Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/RW1YVzgS-Uo6wRyI7wghmoflhxM.roa
File: RW1YVzgS-Uo6wRyI7wghmoflhxM.roa (raw, json)
Hash identifier: P4Jy/rnS/ee761fTnFOjrUGdxRIMtrfWOZk+7E9+pGE=
Subject key identifier: 45:6D:58:57:38:12:F9:4A:3A:C1:1C:88:EF:08:21:9A:87:E5:87:13
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 01956AE09D035850276BC3FD1F6923664195
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/RW1YVzgS-Uo6wRyI7wghmoflhxM.roa
Signing time: Thu 06 Mar 2025 09:54:19 +0000
ROA not before: Thu 06 Mar 2025 09:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204561
IP address blocks: 128.127.182.0/24 maxlen: 24
128.127.183.0/24 maxlen: 24
185.192.44.0/24 maxlen: 24
185.192.46.0/24 maxlen: 24
2a05:8a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:e0:9d:03:58:50:27:6b:c3:fd:1f:69:23:66:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Mar 6 09:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=456d58573812f94a3ac11c88ef08219a87e58713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:b7:69:11:80:71:0d:73:ae:e6:d3:89:ba:
30:61:9f:59:22:e0:94:b1:75:dd:3b:1c:0d:cb:3d:
8a:43:81:6d:72:a3:12:8a:64:ae:b2:07:34:cb:16:
47:de:42:f8:fe:b9:aa:fa:ac:ac:b9:3e:8d:b4:f2:
14:16:22:59:f8:3a:33:87:a9:63:ff:96:fb:e0:68:
67:26:ca:6f:98:3f:f5:66:de:19:3e:6f:a4:c5:98:
65:b0:ab:05:9b:33:6f:9e:39:9e:68:b6:9c:5f:eb:
be:cc:14:4d:72:b1:15:3e:cb:5a:ef:c8:3c:12:6d:
23:04:aa:15:17:23:56:68:ec:a9:b9:c8:42:69:95:
05:83:c3:f6:e7:f3:2b:bf:61:bb:97:45:04:5f:9d:
ff:6c:09:58:ff:18:11:35:11:24:24:43:64:92:18:
1c:84:f1:88:98:92:3e:c2:9c:04:85:fd:76:68:34:
5c:9c:87:94:b0:9c:41:2b:ad:b0:31:52:2e:c8:90:
d2:8c:21:3e:a2:f9:3a:ec:ab:a6:be:12:8e:7d:b5:
ae:ae:17:d0:94:62:ff:f9:2b:8e:2a:70:cd:27:7c:
00:ff:7e:ad:1d:3b:52:17:4b:bc:d8:f3:27:4b:e0:
05:4a:3e:e2:db:05:a6:00:dd:b4:c4:29:4d:68:7c:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:58:57:38:12:F9:4A:3A:C1:1C:88:EF:08:21:9A:87:E5:87:13
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/RW1YVzgS-Uo6wRyI7wghmoflhxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.182.0/23
185.192.44.0/24
185.192.46.0/24
IPv6:
2a05:8a40::/29
Signature Algorithm: sha256WithRSAEncryption
45:41:a2:cb:77:94:fb:1a:ae:28:4f:2a:3b:94:02:c5:d9:e2:
86:08:01:4a:8b:32:05:f8:ad:46:34:49:1d:8f:5e:64:2d:64:
c9:47:0c:00:18:4d:3d:e4:9a:9a:30:44:60:6f:4d:62:de:ad:
09:13:03:61:b3:c4:ce:35:81:d6:b0:13:62:56:72:58:11:94:
f4:b2:1b:b6:f4:b0:bd:35:7d:db:72:6e:7b:e4:16:17:16:aa:
21:e1:16:8c:38:2f:09:02:10:ec:d0:b7:cb:96:ff:78:b3:f0:
11:d4:fb:38:70:4a:80:61:7a:fd:b9:78:e6:f5:ff:9b:a2:6f:
f0:8f:55:44:00:76:49:45:cd:ae:7f:fa:c1:5b:07:10:28:35:
7e:d5:f4:38:a0:59:c4:a9:ab:44:a4:66:a0:39:91:88:b2:50:
19:d3:c5:8f:23:96:7c:78:74:d3:98:5d:3b:fd:31:24:30:bf:
77:26:a3:da:b2:1b:7c:07:39:be:92:6f:d0:17:53:b2:e6:0e:
93:f3:34:ec:e8:bb:79:80:ab:3b:52:ed:ab:4d:a3:a0:4f:a2:
28:71:f6:22:ed:b1:e3:7c:b5:5f:b8:81:a4:58:c5:82:d8:75:
a3:2f:d2:fd:c8:25:c9:f9:25:c0:fb:f8:24:01:89:90:04:5c:
cc:de:f4:9d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZVq4J0DWFAna8P9H2kjZkGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk
Y2I5MTMwHhcNMjUwMzA2MDk1NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTZkNTg1NzM4MTJmOTRhM2FjMTFjODhlZjA4MjE5YTg3ZTU4NzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC+3aRGAcQ1zrubTibowYZ9ZIuCU
sXXdOxwNyz2KQ4FtcqMSimSusgc0yxZH3kL4/rmq+qysuT6NtPIUFiJZ+Dozh6lj
/5b74GhnJspvmD/1Zt4ZPm+kxZhlsKsFmzNvnjmeaLacX+u+zBRNcrEVPsta78g8
Em0jBKoVFyNWaOypuchCaZUFg8P25/Mrv2G7l0UEX53/bAlY/xgRNREkJENkkhgc
hPGImJI+wpwEhf12aDRcnIeUsJxBK62wMVIuyJDSjCE+ovk67KumvhKOfbWurhfQ
lGL/+SuOKnDNJ3wA/36tHTtSF0u82PMnS+AFSj7i2wWmAN20xClNaHwVdwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFEVtWFc4EvlKOsEciO8IIZqH5YcTMB8GA1UdIwQY
MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt
OTI4ZTdiYzY5NTcwLzEvUlcxWVZ6Z1MtVW82d1J5STd3Z2htb2ZsaHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw
LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBgH+2AwQA
ucAsAwQAucAuMA0EAgACMAcDBQMqBYpAMA0GCSqGSIb3DQEBCwUAA4IBAQBFQaLL
d5T7Gq4oTyo7lALF2eKGCAFKizIF+K1GNEkdj15kLWTJRwwAGE095JqaMERgb01i
3q0JEwNhs8TONYHWsBNiVnJYEZT0shu29LC9NX3bcm575BYXFqoh4RaMOC8JAhDs
0LfLlv94s/AR1Ps4cEqAYXr9uXjm9f+bom/wj1VEAHZJRc2uf/rBWwcQKDV+1fQ4
oFnEqatEpGagOZGIslAZ08WPI5Z8eHTTmF07/TEkML93JqPasht8Bzm+km/QF1Oy
5g6T8zTs6Lt5gKs7Uu2rTaOgT6IocfYi7bHjfLVfuIGkWMWC2HWjL9L9yCXJ+SXA
+/gkAYmQBFzM3vSd
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:06:30 2025 by rpki-client