Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p273YJhUMAtnnG2Q6oi0DN76f_w.roa
File: p273YJhUMAtnnG2Q6oi0DN76f_w.roa (raw, json)
Hash identifier: cu8WChZNXPO5lyiha6oD3IGGzJ+fkc8S+3APCjgUgF8=
Subject key identifier: A7:6E:F7:60:98:54:30:0B:67:9C:6D:90:EA:88:B4:0C:DE:FA:7F:FC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204A095C96F80CA980DCACCC4D9E4A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p273YJhUMAtnnG2Q6oi0DN76f_w.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 185.223.83.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4a:09:5c:96:f8:0c:a9:80:dc:ac:cc:4d:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a76ef7609854300b679c6d90ea88b40cdefa7ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:38:11:d1:46:85:76:4f:6b:03:f4:da:36:
91:cf:13:2c:5d:6c:8b:2d:81:02:2a:32:23:9c:12:
3d:38:2a:fb:c5:2e:3a:c4:e4:95:29:62:72:87:79:
33:d5:0d:64:0c:64:1c:d1:c0:a7:e6:83:27:41:10:
2c:83:7c:ab:84:28:a7:25:3c:7a:22:a1:2b:48:bc:
67:b2:ba:b4:6f:9a:c4:10:b8:e2:2d:2b:86:b1:d0:
42:72:f1:48:74:2b:96:15:fc:f3:46:f8:3f:5d:dc:
ae:ea:a1:22:f6:6b:57:de:a0:5f:72:c3:42:a4:b3:
67:6a:77:6c:e7:55:6f:39:11:3b:24:d2:8c:6f:77:
2f:12:25:59:40:b9:06:37:1e:2d:2a:32:f9:a4:30:
72:ff:a4:28:47:ce:4c:1c:33:5f:4e:94:cc:41:27:
8b:6c:83:b4:0d:f9:b9:a9:12:ee:9c:ed:9d:1a:eb:
30:68:21:a3:76:bb:80:3c:91:e0:14:10:4a:8a:e4:
b1:d3:ba:50:7b:92:c2:54:5b:e9:24:ba:47:c8:f9:
e8:2b:72:f7:1c:94:6e:95:d7:52:8d:ba:6e:85:c3:
43:de:85:bb:eb:23:96:37:62:69:e1:ca:41:f4:bd:
6f:dd:e3:54:2e:29:a1:8b:ca:fc:85:ab:f5:db:d3:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:F7:60:98:54:30:0B:67:9C:6D:90:EA:88:B4:0C:DE:FA:7F:FC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p273YJhUMAtnnG2Q6oi0DN76f_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.83.0/24
185.240.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:af:06:93:a4:46:ef:d5:a7:23:d3:85:25:83:df:9d:d3:af:
de:2b:6d:82:45:e1:62:71:39:86:57:4a:7a:9c:7f:fe:0e:08:
dc:1c:31:ba:ca:59:20:52:0b:89:fd:f1:ba:bb:de:b8:a4:37:
d2:99:69:0f:29:7e:f4:6e:d5:00:b5:73:b9:71:dd:b5:9f:4c:
a0:7d:00:ba:53:16:7a:19:dc:3c:9f:78:72:2c:53:72:c5:31:
e0:48:04:51:d6:88:64:f0:f6:7a:c2:51:3f:75:f6:d4:68:85:
06:f1:b0:67:cf:b5:90:44:e6:25:4f:92:b2:e7:eb:80:cd:b3:
a8:47:f3:b9:3f:14:24:63:1d:ed:60:57:93:2a:4b:04:b9:e5:
8e:7c:6c:79:07:2f:10:3e:9e:1f:8d:2e:44:e8:53:c5:e6:8c:
8b:ba:ea:8d:2d:7c:96:2e:95:b1:59:ce:3c:d0:e8:3a:9b:60:
fe:94:de:d7:9f:0a:59:93:01:40:65:67:78:d7:c0:18:34:04:
f2:1d:71:08:99:a8:71:c7:9b:01:2d:62:39:4d:38:bb:c6:02:
e9:22:f5:25:bd:87:4e:d6:07:a2:68:17:1d:a2:30:ec:42:42:
31:46:5e:21:a7:89:f5:88:12:6a:60:e1:99:f3:06:e5:01:de:
e7:0e:b5:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIEoJXJb4DKmA3KzMTZ5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzZlZjc2MDk4NTQzMDBiNjc5YzZkOTBlYTg4YjQwY2RlZmE3ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlE4EdFGhXZPawP02jaRzxMsXWyL
LYECKjIjnBI9OCr7xS46xOSVKWJyh3kz1Q1kDGQc0cCn5oMnQRAsg3yrhCinJTx6
IqErSLxnsrq0b5rEELjiLSuGsdBCcvFIdCuWFfzzRvg/Xdyu6qEi9mtX3qBfcsNC
pLNnands51VvORE7JNKMb3cvEiVZQLkGNx4tKjL5pDBy/6QoR85MHDNfTpTMQSeL
bIO0Dfm5qRLunO2dGuswaCGjdruAPJHgFBBKiuSx07pQe5LCVFvpJLpHyPnoK3L3
HJRulddSjbpuhcND3oW76yOWN2Jp4cpB9L1v3eNULimhi8r8hav129PPPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKdu92CYVDALZ5xtkOqItAze+n/8MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcDI3M1lKaFVNQXRubkcyUTZvaTBETjc2Zl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud9TAwQA
ufB7MA0GCSqGSIb3DQEBCwUAA4IBAQCOrwaTpEbv1acj04Ulg9+d06/eK22CReFi
cTmGV0p6nH/+DgjcHDG6ylkgUguJ/fG6u964pDfSmWkPKX70btUAtXO5cd21n0yg
fQC6UxZ6Gdw8n3hyLFNyxTHgSARR1ohk8PZ6wlE/dfbUaIUG8bBnz7WQROYlT5Ky
5+uAzbOoR/O5PxQkYx3tYFeTKksEueWOfGx5By8QPp4fjS5E6FPF5oyLuuqNLXyW
LpWxWc480Og6m2D+lN7XnwpZkwFAZWd418AYNATyHXEImahxx5sBLWI5TTi7xgLp
IvUlvYdO1geiaBcdojDsQkIxRl4hp4n1iBJqYOGZ8wblAd7nDrU6
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:37 2025 by rpki-client