Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sd5W2nwaQPxgrE4dbXB8HP6qz1w.roa
File: Sd5W2nwaQPxgrE4dbXB8HP6qz1w.roa (raw, json)
Hash identifier: bhQt4Zv1DUxXUlnUdHcZFRX1wNNaVt+fHdQpuPHPAbE=
Subject key identifier: 49:DE:56:DA:7C:1A:40:FC:60:AC:4E:1D:6D:70:7C:1C:FE:AA:CF:5C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220484E964AD66FF9FCC6E830C03DD4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sd5W2nwaQPxgrE4dbXB8HP6qz1w.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 185.223.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:48:4e:96:4a:d6:6f:f9:fc:c6:e8:30:c0:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49de56da7c1a40fc60ac4e1d6d707c1cfeaacf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:93:cb:e0:24:de:0e:62:c7:37:c2:0c:0b:
9b:26:f0:03:7d:81:7b:40:1e:6f:eb:1f:4f:96:97:
88:ea:e3:be:32:08:aa:ec:6c:fd:25:e8:04:fc:ed:
1f:cf:e4:24:8d:c5:a5:3c:32:22:f6:c7:14:4b:b9:
0e:61:20:45:b4:a7:3f:58:62:e1:33:6a:c9:5b:eb:
96:f8:9f:93:0d:1a:3d:79:0f:c4:6c:97:b9:de:9f:
28:11:6d:00:fc:16:8c:63:31:7a:8b:71:0b:ce:6f:
d6:48:f5:29:e0:26:95:5e:2c:8e:b1:f1:36:23:70:
09:15:44:4b:13:15:26:80:55:f1:d7:a6:bd:34:ed:
93:35:29:40:7a:c8:6b:cb:9f:f0:cd:8f:25:c4:18:
be:1e:d6:11:cb:bc:92:86:c8:34:e6:90:8b:ec:72:
14:30:b9:89:74:79:a2:29:22:9a:df:54:c1:4d:48:
cc:74:d6:b4:39:c0:c1:10:87:c2:ca:6b:14:ef:c8:
08:93:db:0b:13:e9:e7:76:e8:3e:b0:5e:a9:e9:8e:
36:77:8a:1f:36:a3:d4:37:1f:09:b0:9e:8c:ab:b2:
68:3f:3d:7f:ae:06:c6:fa:b9:3c:49:52:e8:5b:bc:
93:f1:f3:a6:00:88:20:69:c8:1b:bf:b9:75:53:e7:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:56:DA:7C:1A:40:FC:60:AC:4E:1D:6D:70:7C:1C:FE:AA:CF:5C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sd5W2nwaQPxgrE4dbXB8HP6qz1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:b0:57:8a:7d:d9:c1:01:79:e3:ce:15:11:46:6d:87:29:
d8:cf:ce:18:03:33:27:78:ca:4c:08:c5:dd:b3:08:23:59:ff:
ee:76:ad:0a:f3:9f:7e:a3:0b:8d:96:78:67:03:f5:3e:26:7a:
67:3a:f0:d8:91:05:39:96:31:b9:07:c0:63:cf:64:6c:13:22:
67:fd:38:12:78:46:2e:8d:c3:7f:05:5b:83:d5:72:a0:5c:af:
50:ec:75:36:ad:52:f3:ca:d9:c0:43:8b:1b:c4:73:a5:43:ae:
ed:17:09:c2:8a:7c:2c:c8:b4:21:a0:9a:7f:05:5f:85:b5:09:
63:b7:1e:fb:ec:04:3f:4a:bb:f2:77:4a:fd:15:73:59:96:34:
ca:08:58:ae:14:8b:46:85:21:c3:c4:15:a6:4a:e9:23:9c:40:
41:97:ed:e9:4d:b6:11:63:0b:04:46:78:c8:40:59:2a:51:41:
47:52:dc:d6:fd:49:fd:cc:fa:b2:25:0c:3b:71:56:25:00:b2:
8f:35:35:6e:d5:36:00:79:46:77:97:7c:22:13:7c:d8:e1:d2:
28:a8:69:8a:e7:4d:bd:87:25:8c:ea:3f:b5:20:ea:31:37:66:
32:e5:b9:7a:5e:b4:d7:46:09:fb:b2:55:99:35:8d:84:4b:fd:
41:ee:d4:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIEhOlkrWb/n8xugwwD3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWRlNTZkYTdjMWE0MGZjNjBhYzRlMWQ2ZDcwN2MxY2ZlYWFjZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1mTy+Ak3g5ixzfCDAubJvADfYF7
QB5v6x9PlpeI6uO+Mgiq7Gz9JegE/O0fz+QkjcWlPDIi9scUS7kOYSBFtKc/WGLh
M2rJW+uW+J+TDRo9eQ/EbJe53p8oEW0A/BaMYzF6i3ELzm/WSPUp4CaVXiyOsfE2
I3AJFURLExUmgFXx16a9NO2TNSlAeshry5/wzY8lxBi+HtYRy7yShsg05pCL7HIU
MLmJdHmiKSKa31TBTUjMdNa0OcDBEIfCymsU78gIk9sLE+nndug+sF6p6Y42d4of
NqPUNx8JsJ6Mq7JoPz1/rgbG+rk8SVLoW7yT8fOmAIggacgbv7l1U+edCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEneVtp8GkD8YKxOHW1wfBz+qs9cMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvU2Q1VzJud2FRUHhnckU0ZGJYQjhIUDZxejF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9NMA0G
CSqGSIb3DQEBCwUAA4IBAQAVyrBXin3ZwQF5484VEUZthynYz84YAzMneMpMCMXd
swgjWf/udq0K859+owuNlnhnA/U+JnpnOvDYkQU5ljG5B8Bjz2RsEyJn/TgSeEYu
jcN/BVuD1XKgXK9Q7HU2rVLzytnAQ4sbxHOlQ67tFwnCinwsyLQhoJp/BV+FtQlj
tx777AQ/Srvyd0r9FXNZljTKCFiuFItGhSHDxBWmSukjnEBBl+3pTbYRYwsERnjI
QFkqUUFHUtzW/Un9zPqyJQw7cVYlALKPNTVu1TYAeUZ3l3wiE3zY4dIoqGmK5029
hyWM6j+1IOoxN2Yy5bl6XrTXRgn7slWZNY2ES/1B7tS4
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:39:36 2025 by rpki-client