Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa
File: KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa (raw, json)
Hash identifier: AJw2YCH/VuTSNYo91kTytnKXtEZrdqVQkspms9NQoho=
Subject key identifier: 29:29:6D:F1:8E:10:7E:C3:EE:07:67:B9:AB:E3:14:92:08:35:6A:AA
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 0194266BE3EE10A4D730AAF2C8372D2487EE
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 185.241.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e3:ee:10:a4:d7:30:aa:f2:c8:37:2d:24:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29296df18e107ec3ee0767b9abe3149208356aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:7b:ce:bf:b3:7d:55:2c:17:d6:62:73:3f:
d7:47:17:43:ce:08:c9:78:b0:10:9d:f7:7f:c6:66:
89:a7:c1:17:ef:b1:2d:45:35:48:8e:a4:47:55:a8:
b2:70:ed:9f:af:0b:c0:a0:c4:5d:9d:0e:67:0f:1e:
ca:5f:15:0a:48:2c:31:8b:3f:fd:1b:b8:32:87:c7:
19:f7:78:29:66:70:18:29:31:fa:7e:a8:f9:6f:84:
c7:6c:f7:e3:4e:6c:6a:ec:2a:66:8f:18:4b:f1:30:
0a:37:cf:b1:5e:79:b0:18:01:3f:6e:b4:29:c3:00:
c6:24:3f:2d:c6:ad:07:71:78:70:d4:df:84:30:01:
9c:89:dc:0a:5a:98:c2:e5:4d:4d:59:9b:94:2f:16:
ba:2e:dc:31:e7:19:74:ee:24:2d:fc:3e:58:50:65:
4f:8e:f7:fe:74:65:85:42:66:c6:66:4d:76:4f:f7:
1d:6e:0b:cf:6a:a2:0f:9d:f1:a4:d4:d8:ee:74:9b:
de:92:4d:02:b9:27:35:d2:4c:e0:38:6b:36:28:9d:
2b:6f:aa:40:a7:e3:d5:6c:6a:00:a3:05:eb:5a:1e:
a9:88:5e:6e:e2:33:6b:52:56:e3:63:a8:4c:52:69:
18:d3:90:27:6b:12:71:ed:f4:64:59:92:e0:f1:1a:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:6D:F1:8E:10:7E:C3:EE:07:67:B9:AB:E3:14:92:08:35:6A:AA
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.39.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c5:bb:5d:37:12:39:74:1d:4f:aa:5c:41:ea:10:54:91:1c:
78:70:28:ff:aa:42:5e:b6:97:e0:50:c4:1f:01:26:fa:4b:0d:
22:dd:d4:9b:0a:3f:b1:f3:08:35:8d:e8:0b:e6:f5:33:70:12:
72:2e:6e:70:11:5b:8b:22:d2:55:80:c5:6b:b9:84:d7:e5:ea:
8b:63:e7:af:c7:37:3a:b5:30:20:f4:d1:8e:c8:26:7f:e1:97:
ce:d9:4b:6b:bc:1b:2a:b4:1b:5b:a7:f2:63:bc:b7:98:50:48:
e2:a7:43:bc:f3:94:93:df:f2:ac:5e:8a:a6:84:92:bf:92:16:
dc:0d:d7:97:64:83:50:fd:ef:1a:f6:4a:14:ee:41:8b:b3:8f:
bb:6d:59:1d:12:2a:8f:50:cb:2c:41:12:2e:6b:17:94:b7:47:
17:d9:6c:12:45:a8:db:50:35:d3:1c:65:fe:52:f3:31:89:bc:
be:1b:4e:5f:c6:b3:23:e4:59:8d:85:0b:0e:cf:de:ab:c6:40:
f5:32:5d:4d:47:b2:7a:4d:43:d7:46:ea:1e:fe:1a:f3:49:4d:
d1:30:58:2a:03:5d:7d:77:40:de:34:57:4c:08:ac:c2:6c:91:
80:02:60:93:ee:dd:eb:b0:5c:b7:6c:94:61:38:08:d4:a5:04:
25:c7:55:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+PuEKTXMKryyDctJIfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyN2FkMTk3ODZkZDU0YjM1YTRiOTZhZDNmYmM1NzkzMjc4
ZTQ0NzQwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTI5NmRmMThlMTA3ZWMzZWUwNzY3YjlhYmUzMTQ5MjA4MzU2YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfB7zr+zfVUsF9Zicz/XRxdDzgjJ
eLAQnfd/xmaJp8EX77EtRTVIjqRHVaiycO2frwvAoMRdnQ5nDx7KXxUKSCwxiz/9
G7gyh8cZ93gpZnAYKTH6fqj5b4THbPfjTmxq7CpmjxhL8TAKN8+xXnmwGAE/brQp
wwDGJD8txq0HcXhw1N+EMAGcidwKWpjC5U1NWZuULxa6Ltwx5xl07iQt/D5YUGVP
jvf+dGWFQmbGZk12T/cdbgvPaqIPnfGk1NjudJvekk0CuSc10kzgOGs2KJ0rb6pA
p+PVbGoAowXrWh6piF5u4jNrUlbjY6hMUmkY05AnaxJx7fRkWZLg8RqeAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkpbfGOEH7D7gdnuavjFJIINWqqMB8GA1UdIwQY
MBaAFFJ60ZeG3VSzWkuWrT+8V5MnjkR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5yUmw0YmRWTE5hUzVhdFA3eFhreWVPUkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82OThmNWUtNThjMi00YTQzLTljNmEt
MTU1YzcyYzFhNzIzLzEvS1NsdDhZNFFmc1B1QjJlNXEtTVVrZ2cxYXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82OThmNWUtNThjMi00YTQzLTljNmEtMTU1YzcyYzFhNzIz
LzEvVW5yUmw0YmRWTE5hUzVhdFA3eFhreWVPUkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufEnMA0G
CSqGSIb3DQEBCwUAA4IBAQAzxbtdNxI5dB1PqlxB6hBUkRx4cCj/qkJetpfgUMQf
ASb6Sw0i3dSbCj+x8wg1jegL5vUzcBJyLm5wEVuLItJVgMVruYTX5eqLY+evxzc6
tTAg9NGOyCZ/4ZfO2UtrvBsqtBtbp/JjvLeYUEjip0O885ST3/KsXoqmhJK/khbc
DdeXZINQ/e8a9koU7kGLs4+7bVkdEiqPUMssQRIuaxeUt0cX2WwSRajbUDXTHGX+
UvMxiby+G05fxrMj5FmNhQsOz96rxkD1Ml1NR7J6TUPXRuoe/hrzSU3RMFgqA119
d0DeNFdMCKzCbJGAAmCT7t3rsFy3bJRhOAjUpQQlx1WX
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:30 2025 by rpki-client