Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa
File: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (raw, json)
Hash identifier: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=
Subject key identifier: A5:6F:8A:97:95:0F:5A:AB:BA:28:6D:FF:27:8B:75:87:9D:87:B9:1D
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 019424451A060F6A40E421FA16CC59D5E1F1
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204019
IP address blocks: 185.107.66.0/24 maxlen: 24
194.1.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1a:06:0f:6a:40:e4:21:fa:16:cc:59:d5:e1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a56f8a97950f5aabba286dff278b75879d87b91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:d0:32:e8:69:fe:39:05:97:66:9e:b4:2b:
24:1a:f4:78:64:20:96:5b:3d:38:88:94:42:c6:32:
96:d3:10:dc:ad:72:89:4b:29:4f:09:b3:a2:df:0a:
87:6e:d0:f5:bf:8c:f5:f8:a9:81:79:e5:f9:dd:4d:
f0:fa:b9:fc:5f:d3:25:85:55:ac:d3:4a:29:b5:b2:
c4:ab:a5:25:73:1a:3e:99:28:1f:91:4d:4f:54:80:
50:c0:90:43:1e:55:1d:c0:ba:c4:69:56:94:09:5a:
b2:54:24:32:6e:5b:70:9a:1c:5a:26:8e:61:55:eb:
58:26:79:62:1a:92:f4:a1:47:ef:85:0e:a3:43:28:
8a:28:e4:98:a9:ab:78:ad:54:a9:d6:65:55:bf:3c:
be:18:3f:99:e2:cf:7a:b5:ec:78:2b:b6:5d:f5:d0:
9b:57:3e:aa:68:3f:cf:f1:85:dc:72:6d:40:73:af:
b3:ac:49:fe:6a:a1:88:b6:91:4d:d5:18:b3:93:51:
1c:42:ad:01:38:32:0d:ee:78:f8:a5:06:30:d1:7f:
60:19:08:3a:dc:8c:4e:9f:44:ee:07:f5:3c:44:47:
cd:f4:59:5f:e7:ef:54:5e:a9:aa:96:85:b7:0e:2d:
1a:57:5a:e2:7b:7a:b5:27:9c:b9:b1:49:d5:e0:ba:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:8A:97:95:0F:5A:AB:BA:28:6D:FF:27:8B:75:87:9D:87:B9:1D
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.66.0/24
194.1.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9a:e2:8e:d3:eb:1f:3d:05:0a:14:eb:bf:3f:56:73:cf:7b:
58:c0:9e:84:4f:21:33:fb:df:79:93:25:f7:df:e3:44:3a:73:
07:91:c7:0c:04:c6:a3:4d:28:62:9b:b6:7c:17:cc:67:fc:61:
dc:9b:6e:76:a3:83:26:95:53:75:7a:63:bc:7f:65:62:2a:1c:
6a:eb:68:7c:f8:af:de:c1:88:ea:ba:ac:60:24:51:60:9e:14:
d7:74:3b:45:3a:19:f0:1d:2d:a2:55:7f:b6:d5:67:5b:3a:9b:
4a:a6:94:27:68:d5:d0:81:05:4c:73:48:c7:98:5d:d9:bf:5e:
65:7d:95:76:83:49:0e:f3:9b:f3:1b:01:12:ff:36:eb:86:c8:
65:2c:84:a3:df:c2:96:ca:0b:3c:e5:e7:42:81:8b:17:35:57:
bc:46:47:12:9a:7f:3e:05:18:54:f6:ca:8f:2e:a4:83:ef:19:
04:c3:4c:01:a7:12:42:3b:52:4d:ba:94:64:f0:85:c4:e3:79:
51:55:45:94:85:7f:bd:da:36:77:c0:9c:52:ac:c5:2e:b0:be:
76:55:54:63:09:ef:74:56:f9:06:ae:9e:a4:7a:47:a7:76:b5:
fd:35:f2:14:7b:53:3a:f5:af:e9:6d:2e:53:2a:e6:82:36:3a:
9a:d9:d0:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRRoGD2pA5CH6FsxZ1eHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk
MjU0YjcwHhcNMjUwMTAxMjM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTZmOGE5Nzk1MGY1YWFiYmEyODZkZmYyNzhiNzU4NzlkODdiOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mPQMuhp/jkFl2aetCskGvR4ZCCW
Wz04iJRCxjKW0xDcrXKJSylPCbOi3wqHbtD1v4z1+KmBeeX53U3w+rn8X9MlhVWs
00optbLEq6Ulcxo+mSgfkU1PVIBQwJBDHlUdwLrEaVaUCVqyVCQybltwmhxaJo5h
VetYJnliGpL0oUfvhQ6jQyiKKOSYqat4rVSp1mVVvzy+GD+Z4s96tex4K7Zd9dCb
Vz6qaD/P8YXccm1Ac6+zrEn+aqGItpFN1Rizk1EcQq0BODIN7nj4pQYw0X9gGQg6
3IxOn0TuB/U8REfN9Flf5+9UXqmqloW3Di0aV1rie3q1J5y5sUnV4Lp1iwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKVvipeVD1qruiht/yeLdYedh7kdMB8GA1UdIwQY
MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt
YmYwNWFjYzgyYmQxLzEvcFctS2w1VVBXcXU2S0czX0o0dDFoNTJIdVIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx
LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWtCAwQA
wgH9MA0GCSqGSIb3DQEBCwUAA4IBAQAsmuKO0+sfPQUKFOu/P1Zzz3tYwJ6ETyEz
+995kyX33+NEOnMHkccMBMajTShim7Z8F8xn/GHcm252o4MmlVN1emO8f2ViKhxq
62h8+K/ewYjquqxgJFFgnhTXdDtFOhnwHS2iVX+21WdbOptKppQnaNXQgQVMc0jH
mF3Zv15lfZV2g0kO85vzGwES/zbrhshlLISj38KWygs85edCgYsXNVe8RkcSmn8+
BRhU9sqPLqSD7xkEw0wBpxJCO1JNupRk8IXE43lRVUWUhX+92jZ3wJxSrMUusL52
VVRjCe90VvkGrp6kekendrX9NfIUe1M69a/pbS5TKuaCNjqa2dD1
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:50 2025 by rpki-client