Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa
File: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (raw, json)
Hash identifier: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=
Subject key identifier: CB:DB:63:0C:CC:23:DC:55:31:7F:41:44:E7:C9:77:0A:94:36:7F:BB
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019422FBB85BF7F186E0BAEA9DE2C7C4BD53
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.141.193.0/24 maxlen: 24
2a04:ac0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b8:5b:f7:f1:86:e0:ba:ea:9d:e2:c7:c4:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbdb630ccc23dc55317f4144e7c9770a94367fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:0f:5a:75:b2:b2:19:c2:9d:fb:a8:31:d7:
03:11:39:71:f8:29:78:ba:f9:33:69:aa:4c:d2:ca:
84:e9:ab:f7:4f:44:89:a0:8e:71:68:76:6c:06:d5:
06:68:48:65:4c:fc:fc:cc:16:cc:45:b2:7e:9d:9c:
ee:2b:39:3d:dc:cb:42:10:d5:d4:6f:fd:63:8c:fe:
30:9a:ab:9a:26:0f:d6:b9:1e:1a:36:79:99:11:c6:
33:b1:8e:35:30:93:21:df:32:9e:96:21:f6:8c:da:
95:51:4c:fc:19:fc:e1:55:95:b9:b7:da:5b:c3:4a:
e1:be:40:1c:8d:bc:25:e3:68:12:c4:05:c5:5f:8c:
05:e9:ab:b8:0e:c4:2e:75:ed:ad:aa:dc:82:7f:d0:
30:e0:9b:94:c3:87:d3:b9:33:d8:19:cb:b4:9d:8c:
79:62:5d:f5:eb:db:c4:78:9c:d5:43:ee:ec:c5:be:
c8:e0:d6:1d:8b:b0:b7:22:90:be:e0:84:b9:ea:55:
b0:5e:92:b8:d3:4c:90:83:af:f8:d2:cd:c2:5e:5f:
40:de:45:14:ea:49:5c:9d:2f:18:dc:10:a2:96:e6:
cc:34:86:6c:0d:75:93:35:d2:31:5f:fa:89:d7:5e:
f4:b7:d2:54:0c:9f:d9:78:91:bd:4a:37:bc:7f:08:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:63:0C:CC:23:DC:55:31:7F:41:44:E7:C9:77:0A:94:36:7F:BB
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.193.0/24
IPv6:
2a04:ac0:2::/48
Signature Algorithm: sha256WithRSAEncryption
00:52:85:0f:2e:9a:de:0a:1f:cc:b5:59:1f:69:66:0c:61:77:
13:22:2a:b8:22:ee:69:6e:5d:a1:42:f2:4f:36:b1:90:ee:02:
7b:c2:0b:cf:2f:80:b9:fc:70:d4:63:94:c9:58:b4:a3:de:2b:
2e:5a:cc:a4:5b:d7:c0:e2:d4:a5:8b:41:aa:f9:60:c7:35:31:
be:d7:bc:c8:c4:35:ba:42:82:7f:e8:0c:86:49:66:93:27:84:
80:5a:0d:9f:61:1b:d6:fd:52:e5:1c:b7:d4:f9:50:f7:f1:28:
6c:de:cf:47:a9:9a:ea:f2:06:78:ce:20:87:a7:0f:45:06:cb:
fc:bb:63:f9:86:3b:15:ec:28:66:7d:1c:c0:a3:23:89:a6:a1:
f4:d2:6a:0a:33:75:b0:5a:e7:5c:86:52:d3:85:04:93:0d:b7:
f1:a9:e0:65:9a:99:68:0c:63:b1:e8:1b:8f:13:ad:e6:d9:e9:
03:d5:34:e1:cc:3f:11:df:eb:7d:e1:8d:ee:88:b0:e0:83:ed:
5b:7c:8d:ca:85:52:e4:31:05:cc:b7:8f:1d:1b:f9:5d:b5:af:
bb:80:67:0e:df:f0:76:da:ef:13:ca:c5:7e:46:27:c5:4e:e0:
36:4e:ca:a0:4d:ca:d4:c0:e1:6e:e0:ec:cb:8d:22:17:cd:e8:
8e:2d:84:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQi+7hb9/GG4LrqneLHxL1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2
Zjg1NzMwHhcNMjUwMTAxMTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmRiNjMwY2NjMjNkYzU1MzE3ZjQxNDRlN2M5NzcwYTk0MzY3ZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4UPWnWyshnCnfuoMdcDETlx+Cl4
uvkzaapM0sqE6av3T0SJoI5xaHZsBtUGaEhlTPz8zBbMRbJ+nZzuKzk93MtCENXU
b/1jjP4wmquaJg/WuR4aNnmZEcYzsY41MJMh3zKeliH2jNqVUUz8GfzhVZW5t9pb
w0rhvkAcjbwl42gSxAXFX4wF6au4DsQude2tqtyCf9Aw4JuUw4fTuTPYGcu0nYx5
Yl3169vEeJzVQ+7sxb7I4NYdi7C3IpC+4IS56lWwXpK400yQg6/40s3CXl9A3kUU
6klcnS8Y3BCilubMNIZsDXWTNdIxX/qJ1170t9JUDJ/ZeJG9Sje8fwg/NwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMvbYwzMI9xVMX9BROfJdwqUNn+7MB8GA1UdIwQY
MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt
YmYzNGQwMWY4YjBhLzEveTl0akRNd2ozRlV4ZjBGRTU4bDNDcFEyZjdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh
LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY3BMA8E
AgACMAkDBwAqBArAAAIwDQYJKoZIhvcNAQELBQADggEBAABShQ8umt4KH8y1WR9p
ZgxhdxMiKrgi7mluXaFC8k82sZDuAnvCC88vgLn8cNRjlMlYtKPeKy5azKRb18Di
1KWLQar5YMc1Mb7XvMjENbpCgn/oDIZJZpMnhIBaDZ9hG9b9UuUct9T5UPfxKGze
z0epmuryBnjOIIenD0UGy/y7Y/mGOxXsKGZ9HMCjI4mmofTSagozdbBa51yGUtOF
BJMNt/Gp4GWamWgMY7HoG48TrebZ6QPVNOHMPxHf633hje6IsOCD7Vt8jcqFUuQx
Bcy3jx0b+V21r7uAZw7f8Hba7xPKxX5GJ8VO4DZOyqBNytTA4W7g7MuNIhfN6I4t
hAg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:11 2025 by rpki-client