Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/2Bt2zBZ7qwsmzgRbPsxkglulHD4.roa
File: 2Bt2zBZ7qwsmzgRbPsxkglulHD4.roa (raw, json)
Hash identifier: 9HARsRK8h6gT85xMPv/kwqgjZ+bOyfBgjRhZUJA4ehc=
Subject key identifier: D8:1B:76:CC:16:7B:AB:0B:26:CE:04:5B:3E:CC:64:82:5B:A5:1C:3E
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 01948EC0C863C2928A4C7020F052C8732E00
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/2Bt2zBZ7qwsmzgRbPsxkglulHD4.roa
Signing time: Wed 22 Jan 2025 16:03:06 +0000
ROA not before: Wed 22 Jan 2025 16:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 185.138.56.0/22 maxlen: 22
185.138.56.0/24 maxlen: 24
185.138.57.0/24 maxlen: 24
2a07:a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:c0:c8:63:c2:92:8a:4c:70:20:f0:52:c8:73:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Jan 22 16:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d81b76cc167bab0b26ce045b3ecc64825ba51c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:7a:27:09:60:a1:99:32:81:70:ea:34:b9:
81:ce:85:41:23:0d:a7:0e:85:c3:c1:74:31:42:cb:
df:8d:52:cb:80:84:08:2e:78:7f:60:bc:d9:14:f0:
67:f7:95:14:7b:a9:36:31:89:e8:ec:1c:6c:a7:4b:
40:1d:a6:35:e5:8d:66:45:64:d7:f5:c4:e2:35:3f:
49:15:5e:26:8d:90:52:52:64:e8:e2:73:0d:15:63:
3d:b2:a4:c6:99:22:4e:87:13:00:5b:9c:16:a9:e3:
4e:3c:7d:71:d2:59:84:aa:23:fb:f8:eb:b0:25:ff:
22:51:ff:14:79:3b:65:82:00:34:e8:6b:bf:22:a8:
68:74:be:62:96:6b:25:48:c2:f7:12:8a:f2:1a:05:
33:5e:6f:c7:ce:fc:db:e2:ca:84:9f:e4:76:7e:96:
20:03:1d:ba:64:4f:bb:fa:79:6b:9e:c7:cd:0a:82:
96:2c:f2:ad:de:7b:52:cd:a9:1b:21:2c:55:45:e8:
7e:b1:60:75:00:2d:59:9f:3a:ca:06:f2:ea:61:d0:
62:80:49:69:9a:84:10:67:34:ec:4b:92:48:ad:4d:
f1:53:8a:29:29:ad:e7:52:ed:ad:5d:5b:78:98:35:
71:08:ee:25:b1:f2:2c:93:fa:df:de:3e:6b:d8:03:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:76:CC:16:7B:AB:0B:26:CE:04:5B:3E:CC:64:82:5B:A5:1C:3E
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/2Bt2zBZ7qwsmzgRbPsxkglulHD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.56.0/22
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
09:8f:39:2b:68:6c:dc:3d:77:d5:3c:d9:56:c5:20:15:67:6a:
2a:fa:d2:ab:b1:bc:af:41:e8:8a:18:c1:f8:06:f4:01:47:e1:
0b:ee:e3:51:81:1b:0d:de:69:6a:9e:3a:ef:9e:99:d8:54:a2:
32:18:fb:3c:36:ec:fb:5e:80:b3:13:7f:e3:f3:e5:ee:81:98:
b0:74:10:fc:4c:a3:0c:97:23:d0:72:c7:75:d9:7c:a5:a5:98:
94:76:11:79:a8:91:3e:0d:b4:80:df:23:85:6b:10:46:ea:bf:
51:ef:24:79:b6:5e:69:77:16:ab:7a:a9:8d:58:19:42:e1:99:
9c:42:6e:1a:8b:27:4e:b5:1a:f6:eb:4c:07:12:d6:4a:b8:24:
06:d0:6f:f3:1e:38:6a:15:d7:b9:7f:60:19:e8:09:2f:65:e4:
79:5e:1a:b3:e3:05:ef:c1:70:93:21:a8:78:05:41:76:0d:fb:
5a:11:97:f7:8f:4f:cd:96:59:47:da:10:35:d3:e5:07:2e:24:
e6:25:af:0c:a8:87:9b:f5:0a:4c:b0:cc:dc:42:25:a9:b7:0e:
5e:94:e5:fe:b4:c0:8a:55:91:ce:3f:27:a0:df:fd:64:09:c0:
36:14:4e:43:32:38:3f:36:b8:37:19:ff:8d:d8:c8:2d:2d:7b:
d8:65:01:9c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZSOwMhjwpKKTHAg8FLIcy4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWQ1YjdmNzkyNjQ0ZmY3MDcyYTQzYWNjOWM4NjUxOTRi
ZTRhZGMwHhcNMjUwMTIyMTYwMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODFiNzZjYzE2N2JhYjBiMjZjZTA0NWIzZWNjNjQ4MjViYTUxYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01N6JwlgoZkygXDqNLmBzoVBIw2n
DoXDwXQxQsvfjVLLgIQILnh/YLzZFPBn95UUe6k2MYno7Bxsp0tAHaY15Y1mRWTX
9cTiNT9JFV4mjZBSUmTo4nMNFWM9sqTGmSJOhxMAW5wWqeNOPH1x0lmEqiP7+Ouw
Jf8iUf8UeTtlggA06Gu/IqhodL5ilmslSML3EoryGgUzXm/Hzvzb4sqEn+R2fpYg
Ax26ZE+7+nlrnsfNCoKWLPKt3ntSzakbISxVReh+sWB1AC1ZnzrKBvLqYdBigElp
moQQZzTsS5JIrU3xU4opKa3nUu2tXVt4mDVxCO4lsfIsk/rf3j5r2AORJQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNgbdswWe6sLJs4EWz7MZIJbpRw+MB8GA1UdIwQY
MBaAFJ9dW395JkT/cHKkOsychlGUvkrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YTc5MDEtODVkOC00M2VhLWFkYjIt
Nzk5OTEwYzE1NDVmLzEvMkJ0MnpCWjdxd3NtemdSYlBzeGtnbHVsSEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YTc5MDEtODVkOC00M2VhLWFkYjItNzk5OTEwYzE1NDVm
LzEvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYo4MA0E
AgACMAcDBQMqBwqAMA0GCSqGSIb3DQEBCwUAA4IBAQAJjzkraGzcPXfVPNlWxSAV
Z2oq+tKrsbyvQeiKGMH4BvQBR+EL7uNRgRsN3mlqnjrvnpnYVKIyGPs8Nuz7XoCz
E3/j8+XugZiwdBD8TKMMlyPQcsd12XylpZiUdhF5qJE+DbSA3yOFaxBG6r9R7yR5
tl5pdxareqmNWBlC4ZmcQm4aiydOtRr260wHEtZKuCQG0G/zHjhqFde5f2AZ6Akv
ZeR5Xhqz4wXvwXCTIah4BUF2DftaEZf3j0/NlllH2hA10+UHLiTmJa8MqIeb9QpM
sMzcQiWptw5elOX+tMCKVZHOPyeg3/1kCcA2FE5DMjg/Nrg3Gf+N2MgtLXvYZQGc
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:51 2025 by rpki-client