Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa
File: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (raw, json)
Hash identifier: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=
Subject key identifier: 1D:16:D1:FE:48:46:AB:DC:41:38:72:F2:50:CB:7F:1F:4F:D9:30:E8
Certificate issuer: /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial: 01941FFA2CFC8A757FBE19FA4D47BBE8D061
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25281
IP address blocks: 185.103.12.0/24 maxlen: 24
185.103.13.0/24 maxlen: 24
185.103.14.0/24 maxlen: 24
185.103.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2c:fc:8a:75:7f:be:19:fa:4d:47:bb:e8:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d16d1fe4846abdc413872f250cb7f1f4fd930e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:99:bf:3f:34:22:28:e4:72:aa:72:87:48:
13:cb:96:36:33:99:9c:e0:b1:06:7b:60:90:06:b5:
7e:e0:b3:a0:a9:ac:47:7c:5a:1e:d7:6f:dc:95:36:
50:6b:46:ac:96:7a:f3:ab:31:f2:dc:b5:aa:1f:c4:
45:2d:54:48:01:4f:10:ba:1d:41:89:b5:a8:e3:db:
97:9f:d9:2c:49:57:ba:6f:85:ed:42:13:33:de:57:
f6:67:28:30:3a:86:57:40:70:09:05:44:4a:c9:ed:
fd:90:4e:2d:8f:d0:57:dc:95:a1:72:ed:6f:86:d3:
9b:66:d3:fb:ed:e0:98:ab:db:92:60:4a:b7:0c:e3:
cf:7e:e5:dc:98:24:c1:d0:9d:49:a6:b1:5b:d9:d1:
34:19:52:c1:7e:64:77:20:e0:38:c7:60:0c:3a:30:
ef:44:77:83:f2:0f:52:8f:c7:a5:5d:d4:6e:82:d5:
c8:8b:af:d2:de:f6:1a:3a:bc:3d:f3:a1:0b:0d:61:
cf:ec:59:7f:ce:f6:87:fa:16:3a:c5:e8:0f:70:ad:
29:3d:e6:0a:19:bd:e0:fc:93:61:1a:29:e1:1d:a8:
7d:ee:05:5e:1e:21:82:e1:aa:57:94:9f:2d:a5:28:
8d:79:5a:44:fa:ed:7a:ba:ff:9a:25:14:5d:6f:ec:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:D1:FE:48:46:AB:DC:41:38:72:F2:50:CB:7F:1F:4F:D9:30:E8
X509v3 Authority Key Identifier:
keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.12.0/22
Signature Algorithm: sha256WithRSAEncryption
02:be:70:53:3f:d0:82:95:79:3a:16:c2:de:6e:13:ea:03:ba:
fa:cc:c0:f5:9c:9a:a1:ee:86:61:64:91:d1:b7:e4:55:1a:69:
d6:e9:e0:ff:5f:6b:39:5a:ce:11:8a:f8:27:bd:ec:e1:29:47:
51:43:fc:39:14:f9:54:69:9e:a7:59:2a:dd:5e:08:da:7e:f7:
83:c9:4b:c5:30:9c:0c:ed:20:31:39:48:e3:ee:a5:7d:b1:1c:
67:10:04:bb:c0:7d:97:91:88:2f:69:a2:44:b3:25:72:0e:4b:
d7:27:61:3b:a5:44:e0:65:99:0e:7b:a8:a6:38:16:c1:54:31:
7a:b1:e8:25:4e:87:e5:64:19:4a:e4:27:44:9f:ff:46:38:0f:
38:db:17:11:89:b0:6a:13:4e:04:4e:5f:20:3a:9e:f9:a1:5f:
11:01:fb:d6:6d:db:e8:16:fe:7e:a5:d5:8a:3c:ab:74:07:54:
ae:a5:d5:b1:ff:5e:71:a9:43:cc:19:23:6c:6c:59:48:ac:1b:
26:0a:5e:57:bc:6d:04:3c:93:0c:df:8d:45:f6:c2:92:bb:24:
c6:95:1a:a0:65:ce:0e:5f:60:8c:f6:cc:c9:66:79:b4:84:41:
b9:1a:f6:d9:4b:73:50:dd:22:92:6e:a8:2c:e5:6a:3f:9c:41:
ef:fc:07:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+iz8inV/vhn6TUe76NBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjM4YzJjYjdiODYwY2QzNjk2NzljNGQwNWQ1MGY3MDVl
MDQ2MjkwHhcNMjUwMTAxMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDE2ZDFmZTQ4NDZhYmRjNDEzODcyZjI1MGNiN2YxZjRmZDkzMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCyZvz80Iijkcqpyh0gTy5Y2M5mc
4LEGe2CQBrV+4LOgqaxHfFoe12/clTZQa0aslnrzqzHy3LWqH8RFLVRIAU8Quh1B
ibWo49uXn9ksSVe6b4XtQhMz3lf2ZygwOoZXQHAJBURKye39kE4tj9BX3JWhcu1v
htObZtP77eCYq9uSYEq3DOPPfuXcmCTB0J1JprFb2dE0GVLBfmR3IOA4x2AMOjDv
RHeD8g9Sj8elXdRugtXIi6/S3vYaOrw986ELDWHP7Fl/zvaH+hY6xegPcK0pPeYK
Gb3g/JNhGinhHah97gVeHiGC4apXlJ8tpSiNeVpE+u16uv+aJRRdb+wmmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0W0f5IRqvcQThy8lDLfx9P2TDoMB8GA1UdIwQY
MBaAFCZjjCy3uGDNNpZ5xNBdUPcF4EYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgt
M2U1N2NjNTJjODRlLzEvSFJiUl9raEdxOXhCT0hMeVVNdF9IMF9aTU9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgtM2U1N2NjNTJjODRl
LzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWcMMA0G
CSqGSIb3DQEBCwUAA4IBAQACvnBTP9CClXk6FsLebhPqA7r6zMD1nJqh7oZhZJHR
t+RVGmnW6eD/X2s5Ws4RivgnvezhKUdRQ/w5FPlUaZ6nWSrdXgjafveDyUvFMJwM
7SAxOUjj7qV9sRxnEAS7wH2XkYgvaaJEsyVyDkvXJ2E7pUTgZZkOe6imOBbBVDF6
seglToflZBlK5CdEn/9GOA842xcRibBqE04ETl8gOp75oV8RAfvWbdvoFv5+pdWK
PKt0B1SupdWx/15xqUPMGSNsbFlIrBsmCl5XvG0EPJMM341F9sKSuyTGlRqgZc4O
X2CM9szJZnm0hEG5GvbZS3NQ3SKSbqgs5Wo/nEHv/Ae3
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:10 2025 by rpki-client