Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/hJ5sZUOMGApiiMH37Q-gblMKBjo.roa
File: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (raw, json)
Hash identifier: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=
Subject key identifier: 84:9E:6C:65:43:8C:18:0A:62:88:C1:F7:ED:0F:A0:6E:53:0A:06:3A
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 019424B37AB08A7CFD47F7A55BB05DAA717D
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/hJ5sZUOMGApiiMH37Q-gblMKBjo.roa
Signing time: Thu 02 Jan 2025 01:48:49 +0000
ROA not before: Thu 02 Jan 2025 01:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21277
IP address blocks: 185.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7a:b0:8a:7c:fd:47:f7:a5:5b:b0:5d:aa:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=849e6c65438c180a6288c1f7ed0fa06e530a063a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:33:28:cf:93:f2:91:0c:35:07:1a:f1:2a:
45:35:f3:fd:b2:26:b3:ba:3f:6c:c8:77:f7:ca:73:
a3:e4:0a:ef:eb:8e:c1:ce:65:d8:65:69:d1:14:42:
54:f8:65:7b:cd:b2:8a:e1:c2:11:b0:28:4f:f2:64:
d6:4a:26:ce:1a:85:de:04:a2:73:3b:d4:3d:6d:62:
f3:48:2c:16:dd:2b:49:6a:7d:b5:53:70:75:a0:49:
59:12:99:d4:89:80:be:ea:7e:c3:cf:6f:1b:04:1b:
fe:ad:6c:e0:f0:78:df:fe:29:2c:fe:b5:14:e9:96:
fb:fe:42:27:88:6f:2d:35:7d:e7:86:6b:8d:fa:34:
b3:dc:e6:9f:4e:2b:ad:ac:83:8e:04:70:1c:45:0a:
91:a4:6f:7b:02:04:ce:2c:5d:8e:97:70:bd:c0:18:
9c:45:13:dd:09:5d:25:21:ca:db:9b:01:90:45:92:
80:23:f2:8a:1e:8e:88:5c:8a:f5:1d:93:3c:29:87:
c7:42:e2:02:93:85:2c:55:45:10:88:38:74:69:cb:
99:99:ad:1f:d2:98:8b:51:8c:7f:c4:af:fc:d0:d1:
0f:76:f9:f4:03:79:d7:73:7b:d5:9e:49:27:55:be:
36:7d:ca:3f:7d:75:36:d1:88:d3:cf:76:c0:e1:2f:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:6C:65:43:8C:18:0A:62:88:C1:F7:ED:0F:A0:6E:53:0A:06:3A
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/hJ5sZUOMGApiiMH37Q-gblMKBjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:c7:c1:dd:3f:a1:57:51:06:5f:95:3f:6a:19:ef:ed:53:a8:
f1:63:59:da:bd:56:71:90:f2:a5:c7:a7:e9:dd:b7:27:d7:4b:
03:5e:d3:1c:e4:8d:60:b8:5a:70:a4:77:e9:6d:be:27:be:fe:
e5:1c:77:18:46:f8:90:c4:c4:45:38:28:99:dc:96:fa:2e:52:
c4:76:ad:5c:f1:62:a8:a5:8a:7f:93:8d:bf:9f:27:fc:9b:e5:
91:34:c5:9c:d9:f1:1d:ee:e4:7b:ca:ce:e1:aa:e7:ac:f1:a0:
38:f3:0f:3d:c7:5e:96:03:46:ec:db:9b:a8:5c:7d:a2:25:52:
05:28:31:60:23:6c:2f:3e:76:87:c0:dd:77:bb:f0:6d:c2:b8:
02:3d:2e:89:72:1d:15:4c:36:71:27:cf:28:3e:56:45:2f:6a:
2b:00:8c:b4:71:cc:f2:4d:ca:38:6f:fe:8d:2d:98:0a:42:cd:
be:97:0d:e3:1b:d7:b6:c3:b6:8f:56:a5:de:3d:ee:8a:c6:72:
fc:a2:01:6e:58:87:b5:51:12:27:c0:58:92:e1:c1:a4:ae:c2:
95:54:cb:75:5f:00:a1:9b:ed:6c:42:d3:6b:dc:2a:e8:65:6f:
29:85:53:9f:7d:78:b3:71:de:34:ba:7f:50:3c:b5:a4:08:31:
73:b3:80:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks3qwinz9R/elW7BdqnF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz
MmMxZGQwHhcNMjUwMTAyMDE0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDllNmM2NTQzOGMxODBhNjI4OGMxZjdlZDBmYTA2ZTUzMGEwNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhszKM+T8pEMNQca8SpFNfP9siaz
uj9syHf3ynOj5Arv647BzmXYZWnRFEJU+GV7zbKK4cIRsChP8mTWSibOGoXeBKJz
O9Q9bWLzSCwW3StJan21U3B1oElZEpnUiYC+6n7Dz28bBBv+rWzg8Hjf/iks/rUU
6Zb7/kIniG8tNX3nhmuN+jSz3OafTiutrIOOBHAcRQqRpG97AgTOLF2Ol3C9wBic
RRPdCV0lIcrbmwGQRZKAI/KKHo6IXIr1HZM8KYfHQuICk4UsVUUQiDh0acuZma0f
0piLUYx/xK/80NEPdvn0A3nXc3vVnkknVb42fco/fXU20YjTz3bA4S/JrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISebGVDjBgKYojB9+0PoG5TCgY6MB8GA1UdIwQY
MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt
ZGNlM2ZhM2ZiYWU5LzEvaEo1c1pVT01HQXBpaU1IMzdRLWdibE1LQmpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5
LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSIQMA0G
CSqGSIb3DQEBCwUAA4IBAQC7x8HdP6FXUQZflT9qGe/tU6jxY1navVZxkPKlx6fp
3bcn10sDXtMc5I1guFpwpHfpbb4nvv7lHHcYRviQxMRFOCiZ3Jb6LlLEdq1c8WKo
pYp/k42/nyf8m+WRNMWc2fEd7uR7ys7hques8aA48w89x16WA0bs25uoXH2iJVIF
KDFgI2wvPnaHwN13u/BtwrgCPS6Jch0VTDZxJ88oPlZFL2orAIy0cczyTco4b/6N
LZgKQs2+lw3jG9e2w7aPVqXePe6KxnL8ogFuWIe1URInwFiS4cGkrsKVVMt1XwCh
m+1sQtNr3CroZW8phVOffXizcd40un9QPLWkCDFzs4Dd
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:02:42 2025 by rpki-client