Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RcrAqs4vdGPo9KOAo_YzTJIk8MY.roa
File: RcrAqs4vdGPo9KOAo_YzTJIk8MY.roa (raw, json)
Hash identifier: P3l5tdW2MjvgoGh2auuW/2jIEWliYLZyZpmTOSOXEYo=
Subject key identifier: 45:CA:C0:AA:CE:2F:74:63:E8:F4:A3:80:A3:F6:33:4C:92:24:F0:C6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01955FFB011152A641138294067999AE6CB5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RcrAqs4vdGPo9KOAo_YzTJIk8MY.roa
Signing time: Tue 04 Mar 2025 07:07:20 +0000
ROA not before: Tue 04 Mar 2025 07:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33387
IP address blocks: 185.120.14.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:fb:01:11:52:a6:41:13:82:94:06:79:99:ae:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 4 07:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45cac0aace2f7463e8f4a380a3f6334c9224f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:a4:a8:a6:a3:48:0c:84:95:b2:e2:5c:f7:
c3:8d:58:2d:97:8f:04:33:7e:f2:c5:fb:a4:ec:04:
d2:a4:ed:67:03:1c:93:d7:75:7b:bf:c1:98:7d:d4:
04:9b:58:0e:fc:a8:88:57:44:1a:55:3a:ec:60:73:
62:db:c1:9e:09:bf:cf:8e:e1:54:a1:7e:99:4e:b7:
b0:46:a8:d0:ce:10:5f:2e:75:49:52:df:fd:b4:93:
c5:8e:80:d0:fc:ec:bf:72:71:32:93:c6:c4:b0:8b:
f4:56:f2:a1:e0:c3:c5:20:9d:9b:e0:ce:6e:ad:ad:
62:f0:34:2e:cf:e3:be:29:6f:76:d7:c8:2d:31:ab:
69:0a:4d:c0:ab:f8:c1:ea:3d:c7:37:27:c7:1b:59:
eb:31:ae:ae:5e:13:e9:c9:37:35:49:4e:8d:f6:99:
5f:fb:b1:f5:54:63:2c:0d:b8:fb:4c:3c:d5:e9:95:
4c:07:e2:47:3b:44:bd:91:12:a8:dd:83:47:fa:fe:
7f:34:42:5f:a4:92:14:fd:b1:dd:26:49:de:b5:fb:
d4:e3:cf:23:03:16:2f:10:fc:56:2f:93:3a:97:c4:
18:f7:b6:0d:2a:d2:35:04:10:fa:3c:f8:87:b7:cd:
21:f1:33:c6:2c:c8:d2:a3:c9:54:d4:d6:9e:29:c7:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:C0:AA:CE:2F:74:63:E8:F4:A3:80:A3:F6:33:4C:92:24:F0:C6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RcrAqs4vdGPo9KOAo_YzTJIk8MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.14.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4e:8e:38:c5:eb:b7:9c:e6:e0:06:e1:9e:a1:20:4e:07:01:
92:a4:8f:e5:4f:e0:73:a0:31:fd:38:ff:96:2f:a0:4e:4e:ed:
b4:c1:44:b5:c1:35:2b:51:3a:c2:b2:55:e1:c7:be:87:cf:ee:
81:c5:54:52:0b:6f:14:b7:55:ec:ba:ed:8d:22:97:a1:b2:10:
fa:a9:15:0e:6e:d4:9a:ab:82:f4:f6:e3:71:40:ab:74:aa:ab:
23:a8:04:ee:2e:bf:09:d4:f2:ae:90:06:c0:ae:c9:d0:ca:cf:
6c:ae:d5:a1:60:63:1c:13:9c:44:31:c5:f1:c9:2d:cc:27:fc:
de:bc:7e:b4:4e:e5:11:83:76:96:35:9d:78:fe:9d:a0:b7:b1:
21:84:55:f7:0b:b7:b9:ee:73:fb:03:f8:58:96:09:db:3c:e7:
19:a7:66:59:1c:bc:4a:2c:e0:7f:0d:5f:15:d7:6f:5d:99:0d:
37:c3:1a:08:d7:35:30:29:b7:10:eb:bb:6f:7c:b4:08:74:68:
7d:69:4d:93:65:a0:e7:c0:93:ee:12:7e:ba:e9:13:4b:ed:05:
24:fc:bc:70:6e:8b:32:8d:c8:f8:5c:be:31:2f:f3:13:90:c2:
12:a1:a0:14:2a:ae:48:1e:ab:e2:1b:5e:5f:46:9f:a6:94:27:
22:84:e5:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVf+wERUqZBE4KUBnmZrmy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMzA0MDcwNzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWNhYzBhYWNlMmY3NDYzZThmNGEzODBhM2Y2MzM0YzkyMjRmMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF6kqKajSAyElbLiXPfDjVgtl48E
M37yxfuk7ATSpO1nAxyT13V7v8GYfdQEm1gO/KiIV0QaVTrsYHNi28GeCb/PjuFU
oX6ZTrewRqjQzhBfLnVJUt/9tJPFjoDQ/Oy/cnEyk8bEsIv0VvKh4MPFIJ2b4M5u
ra1i8DQuz+O+KW9218gtMatpCk3Aq/jB6j3HNyfHG1nrMa6uXhPpyTc1SU6N9plf
+7H1VGMsDbj7TDzV6ZVMB+JHO0S9kRKo3YNH+v5/NEJfpJIU/bHdJknetfvU488j
AxYvEPxWL5M6l8QY97YNKtI1BBD6PPiHt80h8TPGLMjSo8lU1NaeKce+kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXKwKrOL3Rj6PSjgKP2M0ySJPDGMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvUmNyQXFzNHZkR1BvOUtPQW9fWXpUSklrOE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgOMA0G
CSqGSIb3DQEBCwUAA4IBAQAzTo44xeu3nObgBuGeoSBOBwGSpI/lT+BzoDH9OP+W
L6BOTu20wUS1wTUrUTrCslXhx76Hz+6BxVRSC28Ut1Xsuu2NIpehshD6qRUObtSa
q4L09uNxQKt0qqsjqATuLr8J1PKukAbArsnQys9srtWhYGMcE5xEMcXxyS3MJ/ze
vH60TuURg3aWNZ14/p2gt7EhhFX3C7e57nP7A/hYlgnbPOcZp2ZZHLxKLOB/DV8V
129dmQ03wxoI1zUwKbcQ67tvfLQIdGh9aU2TZaDnwJPuEn666RNL7QUk/Lxwbosy
jcj4XL4xL/MTkMISoaAUKq5IHqviG15fRp+mlCcihOWF
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:31 2025 by rpki-client