Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/aNICsUm_YHsuMjtHuPHf5eTVELc.roa
File: aNICsUm_YHsuMjtHuPHf5eTVELc.roa (raw, json)
Hash identifier: FFxXKtXGviWIg2hjziI4X0dpXs0FS5YBP6Wt80lUyGg=
Subject key identifier: 68:D2:02:B1:49:BF:60:7B:2E:32:3B:47:B8:F1:DF:E5:E4:D5:10:B7
Certificate issuer: /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial: 019427B599BFD7D4CA6ACA4B9C8163EF0D58
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/aNICsUm_YHsuMjtHuPHf5eTVELc.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202170
IP address blocks: 185.51.92.0/24 maxlen: 24
185.51.93.0/24 maxlen: 24
185.51.94.0/24 maxlen: 24
185.51.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:99:bf:d7:d4:ca:6a:ca:4b:9c:81:63:ef:0d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68d202b149bf607b2e323b47b8f1dfe5e4d510b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:01:35:e7:5d:2f:35:54:a4:35:6d:9b:21:
11:ce:f5:8d:73:dc:7b:22:29:9c:3f:82:b6:b1:7a:
b5:31:1f:5a:60:a6:4c:f1:2e:f2:b2:24:a3:32:19:
6d:98:f7:a4:89:70:ba:b0:c4:04:4e:c4:3b:9b:53:
c2:85:54:77:91:57:d4:02:32:fd:5d:45:8f:0b:85:
59:9c:8e:55:74:df:1a:e1:f2:62:29:25:1d:f2:ad:
5b:ee:83:b8:30:87:59:6e:da:90:1c:45:d5:bb:20:
8c:f6:ef:fc:2f:e2:d3:d9:fa:54:1b:fa:e8:20:41:
30:de:3c:fb:1f:80:21:f6:20:c0:e5:ca:a7:26:5f:
29:41:c9:f8:dc:50:69:c7:6f:ef:c8:8f:85:35:f7:
84:b7:32:e7:b8:05:d5:02:a2:d5:45:78:28:34:54:
17:55:ca:95:d6:5d:4c:38:4e:91:bf:3f:c5:fb:4d:
5c:f8:ed:0a:1b:8f:f1:c1:2c:c0:be:a8:9b:53:55:
a4:8e:57:02:15:58:ad:5e:5b:fa:2c:24:8e:bd:b2:
39:31:d3:8b:ad:f0:d6:19:8f:76:53:90:ea:c1:cf:
b4:6a:e3:de:67:39:ee:2d:55:d8:9c:28:b7:5a:d3:
3c:ad:cf:4b:bb:e7:36:5f:ab:89:d2:0a:bd:08:66:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:02:B1:49:BF:60:7B:2E:32:3B:47:B8:F1:DF:E5:E4:D5:10:B7
X509v3 Authority Key Identifier:
keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/aNICsUm_YHsuMjtHuPHf5eTVELc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:70:df:8a:0c:83:25:66:80:df:1e:57:31:e8:20:74:42:22:
5d:91:55:1e:5a:53:03:aa:66:be:be:99:7d:fc:f3:48:52:a1:
66:96:46:e7:ae:8f:27:54:d4:1a:d4:23:d3:37:cc:d9:5c:55:
aa:a5:32:a3:e5:d8:06:7c:cc:99:51:b4:ee:ee:d8:6d:b0:bb:
96:f1:a3:35:2c:64:ee:72:02:85:bb:63:de:d4:00:c3:83:2e:
e0:63:8e:5c:1e:88:35:c6:2d:c9:61:56:ba:0f:18:12:cc:3e:
41:a4:9d:d9:02:11:7b:4f:59:69:56:d6:27:51:bb:67:f5:2b:
af:f9:a6:12:86:9e:07:c1:7b:d0:bb:02:5e:95:38:9f:12:e8:
73:cb:e4:15:3d:be:ef:05:38:67:59:bb:61:8c:41:52:77:73:
be:ab:65:13:ae:38:ea:e2:cc:3b:18:0c:d5:96:50:65:b8:c4:
2b:98:ce:bf:4a:43:ac:8d:da:92:47:af:a6:63:2e:f5:7f:8a:
e4:08:d5:b2:cc:94:fa:9f:26:d9:e1:51:16:f4:79:d5:82:58:
1c:0b:b0:24:06:cb:bf:98:df:f1:d9:21:6f:4b:18:d8:62:bc:
9d:e3:6e:4a:f4:6e:9f:8b:de:7b:2d:ec:bc:48:5c:bf:b7:07:
9d:8f:d1:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZm/19TKaspLnIFj7w1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWE3NDU1MTEyN2U5MGQ3M2EyZDNiMjk1ZjFhNmZmNTE1
MTlmZGYwHhcNMjUwMTAyMTU1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGQyMDJiMTQ5YmY2MDdiMmUzMjNiNDdiOGYxZGZlNWU0ZDUxMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VUBNeddLzVUpDVtmyERzvWNc9x7
IimcP4K2sXq1MR9aYKZM8S7ysiSjMhltmPekiXC6sMQETsQ7m1PChVR3kVfUAjL9
XUWPC4VZnI5VdN8a4fJiKSUd8q1b7oO4MIdZbtqQHEXVuyCM9u/8L+LT2fpUG/ro
IEEw3jz7H4Ah9iDA5cqnJl8pQcn43FBpx2/vyI+FNfeEtzLnuAXVAqLVRXgoNFQX
VcqV1l1MOE6Rvz/F+01c+O0KG4/xwSzAvqibU1WkjlcCFVitXlv6LCSOvbI5MdOL
rfDWGY92U5Dqwc+0auPeZznuLVXYnCi3WtM8rc9Lu+c2X6uJ0gq9CGYMqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjSArFJv2B7LjI7R7jx3+Xk1RC3MB8GA1UdIwQY
MBaAFFcadFURJ+kNc6LTspXxpv9RUZ/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kYzE1NDUtNTllZC00YjVlLWJjM2Yt
NmViMDQ4MzIzNmRmLzEvYU5JQ3NVbV9ZSHN1TWp0SHVQSGY1ZVRWRUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kYzE1NDUtNTllZC00YjVlLWJjM2YtNmViMDQ4MzIzNmRm
LzEvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTNcMA0G
CSqGSIb3DQEBCwUAA4IBAQC2cN+KDIMlZoDfHlcx6CB0QiJdkVUeWlMDqma+vpl9
/PNIUqFmlkbnro8nVNQa1CPTN8zZXFWqpTKj5dgGfMyZUbTu7thtsLuW8aM1LGTu
cgKFu2Pe1ADDgy7gY45cHog1xi3JYVa6DxgSzD5BpJ3ZAhF7T1lpVtYnUbtn9Suv
+aYShp4HwXvQuwJelTifEuhzy+QVPb7vBThnWbthjEFSd3O+q2UTrjjq4sw7GAzV
llBluMQrmM6/SkOsjdqSR6+mYy71f4rkCNWyzJT6nybZ4VEW9HnVglgcC7AkBsu/
mN/x2SFvSxjYYryd425K9G6fi957Ley8SFy/twedj9GB
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:11 2025 by rpki-client