Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa
File: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (raw, json)
Hash identifier: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=
Subject key identifier: 21:21:2A:E4:97:37:99:C1:C9:87:3E:1A:0C:7F:B1:B8:7B:52:66:20
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 019420D5D12D8EC623F68FA966D2B02CA6FF
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205310
IP address blocks: 185.220.228.0/22 maxlen: 24
2a11:c840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d1:2d:8e:c6:23:f6:8f:a9:66:d2:b0:2c:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21212ae4973799c1c9873e1a0c7fb1b87b526620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:b4:0e:9b:07:21:f9:f4:06:ff:9e:ee:8e:
32:53:ee:a6:87:ce:6e:ac:7f:03:14:02:67:27:f4:
09:4e:aa:93:2a:52:3a:f2:38:72:5e:73:bd:05:6e:
06:d0:64:ae:4c:7a:7b:1a:bc:d4:af:1f:4e:23:71:
4b:02:7e:a2:2e:2e:c8:48:7d:50:fc:29:28:94:17:
fc:91:7d:3f:e9:7a:47:35:b4:a5:1b:7a:3a:63:cf:
ff:10:fd:fc:c9:15:55:8e:80:35:b9:6a:68:97:a2:
62:37:9b:8c:90:ae:c2:9d:7e:76:01:08:cd:7b:8c:
97:ad:d4:c6:1b:6c:4f:c7:f7:ec:d3:3e:ff:c1:e7:
bb:2b:89:fb:30:7c:c7:ac:49:f3:82:54:e9:df:17:
c8:04:1e:48:9b:a0:11:27:f0:30:33:e6:96:34:68:
76:d6:17:7d:1e:56:78:75:de:02:b0:f8:d2:60:63:
c1:b0:7f:ce:2b:3d:60:61:c8:5c:39:a7:23:08:51:
93:8a:29:91:3c:cb:23:12:99:23:24:7d:6e:29:f4:
ba:be:82:71:ee:33:b8:0a:76:80:52:25:fd:ad:18:
59:9c:c1:12:db:93:00:60:2d:4f:dc:91:b9:a2:42:
d5:19:22:f3:82:ac:9d:6c:f9:1b:09:df:76:c2:44:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:2A:E4:97:37:99:C1:C9:87:3E:1A:0C:7F:B1:B8:7B:52:66:20
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.228.0/22
IPv6:
2a11:c840::/48
Signature Algorithm: sha256WithRSAEncryption
2f:67:25:b3:cf:86:cc:b9:eb:9f:30:9b:2e:08:a1:58:71:24:
ea:a2:af:63:d9:46:3d:67:0d:b8:de:5f:7d:c8:b1:43:ea:27:
0b:28:db:bc:f2:e1:d0:a9:aa:5f:10:88:a2:f7:23:aa:9f:0e:
bc:50:7e:24:82:fc:86:0e:b0:5b:1d:c6:77:92:1e:4f:5b:d6:
75:0d:8d:35:fc:70:dd:a0:38:6a:e7:fe:81:76:bb:e8:98:ad:
1d:79:f0:30:e8:23:a3:c3:fe:cc:e4:34:47:3e:1a:93:a3:16:
a8:97:87:21:d4:ae:2b:57:d1:39:5f:a4:04:6a:60:cd:e9:c3:
aa:6a:98:b3:98:cd:f5:bb:72:ee:3a:a9:6a:6f:ac:60:61:bc:
f8:98:43:25:5b:7d:05:06:5f:f1:bc:85:15:c0:e5:96:0c:09:
0d:bc:9c:8a:d2:93:6a:57:66:72:e0:db:b4:19:40:c6:94:dd:
37:68:8a:f4:c6:b7:68:4a:82:7a:ae:a0:00:fd:68:69:08:04:
29:ac:e5:2f:0c:1e:72:94:58:1d:d1:33:07:ee:8c:e5:a8:9a:
94:22:03:98:f1:59:c2:69:15:05:89:c9:9f:18:4c:2d:f2:22:
3f:e9:c3:a0:d0:8b:1a:8e:18:c3:0e:bb:20:88:3c:91:b6:69:
bf:1d:14:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQg1dEtjsYj9o+pZtKwLKb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4
MmJjMTgwHhcNMjUwMTAxMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTIxMmFlNDk3Mzc5OWMxYzk4NzNlMWEwYzdmYjFiODdiNTI2NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24+0DpsHIfn0Bv+e7o4yU+6mh85u
rH8DFAJnJ/QJTqqTKlI68jhyXnO9BW4G0GSuTHp7GrzUrx9OI3FLAn6iLi7ISH1Q
/CkolBf8kX0/6XpHNbSlG3o6Y8//EP38yRVVjoA1uWpol6JiN5uMkK7CnX52AQjN
e4yXrdTGG2xPx/fs0z7/wee7K4n7MHzHrEnzglTp3xfIBB5Im6ARJ/AwM+aWNGh2
1hd9HlZ4dd4CsPjSYGPBsH/OKz1gYchcOacjCFGTiimRPMsjEpkjJH1uKfS6voJx
7jO4CnaAUiX9rRhZnMES25MAYC1P3JG5okLVGSLzgqydbPkbCd92wkTaqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCEhKuSXN5nByYc+Ggx/sbh7UmYgMB8GA1UdIwQY
MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt
MDFiN2UyNjJlZmYxLzEvSVNFcTVKYzNtY0hKaHo0YURILXh1SHRTWmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx
LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCudzkMA8E
AgACMAkDBwAqEchAAAAwDQYJKoZIhvcNAQELBQADggEBAC9nJbPPhsy5658wmy4I
oVhxJOqir2PZRj1nDbjeX33IsUPqJwso27zy4dCpql8QiKL3I6qfDrxQfiSC/IYO
sFsdxneSHk9b1nUNjTX8cN2gOGrn/oF2u+iYrR158DDoI6PD/szkNEc+GpOjFqiX
hyHUritX0TlfpARqYM3pw6pqmLOYzfW7cu46qWpvrGBhvPiYQyVbfQUGX/G8hRXA
5ZYMCQ28nIrSk2pXZnLg27QZQMaU3TdoivTGt2hKgnquoAD9aGkIBCms5S8MHnKU
WB3RMwfujOWompQiA5jxWcJpFQWJyZ8YTC3yIj/pw6DQixqOGMMOuyCIPJG2ab8d
FC0=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:15 2025 by rpki-client