Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/o_-CPWekkGbizNj3OifTY4NJDPc.roa
File: o_-CPWekkGbizNj3OifTY4NJDPc.roa (raw, json)
Hash identifier: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=
Subject key identifier: A3:FF:82:3D:67:A4:90:66:E2:CC:D8:F7:3A:27:D3:63:83:49:0C:F7
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 0194221FE229298568364E4235B1ECC75220
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/o_-CPWekkGbizNj3OifTY4NJDPc.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205796
IP address blocks: 185.206.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:29:29:85:68:36:4e:42:35:b1:ec:c7:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ff823d67a49066e2ccd8f73a27d36383490cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:8e:f7:7a:87:db:79:c0:7b:db:08:5c:37:
8a:9b:b3:29:72:60:de:54:39:88:20:79:17:c9:72:
f6:3e:d3:ae:3c:07:1d:7e:99:1d:89:b1:c6:22:0e:
24:1f:4a:6b:e8:58:21:64:ea:ad:11:be:db:69:8e:
65:43:f8:af:eb:f1:c7:74:13:ea:67:f4:d9:b4:cb:
85:76:41:c1:05:dc:75:d6:70:b7:98:e7:90:33:3c:
69:9b:cd:23:64:fa:f6:6e:f2:ea:8b:21:11:25:74:
ac:6a:2c:e4:5d:0f:a6:09:e5:9c:a3:23:dd:07:df:
34:ee:1e:c1:63:1f:2a:9d:dc:33:b0:90:10:ff:f0:
c9:de:61:03:56:68:91:f6:8c:08:6f:04:d5:f7:d9:
7e:a1:c7:ea:7c:3c:85:b1:99:34:d3:7d:d4:6b:1a:
64:53:76:db:21:7c:39:02:54:19:5d:95:62:ab:60:
5e:8a:c9:60:80:65:59:81:f2:5a:5f:fe:07:83:b3:
bf:64:8b:3b:6d:eb:0a:bf:6a:75:57:76:65:97:84:
ca:02:3c:a0:76:87:dc:92:32:d8:b8:a7:e8:3b:ef:
f0:86:1b:43:ea:ed:6a:23:93:72:7c:58:9f:9d:c9:
46:33:7e:c4:8a:70:c8:24:ab:b3:70:90:92:83:96:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:82:3D:67:A4:90:66:E2:CC:D8:F7:3A:27:D3:63:83:49:0C:F7
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/o_-CPWekkGbizNj3OifTY4NJDPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ed:50:30:f5:47:23:3d:cc:6e:a0:1c:5a:75:ce:ee:0d:3d:
b8:0d:2c:39:9e:f2:fe:4a:32:a3:a2:82:32:de:1a:82:fe:b9:
5e:0f:64:57:d9:d4:6f:2f:4d:1b:0d:98:8f:11:b6:68:ad:e4:
41:c3:72:55:ce:da:37:47:77:71:ed:cf:b9:c0:c7:cb:d4:f7:
f2:5a:21:b9:69:ea:c4:33:d6:7f:df:a7:7b:f8:23:9e:8d:d3:
00:14:0c:94:30:df:2b:4f:52:4b:17:0d:08:91:cb:a7:4c:56:
c0:7f:45:f2:f6:bd:ae:7d:8c:12:6a:43:a0:0e:96:19:09:90:
41:c5:a8:ee:6b:ec:31:fa:0a:69:2a:9e:97:d6:16:dc:72:2d:
10:70:a3:11:e2:80:83:75:e8:76:47:00:f3:84:a7:1a:0b:cb:
71:6e:ba:b9:0f:e1:6d:08:d6:39:94:d9:bc:25:47:53:0a:e4:
20:05:d7:e0:48:0d:bf:d5:ab:62:7c:b1:32:64:db:a8:b4:3c:
f3:4a:ba:80:af:7e:b9:71:06:90:6d:a1:48:f6:c2:ac:23:60:
cd:e1:19:1b:f0:fd:30:49:8b:d7:cd:aa:2f:b4:74:05:e1:3e:
4c:df:f5:97:f5:69:58:08:f0:74:64:32:0d:f4:97:21:c7:13:
1a:a9:c0:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH+IpKYVoNk5CNbHsx1IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi
NWQ1YzkwHhcNMjUwMTAxMTM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2ZmODIzZDY3YTQ5MDY2ZTJjY2Q4ZjczYTI3ZDM2MzgzNDkwY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRmO93qH23nAe9sIXDeKm7MpcmDe
VDmIIHkXyXL2PtOuPAcdfpkdibHGIg4kH0pr6FghZOqtEb7baY5lQ/iv6/HHdBPq
Z/TZtMuFdkHBBdx11nC3mOeQMzxpm80jZPr2bvLqiyERJXSsaizkXQ+mCeWcoyPd
B9807h7BYx8qndwzsJAQ//DJ3mEDVmiR9owIbwTV99l+ocfqfDyFsZk0033Uaxpk
U3bbIXw5AlQZXZViq2BeislggGVZgfJaX/4Hg7O/ZIs7besKv2p1V3Zll4TKAjyg
dofckjLYuKfoO+/whhtD6u1qI5NyfFifnclGM37EinDIJKuzcJCSg5ZoAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKP/gj1npJBm4szY9zon02ODSQz3MB8GA1UdIwQY
MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt
NDljNmZkYmJhZmI3LzEvb18tQ1BXZWtrR2Jpek5qM09pZlRZNE5KRFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3
LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc48MA0G
CSqGSIb3DQEBCwUAA4IBAQB67VAw9UcjPcxuoBxadc7uDT24DSw5nvL+SjKjooIy
3hqC/rleD2RX2dRvL00bDZiPEbZoreRBw3JVzto3R3dx7c+5wMfL1PfyWiG5aerE
M9Z/36d7+COejdMAFAyUMN8rT1JLFw0IkcunTFbAf0Xy9r2ufYwSakOgDpYZCZBB
xajua+wx+gppKp6X1hbcci0QcKMR4oCDdeh2RwDzhKcaC8txbrq5D+FtCNY5lNm8
JUdTCuQgBdfgSA2/1atifLEyZNuotDzzSrqAr365cQaQbaFI9sKsI2DN4Rkb8P0w
SYvXzaovtHQF4T5M3/WX9WlYCPB0ZDIN9JchxxMaqcDC
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:53 2025 by rpki-client