Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa
File: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (raw, json)
Hash identifier: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=
Subject key identifier: D6:33:E6:AA:FB:75:8A:56:25:98:D7:13:B3:DB:EF:D2:64:30:57:66
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 019425219371A1F7891E6EE8B782FD560415
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29504
IP address blocks: 185.193.84.0/22 maxlen: 22
2a0a:3640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:93:71:a1:f7:89:1e:6e:e8:b7:82:fd:56:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d633e6aafb758a562598d713b3dbefd264305766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:04:e1:0b:64:0c:81:e8:c1:89:42:9c:c3:
2e:58:b2:a1:6c:19:dc:ce:67:6c:94:f8:f9:35:26:
bb:50:4c:ef:ec:6f:a5:14:e3:c4:51:ed:90:e0:12:
63:2c:53:5b:f1:3a:6b:ea:63:ca:43:13:3e:a7:9b:
e5:ef:5e:97:37:ca:76:12:fc:93:4f:39:3c:03:73:
58:23:82:9d:47:e2:f1:b2:ce:ac:42:93:2d:b5:71:
69:25:54:f5:5b:54:fa:15:dd:a3:f4:09:01:45:46:
56:82:28:60:f7:dc:6c:3d:d5:c0:e9:02:03:1a:10:
64:e2:0c:cf:32:ae:91:ee:75:44:e0:ea:cb:07:0b:
b6:b3:ec:af:55:ed:4d:cb:8d:02:a5:ce:fd:7c:20:
35:f2:67:f4:f9:c9:2c:7f:d6:cd:18:91:c2:df:8c:
7e:c6:b3:a6:d4:ce:9c:7e:e2:d5:ca:dc:da:f4:8a:
63:46:70:90:78:f5:8d:a3:b6:17:9f:46:a3:9b:42:
96:ce:48:91:39:69:26:ca:b6:a1:40:b1:7c:f8:d5:
f2:90:c4:62:86:6c:c5:a4:3a:43:8d:81:c1:08:1a:
17:36:76:22:cc:a3:60:8f:cd:7f:9a:b6:03:bd:a1:
75:cb:78:b3:fe:af:17:a9:9d:a0:a4:9d:90:11:5c:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:E6:AA:FB:75:8A:56:25:98:D7:13:B3:DB:EF:D2:64:30:57:66
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.84.0/22
IPv6:
2a0a:3640::/29
Signature Algorithm: sha256WithRSAEncryption
42:e6:f9:50:d5:84:35:4c:71:1f:d4:0c:2f:2b:b8:fb:4d:c9:
72:81:1b:32:83:65:b2:e4:64:e2:e1:72:76:d6:a5:7a:8f:14:
eb:47:24:f4:e8:2e:cb:cb:bd:bd:b0:62:52:0b:a1:5f:d1:42:
16:80:26:c4:95:c0:ad:02:7b:14:55:8a:d1:37:5d:a7:9a:cc:
c4:6b:d7:16:fc:47:05:b1:a0:2a:1f:5a:a5:ae:64:a3:c9:41:
7a:5d:44:84:7d:5f:6d:b7:7c:5b:2c:24:10:99:66:87:01:8b:
5a:20:38:a9:96:f7:5d:98:d1:2a:37:ba:f8:9f:12:f0:ab:24:
c9:90:3d:e2:3b:b4:1a:b4:7f:a7:b2:0d:9a:5b:1e:02:5c:c9:
40:54:20:51:8e:7f:f8:db:29:33:ae:01:11:91:44:98:69:1c:
0b:97:29:d7:62:8f:19:be:26:42:05:de:ab:c7:fa:43:e8:5c:
38:02:26:68:11:83:8f:ee:73:cb:8c:a5:a9:b5:91:e7:4b:83:
9a:38:45:f6:b1:78:59:6d:1c:f0:e9:96:e2:3a:0c:e5:30:f6:
3f:ac:0c:a7:69:0e:77:bb:72:3a:ce:f4:6c:03:b8:0f:1e:e2:
1f:bf:e1:ec:9e:33:e0:65:c4:4e:a9:e3:84:d9:ee:01:5e:df:
ea:38:a4:a0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIZNxofeJHm7ot4L9VgQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjc1MGU1OGNhMGEyYjc1ZjJjNTNiZGY2ZjYxZmY2M2Vj
ODMxY2IwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjMzZTZhYWZiNzU4YTU2MjU5OGQ3MTNiM2RiZWZkMjY0MzA1NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNUE4QtkDIHowYlCnMMuWLKhbBnc
zmdslPj5NSa7UEzv7G+lFOPEUe2Q4BJjLFNb8Tpr6mPKQxM+p5vl716XN8p2EvyT
Tzk8A3NYI4KdR+Lxss6sQpMttXFpJVT1W1T6Fd2j9AkBRUZWgihg99xsPdXA6QID
GhBk4gzPMq6R7nVE4OrLBwu2s+yvVe1Ny40Cpc79fCA18mf0+cksf9bNGJHC34x+
xrOm1M6cfuLVytza9IpjRnCQePWNo7YXn0ajm0KWzkiROWkmyrahQLF8+NXykMRi
hmzFpDpDjYHBCBoXNnYizKNgj81/mrYDvaF1y3iz/q8XqZ2gpJ2QEVw1IwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNYz5qr7dYpWJZjXE7Pb79JkMFdmMB8GA1UdIwQY
MBaAFH5nUOWMoKK3XyxTvfb2H/Y+yDHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODct
MGVjZjQyMjAwMjNlLzEvMWpQbXF2dDFpbFlsbU5jVHM5dnYwbVF3VjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODctMGVjZjQyMjAwMjNl
LzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucFUMA0E
AgACMAcDBQMqCjZAMA0GCSqGSIb3DQEBCwUAA4IBAQBC5vlQ1YQ1THEf1AwvK7j7
TclygRsyg2Wy5GTi4XJ21qV6jxTrRyT06C7Ly729sGJSC6Ff0UIWgCbElcCtAnsU
VYrRN12nmszEa9cW/EcFsaAqH1qlrmSjyUF6XUSEfV9tt3xbLCQQmWaHAYtaIDip
lvddmNEqN7r4nxLwqyTJkD3iO7QatH+nsg2aWx4CXMlAVCBRjn/42ykzrgERkUSY
aRwLlynXYo8ZviZCBd6rx/pD6Fw4AiZoEYOP7nPLjKWptZHnS4OaOEX2sXhZbRzw
6ZbiOgzlMPY/rAynaQ53u3I6zvRsA7gPHuIfv+HsnjPgZcROqeOE2e4BXt/qOKSg
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:39 2025 by rpki-client