Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa
File: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (raw, json)
Hash identifier: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=
Subject key identifier: D0:45:88:14:C9:07:3B:03:F1:5F:12:4E:F9:C5:55:9E:51:4C:57:D3
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D700AA669C3A3862EBE8DEA526405F
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58331
IP address blocks: 185.141.104.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:aa:66:9c:3a:38:62:eb:e8:de:a5:26:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0458814c9073b03f15f124ef9c5559e514c57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:bf:64:9e:66:1d:e2:07:50:db:59:27:d0:
f8:05:73:41:bd:8c:f3:57:e8:03:66:ef:77:26:04:
1e:33:34:d0:13:52:49:86:7d:93:c4:7d:57:0b:4a:
11:15:24:2a:1d:ae:7c:d6:40:b6:a5:c2:10:7d:83:
fb:16:68:83:c3:f6:2a:8b:34:32:d7:5b:86:7e:05:
9f:78:af:9d:b2:a5:0e:7a:bd:bf:dc:a1:fb:86:ca:
d6:1b:51:91:2e:f9:e3:64:12:24:8c:d8:65:6d:31:
e4:cb:a4:d7:42:41:85:d4:cd:65:1e:b6:fd:64:35:
4f:41:84:53:5c:95:e9:20:b7:1c:c0:03:2c:57:20:
aa:64:c5:ca:24:f3:1a:ef:26:60:6d:79:b9:b6:3c:
63:1b:5c:c6:f8:7d:24:94:65:c9:a2:43:aa:81:6a:
6c:12:38:d8:36:0e:38:50:17:b1:da:f2:9b:fe:be:
51:5d:f7:cb:41:ab:61:59:5c:62:72:1a:ef:cd:35:
df:aa:d3:8a:54:7d:63:0f:03:5d:d4:b5:95:cf:d4:
cc:f0:4b:90:82:3e:c5:cd:cf:c6:06:87:16:f2:59:
1e:29:45:da:f1:e4:4f:da:32:ef:5d:51:98:38:bc:
d6:b7:66:af:0b:d2:99:55:9a:a8:49:60:06:76:20:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:88:14:C9:07:3B:03:F1:5F:12:4E:F9:C5:55:9E:51:4C:57:D3
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.104.0/24
185.141.106.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:e2:41:0d:4c:e0:f6:c7:9b:21:a4:37:f3:88:d3:36:bd:0d:
d9:6d:7f:87:2c:b7:6a:f3:ca:06:17:ac:9f:e0:c0:0d:42:7a:
6f:b6:ba:5e:39:7e:f5:2f:6b:61:46:98:10:fe:c5:18:61:f8:
6d:fa:e5:65:d0:48:15:e9:0e:7a:2c:8f:ee:6b:11:fe:0f:6c:
cb:42:42:61:f4:3f:1a:1b:be:36:41:b5:7c:2b:34:8f:d7:53:
f6:f2:0e:07:40:5d:ff:22:40:0c:5d:b4:de:66:87:ea:2d:00:
f4:94:bf:6a:6d:c0:aa:60:f1:21:e4:eb:07:e1:54:eb:eb:f5:
68:80:41:93:b2:06:55:a2:2c:1c:33:3e:ba:ad:8a:e4:f7:81:
fd:bc:9a:2e:f7:08:a7:68:85:2a:e3:71:31:ea:d4:8a:72:e9:
33:9b:51:b2:45:a4:e5:0b:b3:63:1c:3a:c8:23:cb:c0:16:0c:
ac:9f:e5:b0:50:4e:34:bb:26:6c:f2:04:b4:9f:8a:54:f8:68:
dd:c2:0e:71:b4:38:84:32:23:05:c7:39:d9:9b:55:f6:d3:5b:
0b:fd:2b:cb:62:61:63:72:12:ce:26:68:4d:5d:40:6f:37:ca:
31:9e:54:e5:b2:6a:a2:52:31:e6:86:1e:19:93:67:94:27:06:
05:54:f2:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1wCqZpw6OGLr6N6lJkBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjUwMTAxMjE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQ1ODgxNGM5MDczYjAzZjE1ZjEyNGVmOWM1NTU5ZTUxNGM1N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBu/ZJ5mHeIHUNtZJ9D4BXNBvYzz
V+gDZu93JgQeMzTQE1JJhn2TxH1XC0oRFSQqHa581kC2pcIQfYP7FmiDw/YqizQy
11uGfgWfeK+dsqUOer2/3KH7hsrWG1GRLvnjZBIkjNhlbTHky6TXQkGF1M1lHrb9
ZDVPQYRTXJXpILccwAMsVyCqZMXKJPMa7yZgbXm5tjxjG1zG+H0klGXJokOqgWps
EjjYNg44UBex2vKb/r5RXffLQathWVxichrvzTXfqtOKVH1jDwNd1LWVz9TM8EuQ
gj7Fzc/GBocW8lkeKUXa8eRP2jLvXVGYOLzWt2avC9KZVZqoSWAGdiDTHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNBFiBTJBzsD8V8STvnFVZ5RTFfTMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvMEVXSUZNa0hPd1B4WHhKTy1jVlZubEZNVjlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY1oAwQB
uY1qMA0GCSqGSIb3DQEBCwUAA4IBAQCg4kENTOD2x5shpDfziNM2vQ3ZbX+HLLdq
88oGF6yf4MANQnpvtrpeOX71L2thRpgQ/sUYYfht+uVl0EgV6Q56LI/uaxH+D2zL
QkJh9D8aG742QbV8KzSP11P28g4HQF3/IkAMXbTeZofqLQD0lL9qbcCqYPEh5OsH
4VTr6/VogEGTsgZVoiwcMz66rYrk94H9vJou9winaIUq43Ex6tSKcukzm1GyRaTl
C7NjHDrII8vAFgysn+WwUE40uyZs8gS0n4pU+Gjdwg5xtDiEMiMFxznZm1X201sL
/SvLYmFjchLOJmhNXUBvN8oxnlTlsmqiUjHmhh4Zk2eUJwYFVPIp
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:17:23 2025 by rpki-client