Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/1GqtXlpLHOQrMWA32pTa86lAWYQ.roa
File: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (raw, json)
Hash identifier: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=
Subject key identifier: D4:6A:AD:5E:5A:4B:1C:E4:2B:31:60:37:DA:94:DA:F3:A9:40:59:84
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 019426D9B64A7BC616D2E9D4EFCFCF635888
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/1GqtXlpLHOQrMWA32pTa86lAWYQ.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205160
IP address blocks: 185.237.167.0/24 maxlen: 24
2a11:9940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b6:4a:7b:c6:16:d2:e9:d4:ef:cf:cf:63:58:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46aad5e5a4b1ce42b316037da94daf3a9405984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:e8:4b:16:7f:d0:76:ec:b7:fb:1b:1d:68:
91:69:13:c0:df:8a:95:61:0a:40:b2:c7:04:9d:fb:
62:d4:eb:5c:3b:52:ac:48:d6:99:60:c1:15:f2:6c:
7d:b2:53:96:09:7a:16:ed:5f:54:5b:74:b3:2b:e8:
a8:6c:ba:c5:10:f2:97:f7:96:73:35:10:02:6d:35:
d3:2a:cd:ae:a9:0a:01:14:19:ef:bc:8b:38:ce:74:
38:de:1d:15:a2:8c:f3:f2:3a:2a:e6:d1:89:e4:b2:
45:32:8a:98:b2:96:14:41:64:36:ae:00:d3:7e:83:
a8:f1:d9:74:06:ef:e7:08:0f:fe:b1:a2:33:67:4c:
2e:5e:a4:3d:59:b9:41:c7:4b:78:2c:8e:13:6a:c8:
62:89:2f:d3:e3:7e:e7:07:40:ee:0f:48:df:42:89:
9c:ad:4e:18:05:96:09:26:28:6f:18:84:18:19:e8:
a1:57:9a:19:29:53:cc:94:c5:04:82:9a:db:83:92:
f5:14:94:08:eb:2e:6f:52:ad:9b:59:08:ca:19:fe:
6b:7e:08:40:d4:22:74:72:cd:78:14:f7:a9:34:3a:
9c:54:4c:a7:18:57:dd:3b:e5:b2:b0:17:fd:2f:80:
c5:74:85:04:55:f0:dc:ab:3c:a7:7e:3b:12:28:cb:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:AD:5E:5A:4B:1C:E4:2B:31:60:37:DA:94:DA:F3:A9:40:59:84
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/1GqtXlpLHOQrMWA32pTa86lAWYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.167.0/24
IPv6:
2a11:9940::/32
Signature Algorithm: sha256WithRSAEncryption
8d:c1:16:24:c3:ac:cc:c9:dc:fe:29:51:27:e2:29:d2:21:01:
30:c0:b9:f0:92:d7:94:36:60:e5:f6:91:5f:17:36:70:e5:e3:
2b:0e:9f:d1:b6:f6:7e:c0:98:10:f8:cd:b2:b1:96:95:3a:d9:
38:c6:96:32:a1:37:96:78:ab:03:96:2b:68:89:88:d8:a1:a8:
2d:72:79:09:a9:27:f1:f0:c2:1c:84:7b:bc:10:fe:10:a0:a9:
de:2f:2f:a6:0d:60:2a:90:46:7b:a9:4f:26:22:00:1f:37:33:
79:c7:33:a3:07:58:15:72:c8:4d:e1:0a:42:a0:c9:cc:a8:83:
c5:f1:6f:ce:e8:0a:43:8a:ec:f6:d4:0b:85:37:d3:a8:32:9e:
6f:fa:d6:d3:ea:c3:b2:f1:70:68:ed:9a:88:14:7b:5a:2a:96:
0e:9d:44:1e:18:0c:3c:43:34:dc:19:f8:de:1a:cd:36:84:90:
fd:58:33:1b:a7:22:fa:2d:9e:91:93:a1:3e:b9:80:66:c5:bc:
c7:74:e2:85:2c:cd:74:ca:ed:a2:0c:a8:06:76:7c:a4:e0:1e:
43:b6:bd:01:ee:42:b0:22:2e:49:e0:da:62:01:e5:02:67:ae:
4b:4e:43:5a:0a:28:9a:e0:82:ce:52:57:c6:c0:78:c5:ff:62:
13:26:07:d3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2bZKe8YW0unU78/PY1iIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk
Y2JiODEwHhcNMjUwMTAyMTE0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDZhYWQ1ZTVhNGIxY2U0MmIzMTYwMzdkYTk0ZGFmM2E5NDA1OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NHoSxZ/0Hbst/sbHWiRaRPA34qV
YQpAsscEnfti1OtcO1KsSNaZYMEV8mx9slOWCXoW7V9UW3SzK+iobLrFEPKX95Zz
NRACbTXTKs2uqQoBFBnvvIs4znQ43h0Voozz8joq5tGJ5LJFMoqYspYUQWQ2rgDT
foOo8dl0Bu/nCA/+saIzZ0wuXqQ9WblBx0t4LI4TashiiS/T437nB0DuD0jfQomc
rU4YBZYJJihvGIQYGeihV5oZKVPMlMUEgprbg5L1FJQI6y5vUq2bWQjKGf5rfghA
1CJ0cs14FPepNDqcVEynGFfdO+WysBf9L4DFdIUEVfDcqzynfjsSKMs/iwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNRqrV5aSxzkKzFgN9qU2vOpQFmEMB8GA1UdIwQY
MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt
OTg1MTgyMDAxZTkyLzEvMUdxdFhscExIT1FyTVdBMzJwVGE4NmxBV1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky
LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAue2nMA0E
AgACMAcDBQAqEZlAMA0GCSqGSIb3DQEBCwUAA4IBAQCNwRYkw6zMydz+KVEn4inS
IQEwwLnwkteUNmDl9pFfFzZw5eMrDp/RtvZ+wJgQ+M2ysZaVOtk4xpYyoTeWeKsD
litoiYjYoagtcnkJqSfx8MIchHu8EP4QoKneLy+mDWAqkEZ7qU8mIgAfNzN5xzOj
B1gVcshN4QpCoMnMqIPF8W/O6ApDiuz21AuFN9OoMp5v+tbT6sOy8XBo7ZqIFHta
KpYOnUQeGAw8QzTcGfjeGs02hJD9WDMbpyL6LZ6Rk6E+uYBmxbzHdOKFLM10yu2i
DKgGdnyk4B5Dtr0B7kKwIi5J4NpiAeUCZ65LTkNaCiia4ILOUlfGwHjF/2ITJgfT
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:21 2025 by rpki-client