:1a:a1:1d:ee:d6:
75:97:41:a5:29:2d:be:3c:d9:f9:b6:e5:3f:ee:af:
a4:2c:85:f6:e3:e4:48:a0:c3:e0:fe:5c:98:b2:37:
9c:28:05:9d:ed:15:78:38:be:8a:80:0a:87:9d:3a:
b5:6a:09:66:a9:b8:d9:21:76:0c:1e:d3:64:41:73:
7d:a1:1f:71:03:12:86:35:9c:13:0c:4f:fd:56:6d:
a4:f1:53:5c:9e:6e:88:50:4a:05:1e:a6:94:bb:87:
86:22:ab:ef:20:b1:e8:fc:e7:28:1c:45:c9:d7:01:
84:66:35:a9:c0:1c:33:27:b8:18:63:34:6f:52:87:
ec:0d:b8:a6:65:25:66:72:d5:bc:b2:36:4a:83:4c:
cf:97:5a:9c:fe:bd:78:3d:4f:5a:f9:e4:7f:4f:57:
5b:eb:c7:08:2a:24:28:b7:f3:2c:5f:41:fa:05:58:
ae:ab:a9:db:75:31:53:4a:eb:37:43:0b:5a:8d:aa:
76:4f:24:55:3e:cd:73:e9:14:05:16:2c:65:7e:28:
0e:f0:51:12:58:eb:11:1d:70:10:42:6a:67:c3:6a:
ec:a7:b6:26:fd:ce:f5:b9:b4:8d:0e:9d:dd:ce:5f:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:2F:66:CE:91:AF:08:C9:48:2A:E3:2E:D5:69:4C:FC:79:02:D2
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.77.0/24
Signature Algorithm: sha256WithRSAEncryption
62:34:bb:bd:55:3b:b2:03:de:34:74:08:31:de:c3:43:15:03:
7c:55:44:1f:90:23:c6:c3:65:55:ce:31:c6:87:f9:30:a3:74:
3b:75:5b:be:5d:d0:31:da:2b:14:b2:90:66:2e:05:e1:da:bc:
61:6c:f0:6a:84:8b:20:93:04:39:31:26:44:8d:da:7c:47:e0:
61:3f:ac:6d:cd:4b:f3:d0:98:db:91:3c:dc:c6:4c:8e:6f:eb:
fe:e7:46:32:1a:1c:2d:d5:c4:8a:5c:21:4c:5b:3e:6b:35:e7:
61:9f:0c:f6:89:eb:8f:93:8b:3a:b6:02:71:e5:7b:97:2e:3a:
85:28:a7:da:ab:30:ac:b6:4b:5e:4c:9f:34:24:25:9e:0d:71:
ff:e3:8f:cb:2e:28:2d:45:9b:84:35:0e:b6:d7:13:f6:2e:08:
8d:3a:ac:b6:c7:68:4a:69:6a:ce:20:e4:1d:9f:33:66:33:ae:
8e:6f:66:93:58:01:30:28:e5:bf:3c:6c:ee:45:9a:02:33:2a:
bf:39:b1:de:e1:e5:6b:3e:f2:95:a3:5d:ab:eb:bd:94:65:f8:
74:0e:20:9d:b7:bd:e5:8e:e1:e5:97:4d:1e:d9:09:86:17:a2:
62:12:f3:0d:78:ad:05:0e:c4:32:62:87:06:a5:ba:a4:5e:44:
06:b9:5c:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/FR/KxG7he8yhZ2xGGv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl
NGJiNTIwHhcNMjUwMTAyMDc0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjk4MmY2NmNlOTFhZjA4Yzk0ODJhZTMyZWQ1Njk0Y2ZjNzkwMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kcqrCtcodPvEElL0B/804kOIoAo
7Bh/GqEd7tZ1l0GlKS2+PNn5tuU/7q+kLIX24+RIoMPg/lyYsjecKAWd7RV4OL6K
gAqHnTq1aglmqbjZIXYMHtNkQXN9oR9xAxKGNZwTDE/9Vm2k8VNcnm6IUEoFHqaU
u4eGIqvvILHo/OcoHEXJ1wGEZjWpwBwzJ7gYYzRvUofsDbimZSVmctW8sjZKg0zP
l1qc/r14PU9a+eR/T1db68cIKiQot/MsX0H6BViuq6nbdTFTSus3Qwtajap2TyRV
Ps1z6RQFFixlfigO8FESWOsRHXAQQmpnw2rsp7Ym/c71ubSNDp3dzl8HUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKYL2bOka8IyUgq4y7VaUz8eQLSMB8GA1UdIwQY
MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt
OWFkZTM5NmY3YzRjLzEvSXBndlpzNlJyd2pKU0Nyakx0VnBUUHg1QXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj
LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSdNMA0G
CSqGSIb3DQEBCwUAA4IBAQBiNLu9VTuyA940dAgx3sNDFQN8VUQfkCPGw2VVzjHG
h/kwo3Q7dVu+XdAx2isUspBmLgXh2rxhbPBqhIsgkwQ5MSZEjdp8R+BhP6xtzUvz
0JjbkTzcxkyOb+v+50YyGhwt1cSKXCFMWz5rNedhnwz2ieuPk4s6tgJx5XuXLjqF
KKfaqzCstkteTJ80JCWeDXH/44/LLigtRZuENQ621xP2LgiNOqy2x2hKaWrOIOQd
nzNmM66Ob2aTWAEwKOW/PGzuRZoCMyq/ObHe4eVrPvKVo12r672UZfh0DiCdt73l
juHll00e2QmGF6JiEvMNeK0FDsQyYocGpbqkXkQGuVwd
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:21 2025 by rpki-client