Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa
File: LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa (raw, json)
Hash identifier: 5+5FAzOXQkcdtdzGOCWdlxMwXUctAKUK6y8PfDSvH9Q=
Subject key identifier: 2C:06:94:77:43:55:35:0A:48:1D:A6:51:E5:25:08:E8:B8:00:EC:68
Certificate issuer: /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial: 019425FDCDB9D52279A613E0269D77FB9AF8
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44275
IP address blocks: 185.169.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:b9:d5:22:79:a6:13:e0:26:9d:77:fb:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c0694774355350a481da651e52508e8b800ec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:3b:ce:c1:78:67:c0:12:e4:7d:ad:ad:1b:
aa:b9:f1:0d:13:ef:d0:8e:e3:9f:18:a0:43:27:69:
fc:21:27:eb:fb:86:66:68:b9:0c:95:9d:af:01:c8:
71:5d:6f:1e:8e:a4:a9:b5:2f:6f:d4:4e:ce:33:07:
26:15:a0:fe:4a:d8:b0:8a:e8:ff:29:d1:54:98:56:
45:f7:c1:23:07:15:65:d2:8a:14:3d:d7:5a:dc:7c:
50:9a:5b:5c:c6:0c:69:9f:75:e8:1e:3c:af:9c:7f:
a0:b9:2e:64:ea:0a:79:06:78:1a:12:c3:c8:18:e9:
b5:d0:f0:77:da:27:b7:75:29:be:a8:9f:ab:09:c8:
9a:4d:44:03:b6:00:f8:69:e3:5f:47:2e:d3:56:99:
24:60:88:67:d2:ee:25:ea:31:f6:5a:f1:8b:62:69:
30:82:00:5b:1b:ef:6d:20:a7:ba:73:f1:bc:05:f5:
d1:32:19:f4:74:50:78:64:ad:a6:8d:c2:e2:cb:18:
34:1c:d0:b7:36:68:b7:40:9f:36:7f:95:1f:9b:fd:
24:1c:30:12:15:94:9e:57:cf:91:2f:f5:4f:ab:46:
a1:3a:7e:a3:b2:12:84:66:76:ba:c9:ac:e8:b8:85:
03:eb:b0:2a:fe:34:cb:34:9b:a1:a0:39:34:8d:1a:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:94:77:43:55:35:0A:48:1D:A6:51:E5:25:08:E8:B8:00:EC:68
X509v3 Authority Key Identifier:
keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2d:c2:ec:cb:c7:06:95:5d:68:c1:92:42:a8:45:f0:ab:85:
fe:6d:2c:d3:15:93:d8:91:e0:b0:eb:fd:3c:01:d9:a1:89:f4:
6c:9e:59:7d:79:82:b9:57:78:71:b8:bb:17:bb:2c:5d:4a:ca:
59:86:2e:6a:b0:8f:7c:d7:5a:be:34:cd:b0:a0:1c:ff:05:ef:
c7:16:b3:21:ab:03:a1:b3:1f:5e:6f:90:58:81:4a:fe:b2:88:
c5:91:d9:e9:ca:9d:f8:1c:89:f6:15:f8:b9:41:7c:a0:2e:2f:
5b:e9:d6:3e:24:e2:ad:f1:d1:4d:36:41:f3:e8:57:4d:0b:fb:
80:59:49:08:df:ed:8b:e0:fb:59:d0:02:62:ab:43:16:74:76:
49:6a:33:b8:7b:1b:4e:a7:30:f1:2b:a7:78:67:0a:46:d8:eb:
d1:80:6e:d0:7a:55:58:25:1c:96:e8:02:c1:34:a8:0f:26:c8:
1c:7b:db:18:63:48:67:e2:e1:8e:25:3f:d4:62:c6:93:9b:6a:
40:61:0b:d8:ab:38:f0:96:5f:77:26:91:8f:e3:74:70:33:fb:
9b:01:b7:a7:99:e1:2d:53:ae:df:46:8e:9b:59:3f:47:d9:e3:
d3:dd:a9:c1:79:f1:8f:c9:f7:7a:b0:c4:57:5f:95:5a:0b:f8:
37:6d:b7:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/c251SJ5phPgJp13+5r4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY2NmNiMGU1NDk2MTE2ZWI3YWU2NzE0ZDkwNTUzMDli
YTY5YWMwHhcNMjUwMTAyMDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzA2OTQ3NzQzNTUzNTBhNDgxZGE2NTFlNTI1MDhlOGI4MDBlYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntA7zsF4Z8AS5H2trRuqufENE+/Q
juOfGKBDJ2n8ISfr+4ZmaLkMlZ2vAchxXW8ejqSptS9v1E7OMwcmFaD+Stiwiuj/
KdFUmFZF98EjBxVl0ooUPdda3HxQmltcxgxpn3XoHjyvnH+guS5k6gp5BngaEsPI
GOm10PB32ie3dSm+qJ+rCciaTUQDtgD4aeNfRy7TVpkkYIhn0u4l6jH2WvGLYmkw
ggBbG+9tIKe6c/G8BfXRMhn0dFB4ZK2mjcLiyxg0HNC3Nmi3QJ82f5Ufm/0kHDAS
FZSeV8+RL/VPq0ahOn6jshKEZna6yazouIUD67Aq/jTLNJuhoDk0jRrA8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwGlHdDVTUKSB2mUeUlCOi4AOxoMB8GA1UdIwQY
MBaAFKS2ZssOVJYRbreuZxTZBVMJummsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mNzQyODAtY2M2ZC00MWMxLTg1OGEt
YjUzNjgzMzBiYWYyLzEvTEFhVWQwTlZOUXBJSGFaUjVTVUk2TGdBN0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mNzQyODAtY2M2ZC00MWMxLTg1OGEtYjUzNjgzMzBiYWYy
LzEvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuam+MA0G
CSqGSIb3DQEBCwUAA4IBAQBOLcLsy8cGlV1owZJCqEXwq4X+bSzTFZPYkeCw6/08
AdmhifRsnll9eYK5V3hxuLsXuyxdSspZhi5qsI9811q+NM2woBz/Be/HFrMhqwOh
sx9eb5BYgUr+sojFkdnpyp34HIn2Ffi5QXygLi9b6dY+JOKt8dFNNkHz6FdNC/uA
WUkI3+2L4PtZ0AJiq0MWdHZJajO4extOpzDxK6d4ZwpG2OvRgG7QelVYJRyW6ALB
NKgPJsgce9sYY0hn4uGOJT/UYsaTm2pAYQvYqzjwll93JpGP43RwM/ubAbenmeEt
U67fRo6bWT9H2ePT3anBefGPyfd6sMRXX5VaC/g3bbcN
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:46 2025 by rpki-client