Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/uFwm3LO6GthW3CaP1u11g2Pmnbs.roa
File: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (raw, json)
Hash identifier: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=
Subject key identifier: B8:5C:26:DC:B3:BA:1A:D8:56:DC:26:8F:D6:ED:75:83:63:E6:9D:BB
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 0194228DB3708731EAF377069D36829A9736
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/uFwm3LO6GthW3CaP1u11g2Pmnbs.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202565
IP address blocks: 185.160.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b3:70:87:31:ea:f3:77:06:9d:36:82:9a:97:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b85c26dcb3ba1ad856dc268fd6ed758363e69dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:8d:35:5a:f1:e7:0a:6d:b9:24:aa:e9:f2:
c4:59:e0:b6:20:74:f6:58:9a:5f:15:17:48:ce:4c:
7f:00:93:d8:14:60:a6:20:f3:01:83:35:6f:13:af:
2d:e7:31:2f:b8:05:74:b1:69:d1:41:6b:a7:b8:1e:
b1:99:3f:ec:b9:26:9d:46:b2:9a:43:12:c5:04:a8:
e2:1e:a6:62:10:a5:02:1b:b7:c7:cd:92:0d:31:7a:
84:a6:90:7c:9f:cf:f3:c7:88:14:63:a6:bf:c5:12:
0b:f4:be:30:fa:33:17:10:4d:18:24:ad:5a:b2:c5:
b8:6a:44:78:90:e4:e8:a8:3b:99:3c:11:2d:cf:10:
cb:53:ce:d5:15:72:e3:8b:b0:89:c1:b1:d3:fa:4a:
d0:07:39:fb:1c:cb:10:ab:6d:ef:2b:2d:f0:07:26:
1c:f4:c7:b7:d0:47:0e:69:d5:a3:f6:44:d9:68:aa:
65:47:1e:ec:3e:ed:a8:3d:22:78:a6:2d:0c:a0:31:
d3:95:79:7f:f5:2f:bb:0c:b0:ba:67:9c:8c:e1:c3:
a9:b1:e2:d0:03:44:b9:4a:3d:43:7d:33:ba:ee:9e:
83:21:c4:71:af:77:89:6b:71:4b:35:95:4a:af:35:
03:1f:03:3f:f4:8d:85:86:b2:1d:6e:23:b3:f8:f4:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:26:DC:B3:BA:1A:D8:56:DC:26:8F:D6:ED:75:83:63:E6:9D:BB
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/uFwm3LO6GthW3CaP1u11g2Pmnbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.148.0/22
Signature Algorithm: sha256WithRSAEncryption
59:23:61:23:c6:4e:9f:bd:a0:2c:20:3b:d3:6e:78:7e:05:34:
68:2f:44:70:9e:e9:53:92:5a:72:e4:b8:cb:83:3e:9a:f0:8d:
38:74:67:66:0f:04:91:6f:55:7f:2b:da:17:ef:c6:f9:6b:40:
1f:1d:22:7f:41:1c:a6:2a:c7:fc:eb:83:d6:2b:1d:6e:43:e8:
04:c8:06:a5:54:06:f8:fd:e6:50:51:51:f2:81:d7:07:67:15:
d4:be:89:78:95:af:3e:d6:77:80:03:f2:89:f8:49:27:bb:da:
e2:1d:35:64:61:7a:d2:0f:f2:0f:bc:dc:51:7e:22:d4:a6:bb:
a7:b2:20:0d:20:d9:eb:b8:04:74:2d:c9:d9:fe:2a:2c:54:2e:
bd:37:58:66:c6:89:83:db:81:85:5e:1f:d0:52:30:09:62:87:
fd:56:a6:28:18:f7:a9:af:09:c2:af:45:e4:12:45:59:cd:93:
b5:73:95:09:3a:d5:44:5a:fd:d5:5f:65:5c:55:86:b9:f8:f8:
d8:a5:00:8a:a3:e2:f4:ad:b7:8c:8f:62:49:60:3a:36:ef:66:
10:16:1f:73:84:4b:2c:9f:4a:a8:0e:4a:11:fd:0f:79:ed:15:
d7:6e:18:fc:07:4c:6d:34:42:2a:b3:98:71:a8:c4:d7:e6:b9:
7e:3b:88:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijbNwhzHq83cGnTaCmpc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi
ZDgxYzAwHhcNMjUwMTAxMTU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODVjMjZkY2IzYmExYWQ4NTZkYzI2OGZkNmVkNzU4MzYzZTY5ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g2NNVrx5wptuSSq6fLEWeC2IHT2
WJpfFRdIzkx/AJPYFGCmIPMBgzVvE68t5zEvuAV0sWnRQWunuB6xmT/suSadRrKa
QxLFBKjiHqZiEKUCG7fHzZINMXqEppB8n8/zx4gUY6a/xRIL9L4w+jMXEE0YJK1a
ssW4akR4kOToqDuZPBEtzxDLU87VFXLji7CJwbHT+krQBzn7HMsQq23vKy3wByYc
9Me30EcOadWj9kTZaKplRx7sPu2oPSJ4pi0MoDHTlXl/9S+7DLC6Z5yM4cOpseLQ
A0S5Sj1DfTO67p6DIcRxr3eJa3FLNZVKrzUDHwM/9I2FhrIdbiOz+PTiRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhcJtyzuhrYVtwmj9btdYNj5p27MB8GA1UdIwQY
MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt
MmNhM2FhNzFlYzVmLzEvdUZ3bTNMTzZHdGhXM0NhUDF1MTFnMlBtbmJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm
LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaCUMA0G
CSqGSIb3DQEBCwUAA4IBAQBZI2Ejxk6fvaAsIDvTbnh+BTRoL0RwnulTklpy5LjL
gz6a8I04dGdmDwSRb1V/K9oX78b5a0AfHSJ/QRymKsf864PWKx1uQ+gEyAalVAb4
/eZQUVHygdcHZxXUvol4la8+1neAA/KJ+Eknu9riHTVkYXrSD/IPvNxRfiLUprun
siANINnruAR0LcnZ/iosVC69N1hmxomD24GFXh/QUjAJYof9VqYoGPeprwnCr0Xk
EkVZzZO1c5UJOtVEWv3VX2VcVYa5+PjYpQCKo+L0rbeMj2JJYDo272YQFh9zhEss
n0qoDkoR/Q957RXXbhj8B0xtNEIqs5hxqMTX5rl+O4i7
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:58:59 2025 by rpki-client