Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa
File: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (raw, json)
Hash identifier: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=
Subject key identifier: C9:5B:E4:B8:EF:A3:82:94:57:E9:73:77:19:73:75:9E:95:89:27:A8
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 019427B5A0200D731B44FF5D5EBB71714771
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203455
IP address blocks: 185.133.132.0/22 maxlen: 32
2a05:70c0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a0:20:0d:73:1b:44:ff:5d:5e:bb:71:71:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c95be4b8efa3829457e973771973759e958927a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:52:a4:f6:66:57:81:47:00:dd:eb:c0:3f:
e2:e8:f6:40:82:19:a1:26:4c:8a:ef:da:c5:5b:5d:
d0:9f:2b:44:7b:b6:11:11:66:44:d9:34:62:8c:f3:
ef:3d:90:12:4c:21:27:41:c6:92:e5:9e:bd:80:9f:
61:d6:7f:23:c8:51:8b:c3:91:21:c8:b8:65:ba:f2:
e7:0d:9f:ea:88:3b:54:46:dd:a0:df:18:49:9f:12:
cc:0f:fc:a0:05:3e:18:e0:bb:f4:3b:a9:b0:b0:5b:
c4:3d:98:c5:4a:31:8b:6e:cd:b9:9c:a7:01:8f:c4:
2b:4a:5b:12:cb:00:27:9e:51:44:a1:ee:ac:84:01:
93:ed:49:be:af:c6:a6:b5:03:7a:bc:86:54:1a:58:
b2:44:fa:43:fb:2a:ea:0e:cf:3a:00:62:30:2e:1b:
80:5f:37:14:eb:dd:04:95:2f:f5:f6:98:bf:6c:53:
09:ed:b1:b5:29:24:e1:d1:f8:24:e8:c4:49:62:9b:
13:1c:bf:92:46:54:6f:e6:4e:5c:19:e7:cb:13:63:
6a:1c:27:bb:44:30:4d:29:8e:a0:3d:c6:c0:9d:d7:
82:1e:a5:3c:16:5c:28:35:bb:ea:7e:a1:f5:9b:f9:
a1:36:98:27:8b:be:b4:13:d7:d4:1d:d2:6e:e4:22:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:E4:B8:EF:A3:82:94:57:E9:73:77:19:73:75:9E:95:89:27:A8
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.132.0/22
IPv6:
2a05:70c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:5c:74:e3:0c:16:1f:e1:3a:3c:cd:5c:b7:ee:b0:11:e2:83:
92:50:68:fd:d6:aa:05:df:8e:95:5c:ed:37:37:4a:b5:b6:36:
78:4a:fa:a3:da:5f:41:f6:93:eb:b4:be:55:41:12:da:d5:f5:
17:31:2c:c3:74:cd:cb:b6:d4:d0:cb:45:5b:83:ef:6f:22:e6:
c5:7f:d8:00:25:ee:ae:da:e6:68:16:76:05:31:49:02:62:3d:
81:35:6c:59:1b:56:2c:b8:41:bd:0f:1b:34:d8:15:86:16:49:
4c:9c:8b:6e:0b:63:36:5a:e6:ef:ad:2f:f3:da:6c:75:8b:0b:
d1:20:f2:cd:ad:39:f5:cc:3a:27:11:c5:b0:03:04:83:07:53:
ed:ec:a8:53:f6:1a:c6:16:bd:03:09:be:c8:ec:6a:a6:6b:02:
ce:34:0a:6a:06:21:dc:2b:a8:e3:09:71:c9:41:f7:f9:ef:5a:
5b:72:b4:17:72:14:55:d6:4a:ad:2d:73:49:d5:27:73:c7:80:
df:25:31:7d:a8:a8:03:4e:8f:c4:d9:95:22:6c:f0:b6:64:30:
c7:14:32:d8:c9:22:4f:b6:b9:7c:db:e2:4d:07:cf:11:a3:ba:
93:98:10:4c:8a:38:35:bf:ee:6b:3c:75:2d:b0:46:a0:13:88:
8f:a7:39:95
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntaAgDXMbRP9dXrtxcUdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz
MTc1NDgwHhcNMjUwMTAyMTU1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTViZTRiOGVmYTM4Mjk0NTdlOTczNzcxOTczNzU5ZTk1ODkyN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZNSpPZmV4FHAN3rwD/i6PZAghmh
JkyK79rFW13QnytEe7YREWZE2TRijPPvPZASTCEnQcaS5Z69gJ9h1n8jyFGLw5Eh
yLhluvLnDZ/qiDtURt2g3xhJnxLMD/ygBT4Y4Lv0O6mwsFvEPZjFSjGLbs25nKcB
j8QrSlsSywAnnlFEoe6shAGT7Um+r8amtQN6vIZUGliyRPpD+yrqDs86AGIwLhuA
XzcU690ElS/19pi/bFMJ7bG1KSTh0fgk6MRJYpsTHL+SRlRv5k5cGefLE2NqHCe7
RDBNKY6gPcbAndeCHqU8FlwoNbvqfqH1m/mhNpgni760E9fUHdJu5CL00wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMlb5Ljvo4KUV+lzdxlzdZ6ViSeoMB8GA1UdIwQY
MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt
ZTM1YTY3ZTVkOWUyLzEveVZ2a3VPLWpncFJYNlhOM0dYTjFucFdKSjZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy
LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYWEMA0E
AgACMAcDBQMqBXDAMA0GCSqGSIb3DQEBCwUAA4IBAQBAXHTjDBYf4To8zVy37rAR
4oOSUGj91qoF346VXO03N0q1tjZ4Svqj2l9B9pPrtL5VQRLa1fUXMSzDdM3LttTQ
y0Vbg+9vIubFf9gAJe6u2uZoFnYFMUkCYj2BNWxZG1YsuEG9Dxs02BWGFklMnItu
C2M2WubvrS/z2mx1iwvRIPLNrTn1zDonEcWwAwSDB1Pt7KhT9hrGFr0DCb7I7Gqm
awLONApqBiHcK6jjCXHJQff571pbcrQXchRV1kqtLXNJ1Sdzx4DfJTF9qKgDTo/E
2ZUibPC2ZDDHFDLYySJPtrl82+JNB88Ro7qTmBBMijg1v+5rPHUtsEagE4iPpzmV
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:49 2025 by rpki-client