Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa
File: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (raw, json)
Hash identifier: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=
Subject key identifier: 57:11:D9:5D:1C:49:4D:1C:65:FC:60:09:7D:74:46:93:87:94:6E:04
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 0194228E361CA30DB3E9558ADF582970EC31
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204734
IP address blocks: 185.205.20.0/22 maxlen: 22
2a0c:1400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:36:1c:a3:0d:b3:e9:55:8a:df:58:29:70:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5711d95d1c494d1c65fc60097d74469387946e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:62:2e:c3:63:af:78:33:69:0d:87:ae:91:
b1:4a:f9:66:1a:1a:81:81:fd:38:e7:20:39:5e:f9:
49:a4:17:6c:fe:9c:72:09:3a:b9:ad:fe:8b:b4:60:
39:06:40:59:c9:16:a1:f8:7e:cd:6f:ae:d6:f9:b2:
56:c0:24:ae:a3:90:a9:dd:93:cb:04:c5:51:6a:26:
86:b9:c2:2d:76:42:5d:a2:49:a0:34:17:d8:1d:fe:
de:77:dc:ed:6a:3b:a6:72:6f:de:79:c1:e7:3e:57:
1d:ce:0e:f3:70:11:69:61:16:ed:48:16:23:d2:91:
df:45:f9:77:01:bc:ba:93:da:fb:8e:19:2e:0e:a3:
1a:f5:db:3c:6e:27:26:d0:50:1e:ab:93:6f:3f:3c:
83:07:d2:96:38:3f:ea:62:a3:7d:84:5f:a7:ed:6e:
5e:86:af:b0:90:d6:7b:c8:7b:81:04:71:87:65:d5:
ba:1a:4b:b4:d2:55:fc:c7:cf:46:5a:27:b8:95:61:
47:09:1d:ba:db:58:c1:2b:a2:91:7a:e9:0b:7c:67:
b7:76:23:19:14:36:e0:69:22:9d:71:65:10:d4:30:
34:d8:e0:c3:c0:9e:d6:5a:54:71:5d:a3:a1:b2:8e:
a7:1d:43:49:ca:ed:08:8d:d4:68:2d:91:a4:cb:6a:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:D9:5D:1C:49:4D:1C:65:FC:60:09:7D:74:46:93:87:94:6E:04
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.20.0/22
IPv6:
2a0c:1400::/29
Signature Algorithm: sha256WithRSAEncryption
02:21:cf:02:1a:fb:99:96:10:35:18:d9:8f:68:02:18:b6:a8:
9c:39:5e:aa:a2:a4:a0:d7:c5:e4:11:92:fa:08:a2:c4:28:36:
c2:76:15:e1:12:7f:d7:69:22:b9:23:c8:95:97:66:63:bf:9e:
d3:79:04:a2:95:fd:f3:b9:3e:3f:d4:32:80:96:74:33:b1:cf:
50:ad:47:b0:37:b8:3c:83:04:10:d8:d3:df:1e:7c:d9:50:0b:
2e:19:42:c5:bb:80:28:08:62:9e:f7:56:c3:88:a0:43:c1:91:
82:11:fa:cf:eb:cf:67:41:47:6f:bf:b3:64:90:a3:48:a8:4a:
1d:f1:d4:69:ba:32:a0:d2:c6:ef:54:85:19:9b:5c:a5:a9:58:
ed:68:2f:c9:3d:50:0e:b4:cb:2d:b7:91:c6:89:08:28:8a:9e:
46:73:3b:13:a2:d5:c7:46:59:92:61:64:74:b6:5b:8a:0c:48:
7f:57:16:b2:53:78:c6:20:5f:c2:87:ea:d2:06:4c:be:f3:6b:
7d:19:44:ef:23:64:b3:61:ce:27:5e:86:3a:6d:64:1e:61:ce:
90:84:ac:61:97:87:30:0e:19:ab:43:30:2d:eb:d0:43:91:a5:
fa:d6:3a:8b:6c:1b:53:41:14:29:71:34:60:c3:14:53:69:16:
12:3b:45:bc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijjYcow2z6VWK31gpcOwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODRiNDUxNzkzZjYyNDE4NjE3YmM5MzRmNWU4MjUxM2Zj
MzZhODkwHhcNMjUwMTAxMTU0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzExZDk1ZDFjNDk0ZDFjNjVmYzYwMDk3ZDc0NDY5Mzg3OTQ2ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGhiLsNjr3gzaQ2HrpGxSvlmGhqB
gf045yA5XvlJpBds/pxyCTq5rf6LtGA5BkBZyRah+H7Nb67W+bJWwCSuo5Cp3ZPL
BMVRaiaGucItdkJdokmgNBfYHf7ed9ztajumcm/eecHnPlcdzg7zcBFpYRbtSBYj
0pHfRfl3Aby6k9r7jhkuDqMa9ds8bicm0FAeq5NvPzyDB9KWOD/qYqN9hF+n7W5e
hq+wkNZ7yHuBBHGHZdW6Gku00lX8x89GWie4lWFHCR2621jBK6KReukLfGe3diMZ
FDbgaSKdcWUQ1DA02ODDwJ7WWlRxXaOhso6nHUNJyu0IjdRoLZGky2oK4QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFcR2V0cSU0cZfxgCX10RpOHlG4EMB8GA1UdIwQY
MBaAFOaEtFF5P2JBhhe8k09eglE/w2qJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUt
NzFiNzA5ZWY1ZjViLzEvVnhIWlhSeEpUUnhsX0dBSmZYUkdrNGVVYmdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUtNzFiNzA5ZWY1ZjVi
LzEvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuc0UMA0E
AgACMAcDBQMqDBQAMA0GCSqGSIb3DQEBCwUAA4IBAQACIc8CGvuZlhA1GNmPaAIY
tqicOV6qoqSg18XkEZL6CKLEKDbCdhXhEn/XaSK5I8iVl2Zjv57TeQSilf3zuT4/
1DKAlnQzsc9QrUewN7g8gwQQ2NPfHnzZUAsuGULFu4AoCGKe91bDiKBDwZGCEfrP
689nQUdvv7NkkKNIqEod8dRpujKg0sbvVIUZm1ylqVjtaC/JPVAOtMstt5HGiQgo
ip5GczsTotXHRlmSYWR0tluKDEh/VxayU3jGIF/Ch+rSBky+82t9GUTvI2SzYc4n
XoY6bWQeYc6QhKxhl4cwDhmrQzAt69BDkaX61jqLbBtTQRQpcTRgwxRTaRYSO0W8
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:00:53 2025 by rpki-client