Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/INBpI5fntDWmHlDNjs-Yi7QsdAs.roa
File: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (raw, json)
Hash identifier: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=
Subject key identifier: 20:D0:69:23:97:E7:B4:35:A6:1E:50:CD:8E:CF:98:8B:B4:2C:74:0B
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95AE02F8E37E9969AACB91BFC1117
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/INBpI5fntDWmHlDNjs-Yi7QsdAs.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 45.83.112.0/22 maxlen: 24
185.161.252.0/22 maxlen: 24
185.181.56.0/22 maxlen: 24
192.144.52.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:e0:2f:8e:37:e9:96:9a:ac:b9:1b:fc:11:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20d0692397e7b435a61e50cd8ecf988bb42c740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:ca:76:11:bd:53:37:7d:1b:ea:f7:e6:bd:
de:4a:61:4f:65:db:09:80:f7:c5:5e:ab:3f:cb:40:
b7:3c:bf:27:65:06:f3:d6:61:a0:24:cc:fc:d1:8c:
72:69:38:36:50:64:5c:bb:be:f7:3f:52:7b:95:98:
50:3e:ac:34:e3:59:93:de:12:5a:cd:5f:6e:84:cc:
1a:af:f4:b7:58:23:d1:53:98:19:31:0e:d5:94:b4:
e9:01:2e:19:46:21:5c:40:d2:9d:0f:8c:09:be:79:
41:03:ff:8b:ab:f7:5d:4c:50:a9:c4:39:f0:1e:6c:
32:19:57:f2:65:9b:b9:af:44:62:1d:eb:40:b3:cb:
91:08:2f:c6:f1:cc:5d:dd:90:08:76:cf:d6:a0:2d:
09:d4:6a:06:3a:ee:43:39:af:e7:50:1e:b9:29:a8:
02:b0:8d:4e:e8:37:99:c1:eb:cb:4c:6a:ac:e7:39:
17:5c:f8:4e:82:69:59:62:bd:72:99:27:ce:28:2f:
71:f9:e6:76:1d:e9:42:9f:d0:5a:ce:1d:7e:f5:21:
e2:0d:66:77:9f:28:3d:78:5c:00:59:22:b6:6b:c0:
1d:19:78:fb:ac:41:c9:08:34:77:82:d1:0f:ff:9d:
0a:f9:03:95:1e:cd:7f:6b:c4:10:07:ff:ff:87:04:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:69:23:97:E7:B4:35:A6:1E:50:CD:8E:CF:98:8B:B4:2C:74:0B
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/INBpI5fntDWmHlDNjs-Yi7QsdAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
185.161.252.0/22
185.181.56.0/22
192.144.52.0/22
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:1b:3f:4a:59:74:67:2f:1d:98:7b:34:f7:62:68:b1:7e:07:
93:ff:4c:cf:6b:54:a0:f8:68:e9:74:6a:4d:5c:ee:09:01:c6:
04:16:e0:cc:d1:d3:da:b1:2f:57:17:5f:7f:5b:d7:3d:b5:87:
c7:96:d7:68:ba:b1:1d:ae:c3:78:46:f3:ec:78:88:32:eb:88:
2c:08:e4:10:d0:ec:c3:e1:7c:4f:57:45:fc:cc:bd:42:df:c7:
52:6b:d0:58:6f:47:23:20:7d:cd:48:b1:b7:48:c6:b7:fe:f3:
1b:90:8b:ef:0a:1c:a7:ab:9d:c2:37:ac:c5:38:20:c7:19:2f:
d5:57:75:d9:b0:84:cf:dc:13:9a:2c:5e:4e:b1:25:10:fe:81:
15:11:71:90:17:2a:6a:ed:16:2c:b9:eb:b8:73:49:f2:d6:81:
b8:d3:43:34:3c:7d:e1:c9:31:74:9d:96:27:4e:41:20:d6:2a:
16:f9:06:f3:59:d7:44:3c:dd:e9:e4:ab:85:d6:f8:c0:1d:5d:
19:1b:5c:c7:de:78:70:36:30:ac:8e:17:c5:32:2d:82:ac:1d:
5b:c7:07:eb:ba:30:3b:4f:66:e7:91:d8:f0:4e:c0:fb:5b:9e:
c8:1e:fa:bd:c5:10:0c:38:77:db:ff:89:1e:11:9c:b6:0f:b6:
37:7a:a2:37
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQm2VrgL4436ZaarLkb/BEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm
ZGE1MjAwHhcNMjUwMTAyMTE0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGQwNjkyMzk3ZTdiNDM1YTYxZTUwY2Q4ZWNmOTg4YmI0MmM3NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E3KdhG9Uzd9G+r35r3eSmFPZdsJ
gPfFXqs/y0C3PL8nZQbz1mGgJMz80YxyaTg2UGRcu773P1J7lZhQPqw041mT3hJa
zV9uhMwar/S3WCPRU5gZMQ7VlLTpAS4ZRiFcQNKdD4wJvnlBA/+Lq/ddTFCpxDnw
HmwyGVfyZZu5r0RiHetAs8uRCC/G8cxd3ZAIds/WoC0J1GoGOu5DOa/nUB65KagC
sI1O6DeZwevLTGqs5zkXXPhOgmlZYr1ymSfOKC9x+eZ2HelCn9Bazh1+9SHiDWZ3
nyg9eFwAWSK2a8AdGXj7rEHJCDR3gtEP/50K+QOVHs1/a8QQB///hwRcUQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCDQaSOX57Q1ph5QzY7PmIu0LHQLMB8GA1UdIwQY
MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt
NDM4YWNiNzJmYzViLzEvSU5CcEk1Zm50RFdtSGxETmpzLVlpN1FzZEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi
LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLVNwAwQC
uaH8AwQCubU4AwQCwJA0AwQCwQkoMA0GCSqGSIb3DQEBCwUAA4IBAQCqGz9KWXRn
Lx2YezT3YmixfgeT/0zPa1Sg+GjpdGpNXO4JAcYEFuDM0dPasS9XF19/W9c9tYfH
ltdourEdrsN4RvPseIgy64gsCOQQ0OzD4XxPV0X8zL1C38dSa9BYb0cjIH3NSLG3
SMa3/vMbkIvvChynq53CN6zFOCDHGS/VV3XZsITP3BOaLF5OsSUQ/oEVEXGQFypq
7RYsueu4c0ny1oG400M0PH3hyTF0nZYnTkEg1ioW+QbzWddEPN3p5KuF1vjAHV0Z
G1zH3nhwNjCsjhfFMi2CrB1bxwfrujA7T2bnkdjwTsD7W57IHvq9xRAMOHfb/4ke
EZy2D7Y3eqI3
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:16:57 2025 by rpki-client