Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/yxTjGPj_Qglxr_34LiTpZhaydeQ.roa
File: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (raw, json)
Hash identifier: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=
Subject key identifier: CB:14:E3:18:F8:FF:42:09:71:AF:FD:F8:2E:24:E9:66:16:B2:75:E4
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5C0061AB37D9D08D4B08EADCF689
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/yxTjGPj_Qglxr_34LiTpZhaydeQ.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44313
IP address blocks: 109.160.100.0/22 maxlen: 22
109.160.113.0/24 maxlen: 24
109.160.122.0/23 maxlen: 23
109.160.124.0/22 maxlen: 22
185.43.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5c:00:61:ab:37:d9:d0:8d:4b:08:ea:dc:f6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb14e318f8ff420971affdf82e24e96616b275e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:8d:a4:66:a0:b6:98:19:1d:61:f3:98:c6:
2d:f5:f2:59:de:9e:12:da:c4:97:d9:7e:69:d1:6d:
7c:78:c8:e0:ff:a0:56:75:f6:ac:42:6f:6b:e1:42:
df:1a:e9:55:4d:70:9e:41:d7:21:68:10:a6:a9:4e:
8e:47:2f:03:2a:0a:02:1d:50:3b:c4:1a:0a:d5:7b:
70:6b:3e:40:9c:a5:02:2e:82:07:3d:a6:a3:1a:ed:
f8:02:22:1a:26:e9:6d:72:f9:93:a3:9a:96:5c:4a:
69:67:75:79:05:f8:5d:4e:53:44:45:b8:a3:4d:21:
25:66:2c:c5:22:e5:5f:32:d5:13:37:66:b9:78:6a:
ee:e8:94:1b:67:6e:ed:fb:8b:14:0e:bf:95:6e:ce:
a6:7f:c8:b5:4e:5d:e0:a3:56:06:1d:f7:0d:6e:c2:
a2:36:5e:bd:ae:57:5d:b6:e1:24:90:fd:cb:0f:41:
e7:9d:0e:20:89:fd:2a:34:d2:6b:4e:a3:16:4d:ab:
62:4d:cf:c7:47:43:24:bf:25:7c:b4:c5:23:1c:b3:
c3:a3:72:74:cc:6d:06:0d:c0:31:35:d5:74:09:7c:
9f:c1:d5:26:1b:94:e3:01:c3:17:e0:9e:ee:84:e4:
b2:95:ba:e4:94:81:72:91:90:f0:0f:ca:e1:09:98:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:E3:18:F8:FF:42:09:71:AF:FD:F8:2E:24:E9:66:16:B2:75:E4
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/yxTjGPj_Qglxr_34LiTpZhaydeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.100.0/22
109.160.113.0/24
109.160.122.0-109.160.127.255
185.43.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c4:9c:4d:6d:33:38:f8:55:4a:4d:11:33:45:9f:a4:94:c1:
ee:76:c6:e7:41:6b:54:e4:f7:ce:55:bb:8a:2f:ca:a3:e0:bf:
0f:02:9d:1b:65:54:6b:52:c2:64:47:27:93:5b:e6:8c:d0:9f:
6f:42:f6:59:67:0f:d8:b3:ab:ba:6b:65:cb:c4:6c:4a:74:d3:
10:d5:59:c3:62:17:78:32:9f:d1:5a:f2:bd:65:42:b7:68:47:
8c:34:d1:be:77:5f:88:01:2d:42:bb:ed:fe:9f:f5:1e:68:2d:
c6:8b:1e:c4:c5:a8:0b:93:3e:0c:c6:4b:87:21:4e:f2:0e:6b:
8a:14:10:3a:8f:34:35:7f:c2:1f:bf:5c:7d:9e:06:ff:eb:4e:
d3:f5:ef:78:1d:b5:e5:ac:88:2b:a7:2f:cb:fb:2f:7a:f7:bf:
c0:29:a5:98:d3:8d:fc:7e:2b:e1:2e:94:63:bc:ae:8a:c1:fd:
4f:2b:15:9d:57:b8:f3:4b:5d:83:a9:ec:67:c4:3e:1d:8e:bd:
44:15:30:3e:51:99:d4:9c:2d:6b:4b:3f:a3:44:6b:3f:96:f6:
be:4e:31:3a:c1:a8:41:dd:9e:d0:77:71:24:14:4b:28:18:9d:
1b:bc:18:95:5d:e8:70:e1:b8:12:95:dd:3e:d7:4d:b8:5d:55:
58:18:74:ca
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQma1wAYas32dCNSwjq3PaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjUwMTAyMDk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjE0ZTMxOGY4ZmY0MjA5NzFhZmZkZjgyZTI0ZTk2NjE2YjI3NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yaNpGagtpgZHWHzmMYt9fJZ3p4S
2sSX2X5p0W18eMjg/6BWdfasQm9r4ULfGulVTXCeQdchaBCmqU6ORy8DKgoCHVA7
xBoK1Xtwaz5AnKUCLoIHPaajGu34AiIaJultcvmTo5qWXEppZ3V5BfhdTlNERbij
TSElZizFIuVfMtUTN2a5eGru6JQbZ27t+4sUDr+Vbs6mf8i1Tl3go1YGHfcNbsKi
Nl69rlddtuEkkP3LD0HnnQ4gif0qNNJrTqMWTatiTc/HR0MkvyV8tMUjHLPDo3J0
zG0GDcAxNdV0CXyfwdUmG5TjAcMX4J7uhOSylbrklIFykZDwD8rhCZirhQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFMsU4xj4/0IJca/9+C4k6WYWsnXkMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEveXhUakdQal9RZ2x4cl8zNExpVHBaaGF5ZGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCbaBkAwQA
baBxMAwDBAFtoHoDBAdtoAADBAC5KzowDQYJKoZIhvcNAQELBQADggEBAKXEnE1t
Mzj4VUpNETNFn6SUwe52xudBa1Tk985Vu4ovyqPgvw8CnRtlVGtSwmRHJ5Nb5ozQ
n29C9llnD9izq7prZcvEbEp00xDVWcNiF3gyn9Fa8r1lQrdoR4w00b53X4gBLUK7
7f6f9R5oLcaLHsTFqAuTPgzGS4chTvIOa4oUEDqPNDV/wh+/XH2eBv/rTtP173gd
teWsiCunL8v7L3r3v8AppZjTjfx+K+EulGO8rorB/U8rFZ1XuPNLXYOp7GfEPh2O
vUQVMD5RmdScLWtLP6NEaz+W9r5OMTrBqEHdntB3cSQUSygYnRu8GJVd6HDhuBKV
3T7XTbhdVVgYdMo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:12:00 2025 by rpki-client