Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa
File: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (raw, json)
Hash identifier: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=
Subject key identifier: 00:09:D7:F7:81:59:FA:D4:33:5D:C2:64:FD:E9:46:C6:E2:D1:F1:A4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 019421B17ACA71887F06E3D5E35714165D9C
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa
Signing time: Wed 01 Jan 2025 11:47:46 +0000
ROA not before: Wed 01 Jan 2025 11:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50018
IP address blocks: 185.136.64.0/22 maxlen: 22
185.136.64.0/24 maxlen: 24
185.136.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:7a:ca:71:88:7f:06:e3:d5:e3:57:14:16:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Jan 1 11:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0009d7f78159fad4335dc264fde946c6e2d1f1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:2e:f9:92:3b:4b:61:1e:f4:3c:20:45:19:
67:a3:83:8d:73:bc:1d:15:9e:20:ad:78:9e:46:8d:
c5:57:e8:d1:05:cd:d4:1e:9a:f4:85:5e:80:df:5f:
a1:a1:6f:3f:3c:97:17:30:3a:ff:77:50:b6:ab:d8:
62:d0:b0:61:32:c1:87:90:5a:b0:c7:5d:39:5c:48:
7c:52:ea:0c:5f:2f:0a:ac:7e:9d:d9:30:6e:12:db:
90:0e:75:66:23:65:83:5d:31:a7:bd:2e:c3:5e:f3:
4c:a5:d8:81:0b:0e:2a:9a:aa:51:25:4c:31:7a:9f:
5d:7c:ca:21:f4:47:79:f3:98:cf:dd:90:66:cd:1d:
e8:c6:c3:17:e1:0b:40:ee:4a:89:b2:a2:03:53:dc:
a4:ad:9f:86:5c:58:1a:32:65:f4:a3:a7:eb:06:c0:
74:28:6b:1c:cc:10:5c:f9:af:52:5d:f2:0f:85:72:
1d:7e:5a:7a:bc:6f:ce:8a:39:9a:8c:f7:46:97:44:
2d:54:5a:11:51:72:ac:49:fc:fa:b5:63:69:b2:b9:
44:58:0a:57:79:6e:3d:32:36:6e:0d:dd:b3:ab:12:
89:32:7e:4f:12:b4:41:b0:55:b9:a0:f5:dc:3e:1d:
7a:ff:bd:56:4b:59:b2:98:26:62:97:5f:cf:1b:76:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:D7:F7:81:59:FA:D4:33:5D:C2:64:FD:E9:46:C6:E2:D1:F1:A4
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:4e:8c:24:82:f7:57:f2:eb:95:df:9c:2d:aa:fa:44:36:44:
8e:ef:90:20:fd:4d:d5:d2:7a:2b:e3:50:2a:c0:33:6a:56:26:
3e:6c:71:a1:16:ad:46:66:5c:5e:1c:31:2e:42:cc:3b:52:1f:
e2:51:ee:e1:c9:31:01:0f:de:fe:89:48:b4:f8:eb:12:e5:25:
f2:67:d8:39:b1:b3:dd:37:29:07:a6:66:0f:9f:c6:49:ea:8f:
a5:78:1c:30:f8:39:24:f2:dd:7b:13:e6:5c:e0:02:5e:db:e1:
62:94:03:0c:93:e9:c1:09:fc:f3:35:16:e9:5d:b1:7b:c0:15:
f6:bc:8f:fd:94:a2:89:6f:dd:07:9c:c3:03:a4:23:70:38:86:
e0:d9:15:86:fb:29:5a:ad:c9:93:35:78:31:c8:b0:d7:4c:bd:
ed:36:38:67:fc:22:49:b4:47:81:2a:e2:d5:ed:27:1f:4e:b9:
40:f1:4c:49:ce:11:9a:a7:d1:8e:86:fc:2d:d1:dc:4e:39:09:
2f:a5:4b:f6:2d:ab:1b:9f:ad:d2:81:02:4f:91:ce:1b:ac:3c:
60:48:f7:3f:be:c0:80:6f:d4:b4:c5:f3:ef:5f:63:c6:a8:91:
28:bd:af:6c:20:2c:85:68:bf:25:b4:99:a5:16:27:0d:b6:2a:
9a:ba:d3:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsXrKcYh/BuPV41cUFl2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMzY5Y2E5YmE4NGFkODQ3ZDQ5ZDMxZTI3NDY1ZmFmNTdi
ZjI4ZTQwHhcNMjUwMTAxMTE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDA5ZDdmNzgxNTlmYWQ0MzM1ZGMyNjRmZGU5NDZjNmUyZDFmMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJYu+ZI7S2Ee9DwgRRlno4ONc7wd
FZ4grXieRo3FV+jRBc3UHpr0hV6A31+hoW8/PJcXMDr/d1C2q9hi0LBhMsGHkFqw
x105XEh8UuoMXy8KrH6d2TBuEtuQDnVmI2WDXTGnvS7DXvNMpdiBCw4qmqpRJUwx
ep9dfMoh9Ed585jP3ZBmzR3oxsMX4QtA7kqJsqIDU9ykrZ+GXFgaMmX0o6frBsB0
KGsczBBc+a9SXfIPhXIdflp6vG/OijmajPdGl0QtVFoRUXKsSfz6tWNpsrlEWApX
eW49MjZuDd2zqxKJMn5PErRBsFW5oPXcPh16/71WS1mymCZil1/PG3bQ8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAJ1/eBWfrUM13CZP3pRsbi0fGkMB8GA1UdIwQY
MBaAFCo2nKm6hK2EfUnTHidGX69XvyjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQt
NTg5NWI2OWQxODllLzEvQUFuWDk0RlotdFF6WGNKa19lbEd4dUxSOGFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQtNTg5NWI2OWQxODll
LzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYhAMA0G
CSqGSIb3DQEBCwUAA4IBAQCfTowkgvdX8uuV35wtqvpENkSO75Ag/U3V0nor41Aq
wDNqViY+bHGhFq1GZlxeHDEuQsw7Uh/iUe7hyTEBD97+iUi0+OsS5SXyZ9g5sbPd
NykHpmYPn8ZJ6o+leBww+Dkk8t17E+Zc4AJe2+FilAMMk+nBCfzzNRbpXbF7wBX2
vI/9lKKJb90HnMMDpCNwOIbg2RWG+ylarcmTNXgxyLDXTL3tNjhn/CJJtEeBKuLV
7ScfTrlA8UxJzhGap9GOhvwt0dxOOQkvpUv2Lasbn63SgQJPkc4brDxgSPc/vsCA
b9S0xfPvX2PGqJEova9sICyFaL8ltJmlFicNtiqautPg
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:14 2025 by rpki-client