Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AWakOuGdGOJYk21Z8bs_GLX2JBQ.roa
File: AWakOuGdGOJYk21Z8bs_GLX2JBQ.roa (raw, json)
Hash identifier: KUSAoXUK8UUhZbzcCdKooiqTdFa/OGlTBKo4rjfjTVA=
Subject key identifier: 01:66:A4:3A:E1:9D:18:E2:58:93:6D:59:F1:BB:3F:18:B5:F6:24:14
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01959FA9586656630FC38F9C87CB9B2703A8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AWakOuGdGOJYk21Z8bs_GLX2JBQ.roa
Signing time: Sun 16 Mar 2025 15:53:50 +0000
ROA not before: Sun 16 Mar 2025 15:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.210.235.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:a9:58:66:56:63:0f:c3:8f:9c:87:cb:9b:27:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 16 15:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0166a43ae19d18e258936d59f1bb3f18b5f62414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:dd:ec:9d:55:26:d7:4b:9f:ec:c7:31:47:
8c:0e:bf:34:28:ed:01:60:77:98:b9:68:ab:5e:3d:
a9:06:ea:cd:62:a7:92:3a:78:b0:24:20:9e:a6:a6:
94:c0:52:74:ab:e7:97:84:6f:42:9c:fc:00:fc:66:
4d:d8:3a:52:e9:a4:e9:2f:61:af:3e:ae:a8:0f:57:
44:3d:bc:2b:e4:47:04:34:53:e8:ff:e6:23:9e:fd:
15:85:15:64:06:c6:b3:82:36:5c:cd:f9:63:35:17:
1c:64:6d:4d:92:62:2c:1e:5e:a7:e4:45:16:50:43:
c2:e6:f4:e5:5f:09:3b:d1:cd:aa:4e:77:f2:5d:ef:
aa:5c:af:08:cc:72:61:df:24:cd:75:a9:b7:eb:58:
90:1a:9b:2b:27:ac:c7:fe:32:da:ef:ca:f4:18:4b:
5f:25:44:31:a8:40:c0:6a:01:cd:e2:95:e9:cb:0b:
3e:29:2d:6a:20:53:36:be:b3:78:3f:c8:3a:f9:3a:
53:dc:0c:ed:34:eb:3e:3d:ae:1c:b1:55:33:26:01:
da:5f:b2:e3:6e:25:d6:84:d1:a9:64:47:cf:fc:2b:
33:b0:10:2a:01:11:26:88:2a:fa:b9:1b:63:7c:49:
17:13:99:6f:a9:55:07:5f:85:10:f9:0d:5a:66:3c:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:A4:3A:E1:9D:18:E2:58:93:6D:59:F1:BB:3F:18:B5:F6:24:14
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AWakOuGdGOJYk21Z8bs_GLX2JBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.235.0/24
185.218.20.0/24
185.220.248.0/24
185.222.29.0-185.222.30.255
Signature Algorithm: sha256WithRSAEncryption
10:a3:e6:e3:b5:3c:96:d1:de:78:02:65:b2:5a:71:c0:b2:3e:
67:7e:13:70:df:6a:a7:f6:28:be:4c:30:2d:38:99:69:38:2b:
5b:4d:d3:bd:63:fb:61:e0:37:c2:a5:50:02:66:b3:e5:0d:d1:
a5:74:d8:9d:80:dd:1c:bd:f0:fe:c5:a1:eb:92:6c:bb:8d:de:
ae:46:c8:bf:65:de:4b:02:2e:c1:ce:eb:25:74:b4:ee:80:d8:
3a:11:61:39:d9:ef:42:8c:9d:90:26:05:2e:0d:c8:bb:50:4f:
7f:b8:ee:30:69:d7:09:94:0d:06:bd:6a:24:c9:5c:60:d7:67:
29:44:cb:db:be:72:87:d9:f7:20:28:f6:90:2f:8a:8b:c5:9a:
af:c8:ba:47:6a:c2:3e:80:56:55:9f:5e:9a:08:c3:4d:78:7c:
06:78:38:f5:20:34:34:cf:38:78:9a:20:08:a2:b7:e5:a5:6c:
23:22:60:e1:f9:4c:11:86:64:ed:88:99:6b:c0:87:d9:3d:1b:
f5:87:2c:b2:d0:de:f5:f3:f4:f6:11:64:b8:d4:0d:3e:76:1e:
aa:a1:d7:cb:67:ae:71:f8:a1:68:fe:ef:ef:f0:d3:18:53:06:
61:e3:77:4c:64:4e:ed:ff:89:21:97:23:87:c8:04:3b:fb:de:
d3:5e:02:e3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZWfqVhmVmMPw4+ch8ubJwOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMzE2MTU1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTY2YTQzYWUxOWQxOGUyNTg5MzZkNTlmMWJiM2YxOGI1ZjYyNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1jd7J1VJtdLn+zHMUeMDr80KO0B
YHeYuWirXj2pBurNYqeSOniwJCCepqaUwFJ0q+eXhG9CnPwA/GZN2DpS6aTpL2Gv
Pq6oD1dEPbwr5EcENFPo/+Yjnv0VhRVkBsazgjZczfljNRccZG1NkmIsHl6n5EUW
UEPC5vTlXwk70c2qTnfyXe+qXK8IzHJh3yTNdam361iQGpsrJ6zH/jLa78r0GEtf
JUQxqEDAagHN4pXpyws+KS1qIFM2vrN4P8g6+TpT3AztNOs+Pa4csVUzJgHaX7Lj
biXWhNGpZEfP/CszsBAqAREmiCr6uRtjfEkXE5lvqVUHX4UQ+Q1aZjwdawIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAFmpDrhnRjiWJNtWfG7Pxi19iQUMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQVdha091R2RHT0pZazIxWjhic19HTFgySkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAudLrAwQA
udoUAwQAudz4MAwDBAC53h0DBAC53h4wDQYJKoZIhvcNAQELBQADggEBABCj5uO1
PJbR3ngCZbJaccCyPmd+E3Dfaqf2KL5MMC04mWk4K1tN071j+2HgN8KlUAJms+UN
0aV02J2A3Ry98P7FoeuSbLuN3q5GyL9l3ksCLsHO6yV0tO6A2DoRYTnZ70KMnZAm
BS4NyLtQT3+47jBp1wmUDQa9aiTJXGDXZylEy9u+cofZ9yAo9pAviovFmq/Iukdq
wj6AVlWfXpoIw014fAZ4OPUgNDTPOHiaIAiit+WlbCMiYOH5TBGGZO2ImWvAh9k9
G/WHLLLQ3vXz9PYRZLjUDT52Hqqh18tnrnH4oWj+7+/w0xhTBmHjd0xkTu3/iSGX
I4fIBDv73tNeAuM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:51 2025 by rpki-client