Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa
File: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (raw, json)
Hash identifier: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=
Subject key identifier: 88:C4:FA:53:D9:AD:BB:6B:B8:66:B6:60:E9:01:59:03:53:C8:E1:BE
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 01941F8C167A382F7ADA25A33F13A33F64A0
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.16.0/24 maxlen: 24
185.190.17.0/24 maxlen: 24
185.190.18.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:7a:38:2f:7a:da:25:a3:3f:13:a3:3f:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88c4fa53d9adbb6bb866b660e901590353c8e1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:f8:3e:35:de:10:1c:08:e9:a7:87:77:f0:
81:f1:aa:cd:98:28:8e:b3:be:dd:8d:a0:32:12:2a:
9f:d2:36:fe:4e:45:40:91:42:84:16:9f:e2:df:00:
16:37:68:80:b2:42:8c:21:80:3b:18:2d:f8:1f:4b:
73:74:7a:d1:9f:68:e5:7d:b4:10:ae:7e:0b:13:c4:
99:1b:46:61:ff:18:37:c3:51:40:9e:00:e4:55:40:
8a:70:4d:48:77:a9:2c:ca:93:d5:9d:7c:ef:ab:b3:
dd:a7:6b:d7:6e:54:b8:22:ab:a9:99:e4:0c:4e:97:
a7:ab:6b:a0:65:8c:20:01:30:1e:98:3e:c6:7f:4b:
48:d8:9d:0e:06:41:0a:84:d1:d7:29:68:b5:78:c0:
75:f9:17:ba:32:b0:2a:60:ad:a1:45:7e:99:c3:d8:
df:e5:0b:3d:7f:bb:a0:11:07:3b:84:d4:ce:8f:ae:
9b:5d:b2:b2:c3:39:17:ec:ee:e2:f2:d5:5b:2d:cc:
65:5b:e0:d3:68:30:b0:c6:9e:9d:1f:a0:c3:0d:58:
42:13:74:93:08:d4:e8:78:cb:40:af:3d:dd:b2:6e:
08:f4:67:4e:19:45:a8:fa:a9:a8:1f:51:cb:2f:df:
86:f9:55:9d:82:a8:6b:db:f1:55:05:a0:c3:31:22:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:FA:53:D9:AD:BB:6B:B8:66:B6:60:E9:01:59:03:53:C8:E1:BE
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:cc:78:66:6f:01:6a:ee:ff:bc:a0:d6:20:f2:46:54:86:3a:
69:a7:76:b4:98:42:c6:c0:13:28:35:39:5c:82:12:25:13:f4:
77:b3:8b:80:ad:64:60:b7:a9:70:4d:7a:96:c2:1b:38:e5:88:
84:5a:dc:da:83:eb:33:be:d7:b7:e9:a6:45:2b:de:69:a9:7a:
59:c3:71:9f:d4:d0:ae:ff:b8:94:69:0f:fa:63:5e:f5:9a:ee:
b0:14:f3:62:1a:a4:01:36:4e:40:60:56:8a:d9:78:3b:b3:d6:
66:8a:3b:98:ff:77:c9:84:68:a3:f1:6d:2f:be:7f:85:9c:b0:
09:49:3d:1e:d9:fa:51:d4:6f:db:b4:a4:19:92:b4:69:16:ec:
91:3d:14:be:11:c0:54:3d:fa:16:99:f6:f7:3a:c0:94:01:7b:
df:7a:ef:02:1a:7f:d9:f8:b8:b2:56:2d:65:0c:87:9d:9f:f5:
f7:31:77:78:14:af:85:1c:ab:27:8e:8d:b0:3f:35:29:b6:81:
5e:3f:c2:b4:25:08:3e:53:8c:1e:bb:ce:1e:54:f2:cd:e6:03:
ba:22:ef:09:eb:9d:0b:fe:ce:1f:a2:3e:de:33:bc:58:2b:03:
f9:a2:47:0c:0e:e7:21:09:4e:a8:56:e6:4b:d0:e8:e3:a5:e5:
cc:12:73:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjBZ6OC962iWjPxOjP2SgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw
NDNkN2UwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGM0ZmE1M2Q5YWRiYjZiYjg2NmI2NjBlOTAxNTkwMzUzYzhlMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEz4PjXeEBwI6aeHd/CB8arNmCiO
s77djaAyEiqf0jb+TkVAkUKEFp/i3wAWN2iAskKMIYA7GC34H0tzdHrRn2jlfbQQ
rn4LE8SZG0Zh/xg3w1FAngDkVUCKcE1Id6ksypPVnXzvq7Pdp2vXblS4IqupmeQM
Tpenq2ugZYwgATAemD7Gf0tI2J0OBkEKhNHXKWi1eMB1+Re6MrAqYK2hRX6Zw9jf
5Qs9f7ugEQc7hNTOj66bXbKywzkX7O7i8tVbLcxlW+DTaDCwxp6dH6DDDVhCE3ST
CNToeMtArz3dsm4I9GdOGUWo+qmoH1HLL9+G+VWdgqhr2/FVBaDDMSLfHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjE+lPZrbtruGa2YOkBWQNTyOG+MB8GA1UdIwQY
MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt
NzFlOTViMDRiM2VjLzEvaU1UNlU5bXR1MnU0WnJaZzZRRlpBMVBJNGI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj
LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub4QMA0G
CSqGSIb3DQEBCwUAA4IBAQB9zHhmbwFq7v+8oNYg8kZUhjppp3a0mELGwBMoNTlc
ghIlE/R3s4uArWRgt6lwTXqWwhs45YiEWtzag+szvte36aZFK95pqXpZw3Gf1NCu
/7iUaQ/6Y171mu6wFPNiGqQBNk5AYFaK2Xg7s9ZmijuY/3fJhGij8W0vvn+FnLAJ
ST0e2fpR1G/btKQZkrRpFuyRPRS+EcBUPfoWmfb3OsCUAXvfeu8CGn/Z+LiyVi1l
DIedn/X3MXd4FK+FHKsnjo2wPzUptoFeP8K0JQg+U4weu84eVPLN5gO6Iu8J650L
/s4foj7eM7xYKwP5okcMDuchCU6oVuZL0OjjpeXMEnPW
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:44:47 2025 by rpki-client