Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/p_ZOqooaB4FZLqO_coSsHFoaxrI.roa
File: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (raw, json)
Hash identifier: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=
Subject key identifier: A7:F6:4E:AA:8A:1A:07:81:59:2E:A3:BF:72:84:AC:1C:5A:1A:C6:B2
Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411
Certificate serial: 01942823A918508B17AD21E5FD6636B0AF4C
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/p_ZOqooaB4FZLqO_coSsHFoaxrI.roa
Signing time: Thu 02 Jan 2025 17:50:12 +0000
ROA not before: Thu 02 Jan 2025 17:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206643
IP address blocks: 185.180.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a9:18:50:8b:17:ad:21:e5:fd:66:36:b0:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915558c6897fea224855cf60381857354708411
Validity
Not Before: Jan 2 17:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f64eaa8a1a0781592ea3bf7284ac1c5a1ac6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:fb:ab:16:d1:58:94:db:bb:ac:76:0d:5a:
95:74:79:cb:7d:b3:1a:19:d3:1d:79:98:22:96:dc:
63:ed:74:19:0f:ce:ef:31:ca:12:59:70:96:61:9b:
15:5f:6c:3c:4e:b4:4c:a1:da:00:b3:03:5f:93:96:
6a:ca:e5:d9:01:cf:b4:45:8d:f5:48:3b:db:bb:ea:
a2:e3:c8:7e:18:bf:aa:51:92:7f:0f:0b:9a:aa:89:
a4:5e:1a:f1:32:9e:ce:e1:91:49:e3:be:b3:a7:4c:
20:24:31:c6:b4:03:c4:c7:51:a3:6b:e4:ef:90:ba:
68:04:99:cb:07:72:17:26:bd:5f:54:46:b8:e5:8c:
8d:c9:c5:bc:7b:c2:98:e0:e5:0e:9e:88:c2:b2:81:
54:27:eb:a0:30:db:3a:23:cd:d6:1f:cb:3a:54:c5:
dc:0a:89:51:6e:28:7e:26:1d:12:de:57:ab:40:b2:
a3:30:90:f4:37:f0:85:d4:4d:dd:4a:1e:54:6f:59:
fe:eb:d5:d4:3e:fe:fb:92:6b:e3:0e:e3:87:5d:05:
61:6a:8a:8c:6f:e4:ef:7f:25:71:67:4b:fb:70:c8:
f7:a8:ba:77:d2:63:53:4f:cf:f3:42:54:f7:a3:3a:
a0:3f:9d:06:f8:a2:83:43:20:55:8c:d3:0b:ac:e4:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:4E:AA:8A:1A:07:81:59:2E:A3:BF:72:84:AC:1C:5A:1A:C6:B2
X509v3 Authority Key Identifier:
keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/p_ZOqooaB4FZLqO_coSsHFoaxrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:49:aa:76:19:f8:26:82:94:df:64:97:f5:be:ce:55:1e:3d:
ac:ab:23:0d:4a:19:c3:ca:7b:da:51:b0:be:b7:2a:28:e9:4b:
05:43:18:b1:8f:25:3c:44:c9:00:42:db:85:27:ac:53:d1:4e:
32:6b:cf:a5:50:23:69:e9:39:fa:87:67:94:89:a5:57:32:26:
0d:0a:ff:a2:a2:08:bb:1c:22:c0:5e:1a:75:6c:13:4d:25:da:
0a:b2:ff:bb:65:a3:70:b0:21:51:f8:b8:18:59:f3:7e:5b:df:
4c:e5:b2:4c:ea:1f:49:b9:40:ee:4f:19:3f:f5:50:0f:59:5e:
37:7b:02:e2:2a:cd:fb:e2:74:bb:d8:f6:8a:67:8e:c8:49:ab:
0a:ce:6b:74:65:fc:55:c5:08:30:f0:71:95:6d:67:de:4f:71:
a8:ad:ec:28:4b:3e:c7:61:cb:1a:99:1d:33:da:aa:f1:9d:1f:
24:14:db:ea:3d:4c:a1:27:f5:44:69:83:77:51:94:20:02:8a:
de:ef:d8:f0:78:79:da:28:e9:d8:b3:1c:ef:13:83:85:70:e2:
41:79:0f:0d:7a:b8:18:f0:06:e4:14:4d:5b:ed:72:1d:22:f2:
dd:03:0a:06:3e:49:a9:9d:7b:3a:76:35:ca:13:f9:a6:f5:dd:
aa:4d:6d:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI6kYUIsXrSHl/WY2sK9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTU1NThjNjg5N2ZlYTIyNDg1NWNmNjAzODE4NTczNTQ3
MDg0MTEwHhcNMjUwMTAyMTc1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2Y2NGVhYThhMWEwNzgxNTkyZWEzYmY3Mjg0YWMxYzVhMWFjNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmb7qxbRWJTbu6x2DVqVdHnLfbMa
GdMdeZgiltxj7XQZD87vMcoSWXCWYZsVX2w8TrRModoAswNfk5ZqyuXZAc+0RY31
SDvbu+qi48h+GL+qUZJ/DwuaqomkXhrxMp7O4ZFJ476zp0wgJDHGtAPEx1Gja+Tv
kLpoBJnLB3IXJr1fVEa45YyNycW8e8KY4OUOnojCsoFUJ+ugMNs6I83WH8s6VMXc
ColRbih+Jh0S3lerQLKjMJD0N/CF1E3dSh5Ub1n+69XUPv77kmvjDuOHXQVhaoqM
b+TvfyVxZ0v7cMj3qLp30mNTT8/zQlT3ozqgP50G+KKDQyBVjNMLrOTADwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKf2TqqKGgeBWS6jv3KErBxaGsayMB8GA1UdIwQY
MBaAFJkVVYxol/6iJIVc9gOBhXNUcIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUt
MTY1Yzk2ZmY5NTI5LzEvcF9aT3Fvb2FCNEZaTHFPX2NvU3NIRm9heHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUtMTY1Yzk2ZmY5NTI5
LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubRoMA0G
CSqGSIb3DQEBCwUAA4IBAQBeSap2GfgmgpTfZJf1vs5VHj2sqyMNShnDynvaUbC+
tyoo6UsFQxixjyU8RMkAQtuFJ6xT0U4ya8+lUCNp6Tn6h2eUiaVXMiYNCv+iogi7
HCLAXhp1bBNNJdoKsv+7ZaNwsCFR+LgYWfN+W99M5bJM6h9JuUDuTxk/9VAPWV43
ewLiKs374nS72PaKZ47ISasKzmt0ZfxVxQgw8HGVbWfeT3GorewoSz7HYcsamR0z
2qrxnR8kFNvqPUyhJ/VEaYN3UZQgAore79jweHnaKOnYsxzvE4OFcOJBeQ8NergY
8AbkFE1b7XIdIvLdAwoGPkmpnXs6djXKE/mm9d2qTW0k
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:31 2025 by rpki-client