Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa
File: Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa (raw, json)
Hash identifier: VUy0r7IF46Fy+JwVkckIUB1U8NWR6ieGTg4RW1Lrvrc=
Subject key identifier: 33:1E:F4:84:D2:54:FD:C4:60:FC:04:6D:C4:3F:67:FC:D4:11:EF:D6
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 0194266C32CEA567C3C95ABAF01913A51311
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211068
IP address blocks: 185.183.140.0/22 maxlen: 22
185.183.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:32:ce:a5:67:c3:c9:5a:ba:f0:19:13:a5:13:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=331ef484d254fdc460fc046dc43f67fcd411efd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:be:bf:21:5c:9c:fb:26:5a:51:d8:a5:96:
92:6d:ab:5e:52:d8:b5:b0:54:92:dc:0a:4c:59:e3:
2d:35:af:87:f1:69:23:39:b5:35:24:05:20:02:e4:
ef:f5:7d:c9:c7:83:50:87:86:1c:6b:b9:9b:ec:c1:
fd:f7:cb:6a:84:10:2d:99:fd:9c:4c:1e:bd:69:c8:
5a:55:8d:30:37:f8:85:3d:69:b2:af:4f:c9:bc:dd:
5a:12:b6:05:fa:4a:9e:d0:f5:4b:bc:6c:da:60:ba:
c6:ff:bd:4b:83:19:4e:24:1a:65:ec:2e:88:af:16:
46:6e:94:e1:a2:9e:90:59:9f:e3:d9:64:8e:d3:9e:
62:83:de:f5:66:10:0c:58:48:96:89:b0:11:a0:6d:
39:6b:0d:d4:79:87:ed:a5:28:64:e7:4e:96:e0:55:
ed:00:f8:2b:bc:2d:f5:7e:21:3c:e7:a9:4f:9f:1c:
86:42:3c:b2:45:7e:99:a9:20:cc:a9:b8:15:39:47:
1d:5f:97:df:02:90:bb:13:a6:4e:d4:18:74:03:12:
61:77:e1:50:9d:74:4c:03:c9:ec:30:31:35:ff:77:
ab:91:02:20:a4:9d:8e:d7:b1:95:3d:21:4e:ee:f3:
ac:6b:c3:f9:78:ed:6d:e4:2e:6b:72:54:a3:ff:09:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:F4:84:D2:54:FD:C4:60:FC:04:6D:C4:3F:67:FC:D4:11:EF:D6
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:8c:cb:6f:57:b4:54:7a:74:13:3d:a3:77:7a:77:3c:02:c6:
b5:d5:71:1e:c1:fb:cf:27:5e:cf:7e:7f:5b:e0:1a:0d:25:fe:
09:ae:ef:b1:93:3f:8c:09:ba:9b:c1:53:0d:c1:8f:ca:9b:51:
74:53:20:56:41:3b:14:26:28:6b:70:5c:f6:34:fd:60:a0:99:
0d:ce:8e:b6:86:f7:ee:37:71:de:67:7e:81:2c:9c:b4:81:6a:
01:33:8e:0c:7e:d6:a3:67:e6:83:ac:d8:dc:7b:63:b0:85:af:
88:92:ac:19:f5:72:73:fc:d2:03:5d:8a:13:3b:ea:4c:ff:af:
e2:6f:d9:45:b9:fe:ab:00:10:c1:4b:97:6c:60:5c:a7:90:ce:
b4:01:ff:c9:7a:d4:93:d6:a4:39:3a:b9:5d:e1:e7:f4:41:1d:
67:bb:f0:d2:90:1f:2c:f9:10:e6:1b:aa:b9:0a:2c:80:9e:cf:
d8:29:7a:d3:6e:b5:15:16:76:04:8f:56:b7:c7:32:24:92:79:
4d:83:42:3e:72:81:2a:5a:ce:d6:1e:7a:be:bb:ce:45:74:ec:
81:e6:a3:c2:ec:b7:c4:56:6a:75:c4:9a:ad:9e:c3:11:24:99:
4b:59:6b:22:f2:8a:10:2c:9e:c4:a1:8f:8f:70:6b:b5:71:8e:
0b:b6:8a:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbDLOpWfDyVq68BkTpRMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGFiZDc4NGJmMGMwMjQ5YzAxMzlkNjEwZmY5MGE5YWUw
YjcxMjQwHhcNMjUwMTAyMDk1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzFlZjQ4NGQyNTRmZGM0NjBmYzA0NmRjNDNmNjdmY2Q0MTFlZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJe+vyFcnPsmWlHYpZaSbateUti1
sFSS3ApMWeMtNa+H8WkjObU1JAUgAuTv9X3Jx4NQh4Yca7mb7MH998tqhBAtmf2c
TB69achaVY0wN/iFPWmyr0/JvN1aErYF+kqe0PVLvGzaYLrG/71LgxlOJBpl7C6I
rxZGbpThop6QWZ/j2WSO055ig971ZhAMWEiWibARoG05aw3UeYftpShk506W4FXt
APgrvC31fiE856lPnxyGQjyyRX6ZqSDMqbgVOUcdX5ffApC7E6ZO1Bh0AxJhd+FQ
nXRMA8nsMDE1/3erkQIgpJ2O17GVPSFO7vOsa8P5eO1t5C5rclSj/wkliwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMe9ITSVP3EYPwEbcQ/Z/zUEe/WMB8GA1UdIwQY
MBaAFL1KvXhL8MAknAE51hD/kKmuC3EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQt
YmI1ZjhiODA5YjBjLzEvTXg3MGhOSlVfY1JnX0FSdHhEOW5fTlFSNzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQtYmI1ZjhiODA5YjBj
LzEvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubeMMA0G
CSqGSIb3DQEBCwUAA4IBAQCPjMtvV7RUenQTPaN3enc8Asa11XEewfvPJ17Pfn9b
4BoNJf4Jru+xkz+MCbqbwVMNwY/Km1F0UyBWQTsUJihrcFz2NP1goJkNzo62hvfu
N3HeZ36BLJy0gWoBM44MftajZ+aDrNjce2Owha+IkqwZ9XJz/NIDXYoTO+pM/6/i
b9lFuf6rABDBS5dsYFynkM60Af/JetST1qQ5Orld4ef0QR1nu/DSkB8s+RDmG6q5
CiyAns/YKXrTbrUVFnYEj1a3xzIkknlNg0I+coEqWs7WHnq+u85FdOyB5qPC7LfE
Vmp1xJqtnsMRJJlLWWsi8ooQLJ7EoY+PcGu1cY4Ltor3
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:29 2025 by rpki-client