Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa
File: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (raw, json)
Hash identifier: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=
Subject key identifier: 08:B7:83:5A:1D:FD:35:D2:EF:C9:04:BF:8B:73:70:27:D0:83:17:90
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01953CDA6D872F5CE8C9E1FBB35018B90340
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa
Signing time: Tue 25 Feb 2025 11:25:02 +0000
ROA not before: Tue 25 Feb 2025 11:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:da:6d:87:2f:5c:e8:c9:e1:fb:b3:50:18:b9:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Feb 25 11:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b7835a1dfd35d2efc904bf8b737027d0831790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:b8:29:9e:39:ef:a4:e0:1b:8e:3a:22:99:
ec:42:ae:b3:a4:24:e0:6b:a8:95:7e:08:0f:2d:a5:
ff:0c:48:7c:8e:66:22:a4:bb:95:5f:f3:bc:ba:82:
37:e2:ca:85:fb:70:8c:5c:20:9b:e5:72:d5:7a:62:
cc:50:c4:47:6e:6f:b4:11:6f:ca:87:29:d6:4b:2a:
80:c0:6e:ca:21:ce:a7:d6:31:d6:53:4a:8f:44:af:
4a:d6:8f:2c:f4:f2:b6:b6:d0:ee:b5:58:23:f9:85:
bd:e9:c6:ad:38:2c:04:4b:85:16:4d:9b:da:46:ff:
29:a5:e2:8f:6b:13:eb:26:d1:99:f5:fb:1b:4f:bd:
86:ec:e9:60:c7:00:d3:7f:5f:0f:ae:b9:10:26:96:
c1:1e:03:2e:e1:7d:a4:28:1d:a1:72:4c:44:99:1f:
47:d8:74:f4:e1:1f:30:99:af:6d:45:22:cf:80:03:
2c:ab:87:29:e9:2f:43:b6:d0:df:41:0c:5e:94:49:
2b:53:ca:2f:67:90:9f:1f:29:a6:15:2a:21:d8:bc:
9c:21:ae:05:25:33:c9:63:71:42:4d:12:5a:dd:d1:
6d:7d:71:cc:32:fa:24:b0:ba:0b:ca:fd:d9:fa:c5:
b3:4c:46:29:e5:be:d1:81:88:d4:43:4c:c1:bf:f7:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:83:5A:1D:FD:35:D2:EF:C9:04:BF:8B:73:70:27:D0:83:17:90
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7b:fb:5c:bc:4c:cd:90:e2:c0:8c:a9:b4:9e:a4:da:a4:39:
e0:43:80:72:13:eb:0f:10:1d:6c:28:b5:a9:a3:ec:09:cc:fd:
ea:63:04:ad:57:f3:99:6d:65:50:6d:b4:b6:26:2c:4d:0d:19:
12:10:d1:55:ba:f5:17:bd:c7:94:bd:c0:52:40:f3:97:7e:38:
36:fd:bb:fe:2d:2f:62:9a:cb:22:4b:a9:fa:11:e4:62:07:ff:
e6:86:58:f3:90:d2:ab:45:0d:06:7f:34:08:12:72:1e:c6:a9:
1e:0f:ec:2d:c5:6f:6b:30:d4:3e:1a:93:7e:c6:c6:cc:fe:4a:
78:5b:50:30:60:d0:a8:3d:a5:22:28:f7:bd:8a:47:8e:30:52:
ca:a3:82:10:c6:0f:90:0b:db:e0:09:1b:a9:a5:27:06:1e:d3:
0c:b4:f3:a5:02:1c:69:ec:ef:7e:c2:9d:26:bf:d6:64:8d:dd:
6a:c2:3d:84:ff:b3:50:22:94:3f:6d:af:e0:60:4e:be:8a:d8:
3a:fa:ae:55:b2:9b:a1:29:5c:3e:23:0a:c3:c5:64:08:0b:c8:
ce:0e:79:98:38:3f:6b:e0:f9:db:cf:d9:4a:32:ec:6f:9d:da:
6f:b8:52:41:46:c1:0b:90:cd:8b:19:cf:98:1d:8b:b6:fc:af:
48:90:17:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU82m2HL1zoyeH7s1AYuQNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjUwMjI1MTEyNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGI3ODM1YTFkZmQzNWQyZWZjOTA0YmY4YjczNzAyN2QwODMxNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms64KZ4576TgG446IpnsQq6zpCTg
a6iVfggPLaX/DEh8jmYipLuVX/O8uoI34sqF+3CMXCCb5XLVemLMUMRHbm+0EW/K
hynWSyqAwG7KIc6n1jHWU0qPRK9K1o8s9PK2ttDutVgj+YW96catOCwES4UWTZva
Rv8ppeKPaxPrJtGZ9fsbT72G7OlgxwDTf18PrrkQJpbBHgMu4X2kKB2hckxEmR9H
2HT04R8wma9tRSLPgAMsq4cp6S9DttDfQQxelEkrU8ovZ5CfHymmFSoh2LycIa4F
JTPJY3FCTRJa3dFtfXHMMvoksLoLyv3Z+sWzTEYp5b7RgYjUQ0zBv/ckoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAi3g1od/TXS78kEv4tzcCfQgxeQMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvQ0xlRFdoMzlOZEx2eVFTX2kzTndKOUNERjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQBMA0G
CSqGSIb3DQEBCwUAA4IBAQCDe/tcvEzNkOLAjKm0nqTapDngQ4ByE+sPEB1sKLWp
o+wJzP3qYwStV/OZbWVQbbS2JixNDRkSENFVuvUXvceUvcBSQPOXfjg2/bv+LS9i
mssiS6n6EeRiB//mhljzkNKrRQ0GfzQIEnIexqkeD+wtxW9rMNQ+GpN+xsbM/kp4
W1AwYNCoPaUiKPe9ikeOMFLKo4IQxg+QC9vgCRuppScGHtMMtPOlAhxp7O9+wp0m
v9Zkjd1qwj2E/7NQIpQ/ba/gYE6+itg6+q5VspuhKVw+IwrDxWQIC8jODnmYOD9r
4Pnbz9lKMuxvndpvuFJBRsELkM2LGc+YHYu2/K9IkBcE
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:18:24 2025 by rpki-client