Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa
File: GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa (raw, json)
Hash identifier: 8dOBfbOxlnAECbl9CEWi1s85m74su/8sfXrqQYKg6QA=
Subject key identifier: 19:50:32:55:FC:B5:2E:73:53:40:07:9F:C3:FA:D0:2F:99:28:FD:88
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 01942143BF49C85A513518CBE81C175A8460
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.34.188.0/24 maxlen: 24
185.34.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bf:49:c8:5a:51:35:18:cb:e8:1c:17:5a:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19503255fcb52e735340079fc3fad02f9928fd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:7b:93:f6:32:68:d2:c5:22:ac:1c:75:5e:
6b:f7:bc:b6:97:6e:d6:91:e0:e8:63:9a:f7:bc:2e:
80:0a:3d:00:cd:b4:5f:e1:81:7f:4b:a1:3c:9a:02:
a6:ad:bd:cc:4c:13:ea:f0:e1:0b:cf:ed:b5:4f:d5:
23:a2:0c:e2:bd:3e:d8:06:60:a7:03:a5:8e:fe:8b:
23:dd:b2:83:92:3f:c4:4a:ed:1d:55:8b:52:3c:ea:
97:90:fb:8e:cc:c7:d4:57:fd:ba:b3:9a:cf:5e:a5:
85:e4:fe:0c:46:08:f9:81:50:6a:29:f9:36:07:20:
c5:f1:a0:8a:85:59:ca:59:f6:c4:a7:22:c1:5e:41:
d9:7c:2b:84:b5:1f:c4:3a:fc:60:b0:32:82:20:83:
24:2a:72:19:95:1f:00:f5:84:15:bc:4f:36:0b:04:
a6:90:09:91:03:a9:14:44:79:09:71:46:9a:42:e7:
c2:db:ea:40:74:ab:58:9d:48:64:82:c8:1a:49:d6:
4b:c9:f0:4e:39:27:a1:61:52:4f:d7:94:17:d7:c5:
9a:e2:86:00:de:c5:1e:b8:86:1c:cb:a5:b7:6f:d6:
df:15:f6:05:1c:f3:2b:26:50:09:27:72:38:7c:03:
53:52:a2:35:49:19:f4:22:fa:1c:2a:e8:44:75:ed:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:32:55:FC:B5:2E:73:53:40:07:9F:C3:FA:D0:2F:99:28:FD:88
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.188.0/24
185.34.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:27:15:00:a8:8b:a5:59:bd:3e:af:d5:8f:0d:5b:5f:ee:3e:
92:31:f0:4d:67:fa:d7:61:45:e1:cb:38:76:bd:25:77:3c:f8:
a9:5c:f6:90:c4:09:f3:4e:a3:50:c3:dc:8c:9d:fe:54:9a:f5:
c9:9b:b9:62:ee:ff:bd:f1:8e:70:d8:ae:5f:70:2a:9a:47:8c:
a3:9a:f3:7c:22:bb:4e:f8:4d:7e:02:3c:d5:d4:e7:a8:28:00:
2a:93:ae:65:15:98:3f:7d:62:28:ae:1f:67:53:c3:15:dd:f4:
a4:76:97:b2:de:69:35:0c:44:bd:c4:27:ad:1f:27:41:c6:73:
8f:a1:83:f4:c4:32:22:fd:4f:23:10:b3:2b:9f:53:d4:bc:81:
18:8d:a7:42:46:d0:4e:bd:93:84:98:24:40:b6:00:b5:5b:ca:
ff:09:80:8f:f4:ce:64:77:ff:73:39:42:08:6f:83:44:4b:d9:
0f:2a:37:0f:f4:ae:05:0e:d4:10:3c:1b:c0:2c:5e:f0:fd:0e:
11:02:45:bd:6b:0c:17:03:ee:da:1a:2d:83:9a:c3:28:7b:41:
3a:f7:e0:7e:0c:25:bf:68:59:d1:b1:26:ce:fa:8c:9a:ce:e8:
a8:42:d3:91:71:c2:c0:34:7e:6b:d0:34:b4:88:42:81:fe:29:
c8:85:f7:52
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ79JyFpRNRjL6BwXWoRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz
MDZhMTcwHhcNMjUwMTAxMDk0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTUwMzI1NWZjYjUyZTczNTM0MDA3OWZjM2ZhZDAyZjk5MjhmZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXN7k/YyaNLFIqwcdV5r97y2l27W
keDoY5r3vC6ACj0AzbRf4YF/S6E8mgKmrb3MTBPq8OELz+21T9UjogzivT7YBmCn
A6WO/osj3bKDkj/ESu0dVYtSPOqXkPuOzMfUV/26s5rPXqWF5P4MRgj5gVBqKfk2
ByDF8aCKhVnKWfbEpyLBXkHZfCuEtR/EOvxgsDKCIIMkKnIZlR8A9YQVvE82CwSm
kAmRA6kURHkJcUaaQufC2+pAdKtYnUhkgsgaSdZLyfBOOSehYVJP15QX18Wa4oYA
3sUeuIYcy6W3b9bfFfYFHPMrJlAJJ3I4fANTUqI1SRn0IvocKuhEde2TAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBlQMlX8tS5zU0AHn8P60C+ZKP2IMB8GA1UdIwQY
MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt
MmJiZjhmYWEwMGNhLzEvR1ZBeVZmeTFMbk5UUUFlZndfclFMNWtvX1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh
LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSK8AwQA
uSK/MA0GCSqGSIb3DQEBCwUAA4IBAQDAJxUAqIulWb0+r9WPDVtf7j6SMfBNZ/rX
YUXhyzh2vSV3PPipXPaQxAnzTqNQw9yMnf5UmvXJm7li7v+98Y5w2K5fcCqaR4yj
mvN8IrtO+E1+AjzV1OeoKAAqk65lFZg/fWIorh9nU8MV3fSkdpey3mk1DES9xCet
HydBxnOPoYP0xDIi/U8jELMrn1PUvIEYjadCRtBOvZOEmCRAtgC1W8r/CYCP9M5k
d/9zOUIIb4NES9kPKjcP9K4FDtQQPBvALF7w/Q4RAkW9awwXA+7aGi2DmsMoe0E6
9+B+DCW/aFnRsSbO+oyazuioQtORccLANH5r0DS0iEKB/inIhfdS
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:09 2025 by rpki-client