Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/6TwLhRWsmxkkhggFLTKj7guz2DE.roa
File: 6TwLhRWsmxkkhggFLTKj7guz2DE.roa (raw, json)
Hash identifier: s2x2RuJc1EuTWcfLAZGiSbTr9uwQiNoRbPeGEeK1UYk=
Subject key identifier: E9:3C:0B:85:15:AC:9B:19:24:86:08:05:2D:32:A3:EE:0B:B3:D8:31
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019426D922D539B93B3EFD5183CB5F028363
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/6TwLhRWsmxkkhggFLTKj7guz2DE.roa
Signing time: Thu 02 Jan 2025 11:49:11 +0000
ROA not before: Thu 02 Jan 2025 11:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50103
IP address blocks: 185.186.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:22:d5:39:b9:3b:3e:fd:51:83:cb:5f:02:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jan 2 11:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e93c0b8515ac9b19248608052d32a3ee0bb3d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:1a:2a:47:6e:ea:c6:03:39:13:ac:4c:9e:
6a:f7:2a:31:34:34:a1:7f:df:16:30:a6:88:1c:15:
84:29:07:7d:85:51:fd:88:d0:05:8a:57:2c:4a:b5:
ad:d1:9e:2f:e2:2e:10:64:b9:cf:0a:ca:8b:59:03:
59:ff:37:2c:26:da:bc:77:77:4c:4e:e3:be:a7:23:
5e:ce:9b:f6:55:5a:ef:41:86:2d:28:aa:70:77:f0:
58:78:4e:a5:38:fe:7f:4d:9d:b0:10:b1:53:0e:60:
45:ec:d2:7c:62:e3:a8:fe:78:dc:f5:04:0a:ea:21:
1f:39:42:c5:64:e2:71:da:f0:37:2e:ba:51:e8:12:
f2:dc:a7:ef:6c:97:52:a3:fa:ec:20:38:58:cd:b4:
c1:95:84:ad:59:49:22:c5:6c:7d:6d:09:35:0b:76:
96:26:4c:7c:9a:be:f1:e3:d2:13:6b:5f:ec:c1:9b:
44:ed:8f:dc:e7:03:5f:4f:8d:f9:b8:ee:7f:dc:36:
a7:35:38:ba:88:e6:bc:ec:4e:79:f8:8f:5d:8b:54:
b2:2d:26:e4:4c:67:a0:22:e7:40:48:92:62:b7:a8:
ee:5f:2d:61:67:31:db:3a:ca:fd:27:86:b9:34:fc:
4a:dc:b8:ca:a4:21:d8:f7:68:c7:a6:83:fe:1f:50:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:0B:85:15:AC:9B:19:24:86:08:05:2D:32:A3:EE:0B:B3:D8:31
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/6TwLhRWsmxkkhggFLTKj7guz2DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.1.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cb:08:5c:d7:6f:cc:8a:09:5f:f1:24:46:88:6a:25:9e:b6:
1b:66:67:1d:c2:9f:00:51:79:81:d1:cb:c8:f5:70:70:eb:a2:
dd:e2:0f:93:1c:09:58:79:6a:c5:a4:72:fd:b4:87:77:50:be:
0b:93:d7:bb:6c:10:60:9d:72:38:6f:e8:05:84:38:e5:e6:23:
0a:2b:98:ef:24:32:56:6b:89:d1:52:e9:13:5b:ee:d4:9a:61:
c4:76:6e:1e:af:38:9a:37:0e:c9:4b:a6:9a:8e:3a:8a:68:84:
e2:e8:6b:2d:08:ce:a7:81:f0:fa:8e:df:84:0a:a4:59:46:c7:
dc:f9:91:98:cc:2a:a6:ee:b8:68:48:50:36:01:88:69:2d:7c:
c9:08:00:e7:89:44:68:ac:5a:45:af:97:7b:cf:80:fe:19:11:
96:c8:86:11:eb:b0:27:cb:8a:9e:d3:de:34:a0:25:32:04:cd:
1c:d0:b4:0c:ed:e5:8a:ae:25:12:c2:9c:11:4c:5c:ad:e4:d6:
18:1d:d9:bb:e3:2c:3a:98:19:d0:c9:ac:5d:bf:07:1e:04:4e:
00:67:53:9b:fc:46:78:33:e7:47:c2:28:53:28:35:78:f4:06:
a8:eb:d1:ee:e6:11:32:0b:48:df:6f:c1:2b:48:24:c3:b3:bb:
4f:b9:ba:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2SLVObk7Pv1Rg8tfAoNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjUwMTAyMTE0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTNjMGI4NTE1YWM5YjE5MjQ4NjA4MDUyZDMyYTNlZTBiYjNkODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouQaKkdu6sYDOROsTJ5q9yoxNDSh
f98WMKaIHBWEKQd9hVH9iNAFilcsSrWt0Z4v4i4QZLnPCsqLWQNZ/zcsJtq8d3dM
TuO+pyNezpv2VVrvQYYtKKpwd/BYeE6lOP5/TZ2wELFTDmBF7NJ8YuOo/njc9QQK
6iEfOULFZOJx2vA3LrpR6BLy3KfvbJdSo/rsIDhYzbTBlYStWUkixWx9bQk1C3aW
Jkx8mr7x49ITa1/swZtE7Y/c5wNfT435uO5/3DanNTi6iOa87E55+I9di1SyLSbk
TGegIudASJJit6juXy1hZzHbOsr9J4a5NPxK3LjKpCHY92jHpoP+H1AyvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk8C4UVrJsZJIYIBS0yo+4Ls9gxMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvNlR3TGhSV3NteGtraGdnRkxUS2o3Z3V6MkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuboBMA0G
CSqGSIb3DQEBCwUAA4IBAQAHywhc12/Miglf8SRGiGolnrYbZmcdwp8AUXmB0cvI
9XBw66Ld4g+THAlYeWrFpHL9tId3UL4Lk9e7bBBgnXI4b+gFhDjl5iMKK5jvJDJW
a4nRUukTW+7UmmHEdm4erziaNw7JS6aajjqKaITi6GstCM6ngfD6jt+ECqRZRsfc
+ZGYzCqm7rhoSFA2AYhpLXzJCADniURorFpFr5d7z4D+GRGWyIYR67Any4qe0940
oCUyBM0c0LQM7eWKriUSwpwRTFyt5NYYHdm74yw6mBnQyaxdvwceBE4AZ1Ob/EZ4
M+dHwihTKDV49Aao69Hu5hEyC0jfb8ErSCTDs7tPubqd
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:02 2025 by rpki-client