Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa
File: TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa (raw, json)
Hash identifier: 3R7yJP25UZbo9ce0Ffrs5KJBp9yypSbTdrsjbTzVD5w=
Subject key identifier: 4C:9D:A1:C2:80:46:80:EC:E4:79:68:6A:1C:DE:8C:C7:1E:D0:86:D0
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 019426D9DA46E22BD81E4D26FA42D84B6E2B
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206283
IP address blocks: 185.123.20.0/24 maxlen: 24
185.123.21.0/24 maxlen: 24
185.123.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:da:46:e2:2b:d8:1e:4d:26:fa:42:d8:4b:6e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c9da1c2804680ece479686a1cde8cc71ed086d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:94:34:18:de:ac:5d:37:8e:5d:cc:88:99:
5a:30:26:f2:9b:d0:5f:90:17:e0:23:52:4c:8b:11:
b5:6d:e0:5d:fe:39:7c:32:4b:f7:d9:f4:6f:c8:85:
2c:af:8c:dd:0d:ed:58:64:15:01:01:3e:6f:f7:8d:
89:8b:1d:4a:1d:5e:42:47:de:a1:0d:a4:76:af:12:
d4:2b:03:8c:a7:b4:f5:e0:19:a0:12:97:5f:2c:a1:
2e:47:46:8c:c8:df:54:ac:fa:1e:86:03:f2:6a:0a:
45:ee:75:1a:69:b2:2c:b5:ad:1a:0d:c3:7c:c4:d1:
88:e4:26:21:6a:a8:f0:1b:25:a7:ac:dc:26:80:74:
99:85:b4:73:58:85:3d:f3:c3:68:2c:5b:3b:e2:4a:
ee:23:0f:1e:6a:15:f5:48:98:55:48:56:fc:d6:d3:
14:99:0d:df:5a:33:f1:18:90:cc:2b:ed:e4:f7:73:
91:64:f9:cf:7c:8a:d2:80:0d:9d:bd:8c:94:f5:8f:
13:3c:fb:d3:9c:c1:d4:d0:16:72:e5:e1:3f:a8:02:
1b:b5:04:9b:cc:3f:10:61:6d:1d:6a:2d:2f:5a:76:
6f:e5:e0:7c:40:2a:20:a1:bd:19:02:be:20:8c:5f:
6f:75:db:ed:59:ed:f5:a1:9b:76:a3:d2:88:00:c5:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:A1:C2:80:46:80:EC:E4:79:68:6A:1C:DE:8C:C7:1E:D0:86:D0
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.20.0-185.123.22.255
Signature Algorithm: sha256WithRSAEncryption
9a:8c:bb:69:2e:60:7c:3b:53:b9:f2:0d:7d:03:2a:b1:0b:0c:
47:33:99:39:f3:7e:92:09:96:d5:e6:29:a0:85:73:fd:4f:69:
38:21:a1:23:ae:ed:c8:ba:0d:19:bd:38:b7:5d:7e:36:c8:c0:
87:37:3d:cc:ba:18:6c:eb:7e:fe:b6:95:7c:68:f4:9b:9e:9f:
2e:d0:2e:4e:e1:99:eb:81:2b:2f:50:2c:6a:bd:21:d6:78:04:
1e:f2:a8:44:34:2e:10:11:cc:ca:12:69:9c:42:30:c5:6d:f8:
b0:65:b5:6e:83:8f:14:7b:43:37:45:90:5b:60:07:a0:dc:e3:
29:f2:76:42:b6:8f:55:81:78:15:da:c4:2b:be:1f:17:38:59:
1f:35:30:d8:b0:d4:d4:df:ee:2a:d9:c9:ba:51:f6:84:56:8e:
a1:3d:2e:91:58:fe:ee:38:a9:fc:4c:05:4a:ff:2d:b1:40:25:
50:78:73:b9:81:55:ac:57:f3:69:49:c9:bc:76:44:ca:b7:56:
24:ad:c4:b9:6c:90:8a:33:b4:08:3c:88:8f:90:03:c2:58:5b:
c4:31:c1:7e:0a:f5:12:a4:ea:3c:c4:97:61:7b:fd:61:9c:a7:
ab:60:be:96:51:35:7e:2a:09:3b:b0:4a:35:03:ef:6a:7e:bb:
e9:e6:60:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQm2dpG4ivYHk0m+kLYS24rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDk0YzZlMTZmNDlkMDhiZTc2MWNhOGMwZWFhNzEyMjg3
MmZhODIwHhcNMjUwMTAyMTE0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzlkYTFjMjgwNDY4MGVjZTQ3OTY4NmExY2RlOGNjNzFlZDA4NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqneUNBjerF03jl3MiJlaMCbym9Bf
kBfgI1JMixG1beBd/jl8Mkv32fRvyIUsr4zdDe1YZBUBAT5v942Jix1KHV5CR96h
DaR2rxLUKwOMp7T14BmgEpdfLKEuR0aMyN9UrPoehgPyagpF7nUaabIsta0aDcN8
xNGI5CYhaqjwGyWnrNwmgHSZhbRzWIU988NoLFs74kruIw8eahX1SJhVSFb81tMU
mQ3fWjPxGJDMK+3k93ORZPnPfIrSgA2dvYyU9Y8TPPvTnMHU0BZy5eE/qAIbtQSb
zD8QYW0dai0vWnZv5eB8QCogob0ZAr4gjF9vddvtWe31oZt2o9KIAMViWwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEydocKARoDs5HloahzejMce0IbQMB8GA1UdIwQY
MBaAFFtJTG4W9J0IvnYcqMDqpxIocvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQt
YzJjNmY2YTQwOTdmLzEvVEoyaHdvQkdnT3prZVdocUhONk14eDdRaHRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQtYzJjNmY2YTQwOTdm
LzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5exQD
BAC5exYwDQYJKoZIhvcNAQELBQADggEBAJqMu2kuYHw7U7nyDX0DKrELDEczmTnz
fpIJltXmKaCFc/1PaTghoSOu7ci6DRm9OLddfjbIwIc3Pcy6GGzrfv62lXxo9Jue
ny7QLk7hmeuBKy9QLGq9IdZ4BB7yqEQ0LhARzMoSaZxCMMVt+LBltW6DjxR7QzdF
kFtgB6Dc4ynydkK2j1WBeBXaxCu+Hxc4WR81MNiw1NTf7irZybpR9oRWjqE9LpFY
/u44qfxMBUr/LbFAJVB4c7mBVaxX82lJybx2RMq3ViStxLlskIoztAg8iI+QA8JY
W8QxwX4K9RKk6jzEl2F7/WGcp6tgvpZRNX4qCTuwSjUD72p+u+nmYMA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:51 2025 by rpki-client