Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa
File: EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa (raw, json)
Hash identifier: abzX5lFNPVhGuyGSiOTcu5+TTen+fgBo8SzNpUg+bbw=
Subject key identifier: 10:78:81:E2:AD:55:A3:8A:2A:18:08:D0:B5:94:FB:8B:5F:1D:06:FB
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C98214A865B819BFC187DE501261B
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198697
IP address blocks: 185.177.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:98:21:4a:86:5b:81:9b:fc:18:7d:e5:01:26:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=107881e2ad55a38a2a1808d0b594fb8b5f1d06fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:e6:30:e7:ec:ac:f5:b1:49:64:0a:79:76:
ff:27:c9:64:e3:13:c9:d1:51:2e:40:a9:34:94:86:
98:94:70:26:c5:fc:76:60:e7:2c:4e:72:21:00:66:
2b:31:67:1e:b5:75:9c:5a:e0:1d:fb:89:d5:13:d7:
b5:ce:61:a3:32:32:28:0f:e0:71:b4:2d:5e:8f:a4:
11:5c:3d:b7:a6:10:1f:99:d3:ad:51:4c:ab:42:92:
de:33:4b:24:ac:a2:19:19:be:a3:31:dd:ec:af:9d:
82:8f:ac:f5:f4:31:c7:28:cc:f9:ea:c2:43:fc:50:
66:2b:26:95:31:99:f2:60:ac:1f:00:5e:9c:e5:91:
c8:bc:0e:8c:8d:db:f0:7a:98:79:a9:47:f3:7a:96:
91:98:bb:ec:06:c2:bc:69:8e:24:ca:dd:52:fb:fb:
fb:5d:c0:35:2f:fc:38:b4:c1:c5:8d:e7:91:7e:ee:
93:da:07:d8:03:78:e0:b4:6b:c2:01:91:24:78:e3:
f8:5e:b9:8b:e5:56:42:2f:cf:b3:02:ce:15:ba:f4:
34:fe:8f:42:03:26:e3:1e:ce:85:48:b8:6e:27:2b:
45:be:4c:1e:17:23:24:5a:d2:38:79:df:c0:a8:71:
34:1a:06:56:a1:11:a8:df:ac:12:5c:57:05:01:09:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:78:81:E2:AD:55:A3:8A:2A:18:08:D0:B5:94:FB:8B:5F:1D:06:FB
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e3:66:dc:7b:9c:b9:70:65:e2:87:f3:6e:fc:86:32:32:17:
e6:72:a7:b1:0c:bd:7e:15:eb:71:84:53:52:4e:e2:3d:c0:39:
a0:aa:12:d6:6e:c6:4c:40:f0:45:71:2d:89:f7:52:51:ba:da:
62:79:3b:9a:7e:13:63:a9:ca:18:26:b2:2b:34:20:ff:26:ac:
2b:ce:52:ca:b1:00:27:4a:46:b8:38:e8:be:69:86:f0:07:59:
16:74:90:08:d0:2b:51:8a:34:61:ef:c7:27:f2:3a:da:6e:c4:
0f:e2:83:b8:ed:c4:8a:15:ab:c9:a8:bc:8e:68:79:a6:4e:89:
8c:fd:49:c7:2d:7e:e7:c1:d2:61:75:38:ea:07:82:9d:f3:e1:
22:a1:b8:85:71:f7:cf:85:5b:e3:cf:c8:5c:d7:62:8e:6e:53:
dc:31:fe:ca:43:41:be:01:bf:40:6b:0d:f6:28:a9:e5:ab:2d:
01:d7:96:8a:18:ae:09:33:e1:b2:7e:51:84:2b:84:9c:a0:bd:
d3:9b:f2:6c:99:a6:f0:ce:5d:d1:06:29:b4:f5:4f:33:5d:31:
86:fc:c9:9d:9b:cb:48:48:f6:0a:fe:e6:fb:3f:37:34:5c:d2:
5b:20:ef:ad:d6:00:80:4e:68:db:37:82:79:14:b5:8a:13:96:
25:a7:82:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJghSoZbgZv8GH3lASYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc4ODFlMmFkNTVhMzhhMmExODA4ZDBiNTk0ZmI4YjVmMWQwNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbvmMOfsrPWxSWQKeXb/J8lk4xPJ
0VEuQKk0lIaYlHAmxfx2YOcsTnIhAGYrMWcetXWcWuAd+4nVE9e1zmGjMjIoD+Bx
tC1ej6QRXD23phAfmdOtUUyrQpLeM0skrKIZGb6jMd3sr52Cj6z19DHHKMz56sJD
/FBmKyaVMZnyYKwfAF6c5ZHIvA6Mjdvweph5qUfzepaRmLvsBsK8aY4kyt1S+/v7
XcA1L/w4tMHFjeeRfu6T2gfYA3jgtGvCAZEkeOP4XrmL5VZCL8+zAs4VuvQ0/o9C
AybjHs6FSLhuJytFvkweFyMkWtI4ed/AqHE0GgZWoRGo36wSXFcFAQlgBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBB4geKtVaOKKhgI0LWU+4tfHQb7MB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvRUhpQjRxMVZvNG9xR0FqUXRaVDdpMThkQnZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubFIMA0G
CSqGSIb3DQEBCwUAA4IBAQAO42bce5y5cGXih/Nu/IYyMhfmcqexDL1+FetxhFNS
TuI9wDmgqhLWbsZMQPBFcS2J91JRutpieTuafhNjqcoYJrIrNCD/JqwrzlLKsQAn
Ska4OOi+aYbwB1kWdJAI0CtRijRh78cn8jrabsQP4oO47cSKFavJqLyOaHmmTomM
/UnHLX7nwdJhdTjqB4Kd8+EiobiFcffPhVvjz8hc12KOblPcMf7KQ0G+Ab9Aaw32
KKnlqy0B15aKGK4JM+GyflGEK4ScoL3Tm/Jsmabwzl3RBim09U8zXTGG/Mmdm8tI
SPYK/ub7Pzc0XNJbIO+t1gCATmjbN4J5FLWKE5Ylp4L/
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:07 2025 by rpki-client