Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/RNGBIcy26YwkLmRvqwWnod98dHw.roa
File: RNGBIcy26YwkLmRvqwWnod98dHw.roa (raw, json)
Hash identifier: 1chB1LaT432Rfh7J104MJnAPyL20nkhH0rEwOvkmqjI=
Subject key identifier: 44:D1:81:21:CC:B6:E9:8C:24:2E:64:6F:AB:05:A7:A1:DF:7C:74:7C
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 019427B36C87361DD7A52C23267406C2DD3F
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/RNGBIcy26YwkLmRvqwWnod98dHw.roa
Signing time: Thu 02 Jan 2025 15:47:37 +0000
ROA not before: Thu 02 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.153.236.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.31.248.0/23 maxlen: 23
188.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:6c:87:36:1d:d7:a5:2c:23:26:74:06:c2:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jan 2 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d18121ccb6e98c242e646fab05a7a1df7c747c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:fb:5a:e7:50:83:b9:38:b6:98:64:66:7f:
af:77:ae:df:45:ec:30:67:cb:5f:02:56:91:05:e5:
55:69:af:2b:44:14:04:a3:82:3e:e0:e8:0d:2d:1e:
26:24:4f:1a:5a:76:5f:de:93:f8:e4:a3:64:1b:0b:
01:a7:8d:d6:fc:d3:d8:47:46:f8:75:7e:c9:68:14:
48:02:89:7d:3a:3b:af:c0:78:ca:24:11:d5:7d:e9:
68:cc:69:81:38:c2:95:b2:0a:38:22:b5:0c:8d:60:
18:17:24:2f:5e:94:61:3f:d1:ca:68:6f:c4:fc:8c:
50:f2:a2:33:76:7f:d9:84:e8:fc:ba:0d:49:d2:19:
24:40:e2:81:3b:80:3f:3c:d1:d6:bf:b7:bc:64:08:
b4:86:63:6f:9a:94:c3:eb:62:2a:3d:6e:ed:84:99:
64:46:cb:2d:26:17:91:56:64:96:a1:47:ab:7a:6a:
5e:d7:6d:2a:82:f5:13:d1:16:20:46:3f:14:7c:e2:
8b:9e:41:c6:53:98:66:12:93:5a:1b:78:89:7b:5b:
8f:55:18:96:43:2a:82:80:d9:0e:7d:fc:ff:8e:3c:
f2:4f:f4:4f:dc:84:0a:c9:c9:c4:e2:b3:a8:49:de:
6d:ea:b9:06:b9:c7:4f:27:97:45:84:ad:bd:b1:14:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:81:21:CC:B6:E9:8C:24:2E:64:6F:AB:05:A7:A1:DF:7C:74:7C
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/RNGBIcy26YwkLmRvqwWnod98dHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.236.0/24
185.153.239.0/24
188.31.248.0/23
188.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:89:ca:d8:50:d4:34:b0:2f:41:5d:d9:22:03:c3:31:3d:a7:
9f:ad:5a:2c:08:65:7e:15:45:68:5f:12:c8:d5:f9:0d:f6:76:
cc:36:d9:bd:1e:dd:ff:34:2d:48:ae:55:bb:9e:3b:d7:29:8a:
0c:81:4a:d0:cd:1d:6d:eb:08:f5:ad:d6:5e:05:22:ec:fd:cc:
af:1e:81:f7:d2:f6:53:8d:44:6a:0e:d6:dc:56:7b:42:ae:74:
48:f4:be:bf:08:3b:cc:94:6a:ed:9e:46:47:eb:55:dd:bb:d8:
59:89:f9:e8:a9:6c:32:7b:24:ef:3a:54:5a:97:26:b0:da:63:
e7:7a:c0:a2:75:a7:56:e0:af:45:78:5b:2b:22:c0:62:60:9c:
c9:18:ac:11:80:02:87:ae:d5:3b:53:62:88:4d:df:f4:6e:e0:
98:6b:b4:ef:3f:0f:51:5a:5e:c8:59:eb:2b:52:e0:d7:62:7b:
0c:e6:46:71:2f:43:5b:1b:81:d9:cc:b9:7d:e7:8e:d1:34:e2:
a3:4c:85:aa:77:94:26:0e:2d:d2:54:5b:aa:77:e1:b9:ba:cf:
0f:ef:73:77:5e:f9:87:ad:0f:3f:80:f4:06:0d:7c:58:0e:8a:
b1:5d:35:a4:74:d2:fd:cc:0a:3c:71:f8:0a:f5:db:52:66:98:
37:b8:fe:81
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQns2yHNh3XpSwjJnQGwt0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjUwMTAyMTU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQxODEyMWNjYjZlOThjMjQyZTY0NmZhYjA1YTdhMWRmN2M3NDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR/7WudQg7k4tphkZn+vd67fReww
Z8tfAlaRBeVVaa8rRBQEo4I+4OgNLR4mJE8aWnZf3pP45KNkGwsBp43W/NPYR0b4
dX7JaBRIAol9OjuvwHjKJBHVfelozGmBOMKVsgo4IrUMjWAYFyQvXpRhP9HKaG/E
/IxQ8qIzdn/ZhOj8ug1J0hkkQOKBO4A/PNHWv7e8ZAi0hmNvmpTD62IqPW7thJlk
RsstJheRVmSWoUerempe120qgvUT0RYgRj8UfOKLnkHGU5hmEpNaG3iJe1uPVRiW
QyqCgNkOffz/jjzyT/RP3IQKycnE4rOoSd5t6rkGucdPJ5dFhK29sRT6ZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFETRgSHMtumMJC5kb6sFp6HffHR8MB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvUk5HQkljeTI2WXdrTG1SdnF3V25vZDk4ZEh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuZnsAwQA
uZnvAwQBvB/4AwQAvB/7MA0GCSqGSIb3DQEBCwUAA4IBAQAticrYUNQ0sC9BXdki
A8MxPaefrVosCGV+FUVoXxLI1fkN9nbMNtm9Ht3/NC1IrlW7njvXKYoMgUrQzR1t
6wj1rdZeBSLs/cyvHoH30vZTjURqDtbcVntCrnRI9L6/CDvMlGrtnkZH61Xdu9hZ
ifnoqWwyeyTvOlRalyaw2mPnesCidadW4K9FeFsrIsBiYJzJGKwRgAKHrtU7U2KI
Td/0buCYa7TvPw9RWl7IWesrUuDXYnsM5kZxL0NbG4HZzLl9547RNOKjTIWqd5Qm
Di3SVFuqd+G5us8P73N3XvmHrQ8/gPQGDXxYDoqxXTWkdNL9zAo8cfgK9dtSZpg3
uP6B
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:51:10 2025 by rpki-client