Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wC-SyKG6unHcZvsILhmLnp5_LIM.roa
File: wC-SyKG6unHcZvsILhmLnp5_LIM.roa (raw, json)
Hash identifier: 8caKbHCUt39zhfYZP05V87Kcs2TsOIbt4rMHWXq3j5Y=
Subject key identifier: C0:2F:92:C8:A1:BA:BA:71:DC:66:FB:08:2E:19:8B:9E:9E:7F:2C:83
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220636F61F2EFBD327F2EE4518144D7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wC-SyKG6unHcZvsILhmLnp5_LIM.roa
Signing time: Wed 01 Jan 2025 13:48:55 +0000
ROA not before: Wed 01 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 185.222.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:63:6f:61:f2:ef:bd:32:7f:2e:e4:51:81:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c02f92c8a1baba71dc66fb082e198b9e9e7f2c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:b6:1a:dd:e5:ba:07:b6:49:08:96:dd:36:
ba:36:f3:47:14:83:02:28:19:2b:c4:34:6f:75:c0:
41:71:42:f0:81:48:d7:31:60:df:0d:a2:7d:e1:5b:
1b:ad:88:ed:fe:87:62:f2:39:09:8f:9c:1a:3d:aa:
7a:ab:4c:ca:37:3a:ed:10:f8:d4:75:3a:e7:11:75:
08:ff:4b:53:98:67:52:89:03:13:47:ba:9f:87:de:
bd:d5:fa:7c:49:5b:34:af:d4:ba:e9:63:3c:da:7b:
d0:98:c5:47:9c:c6:11:00:ee:db:e6:16:0b:b3:1d:
84:ab:25:52:2c:3c:d5:70:9a:6a:9f:0a:79:c4:d2:
60:20:24:bc:4c:93:23:04:dc:bc:93:2d:d9:8c:de:
32:45:37:48:37:ef:5f:88:94:1a:ab:44:58:52:62:
d2:b3:86:1d:6f:54:ec:23:3a:c2:79:7e:13:0e:a6:
32:6b:3d:a8:fb:04:7e:f7:6c:d4:1b:b9:7f:40:ff:
1e:99:3b:9c:f9:ef:3f:64:cc:b4:59:2b:e8:8c:2e:
6b:7d:30:68:82:e3:ca:05:1a:75:84:78:d0:c2:c1:
50:d0:ea:58:a0:89:a1:2c:3a:ca:bf:8a:69:2e:e9:
6d:9c:43:56:c4:61:74:6a:d1:64:f8:e4:65:48:05:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:92:C8:A1:BA:BA:71:DC:66:FB:08:2E:19:8B:9E:9E:7F:2C:83
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wC-SyKG6unHcZvsILhmLnp5_LIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:28:e7:e4:18:0e:9a:47:03:23:f7:fa:35:18:57:c0:68:56:
9f:f8:5c:7c:1c:a0:6f:0d:c0:3b:ca:96:c1:67:4d:fa:89:a5:
e5:30:40:de:e5:83:9f:e2:05:9d:35:97:b3:d1:ef:cd:54:52:
f2:ba:e8:f6:a2:e5:28:62:22:70:d4:a2:46:c2:4e:86:14:ed:
63:9b:3c:87:49:30:81:90:a0:57:c7:26:24:e7:40:21:52:8f:
ac:ac:8b:fe:14:87:4f:92:5d:a4:07:35:44:ed:72:e6:a6:75:
b5:bc:18:d1:42:b1:53:c2:4c:d0:76:45:01:02:a5:05:f2:ee:
58:79:ab:7f:c4:ff:96:14:c0:f4:7c:e6:79:39:06:b6:50:28:
82:c6:22:42:ea:55:bb:67:55:96:50:5a:18:32:91:58:3c:1a:
74:15:27:78:93:b5:65:01:26:ab:98:1a:d4:d7:f9:df:04:70:
00:8a:19:6d:f2:1a:59:9d:87:27:9c:4d:9c:24:a4:13:6a:96:
37:44:34:fa:04:b9:55:9c:58:1b:2d:f3:7b:03:9e:33:13:59:
01:09:77:44:70:e9:00:14:68:b0:2b:c8:8d:96:89:5a:70:34:
dd:5d:bc:a3:3c:78:15:1e:a3:c3:31:cf:b0:a5:25:04:3c:e0:
18:c7:b6:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIGNvYfLvvTJ/LuRRgUTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDJmOTJjOGExYmFiYTcxZGM2NmZiMDgyZTE5OGI5ZTllN2YyYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iq2Gt3luge2SQiW3Ta6NvNHFIMC
KBkrxDRvdcBBcULwgUjXMWDfDaJ94VsbrYjt/odi8jkJj5waPap6q0zKNzrtEPjU
dTrnEXUI/0tTmGdSiQMTR7qfh9691fp8SVs0r9S66WM82nvQmMVHnMYRAO7b5hYL
sx2EqyVSLDzVcJpqnwp5xNJgICS8TJMjBNy8ky3ZjN4yRTdIN+9fiJQaq0RYUmLS
s4Ydb1TsIzrCeX4TDqYyaz2o+wR+92zUG7l/QP8emTuc+e8/ZMy0WSvojC5rfTBo
guPKBRp1hHjQwsFQ0OpYoImhLDrKv4ppLultnENWxGF0atFk+ORlSAWpqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAvksihurpx3Gb7CC4Zi56efyyDMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvd0MtU3lLRzZ1bkhjWnZzSUxobUxucDVfTElNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud4fMA0G
CSqGSIb3DQEBCwUAA4IBAQBhKOfkGA6aRwMj9/o1GFfAaFaf+Fx8HKBvDcA7ypbB
Z036iaXlMEDe5YOf4gWdNZez0e/NVFLyuuj2ouUoYiJw1KJGwk6GFO1jmzyHSTCB
kKBXxyYk50AhUo+srIv+FIdPkl2kBzVE7XLmpnW1vBjRQrFTwkzQdkUBAqUF8u5Y
eat/xP+WFMD0fOZ5OQa2UCiCxiJC6lW7Z1WWUFoYMpFYPBp0FSd4k7VlASarmBrU
1/nfBHAAihlt8hpZnYcnnE2cJKQTapY3RDT6BLlVnFgbLfN7A54zE1kBCXdEcOkA
FGiwK8iNlolacDTdXbyjPHgVHqPDMc+wpSUEPOAYx7Zd
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:26 2025 by rpki-client