Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/1rm581qxLhd--ZUi0JVR0LPynog.roa
File: 1rm581qxLhd--ZUi0JVR0LPynog.roa (raw, json)
Hash identifier: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=
Subject key identifier: D6:B9:B9:F3:5A:B1:2E:17:7E:F9:95:22:D0:95:51:D0:B3:F2:9E:88
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 019422FB260767C9DBCD6D2C44D52C546A98
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/1rm581qxLhd--ZUi0JVR0LPynog.roa
Signing time: Wed 01 Jan 2025 17:47:52 +0000
ROA not before: Wed 01 Jan 2025 17:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62141
IP address blocks: 185.38.92.0/22 maxlen: 22
2a04:74c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:26:07:67:c9:db:cd:6d:2c:44:d5:2c:54:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6b9b9f35ab12e177ef99522d09551d0b3f29e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:80:00:e9:f7:e1:07:a1:f5:cb:3d:f7:6a:
47:4f:5c:1d:d9:b0:1e:f0:80:d3:b6:b7:3e:22:c5:
97:aa:c2:6d:0c:04:a9:08:f3:1d:44:f7:a2:3c:58:
79:f3:d8:be:41:00:02:ad:84:45:e3:28:13:e2:66:
1e:8f:e8:a2:1e:02:b6:55:99:e3:57:62:01:a1:bb:
cb:1f:b1:a4:f4:26:f7:1b:4f:e3:a6:a8:d1:a5:d8:
ce:93:eb:b0:05:db:46:53:ed:f4:2e:8e:89:93:da:
0d:b8:2f:da:26:a5:5c:54:db:c7:39:d7:1d:81:05:
01:78:69:d1:61:86:a7:1e:5d:b4:fd:06:ce:fc:da:
ae:a7:69:1b:08:75:f2:b7:42:07:fd:fd:cc:6b:2f:
8b:8f:e9:07:02:54:ce:db:e6:d2:61:38:52:94:a3:
c8:17:98:21:6c:a5:39:3f:7e:b8:8a:e4:26:70:82:
37:a4:63:03:2c:22:9e:b8:0d:56:d1:9f:93:d6:cc:
d2:49:87:d8:ec:5d:62:cf:3b:ef:5c:d2:01:48:5a:
f0:a1:08:bc:f6:44:ae:a5:92:98:08:5b:6d:49:dc:
45:e4:a3:20:44:64:da:0f:29:6e:09:e1:8a:47:ab:
08:48:0d:c7:3b:04:8e:5d:4f:b1:5e:e7:f9:10:65:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:B9:F3:5A:B1:2E:17:7E:F9:95:22:D0:95:51:D0:B3:F2:9E:88
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/1rm581qxLhd--ZUi0JVR0LPynog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.92.0/22
IPv6:
2a04:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:b7:7d:d1:19:9b:6a:85:21:33:a5:1f:ae:7f:0d:1f:6e:65:
43:bc:8d:67:59:ac:5f:e9:93:96:15:a5:4c:aa:dc:67:d3:26:
2c:6f:2b:b7:6c:3f:df:70:e2:ed:19:6f:60:5d:f9:64:7a:29:
10:bc:66:8b:db:47:4e:8f:71:dd:b3:f6:be:df:ec:1b:9c:76:
cc:8c:9e:97:a2:5a:c4:6c:cf:94:b8:e9:f6:ee:03:00:85:03:
85:2d:85:96:00:21:88:50:18:73:95:ea:b2:86:10:e7:21:d5:
b2:1a:8b:ca:73:8d:86:63:cb:12:86:8a:43:6c:56:67:2a:ed:
59:3f:42:2a:7a:27:f3:a1:84:69:61:32:28:6d:36:9b:2b:de:
48:00:56:a6:85:52:21:4b:a0:50:9e:4f:85:19:17:7f:f9:64:
12:2e:9e:8c:1d:11:85:d2:6e:55:5b:eb:fc:cb:a3:57:56:cd:
fa:2a:96:1e:9c:6b:8a:e0:e1:a2:23:8f:6f:5f:6f:56:0a:51:
54:a1:4e:d8:8f:28:01:68:b7:db:1d:ea:73:b3:b9:29:ef:5e:
c4:38:02:36:5f:f5:63:d7:6d:fb:3e:be:5e:f7:d4:c4:6a:71:
92:b8:73:08:d3:b8:b7:a4:ce:5e:60:51:f5:30:98:73:45:aa:
fb:f0:76:af
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQi+yYHZ8nbzW0sRNUsVGqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz
ZmIyOGIwHhcNMjUwMTAxMTc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmI5YjlmMzVhYjEyZTE3N2VmOTk1MjJkMDk1NTFkMGIzZjI5ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7uAAOn34Qeh9cs992pHT1wd2bAe
8IDTtrc+IsWXqsJtDASpCPMdRPeiPFh589i+QQACrYRF4ygT4mYej+iiHgK2VZnj
V2IBobvLH7Gk9Cb3G0/jpqjRpdjOk+uwBdtGU+30Lo6Jk9oNuC/aJqVcVNvHOdcd
gQUBeGnRYYanHl20/QbO/Nqup2kbCHXyt0IH/f3May+Lj+kHAlTO2+bSYThSlKPI
F5ghbKU5P364iuQmcII3pGMDLCKeuA1W0Z+T1szSSYfY7F1izzvvXNIBSFrwoQi8
9kSupZKYCFttSdxF5KMgRGTaDyluCeGKR6sISA3HOwSOXU+xXuf5EGWwsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNa5ufNasS4XfvmVItCVUdCz8p6IMB8GA1UdIwQY
MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt
N2Y2NzQ0MmY5ZjMyLzEvMXJtNTgxcXhMaGQtLVpVaTBKVlIwTFB5bm9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMtN2Y2NzQ0MmY5ZjMy
LzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSZcMA0E
AgACMAcDBQMqBHTAMA0GCSqGSIb3DQEBCwUAA4IBAQB/t33RGZtqhSEzpR+ufw0f
bmVDvI1nWaxf6ZOWFaVMqtxn0yYsbyu3bD/fcOLtGW9gXflkeikQvGaL20dOj3Hd
s/a+3+wbnHbMjJ6XolrEbM+UuOn27gMAhQOFLYWWACGIUBhzleqyhhDnIdWyGovK
c42GY8sShopDbFZnKu1ZP0IqeifzoYRpYTIobTabK95IAFamhVIhS6BQnk+FGRd/
+WQSLp6MHRGF0m5VW+v8y6NXVs36KpYenGuK4OGiI49vX29WClFUoU7YjygBaLfb
Hepzs7kp717EOAI2X/Vj1237Pr5e99TEanGSuHMI07i3pM5eYFH1MJhzRar78Hav
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:37:46 2025 by rpki-client