Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa
File: sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa (raw, json)
Hash identifier: 7SLV5glKGePLniqHW9rAB95C/r7wSCzkCmA4YMo9QI0=
Subject key identifier: B1:2A:73:8C:70:FC:8E:E1:05:C2:60:15:27:EF:64:64:36:93:D5:E9
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01944B88B8F44B6EC8AF94F1418BEAC868FC
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa
Signing time: Thu 09 Jan 2025 14:47:18 +0000
ROA not before: Thu 09 Jan 2025 14:47:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 185.183.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:88:b8:f4:4b:6e:c8:af:94:f1:41:8b:ea:c8:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 9 14:47:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b12a738c70fc8ee105c2601527ef64643693d5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:ee:fc:3a:59:bc:42:de:7f:8a:24:ce:67:
f7:b9:3b:02:08:6a:05:94:41:de:d0:4a:7a:c2:1f:
a9:0c:17:a8:04:23:2f:0a:17:7b:24:83:0c:8e:dc:
0d:02:b1:41:81:c1:e7:76:3d:b9:de:e1:cc:12:12:
c9:ab:e9:d3:dd:5a:f6:32:7b:ff:ae:a8:f9:c9:06:
b2:16:8a:19:b8:e5:44:e4:f3:4b:8a:c1:7a:94:1a:
3c:27:bd:8c:41:4a:f8:2f:bc:58:1b:b5:c1:72:d8:
f9:be:3b:ae:bb:9b:91:67:41:0c:ff:cd:21:f7:66:
eb:35:f1:4a:e0:70:7f:5e:e6:a3:61:70:cc:59:07:
ba:47:e8:10:e2:43:21:a7:4a:7c:92:e5:d8:21:98:
73:7c:99:b6:13:ed:e9:b1:0a:54:3c:3a:bc:69:b6:
c5:92:34:4f:50:8d:40:7c:9b:2f:86:24:02:a0:64:
fa:bb:dd:0c:21:44:90:2b:6a:a1:6e:76:de:ec:be:
6a:d9:a7:02:e4:39:79:f5:3c:99:39:2b:f0:f9:35:
2d:74:a2:81:0d:5a:f9:27:8d:a0:7e:70:a3:67:af:
07:2e:8b:2f:3a:3d:a3:cf:c9:f9:e5:6a:d9:ea:e2:
c3:d8:f3:a2:72:dd:2c:56:70:e9:3c:72:60:ed:6a:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:73:8C:70:FC:8E:E1:05:C2:60:15:27:EF:64:64:36:93:D5:E9
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:30:21:47:33:65:03:75:ee:9b:e8:4b:9a:18:1d:ca:d2:26:
91:5c:ea:38:eb:99:96:71:09:75:d9:f5:70:d8:2e:d4:4f:9c:
2a:2d:05:5a:53:af:6a:2a:5c:78:7b:8d:b9:88:34:95:24:4c:
f6:20:5a:db:48:ca:d6:d6:bb:21:ab:62:f5:d8:06:1e:7f:b4:
6d:4b:c6:0a:21:6f:e4:c6:f0:53:9b:98:47:2a:be:09:5f:bb:
e6:1f:1e:64:16:f2:77:7b:5f:81:5e:44:8e:0e:e5:02:cc:bb:
eb:84:fd:fb:65:5c:48:2b:3a:c1:51:2b:7e:01:c7:d1:40:ab:
76:5d:31:ff:8d:df:ea:4f:8a:1e:8f:20:4e:07:cb:6b:82:fc:
9c:b7:c8:a2:68:b0:f3:87:9b:f2:2a:f5:ec:b0:38:04:6f:56:
2d:15:79:bf:1a:79:e3:aa:55:15:06:cf:c5:36:e7:b2:8c:9b:
61:b2:d7:0e:3c:ae:8b:f9:4c:4b:0d:19:a7:e2:c0:28:d4:7c:
13:8c:f6:c4:d0:b9:1d:a6:5d:b2:bc:fc:2a:57:8e:a1:e1:16:
5f:20:ff:64:da:cb:06:7d:57:45:49:96:d5:fa:c9:38:c2:e1:
2c:c9:c1:75:c7:9a:c9:f9:5d:08:c5:cc:6e:b6:98:99:19:63:
9d:77:fd:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRLiLj0S27Ir5TxQYvqyGj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi
M2Y4MjUwHhcNMjUwMTA5MTQ0NzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTJhNzM4YzcwZmM4ZWUxMDVjMjYwMTUyN2VmNjQ2NDM2OTNkNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuru/DpZvELef4okzmf3uTsCCGoF
lEHe0Ep6wh+pDBeoBCMvChd7JIMMjtwNArFBgcHndj253uHMEhLJq+nT3Vr2Mnv/
rqj5yQayFooZuOVE5PNLisF6lBo8J72MQUr4L7xYG7XBctj5vjuuu5uRZ0EM/80h
92brNfFK4HB/XuajYXDMWQe6R+gQ4kMhp0p8kuXYIZhzfJm2E+3psQpUPDq8abbF
kjRPUI1AfJsvhiQCoGT6u90MIUSQK2qhbnbe7L5q2acC5Dl59TyZOSvw+TUtdKKB
DVr5J42gfnCjZ68HLosvOj2jz8n55WrZ6uLD2POict0sVnDpPHJg7WqedQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEqc4xw/I7hBcJgFSfvZGQ2k9XpMB8GA1UdIwQY
MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt
MDUxMDc2NzQ0YTY1LzEvc1NwempIRDhqdUVGd21BVkotOWtaRGFUMWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1
LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubf0MA0G
CSqGSIb3DQEBCwUAA4IBAQCjMCFHM2UDde6b6EuaGB3K0iaRXOo465mWcQl12fVw
2C7UT5wqLQVaU69qKlx4e425iDSVJEz2IFrbSMrW1rshq2L12AYef7RtS8YKIW/k
xvBTm5hHKr4JX7vmHx5kFvJ3e1+BXkSODuUCzLvrhP37ZVxIKzrBUSt+AcfRQKt2
XTH/jd/qT4oejyBOB8trgvyct8iiaLDzh5vyKvXssDgEb1YtFXm/GnnjqlUVBs/F
NueyjJthstcOPK6L+UxLDRmn4sAo1HwTjPbE0Lkdpl2yvPwqV46h4RZfIP9k2ssG
fVdFSZbV+sk4wuEsycF1x5rJ+V0IxcxutpiZGWOdd/3F
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:03 2025 by rpki-client