Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hrRzZQb2z6BNgiDIBzQgbG9PsIM.roa
File: hrRzZQb2z6BNgiDIBzQgbG9PsIM.roa (raw, json)
Hash identifier: SRwRQzMrYBoUJ3gG/DuAkT0IzQg9nwhXbWoHxxrrrM8=
Subject key identifier: 86:B4:73:65:06:F6:CF:A0:4D:82:20:C8:07:34:20:6C:6F:4F:B0:83
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019523A79FA7681B41BB00E48A64AB856C38
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hrRzZQb2z6BNgiDIBzQgbG9PsIM.roa
Signing time: Thu 20 Feb 2025 13:59:02 +0000
ROA not before: Thu 20 Feb 2025 13:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 81.19.194.0/24 maxlen: 24
185.100.1.0/24 maxlen: 24
185.100.2.0/24 maxlen: 24
217.30.89.0/24 maxlen: 24
217.30.90.0/24 maxlen: 24
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:e::/47 maxlen: 47
2a10:eec0:10::/44 maxlen: 44
2a10:eec0:20::/43 maxlen: 43
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:a7:9f:a7:68:1b:41:bb:00:e4:8a:64:ab:85:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Feb 20 13:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86b4736506f6cfa04d8220c80734206c6f4fb083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:97:f8:9a:98:09:18:46:15:f6:d7:a2:53:
3a:e4:69:9d:14:b2:f1:bd:fa:18:6b:a9:a6:ce:40:
98:b9:4b:0a:3f:51:65:51:02:b2:a8:71:0b:8d:57:
3e:9f:8e:e4:32:c8:84:ef:e8:07:fe:45:94:3d:44:
30:a7:a7:60:1d:65:18:f8:47:b2:28:69:a6:97:9d:
02:ef:84:bd:89:6b:0f:bc:bb:2f:17:14:1a:6e:d5:
c6:b3:c4:93:d3:9b:18:22:7f:4b:9e:e1:ff:a4:08:
e3:19:13:e1:4d:7e:f3:22:2d:54:a4:00:95:e0:89:
53:d8:63:d6:99:5b:7e:c4:dc:53:20:6a:d3:4a:79:
9c:93:35:fd:bc:cc:f1:2e:63:d6:86:b5:68:b4:0d:
c1:db:da:aa:9e:c7:b2:c5:b0:7e:b2:6a:82:a2:6b:
18:ae:d1:0a:67:88:2f:12:ae:29:59:a3:da:b2:d1:
63:fd:b5:44:70:94:e3:51:7c:ea:16:e6:6b:a5:bd:
43:0e:89:00:65:2a:a6:91:74:8b:49:63:b0:43:07:
ff:3f:ee:b3:dc:02:a4:f3:c9:ba:e4:5a:97:19:5c:
1d:1d:f8:42:73:13:2a:0b:1b:76:bf:69:bc:46:cb:
fe:84:97:08:36:7b:3c:d2:8d:aa:e9:71:33:3a:07:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B4:73:65:06:F6:CF:A0:4D:82:20:C8:07:34:20:6C:6F:4F:B0:83
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hrRzZQb2z6BNgiDIBzQgbG9PsIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/24
185.100.1.0-185.100.2.255
217.30.89.0-217.30.90.255
IPv6:
2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:e1:38:e3:ea:dd:5d:ea:41:61:41:09:5f:4e:78:87:90:b9:
38:6e:77:48:b2:23:72:bd:2f:46:20:2a:0f:b2:c5:61:db:ab:
90:f3:aa:13:a6:a0:1a:bb:8c:5d:60:1b:c9:00:5c:42:94:c9:
12:07:d6:a4:3e:e7:34:a4:19:2e:55:20:f4:4e:45:ad:19:37:
f8:35:7e:4e:94:bb:5b:34:00:cb:c7:a7:b8:28:90:d1:f8:65:
df:74:01:c0:0b:8a:50:60:98:95:78:55:93:7d:59:37:73:c5:
cc:22:f1:dc:6e:de:f4:d8:16:78:f7:86:92:3c:4e:65:12:3b:
fa:ac:96:03:81:80:de:b6:59:27:51:8d:f5:3f:82:70:f2:0d:
f8:3f:73:21:93:52:43:46:ae:f4:c3:e7:68:77:b3:68:dd:67:
27:0b:19:6f:64:16:2b:9a:34:d2:2a:d8:91:d7:f2:ef:ec:e7:
22:de:d2:75:ce:67:db:cb:a0:b6:48:48:0a:89:a3:8e:dc:fb:
54:56:da:57:94:0f:fa:c3:f9:af:04:a2:00:b9:9f:ec:5a:da:
1d:e8:d0:f1:43:33:38:6a:4a:b3:80:74:90:3a:75:a6:fb:97:
88:9e:e6:e3:32:38:be:ec:03:78:30:71:27:48:4f:f4:b5:79:
2b:fa:6a:3a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZUjp5+naBtBuwDkimSrhWw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMjIwMTM1OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmI0NzM2NTA2ZjZjZmEwNGQ4MjIwYzgwNzM0MjA2YzZmNGZiMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoeX+JqYCRhGFfbXolM65GmdFLLx
vfoYa6mmzkCYuUsKP1FlUQKyqHELjVc+n47kMsiE7+gH/kWUPUQwp6dgHWUY+Eey
KGmml50C74S9iWsPvLsvFxQabtXGs8ST05sYIn9LnuH/pAjjGRPhTX7zIi1UpACV
4IlT2GPWmVt+xNxTIGrTSnmckzX9vMzxLmPWhrVotA3B29qqnseyxbB+smqComsY
rtEKZ4gvEq4pWaPastFj/bVEcJTjUXzqFuZrpb1DDokAZSqmkXSLSWOwQwf/P+6z
3AKk88m65FqXGVwdHfhCcxMqCxt2v2m8Rsv+hJcINns80o2q6XEzOgfeowIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFIa0c2UG9s+gTYIgyAc0IGxvT7CDMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaHJSelpRYjJ6NkJOZ2lESUJ6UWdiRzlQc0lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAoBAIAATAiAwQAURPCMAwD
BAC5ZAEDBAC5ZAIwDAMEANkeWQMEANkeWjAYBAIAAjASMBADBwAqEO7AAA0DBQAq
EO7AMA0GCSqGSIb3DQEBCwUAA4IBAQCq4Tjj6t1d6kFhQQlfTniHkLk4bndIsiNy
vS9GICoPssVh26uQ86oTpqAau4xdYBvJAFxClMkSB9akPuc0pBkuVSD0TkWtGTf4
NX5OlLtbNADLx6e4KJDR+GXfdAHAC4pQYJiVeFWTfVk3c8XMIvHcbt702BZ494aS
PE5lEjv6rJYDgYDetlknUY31P4Jw8g34P3Mhk1JDRq70w+dod7No3WcnCxlvZBYr
mjTSKtiR1/Lv7Oci3tJ1zmfby6C2SEgKiaOO3PtUVtpXlA/6w/mvBKIAuZ/sWtod
6NDxQzM4akqzgHSQOnWm+5eInubjMji+7AN4MHEnSE/0tXkr+mo6
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:40:11 2025 by rpki-client