Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/kskh1ZO_la7WXFGA4d2IKKXIwWc.roa
File: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (raw, json)
Hash identifier: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=
Subject key identifier: 92:C9:21:D5:93:BF:95:AE:D6:5C:51:80:E1:DD:88:28:A5:C8:C1:67
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0194236A026BBA9F3518362BA2A710AEAC9A
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/kskh1ZO_la7WXFGA4d2IKKXIwWc.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206659
IP address blocks: 185.168.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:02:6b:ba:9f:35:18:36:2b:a2:a7:10:ae:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c921d593bf95aed65c5180e1dd8828a5c8c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:cf:df:9d:d8:5a:2d:2d:a0:a3:92:d6:af:
52:93:33:7f:68:03:10:1b:98:2f:8e:3c:54:26:82:
c9:31:de:6c:6c:a9:4e:86:44:ca:45:a2:5d:e0:88:
26:67:98:2d:93:a3:fe:af:5d:d4:72:a2:9d:29:fe:
2c:2f:24:a7:ba:e8:b4:ca:f7:4b:0c:fb:a5:27:c6:
56:68:3b:d9:0c:65:1a:69:81:43:de:48:17:90:d3:
04:bb:85:74:db:e0:5d:b4:68:26:52:c2:36:d6:02:
4f:00:d7:b7:96:1c:b6:11:d9:14:29:e0:72:0d:fc:
ec:1a:0f:09:92:2e:1b:bf:a1:4c:65:9f:46:45:d8:
4c:fc:51:99:4b:1e:73:a4:7b:e4:07:b5:3f:04:35:
d0:91:db:9a:72:88:59:ad:62:bf:1a:78:66:07:f9:
81:d3:73:b9:38:7d:ec:f0:3b:60:f5:d3:83:49:2a:
82:44:68:8a:13:2c:9d:21:da:d6:be:16:ee:5e:13:
d2:58:db:63:47:01:24:3c:6e:25:dd:fb:3b:f4:eb:
5a:6f:04:f4:98:ab:bc:f9:02:14:01:af:58:d6:1f:
87:a4:fa:6f:ea:a6:d4:df:49:f4:20:86:a0:28:2a:
97:2a:13:81:0f:d5:9d:7c:64:5e:40:7a:83:96:b4:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C9:21:D5:93:BF:95:AE:D6:5C:51:80:E1:DD:88:28:A5:C8:C1:67
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/kskh1ZO_la7WXFGA4d2IKKXIwWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6e:62:7b:c4:86:1a:fb:dd:11:4b:69:9d:82:65:fa:5c:96:
10:ff:fa:ad:53:f8:a8:f1:1a:b3:cf:be:7e:78:d9:d2:0b:c5:
73:e0:0c:be:57:cb:24:67:af:7a:56:dc:48:42:c0:3c:b2:20:
dd:20:b3:a6:07:9e:3f:2f:a7:05:7e:e3:c6:34:49:78:cc:e8:
8c:85:fe:ef:f3:43:87:a5:24:4b:4d:d0:15:e1:a4:15:10:5d:
c4:f4:8b:91:f5:e2:c0:3b:af:bc:66:6a:e8:8d:dd:41:cc:78:
85:ac:02:5c:fd:99:e1:c4:9a:df:ea:64:3b:77:75:68:90:ac:
4c:89:66:75:02:e0:54:69:47:82:57:21:96:a3:88:73:4c:50:
ff:3e:d1:86:e3:dd:0f:58:d0:fe:fe:5d:13:df:d7:df:f4:ae:
b1:e5:81:8c:2d:2c:ea:47:7a:35:5c:1b:c4:dd:e0:a7:b8:b4:
13:9b:cc:99:e0:38:c8:73:fd:45:58:27:64:fb:32:da:f7:5f:
d3:e1:d3:13:44:30:1c:ef:9f:bc:b7:ca:22:d5:9f:23:3e:6d:
8e:9a:c1:f5:0c:9d:e9:0d:42:10:df:48:25:7d:87:96:48:46:
75:31:f3:68:da:af:d3:9a:5d:f1:f3:57:7e:83:d7:8c:d7:e0:
20:5e:38:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagJrup81GDYroqcQrqyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm
NmVhYWUwHhcNMjUwMTAxMTk0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmM5MjFkNTkzYmY5NWFlZDY1YzUxODBlMWRkODgyOGE1YzhjMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc3P353YWi0toKOS1q9SkzN/aAMQ
G5gvjjxUJoLJMd5sbKlOhkTKRaJd4IgmZ5gtk6P+r13UcqKdKf4sLySnuui0yvdL
DPulJ8ZWaDvZDGUaaYFD3kgXkNMEu4V02+BdtGgmUsI21gJPANe3lhy2EdkUKeBy
DfzsGg8Jki4bv6FMZZ9GRdhM/FGZSx5zpHvkB7U/BDXQkduacohZrWK/GnhmB/mB
03O5OH3s8Dtg9dODSSqCRGiKEyydIdrWvhbuXhPSWNtjRwEkPG4l3fs79OtabwT0
mKu8+QIUAa9Y1h+HpPpv6qbU30n0IIagKCqXKhOBD9WdfGReQHqDlrRFbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLJIdWTv5Wu1lxRgOHdiCilyMFnMB8GA1UdIwQY
MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt
ZmY1ZjFhZDY5MjY2LzEva3NraDFaT19sYTdXWEZHQTRkMklLS1hJd1djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2
LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaglMA0G
CSqGSIb3DQEBCwUAA4IBAQAqbmJ7xIYa+90RS2mdgmX6XJYQ//qtU/io8Rqzz75+
eNnSC8Vz4Ay+V8skZ696VtxIQsA8siDdILOmB54/L6cFfuPGNEl4zOiMhf7v80OH
pSRLTdAV4aQVEF3E9IuR9eLAO6+8Zmrojd1BzHiFrAJc/ZnhxJrf6mQ7d3VokKxM
iWZ1AuBUaUeCVyGWo4hzTFD/PtGG490PWND+/l0T39ff9K6x5YGMLSzqR3o1XBvE
3eCnuLQTm8yZ4DjIc/1FWCdk+zLa91/T4dMTRDAc75+8t8oi1Z8jPm2OmsH1DJ3p
DUIQ30glfYeWSEZ1MfNo2q/Tml3x81d+g9eM1+AgXjhk
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:32:08 2025 by rpki-client