Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/nywPQh9QP-OhqhIRdI1AR086REo.roa
File: nywPQh9QP-OhqhIRdI1AR086REo.roa (raw, json)
Hash identifier: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=
Subject key identifier: 9F:2C:0F:42:1F:50:3F:E3:A1:AA:12:11:74:8D:40:47:4F:3A:44:4A
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 01941F8C92A71BE91F9149F48BFC5434F2D7
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/nywPQh9QP-OhqhIRdI1AR086REo.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29413
IP address blocks: 185.214.120.0/22 maxlen: 24
2a0b:9940::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:a7:1b:e9:1f:91:49:f4:8b:fc:54:34:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f2c0f421f503fe3a1aa1211748d40474f3a444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:5f:21:0d:d4:2d:35:e0:b3:f9:ac:9b:c4:
3b:3c:66:00:5c:0a:43:53:bc:55:ba:e1:58:c2:25:
50:0b:c2:d6:7f:75:8c:65:c1:a6:29:71:02:c9:12:
ee:07:78:f1:1b:a3:8e:a3:df:f4:61:62:d5:e0:64:
28:f2:a4:75:eb:97:f8:2b:63:cf:44:10:cb:cb:61:
7c:12:95:fd:0f:5a:88:ba:1f:1e:10:36:bd:af:39:
ab:8b:e3:7d:40:0b:a7:28:1f:20:86:3f:8e:73:53:
ff:13:79:f5:91:5f:ea:d0:09:34:ef:ac:b6:ac:96:
da:d8:ec:ea:08:f3:0e:39:cd:48:f2:ca:f4:1d:6d:
ec:cd:f4:75:47:26:c7:ea:5d:62:b9:36:f7:58:dd:
6b:e2:75:2a:b3:fe:c6:b5:75:80:d5:44:fe:da:63:
73:03:8b:91:47:b6:96:0e:e6:7c:56:65:5b:96:f3:
20:b9:7e:3c:39:66:4a:1d:e5:d8:cb:42:94:7f:88:
55:87:92:75:2a:81:92:40:92:f4:6b:ad:c6:df:c8:
2a:c9:47:ce:f5:ea:71:91:c0:3a:52:ed:fa:92:0e:
31:85:2c:e3:5f:07:5c:fb:dd:ba:b3:f1:3c:3d:20:
c1:e4:e5:0d:99:f4:26:05:00:24:11:43:69:7a:2c:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:0F:42:1F:50:3F:E3:A1:AA:12:11:74:8D:40:47:4F:3A:44:4A
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/nywPQh9QP-OhqhIRdI1AR086REo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.120.0/22
IPv6:
2a0b:9940::/32
Signature Algorithm: sha256WithRSAEncryption
9d:c5:8d:76:ea:99:da:36:5c:fe:12:9e:9f:dd:62:c7:8e:9a:
48:ff:85:f9:d0:5d:5a:31:51:a5:96:97:68:67:50:1b:d2:69:
b6:33:f0:45:3f:bf:47:8f:44:7a:06:23:86:f0:de:7a:b5:c4:
0c:86:99:f4:24:90:f9:02:01:e1:d9:56:ef:f1:f0:5b:f3:91:
8c:76:48:88:0d:8b:77:f1:a3:d3:61:df:a0:91:3e:1f:9a:ed:
34:06:2b:61:4d:27:42:56:2c:c9:4c:ab:0c:5e:fa:3a:e5:00:
d0:9c:00:d9:72:20:14:cb:cd:68:ff:1e:b3:78:4d:c2:a4:56:
72:29:82:b0:04:a4:69:25:0c:20:a6:39:bf:a0:23:6a:c2:61:
74:c1:5a:25:82:34:64:4e:0e:cc:53:05:fe:23:3e:36:ed:e8:
56:a2:ba:ea:0b:1c:8e:d2:a8:03:70:7d:6f:86:05:29:fe:a2:
68:02:27:7f:a5:90:37:ed:02:3d:81:5f:c1:ca:e6:e8:89:13:
ee:35:d4:b5:3c:5a:ad:3c:a4:7a:36:00:b8:c1:ba:cb:7a:3e:
a3:2d:fa:5e:b0:61:4e:35:fc:bc:d9:f2:38:bc:a2:b7:d5:07:
0c:9e:f7:22:5c:8a:ae:bf:a7:af:32:0b:86:a7:55:ff:ec:66:
58:29:24:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjJKnG+kfkUn0i/xUNPLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx
N2NhYmIwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjJjMGY0MjFmNTAzZmUzYTFhYTEyMTE3NDhkNDA0NzRmM2E0NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldlfIQ3ULTXgs/msm8Q7PGYAXApD
U7xVuuFYwiVQC8LWf3WMZcGmKXECyRLuB3jxG6OOo9/0YWLV4GQo8qR165f4K2PP
RBDLy2F8EpX9D1qIuh8eEDa9rzmri+N9QAunKB8ghj+Oc1P/E3n1kV/q0Ak076y2
rJba2OzqCPMOOc1I8sr0HW3szfR1RybH6l1iuTb3WN1r4nUqs/7GtXWA1UT+2mNz
A4uRR7aWDuZ8VmVblvMguX48OWZKHeXYy0KUf4hVh5J1KoGSQJL0a63G38gqyUfO
9epxkcA6Uu36kg4xhSzjXwdc+926s/E8PSDB5OUNmfQmBQAkEUNpeiyq+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ8sD0IfUD/joaoSEXSNQEdPOkRKMB8GA1UdIwQY
MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt
MzgwOTFiMTk3NjRiLzEvbnl3UFFoOVFQLU9ocWhJUmRJMUFSMDg2UkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi
LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudZ4MA0E
AgACMAcDBQAqC5lAMA0GCSqGSIb3DQEBCwUAA4IBAQCdxY126pnaNlz+Ep6f3WLH
jppI/4X50F1aMVGllpdoZ1Ab0mm2M/BFP79Hj0R6BiOG8N56tcQMhpn0JJD5AgHh
2Vbv8fBb85GMdkiIDYt38aPTYd+gkT4fmu00BithTSdCVizJTKsMXvo65QDQnADZ
ciAUy81o/x6zeE3CpFZyKYKwBKRpJQwgpjm/oCNqwmF0wVolgjRkTg7MUwX+Iz42
7ehWorrqCxyO0qgDcH1vhgUp/qJoAid/pZA37QI9gV/ByuboiRPuNdS1PFqtPKR6
NgC4wbrLej6jLfpesGFONfy82fI4vKK31QcMnvciXIquv6evMguGp1X/7GZYKSQd
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:54 2025 by rpki-client