Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/jQ35y5JqdtG9WdmH02jLEjnZC4E.roa
File: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (raw, json)
Hash identifier: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=
Subject key identifier: 8D:0D:F9:CB:92:6A:76:D1:BD:59:D9:87:D3:68:CB:12:39:D9:0B:81
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 0194266C455FDBF997A5AB1C7D42703CE1C4
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/jQ35y5JqdtG9WdmH02jLEjnZC4E.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205276
IP address blocks: 185.172.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:45:5f:db:f9:97:a5:ab:1c:7d:42:70:3c:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d0df9cb926a76d1bd59d987d368cb1239d90b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:da:41:39:2a:c7:5e:e3:e9:b4:ab:08:cf:
22:cc:f4:94:cf:d2:92:44:92:48:6f:8c:5b:04:aa:
86:db:76:9c:78:46:9b:5a:e4:0e:38:4e:27:bb:3e:
0c:3a:54:70:52:22:b6:05:b5:98:80:34:43:09:1e:
8c:55:b8:ea:1d:47:d6:0d:6b:9b:c6:d4:a8:68:7b:
1d:bf:0d:fd:89:3d:ad:1b:3b:5f:6b:88:a3:be:8f:
28:20:91:31:de:6f:20:30:48:d5:84:7a:9b:15:15:
31:76:28:c5:ca:17:85:5c:15:4f:9c:47:97:db:ef:
35:43:b0:a9:14:39:ac:38:93:8a:43:69:23:1f:7d:
cc:9b:02:22:51:40:cc:92:e6:d5:36:c1:a0:f2:e3:
fa:19:5c:50:5a:2e:64:a5:31:a7:74:f6:2c:27:c6:
e1:3d:b5:07:04:63:3c:2b:bc:03:3f:6a:b4:9a:5d:
1f:10:0a:20:91:74:54:c4:d1:ba:23:ce:a4:8f:6d:
1a:a2:2a:b6:fe:7c:c3:e1:c6:74:39:b3:be:45:fa:
f3:2b:57:10:b7:ff:04:74:e9:10:14:74:88:b1:a6:
ba:dc:7a:e2:5c:64:92:f2:9d:19:2d:b9:2c:c5:a7:
30:d8:d5:50:c7:03:ba:89:86:2c:84:bf:a4:b9:df:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:F9:CB:92:6A:76:D1:BD:59:D9:87:D3:68:CB:12:39:D9:0B:81
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/jQ35y5JqdtG9WdmH02jLEjnZC4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:bc:a4:fa:5c:16:a9:5f:67:aa:3a:46:e0:a3:ae:3e:3d:ee:
23:3e:9f:93:4e:73:14:18:c6:22:63:64:62:e3:37:87:7b:b8:
96:73:cf:75:75:8f:a8:57:d9:0e:b5:20:1c:5e:ab:d6:6b:37:
d5:e0:e1:f9:78:48:fb:43:e5:c9:a1:47:c3:e0:b3:30:62:cc:
24:45:5e:a7:86:77:db:c8:d0:5d:09:5d:08:0c:60:57:49:b8:
51:34:e8:c7:53:0d:b0:b5:4f:08:2a:ab:77:cf:b4:67:8a:6a:
5f:08:91:a3:b7:a4:3b:dc:08:17:79:2d:a8:14:24:9a:ef:38:
b5:8d:10:a5:2b:a4:bc:91:fe:88:af:5a:83:f6:9d:cb:08:bc:
6d:66:9b:fc:1d:a3:12:c8:b7:db:d8:42:f2:8e:4f:d6:2c:1d:
89:ae:57:5f:7e:84:96:3d:48:99:81:3c:66:57:26:86:0d:3b:
41:b1:4d:3c:c6:6b:79:b7:5f:8b:b6:24:dd:a4:21:35:4f:88:
61:84:56:19:07:50:e2:20:64:c4:dc:f8:ba:94:bd:df:fd:e8:
77:5e:b7:85:6c:ae:32:ea:28:4a:d4:ba:a6:75:7a:a9:43:e9:
73:62:2a:46:db:30:cd:6e:56:97:f3:c8:2e:17:dc:e4:f1:23:
3c:81:6d:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbEVf2/mXpascfUJwPOHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5
NmEwZjEwHhcNMjUwMTAyMDk1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDBkZjljYjkyNmE3NmQxYmQ1OWQ5ODdkMzY4Y2IxMjM5ZDkwYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnovaQTkqx17j6bSrCM8izPSUz9KS
RJJIb4xbBKqG23aceEabWuQOOE4nuz4MOlRwUiK2BbWYgDRDCR6MVbjqHUfWDWub
xtSoaHsdvw39iT2tGztfa4ijvo8oIJEx3m8gMEjVhHqbFRUxdijFyheFXBVPnEeX
2+81Q7CpFDmsOJOKQ2kjH33MmwIiUUDMkubVNsGg8uP6GVxQWi5kpTGndPYsJ8bh
PbUHBGM8K7wDP2q0ml0fEAogkXRUxNG6I86kj20aoiq2/nzD4cZ0ObO+RfrzK1cQ
t/8EdOkQFHSIsaa63HriXGSS8p0ZLbksxacw2NVQxwO6iYYshL+kud+xpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI0N+cuSanbRvVnZh9NoyxI52QuBMB8GA1UdIwQY
MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt
MGRiYTdmYTZhNDAzLzEvalEzNXk1SnFkdEc5V2RtSDAyakxFam5aQzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz
LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuazIMA0G
CSqGSIb3DQEBCwUAA4IBAQBtvKT6XBapX2eqOkbgo64+Pe4jPp+TTnMUGMYiY2Ri
4zeHe7iWc891dY+oV9kOtSAcXqvWazfV4OH5eEj7Q+XJoUfD4LMwYswkRV6nhnfb
yNBdCV0IDGBXSbhRNOjHUw2wtU8IKqt3z7RnimpfCJGjt6Q73AgXeS2oFCSa7zi1
jRClK6S8kf6Ir1qD9p3LCLxtZpv8HaMSyLfb2ELyjk/WLB2JrldffoSWPUiZgTxm
VyaGDTtBsU08xmt5t1+LtiTdpCE1T4hhhFYZB1DiIGTE3Pi6lL3f/eh3XreFbK4y
6ihK1LqmdXqpQ+lzYipG2zDNblaX88guF9zk8SM8gW1A
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:21 2025 by rpki-client