Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B3kfzcGiLEF3EpNVARIRZSbzMf0.roa
File: B3kfzcGiLEF3EpNVARIRZSbzMf0.roa (raw, json)
Hash identifier: 9tDLkz6a3lxLjY6+AUcANWDJ16aF7Y+cCCPz8tpwO3w=
Subject key identifier: 07:79:1F:CD:C1:A2:2C:41:77:12:93:55:01:12:11:65:26:F3:31:FD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222029B4A871167058439C5BD23FB565
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B3kfzcGiLEF3EpNVARIRZSbzMf0.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56504
IP address blocks: 185.251.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:b4:a8:71:16:70:58:43:9c:5b:d2:3f:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07791fcdc1a22c41771293550112116526f331fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:c3:10:a1:30:1b:cd:f9:50:e3:28:7a:2d:
01:10:36:0d:55:38:9e:6c:ed:a8:f2:64:95:63:14:
f1:9d:f0:bc:ac:54:8d:fc:2c:81:a9:2a:08:d4:38:
23:00:f7:0e:f2:1c:20:38:56:ef:c7:1d:2f:39:94:
33:8a:f2:f1:d0:8c:a7:b3:cf:13:0f:5c:17:f7:4f:
52:f2:0f:18:3d:24:1c:45:28:7f:48:a2:2d:2e:c9:
ca:0f:4d:d8:f5:a6:ab:dc:97:c5:2c:2c:c0:96:d2:
0d:85:2f:c8:40:29:63:22:d3:3f:2b:64:46:7f:4b:
7f:d8:b4:15:6f:c9:77:b7:71:e5:d0:57:26:e5:39:
a0:e5:0b:fc:eb:6b:e9:8e:ff:b8:f6:d8:d3:d3:5b:
56:f3:89:0c:6b:a7:26:74:5e:7c:5d:37:15:98:c7:
55:77:b7:dd:42:10:3d:46:13:68:dd:2d:5e:e8:4e:
bd:85:2d:df:b8:0c:13:bf:19:b1:ca:49:84:c1:ef:
d5:a0:7c:c0:f1:9b:d1:32:55:9d:7d:42:27:6c:fc:
5d:cc:3a:64:a6:55:f0:10:10:8e:28:42:cd:c6:c1:
75:75:3d:18:b6:ea:8d:c1:48:c4:c7:2e:f7:4d:02:
98:cf:b3:0f:af:25:08:92:c8:99:12:c4:cb:51:ef:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:79:1F:CD:C1:A2:2C:41:77:12:93:55:01:12:11:65:26:F3:31:FD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B3kfzcGiLEF3EpNVARIRZSbzMf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
10:98:f1:c9:8d:33:5a:d8:e3:4f:37:a3:a5:da:ce:69:3c:66:
06:93:42:db:b5:68:58:e5:60:3d:15:12:74:c8:39:51:3d:14:
4e:e5:dc:6a:56:70:7b:99:1a:7e:c1:cf:a7:00:27:3d:07:2d:
7d:3e:93:ae:6d:ad:56:d1:f9:ca:2d:a8:9e:60:8d:45:e7:8f:
0b:8b:f2:97:31:27:eb:e8:f5:7e:d1:63:b0:7d:c8:3b:fa:3e:
f1:06:95:a6:ad:9f:80:ee:a2:04:23:90:f5:02:15:c3:a0:69:
15:4d:68:bc:7b:bf:81:5a:2e:3d:d5:d8:31:5f:b2:34:6e:46:
a9:ff:d1:0c:ef:e1:63:d6:d6:a2:b9:c9:6b:fc:69:1c:06:12:
61:74:9c:0a:2a:1c:db:4d:45:5d:69:65:85:76:31:47:41:4e:
19:15:cb:90:51:94:d4:b7:c4:4e:4e:83:2c:9d:8f:78:6a:60:
a4:c3:7d:16:7d:30:40:85:41:ee:51:61:9b:25:0a:15:af:1c:
1c:8f:d5:53:5d:c0:1a:12:73:91:f2:a0:99:08:04:85:10:26:
9e:23:c4:e9:64:c9:c9:13:e2:25:89:75:9e:dd:1c:bc:46:37:
cd:a0:40:36:f2:58:ef:8b:60:05:8c:14:83:f5:6d:9d:07:5c:
fc:11:3e:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiICm0qHEWcFhDnFvSP7VlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzc5MWZjZGMxYTIyYzQxNzcxMjkzNTUwMTEyMTE2NTI2ZjMzMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjHDEKEwG835UOMoei0BEDYNVTie
bO2o8mSVYxTxnfC8rFSN/CyBqSoI1DgjAPcO8hwgOFbvxx0vOZQzivLx0Iyns88T
D1wX909S8g8YPSQcRSh/SKItLsnKD03Y9aar3JfFLCzAltINhS/IQCljItM/K2RG
f0t/2LQVb8l3t3Hl0Fcm5Tmg5Qv862vpjv+49tjT01tW84kMa6cmdF58XTcVmMdV
d7fdQhA9RhNo3S1e6E69hS3fuAwTvxmxykmEwe/VoHzA8ZvRMlWdfUInbPxdzDpk
plXwEBCOKELNxsF1dT0YtuqNwUjExy73TQKYz7MPryUIksiZEsTLUe8x8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAd5H83BoixBdxKTVQESEWUm8zH9MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQjNrZnpjR2lMRUYzRXBOVkFSSVJaU2J6TWYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufvlMA0G
CSqGSIb3DQEBCwUAA4IBAQAQmPHJjTNa2ONPN6Ol2s5pPGYGk0LbtWhY5WA9FRJ0
yDlRPRRO5dxqVnB7mRp+wc+nACc9By19PpOuba1W0fnKLaieYI1F548Li/KXMSfr
6PV+0WOwfcg7+j7xBpWmrZ+A7qIEI5D1AhXDoGkVTWi8e7+BWi491dgxX7I0bkap
/9EM7+Fj1taiuclr/GkcBhJhdJwKKhzbTUVdaWWFdjFHQU4ZFcuQUZTUt8ROToMs
nY94amCkw30WfTBAhUHuUWGbJQoVrxwcj9VTXcAaEnOR8qCZCASFECaeI8TpZMnJ
E+IliXWe3Ry8RjfNoEA28ljvi2AFjBSD9W2dB1z8ET6O
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:09 2025 by rpki-client