Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa
File: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (raw, json)
Hash identifier: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=
Subject key identifier: D6:0F:2E:D0:68:AB:F3:20:B2:54:1B:F3:72:E0:36:ED:9B:0C:4D:C0
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 0194221F8108E9B39FBB1A00346EFF6DAA10
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24675
IP address blocks: 193.178.1.0/24 maxlen: 24
193.178.2.0/24 maxlen: 24
193.178.3.0/24 maxlen: 24
193.178.4.0/24 maxlen: 24
193.178.5.0/24 maxlen: 24
193.178.6.0/24 maxlen: 24
193.178.7.0/24 maxlen: 24
193.178.8.0/24 maxlen: 24
193.178.9.0/24 maxlen: 24
193.178.10.0/24 maxlen: 24
193.178.11.0/24 maxlen: 24
193.178.12.0/24 maxlen: 24
193.178.13.0/24 maxlen: 24
193.178.14.0/24 maxlen: 24
193.178.15.0/24 maxlen: 24
193.178.16.0/22 maxlen: 22
193.178.20.0/24 maxlen: 24
193.178.21.0/24 maxlen: 24
193.178.29.0/24 maxlen: 24
193.178.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:81:08:e9:b3:9f:bb:1a:00:34:6e:ff:6d:aa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d60f2ed068abf320b2541bf372e036ed9b0c4dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:80:44:47:74:bf:46:51:42:68:7d:08:40:
04:ae:e6:f2:dd:37:36:cc:59:de:13:23:c8:1c:d8:
f0:ce:f6:f0:ab:04:4f:49:f2:e0:50:20:ca:10:55:
cc:5f:77:df:99:5f:4a:30:33:36:d1:1c:a7:93:9c:
a2:5e:ce:ab:46:f3:9f:99:1f:6c:c0:05:9b:0e:a8:
c4:6f:44:48:0b:bf:a1:88:f1:f7:4e:be:7e:b4:e0:
7c:42:a7:a5:48:a1:36:5d:48:12:25:86:94:e7:eb:
97:61:3c:81:08:37:f4:3c:91:09:d9:24:44:dc:b7:
8b:c1:41:5d:44:6e:57:cb:74:40:20:b6:a9:c9:92:
0d:f2:d1:0a:ce:fd:c8:57:b1:61:0d:1a:f1:c9:af:
f1:f5:06:0f:c3:3c:bd:25:cd:b1:03:36:8d:5c:b6:
bc:3c:40:be:52:5e:92:d5:5e:c2:fd:b7:60:a1:1f:
97:21:e4:89:d2:95:2c:f1:83:22:15:ac:ee:4d:af:
3d:f1:ff:d9:be:20:b2:98:c6:f1:fb:0a:e9:b4:51:
e9:ac:ce:cd:98:c6:56:38:70:a0:ac:50:bc:4e:3d:
86:fb:53:95:40:58:75:1c:53:69:eb:cd:35:97:ff:
7e:a0:55:9a:6d:19:8c:c6:9a:87:ba:79:d2:6a:7c:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0F:2E:D0:68:AB:F3:20:B2:54:1B:F3:72:E0:36:ED:9B:0C:4D:C0
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.1.0-193.178.21.255
193.178.29.0-193.178.30.255
Signature Algorithm: sha256WithRSAEncryption
b0:93:8a:b2:4c:23:85:e1:76:d5:81:0f:df:8b:f2:e9:0b:3e:
2a:af:0e:38:92:7b:2f:01:0c:83:aa:e8:03:51:02:80:f1:58:
08:ba:ed:8a:2d:c9:a6:6b:17:bc:64:c1:75:21:d5:22:cd:73:
cc:ed:f4:f7:59:2d:a3:79:0a:e7:6a:33:da:98:63:ab:e8:c2:
f0:1d:96:3b:f6:b6:79:b7:e5:35:60:bc:78:60:01:5e:09:f0:
6a:53:94:ad:d8:ed:46:4d:70:06:5f:ff:f1:60:d4:b6:e6:6d:
a5:d9:85:1b:24:4f:00:74:df:6b:01:37:1d:64:98:cb:f4:dc:
af:7c:3c:24:d9:a3:82:9a:6b:01:bd:59:c8:01:67:39:3f:1d:
a8:e8:a3:62:92:e5:e0:c0:7c:cc:41:c4:b7:10:a7:29:65:7b:
e8:6d:64:9e:dd:b4:d7:1f:96:e1:02:3d:f4:4e:d8:42:9d:db:
8f:78:6b:d4:5b:34:47:17:ee:27:97:da:a1:99:1d:e3:01:c0:
0e:98:d3:95:30:0b:81:76:71:ca:2c:a8:7d:52:4e:38:35:46:
a5:15:22:40:11:86:ad:9e:c6:07:60:b6:75:45:28:af:43:83:
5e:e3:f1:0b:72:46:95:f1:51:3f:c3:dc:f2:22:f7:54:3e:3d:
90:53:d3:40
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQiH4EI6bOfuxoANG7/baoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj
ODg1M2QwHhcNMjUwMTAxMTM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjBmMmVkMDY4YWJmMzIwYjI1NDFiZjM3MmUwMzZlZDliMGM0ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmqAREd0v0ZRQmh9CEAEruby3Tc2
zFneEyPIHNjwzvbwqwRPSfLgUCDKEFXMX3ffmV9KMDM20Rynk5yiXs6rRvOfmR9s
wAWbDqjEb0RIC7+hiPH3Tr5+tOB8QqelSKE2XUgSJYaU5+uXYTyBCDf0PJEJ2SRE
3LeLwUFdRG5Xy3RAILapyZIN8tEKzv3IV7FhDRrxya/x9QYPwzy9Jc2xAzaNXLa8
PEC+Ul6S1V7C/bdgoR+XIeSJ0pUs8YMiFazuTa898f/ZviCymMbx+wrptFHprM7N
mMZWOHCgrFC8Tj2G+1OVQFh1HFNp6801l/9+oFWabRmMxpqHunnSanzDpQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFNYPLtBoq/MgslQb83LgNu2bDE3AMB8GA1UdIwQY
MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt
Zjk2MzMyOTJjOTc3LzEvMWc4dTBHaXI4eUN5VkJ2emN1QTI3WnNNVGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3
LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADBsgED
BAHBshQwDAMEAMGyHQMEAMGyHjANBgkqhkiG9w0BAQsFAAOCAQEAsJOKskwjheF2
1YEP34vy6Qs+Kq8OOJJ7LwEMg6roA1ECgPFYCLrtii3JpmsXvGTBdSHVIs1zzO30
91kto3kK52oz2phjq+jC8B2WO/a2ebflNWC8eGABXgnwalOUrdjtRk1wBl//8WDU
tuZtpdmFGyRPAHTfawE3HWSYy/Tcr3w8JNmjgpprAb1ZyAFnOT8dqOijYpLl4MB8
zEHEtxCnKWV76G1knt201x+W4QI99E7YQp3bj3hr1Fs0RxfuJ5faoZkd4wHADpjT
lTALgXZxyiyofVJOODVGpRUiQBGGrZ7GB2C2dUUor0ODXuPxC3JGlfFRP8Pc8iL3
VD49kFPTQA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:47:30 2025 by rpki-client