Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/kH7H7auuv6q7VTDiT7be_vcY-1Q.roa
File: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (raw, json)
Hash identifier: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=
Subject key identifier: 90:7E:C7:ED:AB:AE:BF:AA:BB:55:30:E2:4F:B6:DE:FE:F7:18:FB:54
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 019422FB80EBC8768C20FF919EB949F889D0
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/kH7H7auuv6q7VTDiT7be_vcY-1Q.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.129.16.0/24 maxlen: 24
185.129.17.0/24 maxlen: 24
185.231.108.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
2a0f:aac0::/48 maxlen: 48
2a0f:aac0:1::/48 maxlen: 48
2a0f:aac0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:80:eb:c8:76:8c:20:ff:91:9e:b9:49:f8:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=907ec7edabaebfaabb5530e24fb6defef718fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:84:ce:69:51:70:6b:87:af:0c:86:c4:2f:
31:c3:78:9e:06:fe:71:18:e7:71:52:1d:6c:d7:4f:
b0:6d:c7:3f:ae:3d:b1:fd:32:e8:6a:51:5f:b7:29:
e9:96:e2:06:bb:4c:39:d3:34:47:c1:57:23:33:c1:
b3:52:e7:da:ed:e8:4b:2d:d5:40:1b:25:4d:de:0f:
46:e1:3d:26:d3:39:57:2c:75:fa:af:43:61:9e:7f:
13:bc:b5:5f:4a:77:0f:07:a3:30:75:32:7f:64:1f:
3b:2e:69:8c:f9:3a:32:d0:66:d6:96:8d:f4:d3:d4:
2c:06:d2:1a:99:83:5d:ff:02:f9:02:2f:ed:16:58:
73:0e:3d:fd:56:eb:b9:d0:a8:0f:53:0b:ba:af:6a:
50:13:19:c9:2d:73:6a:a1:50:e6:75:47:c6:20:9c:
6e:f9:d5:42:96:43:e3:67:cc:9f:7d:41:c4:f1:6a:
d6:24:a7:3d:0b:03:a7:c7:b6:ee:4e:66:71:f8:b4:
26:1c:28:e9:61:62:fe:b6:06:bd:fb:61:81:5f:00:
dc:7a:da:44:9f:38:ea:1b:2d:57:6b:d9:27:aa:b3:
f2:5e:29:4f:d8:dd:67:9b:80:7e:ff:10:cd:3c:8a:
b8:fe:d2:23:5f:bf:a3:1f:1f:da:f8:e7:32:5b:15:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7E:C7:ED:AB:AE:BF:AA:BB:55:30:E2:4F:B6:DE:FE:F7:18:FB:54
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/kH7H7auuv6q7VTDiT7be_vcY-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.16.0/23
185.231.108.0/23
IPv6:
2a0f:aac0::-2a0f:aac0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:42:15:fb:f8:32:22:01:a5:a4:56:63:24:cd:3d:fb:ef:52:
dd:f2:af:4f:d0:d5:7e:31:0a:0d:23:e1:76:6e:b9:3f:90:40:
ff:2e:22:ad:67:9b:fd:44:71:50:8f:a5:c0:0b:96:5f:96:01:
a0:d0:51:ed:8e:d2:10:c2:8b:10:46:06:80:7f:22:a8:a4:2a:
2c:ea:96:36:d5:0c:a6:bf:1c:5c:64:b2:57:80:a5:6e:9b:ed:
e6:75:f4:a2:7f:fe:fe:99:73:7e:d3:ca:d1:37:53:05:60:f6:
0e:c4:17:e6:03:6d:5e:54:c8:6f:a5:af:e9:8e:36:50:da:cd:
67:29:40:f5:40:4c:bd:6f:ca:24:ab:a8:87:23:0d:fc:df:f0:
87:ac:09:af:c8:8d:ae:1c:dc:a3:d5:b8:eb:57:bc:cc:80:d9:
b3:fa:f6:40:2b:4f:5e:93:8e:4a:17:03:3f:3a:ad:bc:20:5d:
20:f8:36:44:1a:64:de:42:e4:91:c7:ec:7a:a3:6c:92:e9:55:
06:91:b1:ba:19:dd:bd:8a:fc:a7:70:f7:5d:fd:ea:59:d5:60:
57:18:4d:95:df:ca:ab:fb:fa:34:00:43:64:71:d8:dd:3e:00:
54:6b:5e:2a:80:b3:f3:47:0d:79:96:5c:39:45:22:64:a3:c8:
35:8d:52:d1
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQi+4DryHaMIP+RnrlJ+InQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTIwODVjN2RlM2I1OTgyMTZiODlmYjBmMmIxZDkzMGRl
NjZjMTkwHhcNMjUwMTAxMTc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDdlYzdlZGFiYWViZmFhYmI1NTMwZTI0ZmI2ZGVmZWY3MThmYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk22EzmlRcGuHrwyGxC8xw3ieBv5x
GOdxUh1s10+wbcc/rj2x/TLoalFftynpluIGu0w50zRHwVcjM8GzUufa7ehLLdVA
GyVN3g9G4T0m0zlXLHX6r0Nhnn8TvLVfSncPB6MwdTJ/ZB87LmmM+Toy0GbWlo30
09QsBtIamYNd/wL5Ai/tFlhzDj39Vuu50KgPUwu6r2pQExnJLXNqoVDmdUfGIJxu
+dVClkPjZ8yffUHE8WrWJKc9CwOnx7buTmZx+LQmHCjpYWL+tga9+2GBXwDcetpE
nzjqGy1Xa9knqrPyXilP2N1nm4B+/xDNPIq4/tIjX7+jHx/a+OcyWxUa3QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJB+x+2rrr+qu1Uw4k+23v73GPtUMB8GA1UdIwQY
MBaAFLSiCFx947WYIWuJ+w8rHZMN5mwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAt
MzExNzk4OTYwMWFkLzEva0g3SDdhdXV2NnE3VlREaVQ3YmVfdmNZLTFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNjUxM2QtMmQ1My00MDIyLTgzNjAtMzExNzk4OTYwMWFk
LzEvdEtJSVhIM2p0WmdoYTRuN0R5c2RrdzNtYkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBuYEQAwQB
uedsMBgEAgACMBIwEAMFBioPqsADBwAqD6rAAAIwDQYJKoZIhvcNAQELBQADggEB
AIFCFfv4MiIBpaRWYyTNPfvvUt3yr0/Q1X4xCg0j4XZuuT+QQP8uIq1nm/1EcVCP
pcALll+WAaDQUe2O0hDCixBGBoB/IqikKizqljbVDKa/HFxksleApW6b7eZ19KJ/
/v6Zc37TytE3UwVg9g7EF+YDbV5UyG+lr+mONlDazWcpQPVATL1vyiSrqIcjDfzf
8IesCa/Ija4c3KPVuOtXvMyA2bP69kArT16TjkoXAz86rbwgXSD4NkQaZN5C5JHH
7HqjbJLpVQaRsboZ3b2K/Kdw91396lnVYFcYTZXfyqv7+jQAQ2Rx2N0+AFRrXiqA
s/NHDXmWXDlFImSjyDWNUtE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:35 2025 by rpki-client