Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/__J8knmzK0D7LeHPBcfH9mDXmDA.roa
File: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (raw, json)
Hash identifier: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=
Subject key identifier: FF:F2:7C:92:79:B3:2B:40:FB:2D:E1:CF:05:C7:C7:F6:60:D7:98:30
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 01941F8C352831014472183C0130F3FAAA69
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/__J8knmzK0D7LeHPBcfH9mDXmDA.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64478
IP address blocks: 185.162.244.0/24 maxlen: 24
185.162.245.0/24 maxlen: 24
185.162.246.0/24 maxlen: 24
185.162.247.0/24 maxlen: 24
2a0a:800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:35:28:31:01:44:72:18:3c:01:30:f3:fa:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fff27c9279b32b40fb2de1cf05c7c7f660d79830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:34:3f:9b:90:87:ca:68:3e:95:6e:8b:5e:
61:5b:c9:01:13:93:73:66:c4:1e:91:f5:5e:b2:d2:
49:e7:5f:77:97:cc:03:d3:00:fa:c2:8d:09:64:69:
30:30:74:7d:01:65:d3:65:8e:98:ae:dc:2d:a2:df:
d1:fc:00:ca:8f:1d:80:1a:9f:45:32:2b:f2:c9:70:
e0:c1:b7:54:ad:c0:f5:43:0f:6d:ff:c5:2e:5b:15:
5a:a5:46:91:f6:3b:6b:86:92:78:40:ef:0c:ab:17:
7e:09:be:57:f8:b9:53:d4:81:af:0c:fb:05:86:04:
97:dc:8d:dc:45:13:65:8d:e2:c3:d2:a3:a0:bf:c7:
7b:b0:3c:ae:1e:ee:a1:cf:e0:a3:67:73:76:c3:db:
6e:ab:a2:d5:42:7a:6c:15:a4:3b:e0:cc:55:93:a8:
03:70:62:34:7f:a5:32:b9:5d:98:10:69:5e:8a:55:
bb:f9:43:2e:47:8d:53:19:ff:d9:f3:bc:d8:d4:fc:
23:68:29:af:3d:dc:19:8a:f5:d6:fe:e9:0a:43:40:
c3:34:e3:35:9c:1c:51:3b:28:b8:57:db:f0:b4:99:
d8:8e:f1:ff:c1:24:70:84:e6:fa:3a:b8:a9:99:46:
d5:9a:41:d8:0c:e0:5f:48:50:17:4e:80:65:4d:8d:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:7C:92:79:B3:2B:40:FB:2D:E1:CF:05:C7:C7:F6:60:D7:98:30
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/__J8knmzK0D7LeHPBcfH9mDXmDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.244.0/22
IPv6:
2a0a:800::/29
Signature Algorithm: sha256WithRSAEncryption
18:75:4f:c5:ed:ef:d2:24:89:c9:58:ac:77:4a:4c:32:f9:94:
10:02:e2:dd:1d:11:40:1c:fa:03:db:4d:62:b4:a7:20:42:05:
ca:fe:bd:2e:1d:27:52:a4:18:ed:6b:81:29:09:1d:aa:3a:76:
18:6f:58:c6:3c:f9:78:14:c7:5e:7d:3f:68:26:00:5a:7f:ba:
ec:45:b8:ec:ef:fd:3b:00:ea:5b:f9:8e:06:5e:ba:80:16:a7:
54:01:f2:16:bd:c7:ac:e6:81:f2:a0:7e:ef:6b:e6:d1:34:69:
99:5d:b9:8f:a3:27:8f:7d:61:ff:f5:c3:f6:f6:9b:f8:38:13:
9c:07:f5:c0:f3:92:69:8a:21:58:d6:ae:50:c7:0a:99:82:88:
31:67:0c:f5:b8:86:bc:cb:4d:db:22:ce:ad:59:14:cb:4f:03:
9e:7d:8a:28:7f:0c:89:cc:5d:4d:12:b7:f7:c4:e1:53:b7:ea:
c0:e3:7c:d7:87:fa:04:e7:2b:97:d9:89:e9:83:a3:31:9e:95:
0d:44:ed:43:ee:d3:3b:3a:a6:ff:45:d1:ac:e7:d3:94:1a:5b:
bd:35:fd:1a:06:76:36:f5:16:94:0b:49:b8:f6:27:08:db:69:
c1:b0:3f:c1:08:65:1d:36:68:3e:b8:54:b5:a7:7b:c0:62:25:
0e:3b:c6:9d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjDUoMQFEchg8ATDz+qppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTczODY5NzNmYmY4OGE4NjdjODJhODg2N2IwNTBmY2E2
MGIwMTEwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmYyN2M5Mjc5YjMyYjQwZmIyZGUxY2YwNWM3YzdmNjYwZDc5ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnws0P5uQh8poPpVui15hW8kBE5Nz
ZsQekfVestJJ5193l8wD0wD6wo0JZGkwMHR9AWXTZY6Yrtwtot/R/ADKjx2AGp9F
MivyyXDgwbdUrcD1Qw9t/8UuWxVapUaR9jtrhpJ4QO8Mqxd+Cb5X+LlT1IGvDPsF
hgSX3I3cRRNljeLD0qOgv8d7sDyuHu6hz+CjZ3N2w9tuq6LVQnpsFaQ74MxVk6gD
cGI0f6UyuV2YEGleilW7+UMuR41TGf/Z87zY1PwjaCmvPdwZivXW/ukKQ0DDNOM1
nBxROyi4V9vwtJnYjvH/wSRwhOb6OripmUbVmkHYDOBfSFAXToBlTY2AZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP/yfJJ5sytA+y3hzwXHx/Zg15gwMB8GA1UdIwQY
MBaAFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYt
OWYzMDNlYTY3ZTY1LzEvX19KOGtubXpLMEQ3TGVIUEJjZkg5bURYbURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYtOWYzMDNlYTY3ZTY1
LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaL0MA0E
AgACMAcDBQMqCggAMA0GCSqGSIb3DQEBCwUAA4IBAQAYdU/F7e/SJInJWKx3Skwy
+ZQQAuLdHRFAHPoD201itKcgQgXK/r0uHSdSpBjta4EpCR2qOnYYb1jGPPl4FMde
fT9oJgBaf7rsRbjs7/07AOpb+Y4GXrqAFqdUAfIWvces5oHyoH7va+bRNGmZXbmP
oyePfWH/9cP29pv4OBOcB/XA85JpiiFY1q5QxwqZgogxZwz1uIa8y03bIs6tWRTL
TwOefYoofwyJzF1NErf3xOFTt+rA43zXh/oE5yuX2Ynpg6MxnpUNRO1D7tM7Oqb/
RdGs59OUGlu9Nf0aBnY29RaUC0m49icI22nBsD/BCGUdNmg+uFS1p3vAYiUOO8ad
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:45 2025 by rpki-client