Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/tJwISkQYqLHEilM1B5xtrHKBtrs.roa
File: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (raw, json)
Hash identifier: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=
Subject key identifier: B4:9C:08:4A:44:18:A8:B1:C4:8A:53:35:07:9C:6D:AC:72:81:B6:BB
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 0194274841F5BEE9FFFB9D4B37B5B705D19F
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/tJwISkQYqLHEilM1B5xtrHKBtrs.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204198
IP address blocks: 185.111.84.0/24 maxlen: 24
185.111.85.0/24 maxlen: 24
185.111.86.0/24 maxlen: 24
185.111.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:41:f5:be:e9:ff:fb:9d:4b:37:b5:b7:05:d1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b49c084a4418a8b1c48a5335079c6dac7281b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:59:a1:50:44:ec:83:36:1f:00:15:55:00:
0d:c4:8c:7d:66:54:60:49:82:f4:50:ab:bd:86:9f:
28:9a:11:4c:0a:1a:76:8e:5d:a0:a1:fa:96:00:33:
52:41:1f:2c:9e:eb:3f:22:64:70:cb:8b:70:f6:92:
8a:7d:b1:99:1c:bd:cc:5f:4f:30:12:77:35:ce:b6:
eb:db:3a:ac:7f:3a:1c:b0:88:19:5f:7f:86:19:54:
9b:51:34:2a:2b:53:a7:71:76:4d:f2:27:b5:87:8e:
38:7a:eb:95:66:ff:9a:0e:35:33:70:df:aa:f1:15:
5c:1e:7d:de:cc:08:a7:04:69:a6:15:58:f2:cc:6b:
18:56:40:0d:87:e3:65:ba:ec:1e:bf:94:c8:5a:e5:
6c:e0:4a:b4:7b:d7:0c:7f:68:a9:c5:e5:c9:39:18:
26:c9:7a:40:b8:c1:33:e1:d5:af:c7:26:09:01:73:
45:46:02:6f:dc:90:49:12:95:c9:b1:54:2f:db:3e:
f4:21:a0:c7:80:f7:eb:4e:65:be:71:18:f4:78:19:
9e:fe:f5:3b:65:fc:05:96:38:57:da:49:ce:9e:ca:
9d:31:80:1c:33:53:ce:6b:64:b5:68:bd:05:91:22:
c7:38:1a:53:fb:4a:98:03:38:a9:7a:4b:3d:77:5b:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:08:4A:44:18:A8:B1:C4:8A:53:35:07:9C:6D:AC:72:81:B6:BB
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/tJwISkQYqLHEilM1B5xtrHKBtrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.84.0/22
Signature Algorithm: sha256WithRSAEncryption
97:37:84:65:8e:0d:c6:4c:05:0f:6a:67:14:3c:a9:89:32:05:
80:11:0f:2c:50:72:44:00:54:a4:3d:fc:b9:57:c4:e8:d7:55:
6a:cd:39:ed:c5:27:04:4f:4e:91:16:86:b4:34:61:cb:49:84:
e4:e0:11:56:a7:03:1e:6d:ca:a5:ff:f6:de:5f:56:5f:30:02:
5a:2c:83:9d:a5:d1:a0:5c:ff:47:ef:cc:52:05:92:fa:fd:f1:
9c:a8:f4:98:ff:be:97:58:ce:f9:99:db:3a:a0:b9:ef:4e:d2:
f0:ba:6c:ea:e4:b2:66:a2:8b:bb:db:c9:ce:2c:55:d2:05:6b:
2b:8b:8a:c0:7d:0e:a2:bb:b8:d3:f9:d6:20:97:cf:c5:53:f2:
53:43:2a:38:0e:50:ac:2e:25:d8:90:34:8b:ea:fb:40:42:d8:
29:63:1f:4f:5f:00:ad:43:1d:29:5b:50:b1:34:5f:f5:0e:d1:
6f:ef:46:ad:b6:07:a9:d2:1a:d1:2b:74:05:00:dc:56:a5:49:
83:03:53:49:f4:df:0d:c9:b3:85:c1:05:78:16:5c:f5:7e:74:
a4:07:d5:31:a0:18:9f:8f:fc:76:15:6d:d4:c2:ba:f9:ff:de:
aa:03:55:2d:cf:fa:ed:3c:cb:2e:50:5b:4e:39:8b:05:bd:60:
90:b3:16:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSEH1vun/+51LN7W3BdGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTdjYmNjZWUzNmIyNGVjYmQ0NjNmN2QxMDJhYmM0ZmU0
MGUxNGQwHhcNMjUwMTAyMTM1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDljMDg0YTQ0MThhOGIxYzQ4YTUzMzUwNzljNmRhYzcyODFiNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFRZoVBE7IM2HwAVVQANxIx9ZlRg
SYL0UKu9hp8omhFMChp2jl2gofqWADNSQR8snus/ImRwy4tw9pKKfbGZHL3MX08w
Enc1zrbr2zqsfzocsIgZX3+GGVSbUTQqK1OncXZN8ie1h444euuVZv+aDjUzcN+q
8RVcHn3ezAinBGmmFVjyzGsYVkANh+Nluuwev5TIWuVs4Eq0e9cMf2ipxeXJORgm
yXpAuMEz4dWvxyYJAXNFRgJv3JBJEpXJsVQv2z70IaDHgPfrTmW+cRj0eBme/vU7
ZfwFljhX2knOnsqdMYAcM1POa2S1aL0FkSLHOBpT+0qYAzipeks9d1uY7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLScCEpEGKixxIpTNQecbaxygba7MB8GA1UdIwQY
MBaAFPwXy8zuNrJOy9Rj99ECq8T+QOFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODct
MTM2NTg3NWM3ZTg1LzEvdEp3SVNrUVlxTEhFaWxNMUI1eHRySEtCdHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODctMTM2NTg3NWM3ZTg1
LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW9UMA0G
CSqGSIb3DQEBCwUAA4IBAQCXN4Rljg3GTAUPamcUPKmJMgWAEQ8sUHJEAFSkPfy5
V8To11VqzTntxScET06RFoa0NGHLSYTk4BFWpwMebcql//beX1ZfMAJaLIOdpdGg
XP9H78xSBZL6/fGcqPSY/76XWM75mds6oLnvTtLwumzq5LJmoou728nOLFXSBWsr
i4rAfQ6iu7jT+dYgl8/FU/JTQyo4DlCsLiXYkDSL6vtAQtgpYx9PXwCtQx0pW1Cx
NF/1DtFv70attgep0hrRK3QFANxWpUmDA1NJ9N8NybOFwQV4Flz1fnSkB9UxoBif
j/x2FW3Uwrr5/96qA1Utz/rtPMsuUFtOOYsFvWCQsxaL
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:38 2025 by rpki-client