Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/gS4jeqALacaf51dl93Py-I7kfls.roa
File: gS4jeqALacaf51dl93Py-I7kfls.roa (raw, json)
Hash identifier: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=
Subject key identifier: 81:2E:23:7A:A0:0B:69:C6:9F:E7:57:65:F7:73:F2:F8:8E:E4:7E:5B
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0194CC8884C6C5930FCD781ECF7D5A98FCCB
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/gS4jeqALacaf51dl93Py-I7kfls.roa
Signing time: Mon 03 Feb 2025 15:58:06 +0000
ROA not before: Mon 03 Feb 2025 15:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201274
IP address blocks: 185.79.12.0/24 maxlen: 24
185.79.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:88:84:c6:c5:93:0f:cd:78:1e:cf:7d:5a:98:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Feb 3 15:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=812e237aa00b69c69fe75765f773f2f88ee47e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:56:df:4e:a4:65:ba:26:46:a5:61:c8:57:
d3:a8:0a:2c:ec:f3:c0:21:14:71:53:86:9f:2d:b4:
b1:23:57:db:fa:1d:9f:d9:22:9b:2d:4a:f4:b2:50:
b0:42:88:e0:3d:37:d1:bc:d8:50:a7:c9:26:58:d6:
43:65:5c:7c:88:e5:d5:c2:31:4a:59:c0:c5:0c:bb:
35:e5:b9:0d:95:ca:10:7f:d0:0c:a4:80:ad:f7:9d:
7f:9c:24:0a:35:0c:38:e3:d5:c3:2a:d6:f2:32:ca:
12:67:37:2b:b9:d8:bd:50:c8:7b:8d:fe:c5:6c:5f:
2a:d8:9d:18:6a:78:fb:9b:fb:ef:1d:53:14:fd:ba:
7a:84:48:49:4d:7b:cf:43:6c:2b:9a:2a:5a:a6:fa:
29:2c:f5:a8:04:2e:e8:87:23:e6:3e:b2:b6:73:41:
64:cd:50:2a:2c:0f:66:2a:af:7f:27:48:54:0c:b8:
31:0b:0b:70:70:7f:35:cc:00:f3:3a:0e:ae:f7:33:
bb:45:0b:04:ce:c5:86:04:21:b4:5f:c1:7c:0e:b8:
73:a9:c0:03:94:bf:dc:20:bd:b8:c8:75:1c:89:8f:
f2:b4:c4:5a:ea:1e:d8:19:f3:78:98:4b:5f:4f:ea:
a1:41:6b:a2:a7:16:8d:b6:c4:60:1a:b6:fb:54:f1:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:23:7A:A0:0B:69:C6:9F:E7:57:65:F7:73:F2:F8:8E:E4:7E:5B
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/gS4jeqALacaf51dl93Py-I7kfls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.12.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:d7:e3:f1:c1:f5:cd:43:04:dd:43:92:e4:a4:63:44:ac:6c:
ed:7a:d7:0c:b0:36:93:12:71:65:e9:e5:17:b4:23:c4:28:58:
56:14:a3:bb:c8:ae:3b:99:84:e1:62:67:69:65:c5:20:e0:d2:
7d:53:88:f2:89:c9:e8:00:0d:43:77:a8:4b:a9:b2:c8:0b:77:
c4:d5:16:b0:f9:77:5b:20:06:98:17:df:c0:40:4b:34:ae:68:
a7:08:be:e4:ee:20:9c:7e:77:ff:68:02:80:c5:19:61:97:a8:
26:a1:fb:e4:9d:0f:eb:02:08:03:5e:46:28:02:95:ae:82:07:
38:c6:a9:2a:aa:57:a6:93:29:8a:d8:3d:64:bf:ab:57:07:74:
62:ef:f1:14:05:39:9e:82:bc:2b:47:01:6e:54:44:88:06:ce:
6b:3e:b9:46:fc:2f:03:eb:0d:d0:f0:4f:0f:d5:c1:50:8d:47:
57:18:00:3a:04:4f:23:a4:7a:8f:bf:e5:90:06:4d:60:0d:fb:
50:78:f1:1f:eb:60:07:98:37:36:0e:fc:7e:61:b4:2b:cb:03:
d2:fb:1b:79:40:ba:cc:3d:3a:67:53:1a:51:2d:49:32:a6:bd:
9a:73:09:20:b0:a7:08:fc:9c:db:be:08:38:ff:10:08:d0:09:
3f:65:a4:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTMiITGxZMPzXgez31amPzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy
N2IwYzkwHhcNMjUwMjAzMTU1ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTJlMjM3YWEwMGI2OWM2OWZlNzU3NjVmNzczZjJmODhlZTQ3ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDxW306kZbomRqVhyFfTqAos7PPA
IRRxU4afLbSxI1fb+h2f2SKbLUr0slCwQojgPTfRvNhQp8kmWNZDZVx8iOXVwjFK
WcDFDLs15bkNlcoQf9AMpICt951/nCQKNQw449XDKtbyMsoSZzcrudi9UMh7jf7F
bF8q2J0Yanj7m/vvHVMU/bp6hEhJTXvPQ2wrmipapvopLPWoBC7ohyPmPrK2c0Fk
zVAqLA9mKq9/J0hUDLgxCwtwcH81zADzOg6u9zO7RQsEzsWGBCG0X8F8DrhzqcAD
lL/cIL24yHUciY/ytMRa6h7YGfN4mEtfT+qhQWuipxaNtsRgGrb7VPEwcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEuI3qgC2nGn+dXZfdz8viO5H5bMB8GA1UdIwQY
MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt
OWE4MDNmNzM2YzRhLzEvZ1M0amVxQUxhY2FmNTFkbDkzUHktSTdrZmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh
LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU8MMA0G
CSqGSIb3DQEBCwUAA4IBAQBr1+PxwfXNQwTdQ5LkpGNErGztetcMsDaTEnFl6eUX
tCPEKFhWFKO7yK47mYThYmdpZcUg4NJ9U4jyicnoAA1Dd6hLqbLIC3fE1Raw+Xdb
IAaYF9/AQEs0rminCL7k7iCcfnf/aAKAxRlhl6gmofvknQ/rAggDXkYoApWuggc4
xqkqqlemkymK2D1kv6tXB3Ri7/EUBTmegrwrRwFuVESIBs5rPrlG/C8D6w3Q8E8P
1cFQjUdXGAA6BE8jpHqPv+WQBk1gDftQePEf62AHmDc2Dvx+YbQrywPS+xt5QLrM
PTpnUxpRLUkypr2acwkgsKcI/Jzbvgg4/xAI0Ak/ZaR0
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:16:59 2025 by rpki-client