Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa
File: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (raw, json)
Hash identifier: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=
Subject key identifier: 87:A9:D7:6B:AB:3C:39:61:CC:AD:01:B5:0D:23:19:2A:57:C9:0C:4F
Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial: 019420680A0500ADA71F1A1EF9984611A790
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199412
IP address blocks: 185.13.208.0/22 maxlen: 24
2a03:a540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0a:05:00:ad:a7:1f:1a:1e:f9:98:46:11:a7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a9d76bab3c3961ccad01b50d23192a57c90c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:90:a9:dd:55:76:5b:d2:e4:d4:df:8d:73:
e7:ff:17:12:7d:bf:fc:e1:53:7b:f8:09:95:a2:36:
4a:3d:49:3c:81:98:cd:b0:f1:d5:f0:92:47:fa:62:
ef:7e:f7:37:5f:f9:eb:e5:91:e6:7b:ed:16:50:3c:
63:0a:f5:49:b1:fb:6c:f2:41:ca:7d:1d:ea:a7:0f:
06:92:69:f2:10:35:a0:4f:4e:b7:02:54:58:f5:a8:
5c:d2:37:9e:6e:3b:f5:bf:70:d4:ed:85:20:ef:11:
08:13:d6:93:6a:f5:5b:8f:38:ea:b8:73:81:97:41:
4f:56:e0:21:fc:cc:28:04:9c:b1:7f:ee:f1:b5:ab:
e2:1d:f5:77:1b:0a:e1:b1:f3:88:99:51:5a:16:7d:
92:b1:0e:54:f5:bc:b6:02:e7:ee:28:f7:0b:4d:e0:
b2:97:93:4e:86:0a:61:c7:c5:4a:0b:69:b2:67:cb:
85:39:d0:17:11:12:4d:4e:ea:d9:07:08:76:fb:bf:
80:9c:23:66:3c:e1:c8:52:0c:eb:d6:09:b6:e5:e3:
35:6e:41:3f:6d:a6:6e:41:26:3b:cc:a7:99:49:4d:
52:12:13:63:6a:f5:02:88:f6:36:29:bd:fc:8d:99:
90:f1:5a:cc:d4:bf:d0:ab:eb:fa:47:3e:cf:8c:c0:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:D7:6B:AB:3C:39:61:CC:AD:01:B5:0D:23:19:2A:57:C9:0C:4F
X509v3 Authority Key Identifier:
keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.208.0/22
IPv6:
2a03:a540::/32
Signature Algorithm: sha256WithRSAEncryption
03:0c:ba:54:90:c1:bf:e8:85:3e:92:6f:74:12:88:7b:cf:ef:
7a:74:35:b2:d6:d3:a2:5c:2d:1f:4d:d6:aa:0a:6b:e4:57:cf:
e7:94:91:ec:4c:48:7f:81:af:a6:c7:2a:43:70:86:7c:c8:f5:
f9:94:9e:87:ec:20:4a:10:4e:cb:10:76:73:10:6c:33:2c:a3:
31:35:58:cc:8e:e1:06:f4:56:40:ac:02:f7:ba:01:9c:38:90:
12:80:39:f4:2b:2b:ee:c0:20:24:5f:07:5a:e3:18:f3:7f:e2:
14:66:10:76:6e:e1:9b:6d:57:e5:a0:57:a0:02:8d:9d:20:45:
48:42:f8:52:bc:d4:ac:2d:19:b1:9d:3f:f3:ed:9c:3d:07:77:
0a:c8:f0:a5:c3:2a:7a:f6:3a:58:7a:6a:c6:06:15:8a:f5:d1:
2f:93:82:d1:7d:c3:21:5d:da:cc:34:79:9e:9b:48:c6:90:fc:
f3:a0:fd:44:60:41:36:17:ec:87:d0:92:84:84:e5:5d:51:d6:
44:f2:fe:d3:a8:68:a5:8c:4b:12:81:71:6a:ef:d7:f7:e8:99:
24:e4:dd:94:7a:91:a5:31:c6:84:f3:3c:52:dd:40:0f:9e:7c:
b0:fe:78:d9:ac:b7:2e:d1:63:b8:b7:4f:6d:22:62:06:13:a2:
b7:fd:f7:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaAoFAK2nHxoe+ZhGEaeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZmQzNDM2ZDdhMTlhNzM0M2ZhODAwZDg3YTAxYWYxODNk
YTMxOGIwHhcNMjUwMTAxMDU0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2E5ZDc2YmFiM2MzOTYxY2NhZDAxYjUwZDIzMTkyYTU3YzkwYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9OQqd1VdlvS5NTfjXPn/xcSfb/8
4VN7+AmVojZKPUk8gZjNsPHV8JJH+mLvfvc3X/nr5ZHme+0WUDxjCvVJsfts8kHK
fR3qpw8GkmnyEDWgT063AlRY9ahc0jeebjv1v3DU7YUg7xEIE9aTavVbjzjquHOB
l0FPVuAh/MwoBJyxf+7xtaviHfV3GwrhsfOImVFaFn2SsQ5U9by2AufuKPcLTeCy
l5NOhgphx8VKC2myZ8uFOdAXERJNTurZBwh2+7+AnCNmPOHIUgzr1gm25eM1bkE/
baZuQSY7zKeZSU1SEhNjavUCiPY2Kb38jZmQ8VrM1L/Qq+v6Rz7PjMB3WwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIep12urPDlhzK0BtQ0jGSpXyQxPMB8GA1UdIwQY
MBaAFNH9NDbXoZpzQ/qADYegGvGD2jGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMt
MzlhNjZjYmUxZTRkLzEvaDZuWGE2czhPV0hNclFHMURTTVpLbGZKREU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMtMzlhNjZjYmUxZTRk
LzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQ3QMA0E
AgACMAcDBQAqA6VAMA0GCSqGSIb3DQEBCwUAA4IBAQADDLpUkMG/6IU+km90Eoh7
z+96dDWy1tOiXC0fTdaqCmvkV8/nlJHsTEh/ga+mxypDcIZ8yPX5lJ6H7CBKEE7L
EHZzEGwzLKMxNVjMjuEG9FZArAL3ugGcOJASgDn0KyvuwCAkXwda4xjzf+IUZhB2
buGbbVfloFegAo2dIEVIQvhSvNSsLRmxnT/z7Zw9B3cKyPClwyp69jpYemrGBhWK
9dEvk4LRfcMhXdrMNHmem0jGkPzzoP1EYEE2F+yH0JKEhOVdUdZE8v7TqGiljEsS
gXFq79f36Jkk5N2UepGlMcaE8zxS3UAPnnyw/njZrLcu0WO4t09tImIGE6K3/fcI
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:35 2025 by rpki-client