Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/9FUNdfnNIDDZflpkRTwpDb09HNU.roa
File: 9FUNdfnNIDDZflpkRTwpDb09HNU.roa (raw, json)
Hash identifier: BpM0SiFtPH/not4o5YIAAEEr6LX2KF5gaATgLFRqNII=
Subject key identifier: F4:55:0D:75:F9:CD:20:30:D9:7E:5A:64:45:3C:29:0D:BD:3D:1C:D5
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019422FBB2078A676013FEF4A7B2894E1BFD
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/9FUNdfnNIDDZflpkRTwpDb09HNU.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.233.184.0/24 maxlen: 24
185.244.48.0/24 maxlen: 24
185.244.49.0/24 maxlen: 24
185.250.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:07:8a:67:60:13:fe:f4:a7:b2:89:4e:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4550d75f9cd2030d97e5a64453c290dbd3d1cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:d4:d7:cc:da:1b:dd:a2:55:7a:d4:6a:1f:
f6:31:75:c8:a8:e3:eb:44:4b:69:38:82:88:b3:7d:
4f:9e:57:3d:52:c8:95:d5:54:db:e0:8b:32:69:2c:
5c:91:6d:fc:96:e1:96:7e:cc:af:18:2c:77:b5:a0:
c3:2d:e5:4f:46:9b:1c:40:11:9c:c6:60:49:ac:40:
96:ee:d4:ca:ef:79:c7:9e:a2:27:98:51:44:70:d7:
74:11:87:59:d4:0b:06:c4:06:c4:47:8c:ff:42:a0:
24:89:00:bc:f5:67:8d:9c:6a:57:3e:d9:cf:ca:3e:
cf:ac:14:30:ae:a6:c3:63:79:ae:c1:26:cb:40:85:
f5:45:6f:f2:ce:94:e1:51:a1:43:ea:28:bc:a3:bd:
6c:03:8d:a0:bb:c1:b3:51:f4:e1:cf:f5:83:db:41:
44:20:4b:a8:98:c0:ba:30:82:7a:14:80:69:35:2f:
02:0f:02:67:2b:af:7d:ac:7d:54:a8:83:b2:6d:b1:
d3:5c:4d:e7:c0:c7:01:dd:46:52:4d:20:f8:5c:ca:
c8:81:3d:33:75:d8:c7:01:f4:58:56:12:3c:62:64:
b9:8d:24:78:4f:5c:74:57:29:8d:84:f9:0b:80:cd:
e6:b6:bf:33:97:c3:5f:40:a1:6f:76:d6:ae:b7:eb:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:55:0D:75:F9:CD:20:30:D9:7E:5A:64:45:3C:29:0D:BD:3D:1C:D5
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/9FUNdfnNIDDZflpkRTwpDb09HNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.184.0/24
185.244.48.0/23
185.250.45.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9f:5e:6b:a2:ca:80:e6:21:d9:6c:66:33:a1:2a:ae:5c:b6:
64:20:e8:07:5a:a7:10:8e:38:9c:5b:2d:29:aa:bb:ba:39:93:
f7:7e:37:39:7d:6f:8c:01:ed:4c:ef:1a:01:bf:25:62:cd:84:
d1:f0:fb:70:d7:ca:c0:3c:91:d6:c1:a5:56:0b:e3:54:53:cf:
21:81:8e:f6:a6:bc:5b:cf:ea:cc:f6:55:44:bc:01:c5:49:4a:
80:15:e3:ce:ae:a0:3b:34:16:08:00:41:6d:94:98:3d:9e:8e:
4f:a7:35:42:96:e0:3d:e0:48:54:95:7f:6e:ea:26:ae:c5:2e:
d3:02:88:db:68:e0:3f:7e:84:37:04:64:a6:0e:41:48:ec:f2:
31:09:05:bb:a4:89:6d:8b:d8:37:21:1c:65:f0:7d:45:97:47:
74:b8:32:9b:79:e8:0f:34:9b:6a:53:12:31:de:b5:5e:87:7c:
bb:0c:2a:70:ff:7a:15:51:98:ed:26:99:37:a0:d0:76:f9:0e:
33:35:b1:14:a0:ad:fa:87:94:7e:ae:fe:ef:af:11:a5:c9:61:
82:19:ee:e9:c8:71:b2:8a:57:48:b2:cd:6d:5e:f3:3c:3f:07:
16:f7:3f:23:a9:44:1a:35:a1:6f:be:d3:61:6e:1d:17:d7:3a:
eb:59:1f:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi+7IHimdgE/70p7KJThv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjUwMTAxMTc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDU1MGQ3NWY5Y2QyMDMwZDk3ZTVhNjQ0NTNjMjkwZGJkM2QxY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/3U18zaG92iVXrUah/2MXXIqOPr
REtpOIKIs31Pnlc9UsiV1VTb4IsyaSxckW38luGWfsyvGCx3taDDLeVPRpscQBGc
xmBJrECW7tTK73nHnqInmFFEcNd0EYdZ1AsGxAbER4z/QqAkiQC89WeNnGpXPtnP
yj7PrBQwrqbDY3muwSbLQIX1RW/yzpThUaFD6ii8o71sA42gu8GzUfThz/WD20FE
IEuomMC6MIJ6FIBpNS8CDwJnK699rH1UqIOybbHTXE3nwMcB3UZSTSD4XMrIgT0z
ddjHAfRYVhI8YmS5jSR4T1x0VymNhPkLgM3mtr8zl8NfQKFvdtaut+ulUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPRVDXX5zSAw2X5aZEU8KQ29PRzVMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvOUZVTmRmbk5JRERaZmxwa1JUd3BEYjA5SE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuem4AwQB
ufQwAwQAufotMA0GCSqGSIb3DQEBCwUAA4IBAQATn15rosqA5iHZbGYzoSquXLZk
IOgHWqcQjjicWy0pqru6OZP3fjc5fW+MAe1M7xoBvyVizYTR8Ptw18rAPJHWwaVW
C+NUU88hgY72prxbz+rM9lVEvAHFSUqAFePOrqA7NBYIAEFtlJg9no5PpzVCluA9
4EhUlX9u6iauxS7TAojbaOA/foQ3BGSmDkFI7PIxCQW7pIlti9g3IRxl8H1Fl0d0
uDKbeegPNJtqUxIx3rVeh3y7DCpw/3oVUZjtJpk3oNB2+Q4zNbEUoK36h5R+rv7v
rxGlyWGCGe7pyHGyildIss1tXvM8PwcW9z8jqUQaNaFvvtNhbh0X1zrrWR/I
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:38 2025 by rpki-client