Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/M88xu916DJztKa4c-i6K4yHUB5w.roa
File: M88xu916DJztKa4c-i6K4yHUB5w.roa (raw, json)
Hash identifier: 5HYPXGmaoWdCq+1nzzmubtO19nHMQ7tpW3/V2rBP2vY=
Subject key identifier: 33:CF:31:BB:DD:7A:0C:9C:ED:29:AE:1C:FA:2E:8A:E3:21:D4:07:9C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D730DE68A72DC3D9AA299E43378FA8
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/M88xu916DJztKa4c-i6K4yHUB5w.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 185.125.50.0/24 maxlen: 24
2a0e:d604:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:30:de:68:a7:2d:c3:d9:aa:29:9e:43:37:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33cf31bbdd7a0c9ced29ae1cfa2e8ae321d4079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:46:76:59:9a:55:2f:e7:02:7a:b5:a0:c7:
3f:20:32:d3:6a:01:49:a8:ae:76:b9:c5:64:16:da:
42:69:2e:29:99:09:ad:01:cc:10:eb:e0:33:93:65:
98:0a:bf:06:4c:40:ed:81:75:a9:dc:df:2e:5e:e0:
dd:bd:48:f8:5e:fc:35:ab:63:98:3c:7c:d4:27:39:
ea:9b:fb:eb:7a:6d:8c:e0:76:db:81:bb:62:c9:a3:
f2:b4:17:67:cc:71:a6:58:2f:5a:23:79:e7:1a:a1:
a1:25:fd:46:9c:d9:b3:87:f7:10:41:e6:3e:c2:30:
7f:22:92:e8:ff:df:5e:28:5c:69:13:fd:d6:5c:89:
3f:c0:4e:47:d6:61:b4:f2:b0:12:1f:4d:50:96:82:
6b:97:aa:65:49:44:37:3e:56:35:a5:43:97:57:07:
41:38:f9:78:bb:bf:93:69:39:95:3e:08:fe:e6:52:
f4:bd:1d:7b:2a:ac:66:ed:2d:02:7f:c3:b7:1b:39:
aa:97:39:2a:08:c3:bf:07:a9:53:68:14:1d:bc:91:
9c:d1:56:9e:72:3d:7f:48:e4:eb:d4:10:ff:b2:c8:
2b:6d:d7:58:00:a8:c1:f3:da:a5:6d:1a:23:d5:78:
f8:9c:bd:77:59:67:7e:89:3b:14:a0:11:13:26:9d:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:31:BB:DD:7A:0C:9C:ED:29:AE:1C:FA:2E:8A:E3:21:D4:07:9C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/M88xu916DJztKa4c-i6K4yHUB5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.50.0/24
IPv6:
2a0e:d604:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:40:03:0c:07:11:b6:ad:8d:db:20:ce:fe:fb:0e:62:fa:7e:
2f:71:4e:58:66:39:63:01:f1:65:40:0e:2a:1e:c4:c8:42:2c:
d9:e4:4f:c3:53:aa:52:1b:8d:14:7b:ac:b8:08:87:06:27:7c:
b2:9a:58:b2:73:c8:95:ac:aa:fa:68:16:ac:b9:8e:67:db:0f:
61:90:bb:a6:68:57:11:0a:59:22:5a:7b:ba:6f:24:9e:5f:c2:
b8:0e:e7:11:4e:09:37:5e:79:4d:e9:35:e5:29:3f:c6:5e:9e:
6e:49:d0:16:d9:cc:57:21:d4:33:c2:61:d7:2a:1a:41:8b:2e:
29:91:a9:99:f7:77:fd:52:c2:ad:ed:3b:d4:3e:18:39:a9:73:
a5:d0:b7:37:bc:f0:42:13:b3:9e:d6:68:4e:8c:2c:ab:b0:e4:
28:ac:0f:10:7c:67:4b:d2:a4:f4:1b:e5:8b:07:7f:df:88:65:
ce:22:36:82:36:76:61:08:d2:ed:d7:53:bd:38:18:06:64:82:
c6:28:ea:02:44:7d:00:66:99:12:8f:b0:5d:3e:a3:a0:9d:87:
eb:9f:8c:0f:5d:4b:c7:a2:d7:c3:37:4d:13:5e:24:88:eb:a8:
1f:27:26:bb:93:7b:a0:8b:56:dd:10:bf:ad:0d:1e:57:38:8a:
0e:8c:6d:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQj1zDeaKctw9mqKZ5DN4+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2NmMzFiYmRkN2EwYzljZWQyOWFlMWNmYTJlOGFlMzIxZDQwNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8tGdlmaVS/nAnq1oMc/IDLTagFJ
qK52ucVkFtpCaS4pmQmtAcwQ6+Azk2WYCr8GTEDtgXWp3N8uXuDdvUj4Xvw1q2OY
PHzUJznqm/vrem2M4HbbgbtiyaPytBdnzHGmWC9aI3nnGqGhJf1GnNmzh/cQQeY+
wjB/IpLo/99eKFxpE/3WXIk/wE5H1mG08rASH01QloJrl6plSUQ3PlY1pUOXVwdB
OPl4u7+TaTmVPgj+5lL0vR17Kqxm7S0Cf8O3GzmqlzkqCMO/B6lTaBQdvJGc0Vae
cj1/SOTr1BD/ssgrbddYAKjB89qlbRoj1Xj4nL13WWd+iTsUoBETJp0hEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDPPMbvdegyc7SmuHPouiuMh1AecMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvTTg4eHU5MTZESnp0S2E0Yy1pNks0eUhVQjV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuX0yMA8E
AgACMAkDBwAqDtYEAAEwDQYJKoZIhvcNAQELBQADggEBAG9AAwwHEbatjdsgzv77
DmL6fi9xTlhmOWMB8WVADioexMhCLNnkT8NTqlIbjRR7rLgIhwYnfLKaWLJzyJWs
qvpoFqy5jmfbD2GQu6ZoVxEKWSJae7pvJJ5fwrgO5xFOCTdeeU3pNeUpP8Zenm5J
0BbZzFch1DPCYdcqGkGLLimRqZn3d/1Swq3tO9Q+GDmpc6XQtze88EITs57WaE6M
LKuw5CisDxB8Z0vSpPQb5YsHf9+IZc4iNoI2dmEI0u3XU704GAZkgsYo6gJEfQBm
mRKPsF0+o6Cdh+ufjA9dS8ei18M3TRNeJIjrqB8nJruTe6CLVt0Qv60NHlc4ig6M
bZI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:57 2025 by rpki-client