Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/b7dBieR_P9kmLnGcxW0fyaZjeow.roa
File: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (raw, json)
Hash identifier: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=
Subject key identifier: 6F:B7:41:89:E4:7F:3F:D9:26:2E:71:9C:C5:6D:1F:C9:A6:63:7A:8C
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBEAD7A7D9C05B652004143D819780
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/b7dBieR_P9kmLnGcxW0fyaZjeow.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201206
IP address blocks: 83.171.236.0/24 maxlen: 24
83.171.237.0/24 maxlen: 24
83.171.238.0/24 maxlen: 24
83.171.239.0/24 maxlen: 24
185.82.20.0/24 maxlen: 24
185.82.21.0/24 maxlen: 24
185.82.22.0/24 maxlen: 24
185.82.23.0/24 maxlen: 24
185.185.24.0/24 maxlen: 24
185.185.25.0/24 maxlen: 24
185.185.26.0/24 maxlen: 24
185.185.27.0/24 maxlen: 24
193.57.60.0/24 maxlen: 24
193.57.61.0/24 maxlen: 24
193.57.62.0/24 maxlen: 24
193.57.63.0/24 maxlen: 24
2a05:8b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:d7:a7:d9:c0:5b:65:20:04:14:3d:81:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fb74189e47f3fd9262e719cc56d1fc9a6637a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:a3:39:d5:e4:ce:4f:31:b4:0d:b8:2e:ea:
59:b0:aa:cb:66:ea:76:b5:bd:4c:10:ec:58:ba:f2:
26:21:1d:e9:ae:fe:d1:9c:c1:a0:26:68:df:d2:fc:
d5:e4:43:c8:0d:4e:3e:8c:be:f5:24:5d:cc:35:88:
56:74:52:8e:44:9b:ff:01:2b:c8:4b:82:c2:96:b0:
aa:9d:a3:bc:80:5f:f6:97:df:14:67:a7:00:8d:19:
a0:74:8c:2b:8d:ee:ef:d0:0a:87:bd:46:4d:3d:3e:
7c:c9:47:78:c4:f0:4c:bb:b6:5d:16:e1:92:b8:80:
2f:37:11:2b:75:13:76:90:d7:66:67:c9:3d:48:3b:
d7:c9:f7:74:c5:02:09:28:f5:90:14:4f:60:1a:c4:
6e:ad:72:3c:95:56:c1:f0:08:57:e7:f7:d3:4b:d8:
41:7c:4d:e6:74:bd:4e:41:f9:06:8a:e2:54:c6:fb:
39:d7:6d:31:8a:96:2a:b2:10:6b:fa:19:61:95:98:
b2:4b:df:7a:fe:a1:d8:55:c7:78:54:48:71:07:73:
71:15:e0:7d:73:83:f3:ea:49:12:9e:ab:8e:34:5c:
21:33:ab:1a:99:95:e1:68:c1:f3:ea:58:10:bc:96:
40:d9:fa:8b:2c:62:d4:64:f9:36:bc:43:c8:d6:d8:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:41:89:E4:7F:3F:D9:26:2E:71:9C:C5:6D:1F:C9:A6:63:7A:8C
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/b7dBieR_P9kmLnGcxW0fyaZjeow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.236.0/22
185.82.20.0/22
185.185.24.0/22
193.57.60.0/22
IPv6:
2a05:8b80::/29
Signature Algorithm: sha256WithRSAEncryption
94:6d:f1:4d:12:65:2b:4a:5f:0c:b7:b2:49:23:1c:06:3d:3d:
47:b8:da:ad:20:bd:93:da:8f:7c:76:83:59:bc:19:4e:b5:02:
b2:da:3d:4a:77:05:7c:0f:68:7c:3e:bd:d2:1c:cd:73:14:7a:
dd:65:e2:07:d8:77:a7:cc:98:2f:7f:0e:97:e3:85:d8:bf:f1:
2a:38:5f:e4:6d:34:0c:27:82:49:4e:7d:a5:57:45:5b:fb:ee:
e5:6b:26:73:2c:77:99:76:40:25:65:c2:ee:0a:46:bf:b3:7a:
ed:4d:d7:ba:50:a1:4e:cd:69:b1:a5:d4:b6:48:0f:7d:1e:d1:
eb:30:13:02:12:7d:44:49:ac:e1:55:23:ec:f1:7a:ab:63:6d:
40:e0:c4:dc:ca:97:5b:b6:9e:29:24:db:87:52:f2:4c:57:13:
17:87:0c:2b:23:93:31:80:f3:8d:8d:0d:7a:fc:6f:fd:08:0f:
55:67:3a:2b:c5:7b:60:bd:45:42:31:ca:ed:9d:bc:fb:ca:9b:
07:ce:70:48:25:d1:66:76:fd:47:db:b3:73:ba:b8:60:f0:58:
7c:c7:71:48:92:c8:70:22:f9:df:4c:7b:b9:7c:88:96:bb:e1:
58:16:c2:eb:f8:04:cc:62:c6:be:f2:7d:44:14:49:c6:2e:db:
3c:3f:0b:a0
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQi++rXp9nAW2UgBBQ9gZeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjUwMTAxMTc0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmI3NDE4OWU0N2YzZmQ5MjYyZTcxOWNjNTZkMWZjOWE2NjM3YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsyjOdXkzk8xtA24LupZsKrLZup2
tb1MEOxYuvImIR3prv7RnMGgJmjf0vzV5EPIDU4+jL71JF3MNYhWdFKORJv/ASvI
S4LClrCqnaO8gF/2l98UZ6cAjRmgdIwrje7v0AqHvUZNPT58yUd4xPBMu7ZdFuGS
uIAvNxErdRN2kNdmZ8k9SDvXyfd0xQIJKPWQFE9gGsRurXI8lVbB8AhX5/fTS9hB
fE3mdL1OQfkGiuJUxvs5120xipYqshBr+hlhlZiyS996/qHYVcd4VEhxB3NxFeB9
c4Pz6kkSnquONFwhM6samZXhaMHz6lgQvJZA2fqLLGLUZPk2vEPI1tjqXQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFG+3QYnkfz/ZJi5xnMVtH8mmY3qMMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvYjdkQmllUl9QOWttTG5HY3hXMGZ5YVpqZW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCU6vsAwQC
uVIUAwQCubkYAwQCwTk8MA0EAgACMAcDBQMqBYuAMA0GCSqGSIb3DQEBCwUAA4IB
AQCUbfFNEmUrSl8Mt7JJIxwGPT1HuNqtIL2T2o98doNZvBlOtQKy2j1KdwV8D2h8
Pr3SHM1zFHrdZeIH2HenzJgvfw6X44XYv/EqOF/kbTQMJ4JJTn2lV0Vb++7layZz
LHeZdkAlZcLuCka/s3rtTde6UKFOzWmxpdS2SA99HtHrMBMCEn1ESazhVSPs8Xqr
Y21A4MTcypdbtp4pJNuHUvJMVxMXhwwrI5MxgPONjQ16/G/9CA9VZzorxXtgvUVC
Mcrtnbz7ypsHznBIJdFmdv1H27Nzurhg8Fh8x3FIkshwIvnfTHu5fIiWu+FYFsLr
+ATMYsa+8n1EFEnGLts8Pwug
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:41 2025 by rpki-client