Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa
File: 4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa (raw, json)
Hash identifier: yb1ZkdtEhTyv9DB1WP29BM5drsp9NA6SmJ1955YSoLA=
Subject key identifier: E1:6D:8C:B1:A1:73:0A:A7:37:BE:63:7E:9B:F2:95:DD:F2:8B:08:21
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 01941F8C03858D79CE122AB79FD441C2AE79
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205514
IP address blocks: 185.201.0.0/23 maxlen: 23
185.201.2.0/24 maxlen: 24
185.201.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:03:85:8d:79:ce:12:2a:b7:9f:d4:41:c2:ae:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e16d8cb1a1730aa737be637e9bf295ddf28b0821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:43:9b:fb:6a:34:0c:19:3d:37:de:71:f3:
7a:42:fc:82:fa:ed:6e:ed:dc:e6:e4:bc:86:d0:5d:
89:0e:81:c2:f9:61:ef:e8:d4:0c:a0:ef:a2:4c:01:
69:87:0e:93:a2:97:5d:4b:49:21:38:ab:38:61:43:
71:8f:a6:0e:2a:5f:b2:0c:9c:33:3d:88:e0:e6:f0:
29:b8:f3:83:6c:e5:b0:05:6b:0b:c6:05:1f:c7:27:
d3:dd:b2:1d:da:36:e6:04:45:fd:0d:b0:f7:47:a2:
b2:34:00:f2:77:1c:a4:27:65:48:1c:ca:1d:39:f1:
0c:66:9f:dc:cd:a7:4f:27:c6:e7:66:56:5c:b6:26:
cd:33:21:12:f1:6b:bb:7f:2a:ac:7e:f3:7b:6d:e3:
24:71:c9:1b:f5:3e:1f:68:e2:68:80:1b:5f:b4:cb:
19:07:4b:57:b7:b5:1c:e6:0f:37:18:5e:c9:d2:49:
a7:01:e9:1b:3a:dc:5e:bd:c0:85:97:1a:8c:14:ff:
4f:a7:98:0d:f3:90:0c:7c:65:9a:fb:76:f6:ec:e8:
86:98:a8:18:d2:22:3d:34:9a:9c:c7:96:69:9f:8e:
b1:76:74:0a:f4:e9:4a:84:1b:20:5f:45:ba:89:e2:
96:22:ff:d5:76:27:cf:23:61:19:62:9a:ed:be:27:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:8C:B1:A1:73:0A:A7:37:BE:63:7E:9B:F2:95:DD:F2:8B:08:21
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.0.0/22
Signature Algorithm: sha256WithRSAEncryption
97:c8:2b:2d:11:c2:8d:9a:e8:9b:84:aa:63:7e:f6:d9:0c:a2:
c4:ae:c0:f7:44:9c:a7:58:f0:0e:00:22:78:f5:a5:00:2d:8a:
bd:c1:af:22:d1:3f:67:5a:a8:72:6b:76:57:78:86:89:6f:31:
db:6d:52:2c:24:e4:1f:aa:cf:a0:29:e9:21:36:49:d7:a4:ec:
01:91:20:a5:40:5c:46:fa:5f:d6:78:59:5d:e9:78:53:72:ca:
15:70:a4:e9:f4:d3:88:76:92:5c:41:af:3a:6f:06:84:61:a2:
5e:4b:57:47:5c:61:b2:c6:1d:95:b0:40:49:93:3e:c6:bb:03:
0e:65:04:36:30:ba:57:88:40:79:08:cd:15:1b:1a:2a:b9:de:
d5:f1:95:65:82:f6:bf:e2:3f:6d:b9:ab:05:66:e1:44:9c:12:
88:44:03:72:36:a8:b3:ca:fa:bf:60:17:aa:54:25:98:c9:4f:
4a:f5:05:7e:19:2f:50:0a:b5:16:b6:1f:f3:c3:60:8f:f3:d7:
43:04:b0:de:ba:0c:4d:72:3f:5d:f5:50:ce:20:48:17:70:9c:
9a:fd:cb:cb:3d:04:90:fa:17:9b:ea:c7:ad:2e:7b:4b:39:07:
f0:86:85:85:12:65:3d:0a:27:6d:4f:fa:af:1e:b5:fc:49:5b:
25:cb:c1:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjAOFjXnOEiq3n9RBwq55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDhmNDY5YjkwNzExYTEyODJiZjQ5MGQwMGYxNTYwOTY1
OTc3NjAwHhcNMjUwMTAxMDE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTZkOGNiMWExNzMwYWE3MzdiZTYzN2U5YmYyOTVkZGYyOGIwODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lVDm/tqNAwZPTfecfN6QvyC+u1u
7dzm5LyG0F2JDoHC+WHv6NQMoO+iTAFphw6TopddS0khOKs4YUNxj6YOKl+yDJwz
PYjg5vApuPODbOWwBWsLxgUfxyfT3bId2jbmBEX9DbD3R6KyNADydxykJ2VIHMod
OfEMZp/czadPJ8bnZlZctibNMyES8Wu7fyqsfvN7beMkcckb9T4faOJogBtftMsZ
B0tXt7Uc5g83GF7J0kmnAekbOtxevcCFlxqMFP9Pp5gN85AMfGWa+3b27OiGmKgY
0iI9NJqcx5Zpn46xdnQK9OlKhBsgX0W6ieKWIv/VdifPI2EZYprtvid+MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFtjLGhcwqnN75jfpvyld3yiwghMB8GA1UdIwQY
MBaAFLDY9Gm5BxGhKCv0kNAPFWCWWXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81MzBjMmItOTQ0Mi00NjIxLThlOTEt
ZDBlNDg2ODBmMjMyLzEvNFcyTXNhRnpDcWMzdm1OLW1fS1YzZktMQ0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81MzBjMmItOTQ0Mi00NjIxLThlOTEtZDBlNDg2ODBmMjMy
LzEvc05qMGFia0hFYUVvS19TUTBBOFZZSlpaZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuckAMA0G
CSqGSIb3DQEBCwUAA4IBAQCXyCstEcKNmuibhKpjfvbZDKLErsD3RJynWPAOACJ4
9aUALYq9wa8i0T9nWqhya3ZXeIaJbzHbbVIsJOQfqs+gKekhNknXpOwBkSClQFxG
+l/WeFld6XhTcsoVcKTp9NOIdpJcQa86bwaEYaJeS1dHXGGyxh2VsEBJkz7GuwMO
ZQQ2MLpXiEB5CM0VGxoqud7V8ZVlgva/4j9tuasFZuFEnBKIRANyNqizyvq/YBeq
VCWYyU9K9QV+GS9QCrUWth/zw2CP89dDBLDeugxNcj9d9VDOIEgXcJya/cvLPQSQ
+heb6setLntLOQfwhoWFEmU9CidtT/qvHrX8SVsly8GF
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:10 2025 by rpki-client