Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa
File: m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa (raw, json)
Hash identifier: +f069Ignbpg0zmLTIqsmUaOuN5XLud0PtvHpBkikPfg=
Subject key identifier: 9B:E4:3F:5A:7D:B8:81:D2:7E:92:A9:6E:FA:C8:98:FF:A3:A7:88:51
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228E00975F2F0479BC26DD691B10DE2F
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214738
IP address blocks: 185.118.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:00:97:5f:2f:04:79:bc:26:dd:69:1b:10:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be43f5a7db881d27e92a96efac898ffa3a78851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:74:8d:63:ee:53:da:59:17:14:1f:06:9c:
f0:3f:eb:78:3a:20:de:68:11:3d:a8:22:d4:67:6c:
05:c5:d4:f5:74:5c:09:a3:dc:b9:69:13:25:35:f2:
55:aa:a6:df:43:20:b1:74:f0:1a:ca:5d:47:6a:37:
eb:7b:17:01:a9:dc:25:c8:a4:40:b6:29:d7:11:84:
4c:70:67:2b:62:80:a7:6d:4d:95:5a:da:c2:ee:8f:
aa:5c:e2:28:f7:29:6e:9c:05:8c:0f:c8:d6:ec:f7:
a0:56:a2:b5:05:c8:cc:5e:ca:35:ff:af:f5:3d:6f:
92:92:a4:dd:26:e2:71:db:17:ad:21:f8:25:32:09:
b0:cf:33:6f:e4:39:3e:37:a2:87:21:d8:02:09:c2:
e1:46:c7:d5:d4:06:f3:ae:2b:43:08:d5:0b:dc:db:
37:a0:53:39:0a:14:9c:f6:db:36:f2:8d:3f:cb:7e:
26:1a:2d:4d:df:81:48:80:2c:60:34:e2:7d:52:97:
81:ed:ca:7c:1e:85:18:ee:8d:ad:bd:c7:aa:1e:64:
7b:f8:b1:b0:77:33:4d:11:97:4f:ae:4f:9f:5b:90:
de:6d:0e:6d:a4:08:d4:b0:81:ba:9d:55:cb:cf:76:
d9:96:db:12:e3:e0:82:f3:51:7f:61:c2:1c:f5:d3:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:3F:5A:7D:B8:81:D2:7E:92:A9:6E:FA:C8:98:FF:A3:A7:88:51
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.79.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8e:7e:64:91:52:23:80:4b:6b:10:94:7d:58:4c:5b:d2:ac:
f8:e4:8c:90:bb:5e:80:b9:b6:02:85:bd:69:f4:7e:e2:f7:67:
24:8b:01:af:19:99:73:81:25:a4:c4:a4:b1:5d:51:63:cc:f7:
21:35:60:bd:2f:34:f5:13:bf:a5:29:86:c0:01:3a:84:10:84:
0a:3e:c4:9c:67:98:16:dc:47:de:ce:75:ef:19:29:85:cb:fa:
0d:ad:97:e0:16:11:9b:3a:30:31:2f:61:c4:2d:da:1b:ba:ed:
81:df:8b:d4:9a:b1:e8:dd:af:87:f2:9d:49:0b:92:56:21:ef:
cf:e9:9b:5b:8b:5f:57:54:40:85:0b:db:77:25:8a:d7:11:9f:
2d:e6:f4:63:5a:bc:e4:f1:42:67:7b:58:8d:73:ec:78:25:8b:
2a:d5:47:f0:d5:f7:5c:73:97:81:56:6e:0d:4c:00:8a:de:0a:
01:aa:89:28:58:7d:3b:f2:99:7a:5b:9e:6e:de:eb:e0:32:b5:
61:a0:60:33:99:12:5d:cf:5f:d3:64:54:ca:a6:a5:d3:9e:b9:
e9:04:ff:38:cd:be:f0:92:59:8e:21:5a:34:83:3f:40:aa:b8:
e2:ee:6a:20:e3:29:21:62:2a:1f:f0:1d:df:da:f1:ba:8f:c2:
3d:a0:b7:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijgCXXy8Eebwm3WkbEN4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwMTAxMTU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmU0M2Y1YTdkYjg4MWQyN2U5MmE5NmVmYWM4OThmZmEzYTc4ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYF0jWPuU9pZFxQfBpzwP+t4OiDe
aBE9qCLUZ2wFxdT1dFwJo9y5aRMlNfJVqqbfQyCxdPAayl1HajfrexcBqdwlyKRA
tinXEYRMcGcrYoCnbU2VWtrC7o+qXOIo9ylunAWMD8jW7PegVqK1BcjMXso1/6/1
PW+SkqTdJuJx2xetIfglMgmwzzNv5Dk+N6KHIdgCCcLhRsfV1AbzritDCNUL3Ns3
oFM5ChSc9ts28o0/y34mGi1N34FIgCxgNOJ9UpeB7cp8HoUY7o2tvceqHmR7+LGw
dzNNEZdPrk+fW5DebQ5tpAjUsIG6nVXLz3bZltsS4+CC81F/YcIc9dM+TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJvkP1p9uIHSfpKpbvrImP+jp4hRMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvbS1RX1duMjRnZEota3FsdS1zaVlfNk9uaUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXZPMA0G
CSqGSIb3DQEBCwUAA4IBAQB5jn5kkVIjgEtrEJR9WExb0qz45IyQu16AubYChb1p
9H7i92ckiwGvGZlzgSWkxKSxXVFjzPchNWC9LzT1E7+lKYbAATqEEIQKPsScZ5gW
3EfeznXvGSmFy/oNrZfgFhGbOjAxL2HELdobuu2B34vUmrHo3a+H8p1JC5JWIe/P
6Ztbi19XVECFC9t3JYrXEZ8t5vRjWrzk8UJne1iNc+x4JYsq1Ufw1fdcc5eBVm4N
TACK3goBqokoWH078pl6W55u3uvgMrVhoGAzmRJdz1/TZFTKpqXTnrnpBP84zb7w
klmOIVo0gz9Aqrji7mog4ykhYiof8B3f2vG6j8I9oLc8
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:28 2025 by rpki-client