Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RkHThSrRSDxmMgwKN5T7KkujozI.roa
File: RkHThSrRSDxmMgwKN5T7KkujozI.roa (raw, json)
Hash identifier: ga45HQQxc68GFa+EjLb6/34TV8xcSZJcNdsMUPgqKXQ=
Subject key identifier: 46:41:D3:85:2A:D1:48:3C:66:32:0C:0A:37:94:FB:2A:4B:A3:A3:32
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F085A1D7CE3F44F27D9EA12B6E5CD
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RkHThSrRSDxmMgwKN5T7KkujozI.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205129
IP address blocks: 85.187.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:08:5a:1d:7c:e3:f4:4f:27:d9:ea:12:b6:e5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4641d3852ad1483c66320c0a3794fb2a4ba3a332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:4c:1a:8c:a4:4a:4f:52:05:02:6a:c4:80:
f3:dd:c0:c9:36:d2:a6:67:e2:7f:47:61:99:bd:fa:
07:81:b3:1a:cd:12:80:25:f3:b5:9a:57:23:fe:93:
b9:a4:54:9e:5f:ef:fd:08:f1:0c:c8:90:8d:66:c4:
27:31:26:9e:4d:9d:bc:73:e0:d9:3d:63:56:69:a7:
f4:04:9d:8f:d1:82:cd:21:aa:20:13:9d:ab:93:d4:
8d:ef:3b:b3:a2:d2:ee:4a:2a:c6:fd:3d:73:6e:46:
27:b7:55:91:7e:03:ee:b3:70:6e:01:e1:ab:d4:fe:
6a:26:c5:ee:b3:20:7a:33:36:84:16:bc:23:b6:68:
1c:0c:0b:5f:9a:df:8b:90:7e:a3:2c:df:b9:4a:c8:
88:44:58:e6:48:d2:d0:3a:3b:04:22:11:ea:2a:f1:
95:2c:e5:32:88:81:eb:b7:05:07:ce:72:06:a0:60:
d0:f9:77:40:5e:45:a2:9e:e8:63:59:09:f4:02:cb:
26:2f:61:11:f9:27:23:ba:a8:c3:8f:09:7f:35:f4:
23:8a:f5:8b:df:7d:bb:41:f1:f8:be:16:2f:b6:3a:
80:11:7d:90:ab:a1:24:69:8d:7c:80:8e:1c:ba:ff:
a3:39:81:45:55:55:7b:c3:b1:5b:19:9a:23:46:8d:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:D3:85:2A:D1:48:3C:66:32:0C:0A:37:94:FB:2A:4B:A3:A3:32
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RkHThSrRSDxmMgwKN5T7KkujozI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.48.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:a5:81:33:79:c3:97:3c:e1:72:a7:51:da:dd:34:d5:4f:a3:
92:7b:cc:4f:c9:63:ad:9a:ef:93:90:f3:03:35:f8:1c:67:0a:
40:37:cf:46:52:e1:32:a2:92:dc:01:e0:32:39:e5:b6:42:cb:
95:35:0a:3c:cc:2a:1b:1d:08:b7:d5:4d:ce:d1:9a:0b:92:db:
fb:8b:2b:f3:49:43:dc:6d:18:8b:83:a0:85:39:13:3c:4b:f4:
85:5d:77:f6:b9:96:66:58:23:5e:1c:ad:0f:88:de:1d:87:d8:
70:84:83:a8:bf:91:19:6d:ec:32:37:49:a2:80:81:a5:b6:6c:
ef:18:8b:80:ff:b7:b7:aa:96:e2:43:a9:e9:10:d4:eb:2b:9d:
2c:a9:40:d2:eb:94:2d:d3:aa:a2:53:19:83:e7:b0:a8:68:3e:
f3:47:91:e0:fa:de:9c:08:58:7f:c7:73:81:a8:c2:77:28:c7:
ba:c8:8b:b4:5d:f0:16:8d:1f:d8:88:e1:c2:02:d5:c3:ce:eb:
12:7a:36:4e:5f:8a:94:12:9a:5d:4e:40:b6:a2:8b:86:fe:93:
7f:ad:22:a3:30:6d:ec:61:28:30:c4:94:c4:a5:18:75:33:92:
d0:7d:2c:a9:66:75:80:73:5c:e3:96:01:46:6a:d1:50:49:d0:
ba:9b:e4:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwhaHXzj9E8n2eoStuXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjQxZDM4NTJhZDE0ODNjNjYzMjBjMGEzNzk0ZmIyYTRiYTNhMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2xMGoykSk9SBQJqxIDz3cDJNtKm
Z+J/R2GZvfoHgbMazRKAJfO1mlcj/pO5pFSeX+/9CPEMyJCNZsQnMSaeTZ28c+DZ
PWNWaaf0BJ2P0YLNIaogE52rk9SN7zuzotLuSirG/T1zbkYnt1WRfgPus3BuAeGr
1P5qJsXusyB6MzaEFrwjtmgcDAtfmt+LkH6jLN+5SsiIRFjmSNLQOjsEIhHqKvGV
LOUyiIHrtwUHznIGoGDQ+XdAXkWinuhjWQn0AssmL2ER+ScjuqjDjwl/NfQjivWL
3327QfH4vhYvtjqAEX2Qq6EkaY18gI4cuv+jOYFFVVV7w7FbGZojRo0eWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZB04Uq0Ug8ZjIMCjeU+ypLo6MyMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvUmtIVGhTclJTRHhtTWd3S041VDdLa3Vqb3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVbswMA0G
CSqGSIb3DQEBCwUAA4IBAQDSpYEzecOXPOFyp1Ha3TTVT6OSe8xPyWOtmu+TkPMD
NfgcZwpAN89GUuEyopLcAeAyOeW2QsuVNQo8zCobHQi31U3O0ZoLktv7iyvzSUPc
bRiLg6CFORM8S/SFXXf2uZZmWCNeHK0PiN4dh9hwhIOov5EZbewyN0migIGltmzv
GIuA/7e3qpbiQ6npENTrK50sqUDS65Qt06qiUxmD57CoaD7zR5Hg+t6cCFh/x3OB
qMJ3KMe6yIu0XfAWjR/YiOHCAtXDzusSejZOX4qUEppdTkC2oouG/pN/rSKjMG3s
YSgwxJTEpRh1M5LQfSypZnWAc1zjlgFGatFQSdC6m+Sn
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:11 2025 by rpki-client