Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ts8sVf3bIETT3IP-EWSz5iXuyLc.roa
File: ts8sVf3bIETT3IP-EWSz5iXuyLc.roa (raw, json)
Hash identifier: LPAtQU0e5iOlCX3BAcn0E0WmeCYRVqt7v8zcngig++0=
Subject key identifier: B6:CF:2C:55:FD:DB:20:44:D3:DC:83:FE:11:64:B3:E6:25:EE:C8:B7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDED86B11E919541C6560496C6CE02
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ts8sVf3bIETT3IP-EWSz5iXuyLc.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213151
IP address blocks: 185.197.135.0/24 maxlen: 24
2a06:e881:7300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ed:86:b1:1e:91:95:41:c6:56:04:96:c6:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6cf2c55fddb2044d3dc83fe1164b3e625eec8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:cb:ef:1c:e2:c2:ca:ac:b9:42:35:1e:d1:
9f:f6:9a:34:41:23:f5:f8:85:74:4b:f1:b1:44:81:
f3:62:c8:83:9a:60:17:8c:02:7e:15:5e:26:07:ad:
a7:88:2a:bf:dd:f2:49:7a:60:e3:e3:37:bb:c7:98:
3f:c6:bc:5f:df:ac:ba:13:59:3d:bd:2d:06:a1:51:
70:58:df:5e:1a:17:cd:43:65:37:ae:5b:0f:e0:1b:
9d:3a:51:ea:66:0b:70:68:05:63:18:81:05:c0:9a:
25:2e:2c:8a:41:61:a0:02:d1:7a:34:ea:c0:24:7a:
42:3f:e0:e0:16:a7:c7:87:07:c7:df:b8:71:46:81:
1e:6b:1a:d6:04:cb:a7:3e:26:3a:82:d7:5c:10:22:
3f:4c:0d:f2:a6:9c:ff:44:be:a5:a9:20:98:e8:cf:
cf:28:25:bd:6a:8d:0e:b5:97:4c:c6:34:66:a8:98:
f8:c8:c0:64:2e:f3:df:d8:ab:5d:61:3e:e5:30:53:
2c:47:f8:f7:a8:ae:6d:95:20:18:11:b4:ba:4f:b5:
d9:41:06:34:cc:cd:b3:43:bf:21:76:b3:fc:1a:71:
12:59:da:92:00:2d:e9:03:5f:7d:5e:e0:de:d6:78:
05:e8:b3:29:dd:0f:53:e3:c0:b3:ec:fb:3c:bf:29:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CF:2C:55:FD:DB:20:44:D3:DC:83:FE:11:64:B3:E6:25:EE:C8:B7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ts8sVf3bIETT3IP-EWSz5iXuyLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.135.0/24
IPv6:
2a06:e881:7300::/40
Signature Algorithm: sha256WithRSAEncryption
60:99:fc:dc:95:96:38:c4:87:9a:9a:a0:d8:b9:68:0b:bc:c7:
6d:70:a3:df:ce:87:53:09:b4:e0:68:d2:55:fc:d7:3b:ca:c3:
19:dc:41:f5:f6:6a:50:5a:36:74:22:4d:83:a0:4a:a5:ec:43:
93:f9:ad:55:4b:b8:57:6a:8e:c1:5c:77:ae:8a:5a:29:bc:d6:
ad:01:4b:de:13:af:e3:6a:a3:bd:f3:fb:a5:53:db:79:df:44:
04:10:19:2e:b3:b4:0c:3b:12:3c:16:c0:a7:ff:23:72:56:1b:
07:14:92:2b:3b:3e:62:2e:37:b0:95:64:36:ab:1a:54:05:8d:
a6:61:e2:71:7c:e9:43:1c:8f:75:05:1d:6b:28:7f:d2:b8:e1:
87:96:57:0e:70:a4:74:2d:a9:5c:d2:4d:80:a6:48:42:81:c9:
a0:85:29:b0:cd:4a:0f:56:b4:26:5f:59:ad:cf:0e:41:43:38:
d6:96:51:8e:1c:65:9f:38:8b:8b:88:af:3f:13:e5:f3:6a:e3:
76:81:95:8e:bf:71:9c:43:28:de:e2:d6:55:cc:39:cf:d9:af:
09:a1:59:9c:74:84:cc:00:64:bb:27:08:b2:00:da:10:4e:3f:
f8:80:2e:10:2f:8e:e3:f0:36:49:e6:18:7e:31:64:2b:a2:87:
3e:f8:2f:bc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQl/e2GsR6RlUHGVgSWxs4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmNmMmM1NWZkZGIyMDQ0ZDNkYzgzZmUxMTY0YjNlNjI1ZWVjOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0XL7xziwsqsuUI1HtGf9po0QSP1
+IV0S/GxRIHzYsiDmmAXjAJ+FV4mB62niCq/3fJJemDj4ze7x5g/xrxf36y6E1k9
vS0GoVFwWN9eGhfNQ2U3rlsP4BudOlHqZgtwaAVjGIEFwJolLiyKQWGgAtF6NOrA
JHpCP+DgFqfHhwfH37hxRoEeaxrWBMunPiY6gtdcECI/TA3yppz/RL6lqSCY6M/P
KCW9ao0OtZdMxjRmqJj4yMBkLvPf2KtdYT7lMFMsR/j3qK5tlSAYEbS6T7XZQQY0
zM2zQ78hdrP8GnESWdqSAC3pA199XuDe1ngF6LMp3Q9T48Cz7Ps8vykYqwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFLbPLFX92yBE09yD/hFks+Yl7si3MB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvdHM4c1ZmM2JJRVRUM0lQLUVXU3o1aVh1eUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAucWHMA4E
AgACMAgDBgAqBuiBczANBgkqhkiG9w0BAQsFAAOCAQEAYJn83JWWOMSHmpqg2Llo
C7zHbXCj386HUwm04GjSVfzXO8rDGdxB9fZqUFo2dCJNg6BKpexDk/mtVUu4V2qO
wVx3ropaKbzWrQFL3hOv42qjvfP7pVPbed9EBBAZLrO0DDsSPBbAp/8jclYbBxSS
Kzs+Yi43sJVkNqsaVAWNpmHicXzpQxyPdQUdayh/0rjhh5ZXDnCkdC2pXNJNgKZI
QoHJoIUpsM1KD1a0Jl9Zrc8OQUM41pZRjhxlnziLi4ivPxPl82rjdoGVjr9xnEMo
3uLWVcw5z9mvCaFZnHSEzABkuycIsgDaEE4/+IAuEC+O4/A2SeYYfjFkK6KHPvgv
vA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:34 2025 by rpki-client