Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/iIfA58agMV_RqJ74K2RRl6EqU28.roa
File: iIfA58agMV_RqJ74K2RRl6EqU28.roa (raw, json)
Hash identifier: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=
Subject key identifier: 88:87:C0:E7:C6:A0:31:5F:D1:A8:9E:F8:2B:64:51:97:A1:2A:53:6F
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0194266C0396DA0FC63FF51E2DB4334F9CAB
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/iIfA58agMV_RqJ74K2RRl6EqU28.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.150.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:03:96:da:0f:c6:3f:f5:1e:2d:b4:33:4f:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8887c0e7c6a0315fd1a89ef82b645197a12a536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:ea:2e:92:7c:ec:2d:aa:fd:38:68:2f:7e:
60:68:37:a6:36:15:97:c6:8e:73:04:74:09:d7:66:
fa:89:02:cf:d7:03:95:80:27:39:b5:92:b1:a4:ce:
3f:c1:d2:ad:70:85:39:09:c7:b4:39:49:c9:01:e8:
f2:c2:0e:18:60:64:51:ef:8d:ed:a6:f4:80:58:c1:
91:89:aa:90:2e:8b:96:c5:6b:87:a0:dd:eb:6c:02:
2c:dd:0c:e1:5e:59:4c:8c:f8:45:6c:c8:6a:b1:d8:
c3:8c:66:f4:1f:fa:b8:8a:6c:44:97:72:5c:29:e4:
f9:2e:31:cb:31:30:e6:e5:ef:4a:a6:e2:3e:9f:6f:
06:ed:00:d5:98:4c:55:2a:d6:78:ab:03:c3:36:9a:
02:9b:5d:7a:9b:43:a7:bd:2d:98:e7:dd:5f:80:b9:
79:e3:31:fd:e5:b6:a2:c9:76:cd:e9:c5:5c:e6:5c:
10:ea:f8:dc:19:f3:b5:65:00:6f:b4:9e:70:5d:d1:
e7:04:3a:3b:e4:a8:ee:41:e3:21:60:23:0c:75:07:
0c:a4:c9:2e:a1:a7:a8:14:ee:43:54:0f:4d:7b:98:
6e:ea:cf:b2:47:b1:30:91:6b:4e:29:07:53:34:f5:
22:42:fe:79:1d:94:a3:fd:cb:43:27:4d:78:05:8c:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:C0:E7:C6:A0:31:5F:D1:A8:9E:F8:2B:64:51:97:A1:2A:53:6F
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/iIfA58agMV_RqJ74K2RRl6EqU28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.179.0/24
Signature Algorithm: sha256WithRSAEncryption
39:30:b4:71:dd:c0:59:33:28:d7:b4:c4:57:23:49:b4:48:41:
57:c7:86:ad:5a:11:8a:b5:20:cc:3b:0f:e5:d9:b3:d3:81:96:
98:c8:3c:a1:07:39:df:cd:72:b3:24:58:ae:62:70:55:72:40:
b1:c6:a4:dd:73:e4:1f:12:de:fd:c1:ce:8b:bf:2a:d3:08:bb:
49:51:f4:ed:68:5d:a6:42:d7:98:c2:3c:b3:0c:e6:f1:f8:3f:
5e:8f:54:e2:21:c0:0c:0a:d2:87:af:c4:c7:2c:75:11:cb:94:
3f:af:08:bb:91:dc:b5:57:09:e8:32:0d:1c:a6:58:4c:06:db:
8f:61:8b:00:a8:51:39:0f:b7:6c:c7:1b:9d:e4:96:65:ef:62:
44:17:8f:75:be:93:17:29:db:db:88:72:42:3e:28:f4:03:c2:
8c:8f:62:02:fd:ac:6b:98:60:64:e6:e4:9f:68:c2:6b:b0:7b:
7f:66:c5:22:37:e1:21:eb:49:94:0b:47:3c:15:5e:99:8f:6c:
1d:9d:a5:c5:29:5a:7e:35:22:ef:2b:aa:72:88:12:62:67:6c:
0e:11:65:6d:67:c3:fd:99:d3:7f:81:42:33:bb:31:4c:bd:da:
7f:54:71:9b:4f:49:0f:15:1c:c6:99:7a:31:2f:7f:ab:26:7d:
aa:81:59:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbAOW2g/GP/UeLbQzT5yrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjUwMTAyMDk1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODg3YzBlN2M2YTAzMTVmZDFhODllZjgyYjY0NTE5N2ExMmE1MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMTqLpJ87C2q/ThoL35gaDemNhWX
xo5zBHQJ12b6iQLP1wOVgCc5tZKxpM4/wdKtcIU5Cce0OUnJAejywg4YYGRR743t
pvSAWMGRiaqQLouWxWuHoN3rbAIs3QzhXllMjPhFbMhqsdjDjGb0H/q4imxEl3Jc
KeT5LjHLMTDm5e9KpuI+n28G7QDVmExVKtZ4qwPDNpoCm116m0OnvS2Y591fgLl5
4zH95baiyXbN6cVc5lwQ6vjcGfO1ZQBvtJ5wXdHnBDo75KjuQeMhYCMMdQcMpMku
oaeoFO5DVA9Ne5hu6s+yR7EwkWtOKQdTNPUiQv55HZSj/ctDJ014BYzPqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIiHwOfGoDFf0aie+CtkUZehKlNvMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvaUlmQTU4YWdNVl9ScUo3NEsyUlJsNkVxVTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZazMA0G
CSqGSIb3DQEBCwUAA4IBAQA5MLRx3cBZMyjXtMRXI0m0SEFXx4atWhGKtSDMOw/l
2bPTgZaYyDyhBznfzXKzJFiuYnBVckCxxqTdc+QfEt79wc6LvyrTCLtJUfTtaF2m
QteYwjyzDObx+D9ej1TiIcAMCtKHr8THLHURy5Q/rwi7kdy1VwnoMg0cplhMBtuP
YYsAqFE5D7dsxxud5JZl72JEF491vpMXKdvbiHJCPij0A8KMj2IC/axrmGBk5uSf
aMJrsHt/ZsUiN+Eh60mUC0c8FV6Zj2wdnaXFKVp+NSLvK6pyiBJiZ2wOEWVtZ8P9
mdN/gUIzuzFMvdp/VHGbT0kPFRzGmXoxL3+rJn2qgVlp
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:04 2025 by rpki-client