Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/00GJlkuxjT-xB1LSuZloHmKQPmA.roa
File: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (raw, json)
Hash identifier: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=
Subject key identifier: D3:41:89:96:4B:B1:8D:3F:B1:07:52:D2:B9:99:68:1E:62:90:3E:60
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 01942220410145576488B760AE6F3D1F97FD
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/00GJlkuxjT-xB1LSuZloHmKQPmA.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209220
IP address blocks: 185.104.122.0/24 maxlen: 24
2a06:3000:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:41:01:45:57:64:88:b7:60:ae:6f:3d:1f:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34189964bb18d3fb10752d2b999681e62903e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:81:c7:ae:57:96:76:55:ba:15:d0:1f:52:
6a:ed:14:90:0a:b3:39:01:c3:b2:54:70:e6:5d:7a:
c8:a1:4d:a1:32:80:7a:65:aa:20:99:7d:d4:7d:8b:
31:0e:0a:e2:a8:96:bb:81:c7:b5:a6:3f:27:39:80:
e6:bf:8a:e2:34:2a:d2:c0:bc:f0:ed:dc:f7:a5:73:
8e:c6:a5:08:ff:d8:6e:71:10:d5:9d:18:8f:8a:e0:
c1:8d:ba:7f:1a:c8:03:ac:b4:6f:91:36:5e:2f:3b:
75:de:f3:d9:45:58:9e:f7:af:bc:3a:a8:46:83:d7:
50:07:5b:53:23:71:84:e6:36:3b:11:0d:7b:fa:c5:
86:ac:bd:8c:be:cf:1a:a9:66:4d:b4:eb:43:f5:4a:
86:09:35:7a:7f:76:c8:e5:b4:30:49:48:d1:3b:a2:
b1:2e:08:dd:0e:35:a3:ef:17:4a:68:f8:ac:26:30:
a3:6a:ad:2b:1d:f0:1e:f5:c3:15:5e:56:e2:2c:34:
43:af:52:6c:23:50:db:37:90:95:56:c7:f0:d0:74:
5e:4c:e1:3b:c1:a1:a1:4e:f4:6d:ee:92:bd:d2:2a:
34:a4:55:ee:f7:9b:6e:39:5c:99:be:32:b3:47:4d:
25:61:c5:fe:68:3d:2c:e6:a3:4b:6a:0b:f1:e5:87:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:89:96:4B:B1:8D:3F:B1:07:52:D2:B9:99:68:1E:62:90:3E:60
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/00GJlkuxjT-xB1LSuZloHmKQPmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.122.0/24
IPv6:
2a06:3000:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:df:66:c6:33:83:52:0a:53:3e:85:30:f3:89:6a:d0:a1:a0:
b2:6c:a2:40:c3:ad:2e:3b:ec:f0:6f:8f:c8:b8:af:0d:ad:9c:
e7:7d:91:a9:88:35:46:bf:1d:1b:5e:f7:5c:95:6a:99:9f:e3:
d5:94:00:cb:c8:f5:d6:16:b6:21:7a:3e:8d:e1:72:4a:78:df:
e6:b7:c2:d3:4f:13:2b:43:e4:75:91:c5:54:31:f8:a2:9f:89:
55:30:66:2f:fa:ba:8f:8c:31:49:dd:ca:f4:ad:c6:d5:85:98:
12:90:3d:6f:04:53:2a:cc:3f:6f:da:f3:f5:24:d9:60:e3:05:
53:46:91:69:03:ce:39:83:2d:2b:3e:39:f1:1b:19:db:c4:72:
55:1b:2a:3d:8e:0b:47:21:06:79:1d:c5:74:83:fb:67:7d:82:
a7:df:fe:2c:99:07:65:da:41:f3:0b:0b:0a:f1:2a:9c:bc:6e:
59:6d:77:11:f2:00:19:a7:f4:64:e6:48:e6:08:28:62:7f:12:
32:ab:d4:1f:2a:ba:3d:d0:db:cb:72:16:a1:a2:24:4c:a0:77:
8a:10:83:c6:38:fa:80:49:8d:7b:09:5b:92:1a:ea:c2:21:8b:
43:c3:75:44:13:70:4f:9e:bc:81:21:eb:b5:df:1d:77:1e:e7:
34:ad:a5:f3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQiIEEBRVdkiLdgrm89H5f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzUzNzc5MDFhNzg3MWQzYmZmN2E3MDI3N2EyZjRlMmZj
MGUyNzcwHhcNMjUwMTAxMTM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQxODk5NjRiYjE4ZDNmYjEwNzUyZDJiOTk5NjgxZTYyOTAzZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V+Bx65XlnZVuhXQH1Jq7RSQCrM5
AcOyVHDmXXrIoU2hMoB6ZaogmX3UfYsxDgriqJa7gce1pj8nOYDmv4riNCrSwLzw
7dz3pXOOxqUI/9hucRDVnRiPiuDBjbp/GsgDrLRvkTZeLzt13vPZRVie96+8OqhG
g9dQB1tTI3GE5jY7EQ17+sWGrL2Mvs8aqWZNtOtD9UqGCTV6f3bI5bQwSUjRO6Kx
LgjdDjWj7xdKaPisJjCjaq0rHfAe9cMVXlbiLDRDr1JsI1DbN5CVVsfw0HReTOE7
waGhTvRt7pK90io0pFXu95tuOVyZvjKzR00lYcX+aD0s5qNLagvx5YdnPQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFNNBiZZLsY0/sQdS0rmZaB5ikD5gMB8GA1UdIwQY
MBaAFLE1N3kBp4cdO/96cCd6L04vwOJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUt
OTEyMDQ3MTUzZTAxLzEvMDBHSmxrdXhqVC14QjFMU3VabG9IbUtRUG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUtOTEyMDQ3MTUzZTAx
LzEvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuWh6MA4E
AgACMAgDBgQqBjAAEDANBgkqhkiG9w0BAQsFAAOCAQEAqd9mxjODUgpTPoUw84lq
0KGgsmyiQMOtLjvs8G+PyLivDa2c532RqYg1Rr8dG173XJVqmZ/j1ZQAy8j11ha2
IXo+jeFySnjf5rfC008TK0PkdZHFVDH4op+JVTBmL/q6j4wxSd3K9K3G1YWYEpA9
bwRTKsw/b9rz9STZYOMFU0aRaQPOOYMtKz458RsZ28RyVRsqPY4LRyEGeR3FdIP7
Z32Cp9/+LJkHZdpB8wsLCvEqnLxuWW13EfIAGaf0ZOZI5ggoYn8SMqvUHyq6PdDb
y3IWoaIkTKB3ihCDxjj6gEmNewlbkhrqwiGLQ8N1RBNwT568gSHrtd8ddx7nNK2l
8w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:28:25 2025 by rpki-client