Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/rYxX--aZfM6J-wV6J8Mkkvtx9EQ.roa
File: rYxX--aZfM6J-wV6J8Mkkvtx9EQ.roa (raw, json)
Hash identifier: RPT6xLtpAmMQMmidnrkH09xlg6IKDkAKGidiB1eqh7o=
Subject key identifier: AD:8C:57:FB:E6:99:7C:CE:89:FB:05:7A:27:C3:24:92:FB:71:F4:44
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE47AE5BA3977B6376BDD37A85883
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/rYxX--aZfM6J-wV6J8Mkkvtx9EQ.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207631
IP address blocks: 185.133.209.0/24 maxlen: 24
185.197.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e4:7a:e5:ba:39:77:b6:37:6b:dd:37:a8:58:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad8c57fbe6997cce89fb057a27c32492fb71f444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:f7:86:b4:5f:72:9c:a2:32:3c:02:c1:41:
6d:21:84:96:ed:20:90:2a:cb:a8:2e:41:99:a5:f7:
c7:38:3e:45:62:01:02:1d:af:d5:4b:60:f6:72:92:
0d:89:40:7e:56:b0:1a:e8:82:05:81:b3:7a:99:f0:
9e:0c:b8:01:7c:4c:c5:c0:fe:c4:e3:71:0b:84:4d:
bb:18:8e:2f:be:6a:29:51:52:df:c8:d8:4a:47:3b:
0c:d6:54:3c:ed:e6:80:ab:2f:be:9a:1f:7e:48:b1:
67:52:33:98:da:d5:d9:3f:dc:00:9a:67:08:71:23:
ae:b8:b7:85:3f:74:1c:90:51:6a:09:70:e7:2f:a2:
2d:e8:ba:7b:5c:a4:46:46:1a:a4:6d:58:d8:f1:51:
38:d0:ec:36:c5:7a:d9:3e:70:ac:8d:45:7d:e6:7d:
64:9e:c5:ed:59:3d:9f:37:85:2b:68:09:c9:4b:4b:
7c:17:0d:39:be:74:d9:a6:4a:bd:2b:46:c9:4a:08:
2c:0b:c8:fd:bc:6d:3e:3c:75:f8:18:83:54:48:0c:
77:b1:73:57:a6:6d:05:57:54:a7:63:f4:fb:09:24:
90:b9:8f:77:c5:c2:ba:e6:62:00:eb:b3:0e:b9:f3:
54:c0:e1:1e:b1:2f:d7:30:8e:9f:dd:15:af:ea:8c:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:57:FB:E6:99:7C:CE:89:FB:05:7A:27:C3:24:92:FB:71:F4:44
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/rYxX--aZfM6J-wV6J8Mkkvtx9EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.209.0/24
185.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:99:c7:8c:9c:90:f3:e8:a4:d0:7f:38:98:8f:33:10:98:dc:
66:ee:9a:ec:3e:b1:94:28:40:4d:a2:d5:42:31:db:47:f8:6c:
72:fc:78:22:fb:42:78:55:d0:52:30:52:89:e4:a0:52:84:7d:
64:76:45:66:2b:20:e0:dc:fa:10:66:91:f2:58:90:bf:24:67:
e2:c3:6e:d8:7d:66:aa:aa:ec:41:b3:46:2b:17:6f:90:de:4c:
8b:04:2a:55:00:17:c4:5b:7d:ec:48:89:52:a7:93:19:b3:af:
87:3f:74:9a:21:1a:8b:03:19:ee:05:b4:50:ed:e0:3e:d2:26:
a2:ca:02:79:ca:b7:14:a0:08:77:2d:e6:1b:33:46:24:b1:ac:
aa:0a:f4:4d:c3:04:2c:89:74:13:56:9d:a3:ca:b0:36:fe:b0:
c3:3f:79:41:15:aa:8b:6c:db:e5:7a:b0:37:d8:8f:4b:ea:95:
a9:79:39:f6:a6:68:69:18:43:ba:e4:e7:df:e8:75:2b:be:fb:
d8:2b:24:36:21:b2:d6:ac:13:7c:b6:6c:a6:62:51:54:28:4f:
ab:fe:09:29:51:e1:d4:ed:4c:75:c1:81:38:c8:81:f2:a6:04:
e1:9b:8d:83:42:a5:96:0f:04:ca:0e:4f:0f:c9:2f:31:01:e2:
66:0d:8f:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/eR65bo5d7Y3a903qFiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDhjNTdmYmU2OTk3Y2NlODlmYjA1N2EyN2MzMjQ5MmZiNzFmNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCX3hrRfcpyiMjwCwUFtIYSW7SCQ
KsuoLkGZpffHOD5FYgECHa/VS2D2cpINiUB+VrAa6IIFgbN6mfCeDLgBfEzFwP7E
43ELhE27GI4vvmopUVLfyNhKRzsM1lQ87eaAqy++mh9+SLFnUjOY2tXZP9wAmmcI
cSOuuLeFP3QckFFqCXDnL6It6Lp7XKRGRhqkbVjY8VE40Ow2xXrZPnCsjUV95n1k
nsXtWT2fN4UraAnJS0t8Fw05vnTZpkq9K0bJSggsC8j9vG0+PHX4GINUSAx3sXNX
pm0FV1SnY/T7CSSQuY93xcK65mIA67MOufNUwOEesS/XMI6f3RWv6oyiqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK2MV/vmmXzOifsFeifDJJL7cfREMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvcll4WC0tYVpmTTZKLXdWNko4TWtrdnR4OUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYXRAwQA
ucWGMA0GCSqGSIb3DQEBCwUAA4IBAQA+mceMnJDz6KTQfziYjzMQmNxm7prsPrGU
KEBNotVCMdtH+Gxy/Hgi+0J4VdBSMFKJ5KBShH1kdkVmKyDg3PoQZpHyWJC/JGfi
w27YfWaqquxBs0YrF2+Q3kyLBCpVABfEW33sSIlSp5MZs6+HP3SaIRqLAxnuBbRQ
7eA+0iaiygJ5yrcUoAh3LeYbM0YksayqCvRNwwQsiXQTVp2jyrA2/rDDP3lBFaqL
bNvlerA32I9L6pWpeTn2pmhpGEO65Off6HUrvvvYKyQ2IbLWrBN8tmymYlFUKE+r
/gkpUeHU7Ux1wYE4yIHypgThm42DQqWWDwTKDk8PyS8xAeJmDY9k
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:33:44 2025 by rpki-client