Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa
File: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (raw, json)
Hash identifier: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=
Subject key identifier: BB:8F:BC:4C:98:1E:40:7E:1F:6B:E0:FD:C5:99:78:64:1D:E3:36:84
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 0194258F30A299263ED63715B650803A4188
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198638
IP address blocks: 185.22.20.0/22 maxlen: 22
2a00:5ae0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:30:a2:99:26:3e:d6:37:15:b6:50:80:3a:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb8fbc4c981e407e1f6be0fdc59978641de33684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:e9:31:76:f9:25:8f:64:fd:92:ae:fa:b5:
9b:7d:30:55:fd:7e:af:57:96:b1:20:96:b2:2f:a6:
b0:f8:24:5f:e2:0e:d0:16:d2:9d:28:3f:78:2b:be:
18:b4:9d:df:dd:45:49:3d:b1:6b:37:4f:0a:d2:8c:
1b:f6:ff:bf:60:2f:1c:61:dc:d4:64:90:1d:e1:a0:
69:18:61:f9:a5:6b:df:28:2a:cc:f3:c0:51:a4:77:
6c:6f:ba:d7:0f:89:d6:c9:00:d6:f7:c4:fd:28:b8:
75:c7:a6:b7:91:64:d9:5c:c1:56:e1:98:16:79:cb:
f1:85:2d:68:c5:3b:3f:d9:e1:7e:d7:5b:80:e8:af:
9f:e0:b2:be:28:7a:92:2e:61:40:be:e1:1b:ea:98:
dd:9d:a1:97:83:b6:5b:4e:42:87:79:33:dc:9b:df:
da:85:29:b5:60:69:3f:ee:e0:ee:a5:97:cc:50:88:
47:d6:bb:01:c3:f5:b4:be:22:8a:93:3d:0d:38:6d:
40:86:1e:cb:42:fe:8e:fb:1a:ea:41:aa:7d:c8:14:
cf:aa:c0:89:ed:55:17:b0:8c:ba:4c:77:ad:cf:e9:
73:16:e8:2f:b4:45:57:d4:f6:8e:d4:5c:38:e3:fe:
62:e1:99:34:f5:a1:4c:d3:49:7e:eb:04:18:7f:fb:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8F:BC:4C:98:1E:40:7E:1F:6B:E0:FD:C5:99:78:64:1D:E3:36:84
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.20.0/22
IPv6:
2a00:5ae0:100::/48
Signature Algorithm: sha256WithRSAEncryption
3c:1b:06:cd:bc:9e:56:4e:d0:4d:c4:d7:99:fe:ff:28:c4:dd:
82:05:d4:fe:81:68:67:6e:5c:ff:70:76:2c:b7:17:ba:c3:17:
83:30:83:79:4e:42:4b:90:93:93:9a:5b:cf:1a:8e:7c:12:28:
b8:1c:d4:a3:25:73:46:56:fd:28:d9:8a:04:ec:32:e8:76:da:
65:b7:c7:c5:0d:2b:2f:8a:cd:fe:7e:f1:92:94:fb:94:a0:04:
c1:ea:67:7a:dd:f2:51:e0:88:61:14:86:d4:e5:91:04:a8:63:
9a:73:92:ac:55:7b:ce:97:bc:d4:cc:15:40:9f:bf:99:17:17:
01:e6:db:20:6e:82:1d:f0:43:1b:61:8b:58:50:da:f7:de:2b:
28:3a:a0:75:0d:a0:75:f3:dc:0b:fc:5d:8b:20:27:41:02:24:
df:5f:67:66:32:19:c4:68:d6:1b:bd:25:49:87:28:29:47:4a:
61:56:87:a7:f2:b4:ec:76:fc:f8:74:b6:80:ab:74:43:83:4b:
30:c3:e1:41:b1:a9:90:b6:96:40:2c:8c:c9:94:36:b3:df:3c:
5c:78:60:a3:9c:0f:12:55:5c:70:41:71:0b:f6:51:12:6d:a0:
4e:11:d9:f6:c7:5e:27:19:5b:e9:c5:ae:be:19:dc:98:3d:af:
21:fe:ec:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQljzCimSY+1jcVtlCAOkGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjU5YWVkYzI4Mjk2ZTI5MTcyNGY3OTM3ZGU3ODhlMjcy
MTY0MDgwHhcNMjUwMTAyMDU0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjhmYmM0Yzk4MWU0MDdlMWY2YmUwZmRjNTk5Nzg2NDFkZTMzNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaDpMXb5JY9k/ZKu+rWbfTBV/X6v
V5axIJayL6aw+CRf4g7QFtKdKD94K74YtJ3f3UVJPbFrN08K0owb9v+/YC8cYdzU
ZJAd4aBpGGH5pWvfKCrM88BRpHdsb7rXD4nWyQDW98T9KLh1x6a3kWTZXMFW4ZgW
ecvxhS1oxTs/2eF+11uA6K+f4LK+KHqSLmFAvuEb6pjdnaGXg7ZbTkKHeTPcm9/a
hSm1YGk/7uDupZfMUIhH1rsBw/W0viKKkz0NOG1Ahh7LQv6O+xrqQap9yBTPqsCJ
7VUXsIy6THetz+lzFugvtEVX1PaO1Fw44/5i4Zk09aFM00l+6wQYf/ui9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLuPvEyYHkB+H2vg/cWZeGQd4zaEMB8GA1UdIwQY
MBaAFAX1mu3CgpbikXJPeTfeeI4nIWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2Mt
ZDY0MzY4MjA4MTMxLzEvdTQtOFRKZ2VRSDRmYS1EOXhabDRaQjNqTm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTFkNDItMzU3NS00ZWMxLWJjN2MtZDY0MzY4MjA4MTMx
LzEvQmZXYTdjS0NsdUtSY2s5NU45NTRqaWNoWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuRYUMA8E
AgACMAkDBwAqAFrgAQAwDQYJKoZIhvcNAQELBQADggEBADwbBs28nlZO0E3E15n+
/yjE3YIF1P6BaGduXP9wdiy3F7rDF4Mwg3lOQkuQk5OaW88ajnwSKLgc1KMlc0ZW
/SjZigTsMuh22mW3x8UNKy+Kzf5+8ZKU+5SgBMHqZ3rd8lHgiGEUhtTlkQSoY5pz
kqxVe86XvNTMFUCfv5kXFwHm2yBugh3wQxthi1hQ2vfeKyg6oHUNoHXz3Av8XYsg
J0ECJN9fZ2YyGcRo1hu9JUmHKClHSmFWh6fytOx2/Ph0toCrdEODSzDD4UGxqZC2
lkAsjMmUNrPfPFx4YKOcDxJVXHBBcQv2URJtoE4R2fbHXicZW+nFrr4Z3Jg9ryH+
7Pk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:35 2025 by rpki-client