Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa
File: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (raw, json)
Hash identifier: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=
Subject key identifier: DF:27:82:E6:33:36:92:CB:AA:29:1D:99:87:92:2F:86:01:93:EE:43
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC57BC369AF526B598BB455F850128
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa
Signing time: Thu 02 Jan 2025 07:48:02 +0000
ROA not before: Thu 02 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200533
IP address blocks: 185.117.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:57:bc:36:9a:f5:26:b5:98:bb:45:5f:85:01:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df2782e6333692cbaa291d9987922f860193ee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:d4:6e:fd:86:4b:9f:e5:96:ad:60:8a:ac:
a3:52:e9:8e:23:e3:d6:21:be:d9:63:02:b5:5d:a1:
0f:8a:ae:02:f1:03:41:ab:51:0a:1c:b4:62:a9:cb:
9a:33:47:d3:18:0f:39:3b:e3:8e:58:9a:a7:ed:10:
0d:03:d6:e6:83:d5:57:00:47:47:98:1d:73:44:50:
13:a3:d2:40:22:1c:be:8d:50:72:d7:3c:0b:a0:2e:
52:66:fd:15:1e:84:19:4d:c2:40:a1:0e:07:24:6d:
93:88:11:a5:37:4b:6c:2a:1b:82:d0:a8:fa:92:6a:
cf:8e:f8:78:8c:2a:c5:9b:67:e6:16:ac:08:a7:76:
69:a1:54:6a:51:27:40:41:c0:c3:cf:23:66:46:c5:
21:9b:7a:16:3e:f0:f2:91:ad:13:a4:ba:0b:6b:61:
0c:53:1e:85:dc:d6:23:c8:a8:61:a2:3e:0b:5c:e3:
28:a6:d7:2d:b9:72:48:b5:00:ef:22:6a:59:18:c3:
30:a8:4e:d9:6e:da:cd:f0:86:22:f5:b6:a8:15:4b:
87:12:0d:26:c5:da:eb:37:5c:6e:24:36:d5:6c:24:
16:f7:0a:42:0a:68:06:a3:b2:cf:10:5b:a5:2f:4a:
ff:28:52:2c:f4:05:81:ca:eb:29:c2:bd:77:9e:1a:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:82:E6:33:36:92:CB:AA:29:1D:99:87:92:2F:86:01:93:EE:43
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8e:8c:87:99:f7:b8:91:96:97:8c:a1:d4:63:5a:a2:01:63:
3d:d8:17:c9:6c:71:17:31:15:69:4f:15:e8:5f:49:7c:cb:7b:
d5:75:ed:4f:23:63:79:b7:5d:90:a0:2d:d9:c2:98:f9:c0:ac:
c0:2b:dc:1e:80:04:9c:7e:07:69:9b:62:28:9a:b8:f6:9a:92:
ca:29:01:e4:c4:13:b4:e5:12:04:70:be:cb:75:67:f6:54:b6:
5a:c7:4b:cf:5b:b0:8a:a7:92:ef:92:1c:60:e2:53:8a:62:b2:
5e:a8:db:d4:f4:3f:f0:64:62:82:df:12:41:da:be:50:dc:7e:
f9:6d:51:82:bf:07:58:d6:3d:f4:a6:3c:86:ca:1a:02:22:35:
96:e1:42:5c:09:35:03:ac:bb:52:da:6d:66:4e:26:94:42:93:
8b:0b:07:60:c0:fa:76:ea:f1:5e:3d:3a:23:2d:f6:6c:20:a8:
19:e5:ca:0f:4c:0f:a2:ad:29:0a:84:0e:2d:7d:4a:d9:f6:94:
e3:e8:9c:05:e4:73:07:92:10:90:58:3e:75:2c:c0:c2:90:1e:
9d:44:24:c0:20:6c:d8:8d:32:27:6a:fd:e3:8f:72:e6:d8:e3:
52:54:78:a7:38:90:02:3e:20:f2:cf:c6:4b:b9:b3:41:c7:df:
81:25:fa:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/Fe8Npr1JrWYu0VfhQEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUwMTAyMDc0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjI3ODJlNjMzMzY5MmNiYWEyOTFkOTk4NzkyMmY4NjAxOTNlZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtajUbv2GS5/llq1giqyjUumOI+PW
Ib7ZYwK1XaEPiq4C8QNBq1EKHLRiqcuaM0fTGA85O+OOWJqn7RANA9bmg9VXAEdH
mB1zRFATo9JAIhy+jVBy1zwLoC5SZv0VHoQZTcJAoQ4HJG2TiBGlN0tsKhuC0Kj6
kmrPjvh4jCrFm2fmFqwIp3ZpoVRqUSdAQcDDzyNmRsUhm3oWPvDyka0TpLoLa2EM
Ux6F3NYjyKhhoj4LXOMoptctuXJItQDvImpZGMMwqE7ZbtrN8IYi9baoFUuHEg0m
xdrrN1xuJDbVbCQW9wpCCmgGo7LPEFulL0r/KFIs9AWByuspwr13nhqfdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN8nguYzNpLLqikdmYeSL4YBk+5DMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvM3llQzVqTTJrc3VxS1IyWmg1SXZoZ0dUN2tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXVSMA0G
CSqGSIb3DQEBCwUAA4IBAQBrjoyHmfe4kZaXjKHUY1qiAWM92BfJbHEXMRVpTxXo
X0l8y3vVde1PI2N5t12QoC3Zwpj5wKzAK9wegAScfgdpm2Iomrj2mpLKKQHkxBO0
5RIEcL7LdWf2VLZax0vPW7CKp5Lvkhxg4lOKYrJeqNvU9D/wZGKC3xJB2r5Q3H75
bVGCvwdY1j30pjyGyhoCIjWW4UJcCTUDrLtS2m1mTiaUQpOLCwdgwPp26vFePToj
LfZsIKgZ5coPTA+irSkKhA4tfUrZ9pTj6JwF5HMHkhCQWD51LMDCkB6dRCTAIGzY
jTInav3jj3Lm2ONSVHinOJACPiDyz8ZLubNBx9+BJfp5
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:12 2025 by rpki-client