Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/1c8AtbAMfHlASe1nRmNmVLi-IPE.roa
File: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (raw, json)
Hash identifier: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=
Subject key identifier: D5:CF:00:B5:B0:0C:7C:79:40:49:ED:67:46:63:66:54:B8:BE:20:F1
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019421B1D0B6A0BAF3D4A2C440A7113668EA
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/1c8AtbAMfHlASe1nRmNmVLi-IPE.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 185.201.60.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d0:b6:a0:ba:f3:d4:a2:c4:40:a7:11:36:68:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5cf00b5b00c7c794049ed6746636654b8be20f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:ae:09:4e:65:67:e4:14:c2:06:7e:98:f6:
c4:bc:f3:ce:9d:90:70:5f:f2:2f:a4:63:aa:96:81:
49:81:d3:ea:90:18:d9:c2:79:0a:01:be:86:d4:4c:
13:11:62:59:df:d5:52:c1:97:0b:57:83:32:17:22:
0a:c0:dc:a7:3f:2e:3d:c6:88:ae:53:48:90:42:88:
05:0c:b4:d0:95:df:4a:6a:89:43:d3:ba:de:cf:ad:
2b:8f:f0:ed:be:0f:c5:1a:5e:e8:00:e4:e4:65:d3:
8d:28:f3:8b:e7:43:37:90:8c:f3:be:1d:a1:52:bd:
81:33:c4:0c:57:e9:c5:11:c9:51:5f:4c:ed:0f:92:
6c:53:95:b7:0e:7c:3d:bb:a0:2e:3c:9e:9c:ad:8d:
c5:6c:ed:67:48:1b:99:f9:70:ee:b0:60:a3:1d:b5:
7d:b2:a4:38:ee:7f:12:57:b4:77:00:24:ad:0d:9c:
e1:36:a5:10:74:5c:e7:0d:d3:f4:e6:24:af:b0:98:
9f:6a:aa:b8:93:af:7c:54:7d:0a:a1:8f:45:c4:7d:
1e:ef:23:0d:3d:76:f2:6d:22:21:72:c1:3a:70:7e:
d6:82:a0:2b:2c:9f:2f:56:f5:b3:ba:34:c1:3e:06:
88:86:ec:c9:36:23:07:04:fe:15:7b:95:8a:5b:e2:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:00:B5:B0:0C:7C:79:40:49:ED:67:46:63:66:54:B8:BE:20:F1
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/1c8AtbAMfHlASe1nRmNmVLi-IPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:82:1d:2e:02:c2:8a:14:b4:20:b9:7d:f2:86:72:43:b8:bb:
4b:e0:69:dd:f3:16:0a:65:b2:72:05:b3:8e:e1:37:f0:6a:0b:
00:d2:85:39:a6:ec:ff:33:ba:ec:73:32:6f:90:e8:14:fa:cb:
0f:57:93:d0:d3:7e:e9:a5:29:3c:f4:ee:ac:93:e5:23:24:41:
d5:2e:f6:78:b9:ba:08:e3:f8:5b:e7:e8:cf:63:66:82:3e:d4:
c6:31:77:56:84:df:65:1d:0a:72:b2:95:8b:36:66:9c:8e:21:
8d:6e:98:cf:fc:2d:a7:20:69:36:30:ef:db:33:23:2f:d9:01:
0b:c4:f9:cf:06:f1:d2:6a:63:d5:49:36:51:7b:26:c2:4a:f7:
19:20:da:bf:c2:43:5b:9b:70:93:d6:77:ab:6e:8e:94:60:23:
4d:ac:a5:27:32:57:15:ac:43:7e:7a:53:91:bb:c9:26:3a:4f:
26:65:f1:a3:ae:92:e9:81:bb:ab:23:c7:40:f4:f4:95:4a:83:
9f:27:0f:44:89:27:72:0f:d3:a3:a5:53:6f:69:54:ec:29:ef:
c2:49:9d:09:4b:23:0b:0e:95:cf:28:4a:1d:7a:8e:08:df:4e:
40:71:8a:f0:7b:b1:b6:a2:06:63:40:56:7b:ae:9a:34:67:1a:
c5:1f:77:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdC2oLrz1KLEQKcRNmjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjUwMTAxMTE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWNmMDBiNWIwMGM3Yzc5NDA0OWVkNjc0NjYzNjY1NGI4YmUyMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEWuCU5lZ+QUwgZ+mPbEvPPOnZBw
X/IvpGOqloFJgdPqkBjZwnkKAb6G1EwTEWJZ39VSwZcLV4MyFyIKwNynPy49xoiu
U0iQQogFDLTQld9KaolD07rez60rj/Dtvg/FGl7oAOTkZdONKPOL50M3kIzzvh2h
Ur2BM8QMV+nFEclRX0ztD5JsU5W3Dnw9u6AuPJ6crY3FbO1nSBuZ+XDusGCjHbV9
sqQ47n8SV7R3ACStDZzhNqUQdFznDdP05iSvsJifaqq4k698VH0KoY9FxH0e7yMN
PXbybSIhcsE6cH7WgqArLJ8vVvWzujTBPgaIhuzJNiMHBP4Ve5WKW+JdEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXPALWwDHx5QEntZ0ZjZlS4viDxMB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvMWM4QXRiQU1mSGxBU2UxblJtTm1WTGktSVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuck8MA0G
CSqGSIb3DQEBCwUAA4IBAQA8gh0uAsKKFLQguX3yhnJDuLtL4Gnd8xYKZbJyBbOO
4TfwagsA0oU5puz/M7rsczJvkOgU+ssPV5PQ037ppSk89O6sk+UjJEHVLvZ4uboI
4/hb5+jPY2aCPtTGMXdWhN9lHQpyspWLNmacjiGNbpjP/C2nIGk2MO/bMyMv2QEL
xPnPBvHSamPVSTZReybCSvcZINq/wkNbm3CT1nerbo6UYCNNrKUnMlcVrEN+elOR
u8kmOk8mZfGjrpLpgburI8dA9PSVSoOfJw9EiSdyD9OjpVNvaVTsKe/CSZ0JSyML
DpXPKEodeo4I305AcYrwe7G2ogZjQFZ7rpo0ZxrFH3dt
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:19 2025 by rpki-client