Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa
File: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (raw, json)
Hash identifier: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=
Subject key identifier: C5:0D:28:99:E8:77:13:98:85:FD:DF:26:8F:70:10:D9:66:C2:3E:1B
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 0194258EB86BD98AAF7B9938EDAF66E0BBCE
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa
Signing time: Thu 02 Jan 2025 05:48:17 +0000
ROA not before: Thu 02 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199419
IP address blocks: 185.16.236.0/24 maxlen: 24
185.16.237.0/24 maxlen: 24
185.16.238.0/24 maxlen: 24
185.16.239.0/24 maxlen: 24
2a03:df40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b8:6b:d9:8a:af:7b:99:38:ed:af:66:e0:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Jan 2 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50d2899e877139885fddf268f7010d966c23e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:d5:d3:d5:36:89:d2:0f:c9:78:87:ac:34:
b8:a9:fe:da:cc:7d:44:5c:dd:81:86:04:d1:bc:25:
1a:ab:19:1a:24:29:8a:07:68:57:a2:13:bd:d8:bf:
e3:0d:00:4c:73:c7:d1:34:ff:e3:49:11:b8:fb:ff:
e4:f4:d3:c6:06:06:22:de:8f:68:35:e1:89:62:5d:
85:af:a8:a8:d3:da:10:8f:c2:6e:02:b4:8b:93:2a:
1b:a5:72:f8:c8:1a:66:79:60:f4:f8:01:35:5a:48:
7a:63:bd:70:d0:c6:a6:0b:7b:30:7a:b8:dc:2d:1b:
60:cb:57:dc:bf:05:1a:db:38:31:51:4c:3f:94:f5:
5d:78:36:5c:e1:9e:1d:a0:90:2b:14:ef:17:0f:1c:
23:ad:80:d2:26:e6:a7:ae:44:97:4c:43:72:4f:a6:
9b:16:66:a0:c6:8e:b7:bb:9f:29:5b:23:a3:1f:da:
6b:09:67:74:2b:d7:94:1b:cb:41:87:b1:b0:79:81:
f5:51:e8:c4:36:bc:c6:1e:44:08:8e:f0:cf:6e:50:
f9:65:34:04:49:c6:5f:10:7e:93:6c:bc:58:4f:38:
c7:7c:12:4f:65:e8:52:6f:f5:14:f4:59:be:ed:0e:
d3:97:5d:36:46:9e:51:df:fd:f2:84:b4:a6:f1:79:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:28:99:E8:77:13:98:85:FD:DF:26:8F:70:10:D9:66:C2:3E:1B
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.236.0/22
IPv6:
2a03:df40::/32
Signature Algorithm: sha256WithRSAEncryption
bc:33:be:21:58:5f:2e:fb:0b:57:96:7e:a6:e7:a4:7e:8b:ed:
59:af:a5:e9:f9:e1:25:32:36:4c:dd:94:64:c7:95:27:88:e5:
b3:2d:cf:15:85:2c:15:5a:38:2e:30:ce:da:7f:80:3f:d7:c7:
df:25:cb:f1:ad:27:8f:e0:63:a9:ff:78:b7:f0:b8:d9:a7:1e:
01:17:07:b9:37:ec:2b:55:df:60:21:05:56:2d:9c:1f:c8:45:
d5:27:c8:ec:48:5d:b5:83:79:ab:d1:61:1c:a9:d5:a6:ec:b7:
1d:65:ba:99:01:43:a9:36:73:5d:e9:9c:25:cd:a9:05:32:ed:
14:a3:22:7b:17:1a:42:45:1b:37:de:ac:70:7b:0c:18:23:75:
82:79:16:2b:e2:2b:c9:1b:48:0a:6d:8a:08:0f:1e:b7:ea:8b:
b9:3d:ba:b3:ef:52:5f:47:a8:66:75:9e:c5:76:f6:d5:ae:56:
4d:05:f3:dc:76:96:7b:47:53:cd:6a:2a:71:03:56:0e:86:24:
92:92:f0:47:b8:1e:9b:70:ce:b0:85:88:d7:bb:94:6c:b3:33:
78:db:1e:90:39:50:a9:7c:3b:8c:9e:e4:73:d8:75:df:22:9e:
a8:05:6d:96:f5:58:dc:68:6c:bd:4c:f9:2e:a1:1d:6c:17:95:
0e:8a:35:cf
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQljrhr2Yqve5k47a9m4LvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MThiZjYwZDFlZjRjNzZjZDA3YTUzZjdlYzY4Mzc3MWFh
YjVjZmQwHhcNMjUwMTAyMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTBkMjg5OWU4NzcxMzk4ODVmZGRmMjY4ZjcwMTBkOTY2YzIzZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8HV09U2idIPyXiHrDS4qf7azH1E
XN2BhgTRvCUaqxkaJCmKB2hXohO92L/jDQBMc8fRNP/jSRG4+//k9NPGBgYi3o9o
NeGJYl2Fr6io09oQj8JuArSLkyobpXL4yBpmeWD0+AE1Wkh6Y71w0MamC3swerjc
LRtgy1fcvwUa2zgxUUw/lPVdeDZc4Z4doJArFO8XDxwjrYDSJuanrkSXTENyT6ab
Fmagxo63u58pWyOjH9prCWd0K9eUG8tBh7GweYH1UejENrzGHkQIjvDPblD5ZTQE
ScZfEH6TbLxYTzjHfBJPZehSb/UU9Fm+7Q7Tl102Rp5R3/3yhLSm8XmpxwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMUNKJnodxOYhf3fJo9wENlmwj4bMB8GA1UdIwQY
MBaAFNUYv2DR70x2zQelP37Gg3caq1z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWIt
MjQ0ODhiMjdjYTQxLzEveFEwb21laDNFNWlGX2Q4bWozQVEyV2JDUGhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWItMjQ0ODhiMjdjYTQx
LzEvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRDsMA0E
AgACMAcDBQAqA99AMA0GCSqGSIb3DQEBCwUAA4IBAQC8M74hWF8u+wtXln6m56R+
i+1Zr6Xp+eElMjZM3ZRkx5UniOWzLc8VhSwVWjguMM7af4A/18ffJcvxrSeP4GOp
/3i38LjZpx4BFwe5N+wrVd9gIQVWLZwfyEXVJ8jsSF21g3mr0WEcqdWm7LcdZbqZ
AUOpNnNd6ZwlzakFMu0UoyJ7FxpCRRs33qxwewwYI3WCeRYr4ivJG0gKbYoIDx63
6ou5Pbqz71JfR6hmdZ7FdvbVrlZNBfPcdpZ7R1PNaipxA1YOhiSSkvBHuB6bcM6w
hYjXu5RsszN42x6QOVCpfDuMnuRz2HXfIp6oBW2W9VjcaGy9TPkuoR1sF5UOijXP
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:22 2025 by rpki-client