Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/T-_3CIyQbqlGg305SxQy5ftJI7w.roa
File: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (raw, json)
Hash identifier: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=
Subject key identifier: 4F:EF:F7:08:8C:90:6E:A9:46:83:7D:39:4B:14:32:E5:FB:49:23:BC
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 0194266C2F745C63FD36AB515C805ADA2847
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/T-_3CIyQbqlGg305SxQy5ftJI7w.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 185.129.190.0/23 maxlen: 23
185.129.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2f:74:5c:63:fd:36:ab:51:5c:80:5a:da:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4feff7088c906ea946837d394b1432e5fb4923bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:90:2e:0a:ce:1a:79:cc:0b:37:63:57:1a:
88:07:d8:a4:9a:65:eb:70:cf:07:d8:26:11:66:a4:
39:33:e2:fb:a4:b2:21:82:87:8c:6c:0b:26:e9:c4:
20:07:f3:d2:2e:c1:35:18:0a:af:63:ec:02:0a:94:
ee:46:e2:ca:33:2c:5b:17:2d:93:9c:dc:b9:c4:f7:
39:34:ef:c9:b8:01:1d:5e:6f:ca:fa:d4:d8:be:29:
27:50:f0:c0:e0:dd:6a:7b:dc:c3:2a:9c:2b:a5:a2:
15:79:e8:57:62:9f:60:8f:7a:a9:c5:46:1d:6b:8f:
a0:9e:96:7a:3e:4d:92:a7:3f:fa:4f:0d:3e:1f:17:
cd:86:59:fe:9f:c9:e3:4f:bc:75:60:1d:15:6e:29:
1e:0d:c5:46:c6:b4:85:cf:e7:82:69:f6:37:db:7f:
dc:ae:db:37:00:66:9a:4a:d5:60:ba:c4:ad:e1:54:
8e:e9:9d:72:67:4f:6a:63:a5:d2:0b:aa:f3:58:30:
55:df:03:20:63:a2:fd:3d:5a:95:6e:cc:1e:9b:12:
1d:b9:59:9c:41:5f:23:1e:c4:50:c8:9d:85:5b:9b:
3d:cb:c4:be:75:d9:ad:7b:ac:52:42:ab:7d:83:ac:
ef:ce:df:dd:d2:50:74:e6:35:75:88:88:6f:44:59:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:F7:08:8C:90:6E:A9:46:83:7D:39:4B:14:32:E5:FB:49:23:BC
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/T-_3CIyQbqlGg305SxQy5ftJI7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.190.0/23
185.129.230.0/24
Signature Algorithm: sha256WithRSAEncryption
77:52:f8:ed:36:f5:eb:3b:d7:62:a0:aa:93:29:ac:c7:f1:6c:
66:29:b5:00:70:4b:62:dd:c6:6f:55:f9:d8:df:9b:c2:ad:89:
e1:4f:f1:9e:ef:7c:15:a7:83:a9:37:64:80:78:7c:81:59:1d:
66:fb:29:24:6f:b2:69:b2:62:6f:01:67:f0:f9:34:62:d9:4f:
dd:84:da:42:b3:c9:2b:c7:a9:41:e9:6a:a7:1d:c5:a7:cb:2b:
9f:e9:e3:35:aa:20:66:cd:c3:85:2b:94:aa:3d:31:40:c1:12:
75:a0:aa:08:e4:b7:a9:21:44:dd:28:81:43:01:e4:01:56:9c:
81:29:20:78:85:27:46:d4:48:12:54:a1:66:02:70:5b:63:9e:
e6:13:98:b9:59:31:19:9e:d8:ec:e6:af:c7:97:c3:39:46:06:
a2:3d:4a:23:71:fe:f8:98:4c:88:73:b7:3d:79:c0:77:80:5a:
e0:fa:72:6b:27:07:2c:1c:0e:b8:c2:11:94:a4:39:de:82:65:
4c:97:16:99:3a:0a:a4:c1:85:9b:97:ff:d8:b7:2b:98:fe:45:
e7:8c:50:5b:c3:ff:e7:be:a6:1b:a2:e1:84:bf:17:65:86:1f:
cb:02:8c:29:1b:1b:e4:dc:ad:54:57:07:2d:d1:01:d3:93:62:
7d:d0:95:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQmbC90XGP9NqtRXIBa2ihHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjUwMTAyMDk1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmVmZjcwODhjOTA2ZWE5NDY4MzdkMzk0YjE0MzJlNWZiNDkyM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNmQLgrOGnnMCzdjVxqIB9ikmmXr
cM8H2CYRZqQ5M+L7pLIhgoeMbAsm6cQgB/PSLsE1GAqvY+wCCpTuRuLKMyxbFy2T
nNy5xPc5NO/JuAEdXm/K+tTYviknUPDA4N1qe9zDKpwrpaIVeehXYp9gj3qpxUYd
a4+gnpZ6Pk2Spz/6Tw0+HxfNhln+n8njT7x1YB0VbikeDcVGxrSFz+eCafY323/c
rts3AGaaStVgusSt4VSO6Z1yZ09qY6XSC6rzWDBV3wMgY6L9PVqVbswemxIduVmc
QV8jHsRQyJ2FW5s9y8S+ddmte6xSQqt9g6zvzt/d0lB05jV1iIhvRFmcMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE/v9wiMkG6pRoN9OUsUMuX7SSO8MB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvVC1fM0NJeVFicWxHZzMwNVN4UXk1ZnRKSTd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuYG+AwQA
uYHmMA0GCSqGSIb3DQEBCwUAA4IBAQB3UvjtNvXrO9dioKqTKazH8WxmKbUAcEti
3cZvVfnY35vCrYnhT/Ge73wVp4OpN2SAeHyBWR1m+ykkb7JpsmJvAWfw+TRi2U/d
hNpCs8krx6lB6WqnHcWnyyuf6eM1qiBmzcOFK5SqPTFAwRJ1oKoI5LepIUTdKIFD
AeQBVpyBKSB4hSdG1EgSVKFmAnBbY57mE5i5WTEZntjs5q/Hl8M5RgaiPUojcf74
mEyIc7c9ecB3gFrg+nJrJwcsHA64whGUpDnegmVMlxaZOgqkwYWbl//YtyuY/kXn
jFBbw//nvqYbouGEvxdlhh/LAowpGxvk3K1UVwct0QHTk2J90JVF
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:31 2025 by rpki-client