Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa
File: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (raw, json)
Hash identifier: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=
Subject key identifier: 0F:65:8B:06:16:D7:10:C7:43:12:EE:95:A1:20:81:5F:D9:30:2B:16
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019427B5BD96CF6BFD9884ACF0DF5298EE9A
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8323
IP address blocks: 185.92.51.0/24 maxlen: 24
193.193.64.0/19 maxlen: 19
195.150.0.0/16 maxlen: 16
195.150.0.0/17 maxlen: 17
195.150.128.0/18 maxlen: 18
2001:6d8::/29 maxlen: 29
2001:6d8::/32 maxlen: 32
2001:6df::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bd:96:cf:6b:fd:98:84:ac:f0:df:52:98:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f658b0616d710c74312ee95a120815fd9302b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:6e:ce:af:b9:e8:8c:a3:cd:1c:09:6b:d6:
f6:ba:4a:8d:59:32:d7:c2:69:ff:db:bc:1a:87:c9:
b1:5f:36:95:65:8c:90:0b:d6:83:1b:0c:d3:f5:40:
9b:43:d7:7a:8f:88:2b:3f:56:e0:93:27:d1:2c:f1:
e5:0b:03:6b:7c:ba:25:d1:7f:ea:e0:48:15:a5:1f:
ef:fa:46:64:44:62:c6:32:04:df:62:7b:22:14:0f:
4e:dc:55:7e:cb:3c:92:61:d2:51:92:c5:1e:7b:54:
b6:52:94:c1:98:d2:a6:e4:d5:44:d5:24:11:5a:b5:
c6:d7:3c:3e:cb:16:e4:05:55:86:19:cc:21:36:22:
95:4e:ae:1a:bc:a1:ff:01:3d:41:a5:51:3b:bc:56:
95:af:d6:86:ac:7c:8a:76:9f:4e:00:f4:6b:13:34:
38:22:bd:0f:61:71:a0:d6:c4:2d:a2:33:a4:34:69:
71:11:29:f3:f1:be:0f:68:d1:c0:88:64:7a:a5:a5:
cf:72:37:33:b3:48:6e:5a:83:cf:76:2e:c4:2a:d1:
fc:c2:78:b2:6d:69:35:c5:6d:3b:6b:8b:86:40:2c:
2e:ce:12:5a:af:f5:76:bd:0c:16:c8:bf:4c:17:ce:
e2:e4:de:0b:61:66:1f:e4:40:3b:0f:5a:81:8c:b8:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:8B:06:16:D7:10:C7:43:12:EE:95:A1:20:81:5F:D9:30:2B:16
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.51.0/24
193.193.64.0/19
195.150.0.0/16
IPv6:
2001:6d8::/29
Signature Algorithm: sha256WithRSAEncryption
6d:a0:b7:f7:33:c6:c6:b4:7b:d4:85:1b:7a:fb:59:07:29:4e:
d8:88:29:23:3c:7b:ae:9a:15:33:84:0e:8d:4f:9c:5f:e8:88:
e8:82:34:b8:b0:49:35:8b:aa:33:1f:c5:83:af:bc:75:df:5b:
a1:fb:b7:10:00:53:61:f8:bc:5c:19:1b:1f:99:75:7e:88:8c:
7d:fd:bb:c9:40:7e:06:74:5c:ba:9c:aa:14:09:2a:32:b1:46:
0c:f8:64:65:5e:c4:04:0f:78:eb:67:98:84:01:a0:b4:08:7a:
dd:14:f8:4b:92:2a:c9:97:16:47:42:dc:22:01:c8:a1:5b:89:
e3:63:50:bb:62:1f:4d:c2:9d:e5:59:6d:72:a2:c2:4d:d5:7c:
90:d0:6c:3c:85:db:f2:89:0c:da:3e:a7:60:22:f4:b4:96:0d:
fd:bf:07:b3:2c:49:fd:0c:1b:43:93:42:48:d5:e4:9d:d8:a3:
34:26:40:ec:cb:63:b8:18:47:24:04:01:06:35:26:5f:81:e9:
71:59:b5:53:ef:0d:af:34:db:ef:e6:71:94:37:44:87:3c:42:
b1:90:3d:dd:35:73:95:bc:a0:22:2b:2f:ac:6e:ac:02:fb:e1:
98:39:01:2e:80:d0:fa:f0:17:20:05:93:d4:b5:68:4d:29:79:
1d:a4:27:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQntb2Wz2v9mISs8N9SmO6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjUwMTAyMTU1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjY1OGIwNjE2ZDcxMGM3NDMxMmVlOTVhMTIwODE1ZmQ5MzAyYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtuzq+56IyjzRwJa9b2ukqNWTLX
wmn/27wah8mxXzaVZYyQC9aDGwzT9UCbQ9d6j4grP1bgkyfRLPHlCwNrfLol0X/q
4EgVpR/v+kZkRGLGMgTfYnsiFA9O3FV+yzySYdJRksUee1S2UpTBmNKm5NVE1SQR
WrXG1zw+yxbkBVWGGcwhNiKVTq4avKH/AT1BpVE7vFaVr9aGrHyKdp9OAPRrEzQ4
Ir0PYXGg1sQtojOkNGlxESnz8b4PaNHAiGR6paXPcjczs0huWoPPdi7EKtH8wniy
bWk1xW07a4uGQCwuzhJar/V2vQwWyL9MF87i5N4LYWYf5EA7D1qBjLhquwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA9liwYW1xDHQxLulaEggV/ZMCsWMB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xL0QyV0xCaGJYRU1kREV1NlZvU0NCWDlrd0t4WS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi
OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMBcEAgABMBEDBAC5XDMD
BAXBwUADAwDDljANBAIAAjAHAwUDIAEG2DANBgkqhkiG9w0BAQsFAAOCAQEAbaC3
9zPGxrR71IUbevtZBylO2IgpIzx7rpoVM4QOjU+cX+iI6II0uLBJNYuqMx/Fg6+8
dd9bofu3EABTYfi8XBkbH5l1foiMff27yUB+BnRcupyqFAkqMrFGDPhkZV7EBA94
62eYhAGgtAh63RT4S5IqyZcWR0LcIgHIoVuJ42NQu2IfTcKd5VltcqLCTdV8kNBs
PIXb8okM2j6nYCL0tJYN/b8HsyxJ/QwbQ5NCSNXkndijNCZA7MtjuBhHJAQBBjUm
X4HpcVm1U+8NrzTb7+ZxlDdEhzxCsZA93TVzlbygIisvrG6sAvvhmDkBLoDQ+vAX
IAWT1LVoTSl5HaQn6g==
-----END CERTIFICATE-----
Generated at Sun Apr 13 20:57:19 2025 by rpki-client