Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/T8wfyMdVYO2pjTxLu-sXHav7xb4.roa
File: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (raw, json)
Hash identifier: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=
Subject key identifier: 4F:CC:1F:C8:C7:55:60:ED:A9:8D:3C:4B:BB:EB:17:1D:AB:FB:C5:BE
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019426D9D646B9750A1F4C4716851708BE77
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/T8wfyMdVYO2pjTxLu-sXHav7xb4.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209811
IP address blocks: 2.57.232.0/23 maxlen: 23
2.57.234.0/23 maxlen: 23
95.215.200.0/23 maxlen: 23
95.215.202.0/23 maxlen: 23
185.151.228.0/23 maxlen: 23
185.151.230.0/23 maxlen: 23
185.208.8.0/24 maxlen: 24
194.31.160.0/23 maxlen: 23
194.31.162.0/23 maxlen: 23
2a09:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d6:46:b9:75:0a:1f:4c:47:16:85:17:08:be:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fcc1fc8c75560eda98d3c4bbbeb171dabfbc5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:4a:9e:6f:9f:19:d0:a4:d9:28:6c:8d:c3:
ab:a3:b0:d0:2b:14:58:b2:50:8f:5c:b9:00:d7:4f:
d2:cb:32:e4:0c:ba:2a:cb:da:b9:80:56:ed:14:97:
1d:80:bf:d4:2c:5d:24:f7:6e:bf:e4:27:c3:46:c3:
69:69:72:90:b3:26:8b:1d:3c:59:64:bd:f4:42:01:
78:00:3b:32:1b:cf:7c:f6:2b:1c:da:27:f9:66:be:
35:ed:1f:a6:9e:f7:8f:04:a4:62:7d:ff:01:c5:81:
3c:fe:c0:f7:e9:28:3f:9c:0f:11:6c:97:42:e5:08:
b1:32:8e:bf:a1:68:b8:79:a3:3d:2d:ef:65:5c:49:
bf:a8:da:c9:65:fa:27:86:22:78:9d:1f:42:0c:74:
f9:0f:d6:8f:f9:66:1b:38:90:8a:c3:fd:2e:2f:ec:
15:ca:b5:8e:b8:f1:61:9f:8b:da:e6:e7:48:5a:19:
38:da:79:b0:5c:3c:36:ac:0b:f5:21:db:8d:f5:f1:
e9:2f:6b:a3:2b:fd:0a:07:84:76:13:0e:82:86:d8:
c0:f6:fb:16:ae:2f:46:d0:d8:3d:40:87:1b:e5:d0:
ac:4e:fc:5f:88:ee:f0:ad:22:40:80:f9:ea:53:35:
06:ff:4d:90:70:8e:94:f0:bc:86:59:5a:e4:7a:7d:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:1F:C8:C7:55:60:ED:A9:8D:3C:4B:BB:EB:17:1D:AB:FB:C5:BE
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/T8wfyMdVYO2pjTxLu-sXHav7xb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.232.0/22
95.215.200.0/22
185.151.228.0/22
185.208.8.0/24
194.31.160.0/22
IPv6:
2a09:1680::/48
Signature Algorithm: sha256WithRSAEncryption
97:18:11:b2:63:12:d5:fd:f9:d6:7e:40:66:8e:bb:a7:64:10:
da:bc:d3:99:f6:3e:66:8a:f0:05:56:46:08:e9:d2:cf:3f:b6:
03:83:a9:62:3d:0b:b1:2d:7f:84:c8:aa:ab:bb:72:c0:90:36:
34:ef:25:c0:a1:3a:24:4d:94:55:09:a6:d6:f0:58:36:67:ad:
4d:16:a3:04:ea:6e:c4:38:bd:12:5f:8f:55:f0:73:c4:10:5c:
db:18:e3:d9:a2:02:fb:f4:44:9b:80:39:70:70:6d:3e:6a:58:
db:cc:11:b2:b2:65:c2:49:50:d1:53:7c:ae:5f:bc:2d:6c:97:
d7:b0:84:69:65:52:37:10:24:9d:b6:07:53:76:b8:ee:1e:54:
56:df:c6:66:52:35:2b:16:97:43:25:de:09:7a:26:b5:2b:3b:
34:eb:24:26:23:1e:da:e4:76:3f:a8:19:52:6c:1e:9e:c3:52:
28:ef:e2:87:ab:27:0e:ba:ff:be:f8:d4:32:11:93:66:b9:c3:
7a:77:f5:20:aa:a5:b5:2a:b5:38:51:58:25:cb:44:03:c1:23:
0c:da:12:f1:57:c5:cd:f5:f1:e9:71:e8:7a:36:d4:74:aa:04:
1a:91:e5:16:4a:94:f7:39:64:96:63:17:cd:fa:ef:5c:5c:04:
a6:64:d9:c5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQm2dZGuXUKH0xHFoUXCL53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjUwMTAyMTE0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmNjMWZjOGM3NTU2MGVkYTk4ZDNjNGJiYmViMTcxZGFiZmJjNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl31Knm+fGdCk2ShsjcOro7DQKxRY
slCPXLkA10/SyzLkDLoqy9q5gFbtFJcdgL/ULF0k926/5CfDRsNpaXKQsyaLHTxZ
ZL30QgF4ADsyG8989isc2if5Zr417R+mnvePBKRiff8BxYE8/sD36Sg/nA8RbJdC
5QixMo6/oWi4eaM9Le9lXEm/qNrJZfonhiJ4nR9CDHT5D9aP+WYbOJCKw/0uL+wV
yrWOuPFhn4va5udIWhk42nmwXDw2rAv1IduN9fHpL2ujK/0KB4R2Ew6ChtjA9vsW
ri9G0Ng9QIcb5dCsTvxfiO7wrSJAgPnqUzUG/02QcI6U8LyGWVrken2C7QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFE/MH8jHVWDtqY08S7vrFx2r+8W+MB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvVDh3ZnlNZFZZTzJwalR4THUtc1hIYXY3eGI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQCAjnoAwQC
X9fIAwQCuZfkAwQAudAIAwQCwh+gMA8EAgACMAkDBwAqCRaAAAAwDQYJKoZIhvcN
AQELBQADggEBAJcYEbJjEtX9+dZ+QGaOu6dkENq805n2PmaK8AVWRgjp0s8/tgOD
qWI9C7Etf4TIqqu7csCQNjTvJcChOiRNlFUJptbwWDZnrU0WowTqbsQ4vRJfj1Xw
c8QQXNsY49miAvv0RJuAOXBwbT5qWNvMEbKyZcJJUNFTfK5fvC1sl9ewhGllUjcQ
JJ22B1N2uO4eVFbfxmZSNSsWl0Ml3gl6JrUrOzTrJCYjHtrkdj+oGVJsHp7DUijv
4oerJw66/7741DIRk2a5w3p39SCqpbUqtThRWCXLRAPBIwzaEvFXxc318elx6Ho2
1HSqBBqR5RZKlPc5ZJZjF83671xcBKZk2cU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:25 2025 by rpki-client