Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/pK186WjMEhCqpTApn72adWGJTc0.roa
File: pK186WjMEhCqpTApn72adWGJTc0.roa (raw, json)
Hash identifier: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=
Subject key identifier: A4:AD:7C:E9:68:CC:12:10:AA:A5:30:29:9F:BD:9A:75:61:89:4D:CD
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0194236A4E27E7ECC6C46D97AC0A9FF92D7B
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/pK186WjMEhCqpTApn72adWGJTc0.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202152
IP address blocks: 185.49.132.0/22 maxlen: 22
185.49.132.0/23 maxlen: 23
185.49.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4e:27:e7:ec:c6:c4:6d:97:ac:0a:9f:f9:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ad7ce968cc1210aaa530299fbd9a7561894dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:2a:42:d6:8c:7c:e1:b7:11:80:1d:f7:a1:
30:7d:43:46:7f:e3:e0:a3:43:a0:b8:30:d3:83:78:
5c:7c:f1:b4:48:09:f2:0c:6d:6c:e8:a0:db:1f:14:
d8:2b:47:da:c7:e3:81:a1:2e:76:ea:01:23:4e:a4:
50:74:37:f0:f7:a8:7b:01:4f:dd:3f:91:c2:ce:68:
ac:a2:f3:91:97:b5:1a:40:42:01:b4:eb:e9:e6:eb:
96:cd:a4:58:4f:dd:0d:5f:c9:1e:3e:89:40:ee:76:
f6:c1:c9:86:dd:fd:d8:09:2f:02:b8:93:30:6b:01:
17:55:09:06:b9:a1:83:a8:48:09:d0:5a:75:e1:1f:
26:c3:3c:c9:47:87:60:03:cc:b7:23:db:a9:3f:95:
95:f8:28:f6:41:f7:ca:f9:22:fc:1d:e0:f3:3c:63:
31:d5:31:60:10:a2:20:8b:61:d6:5d:19:d9:c0:da:
ed:a0:54:33:5e:04:af:af:1e:dc:d4:c0:f1:6b:4c:
be:a7:05:17:52:35:ac:f7:5a:91:d3:12:88:d4:3e:
91:9c:45:53:89:6b:6d:9f:bc:4b:d3:c7:cb:fa:db:
d3:6c:a7:49:91:b4:e3:e2:14:b8:1d:c6:85:52:b8:
b1:3a:c4:96:29:b7:0b:a9:a0:b3:6b:e1:94:f2:b3:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:7C:E9:68:CC:12:10:AA:A5:30:29:9F:BD:9A:75:61:89:4D:CD
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/pK186WjMEhCqpTApn72adWGJTc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ca:69:8b:21:15:52:b8:7c:78:f3:f2:43:66:af:ed:2a:8f:
b1:a7:d0:d1:ee:80:21:dd:04:9f:0b:c9:44:cf:19:00:cf:f9:
a3:d6:55:6e:34:ed:7f:0b:9c:98:16:38:80:ff:ea:a5:3d:41:
1c:3e:7b:b3:81:41:2b:fc:67:bb:e5:ff:b0:46:3d:76:6b:26:
69:00:6c:da:02:12:c6:13:11:af:a5:61:fb:b2:ea:bf:d6:cd:
7f:04:84:fd:dc:95:e0:e5:15:2e:b3:3d:94:7f:8c:a8:9a:48:
46:26:db:9e:04:7b:e8:72:7b:9e:c3:13:b1:9c:96:7a:85:26:
bd:4c:03:8c:b9:64:9f:cc:84:d5:ef:49:07:73:d6:f6:02:1e:
d0:0d:bd:f4:c8:7e:35:d6:09:91:41:2e:d3:29:ae:38:ab:d9:
a1:b6:b9:e7:54:19:d2:4c:83:8c:83:2c:1a:be:d4:97:03:c9:
20:60:50:6b:3b:44:32:ae:fe:5a:4b:1b:60:2e:11:bf:19:2d:
dd:72:e8:4f:2a:cc:e7:d7:74:1a:97:31:51:9f:5e:b7:91:92:
b2:a1:3a:91:8f:74:da:9c:f1:48:a3:8d:63:45:bb:8d:c2:55:
8b:ea:fb:48:71:33:f6:df:0a:70:51:99:de:15:63:7f:95:bb:
8e:66:d8:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjak4n5+zGxG2XrAqf+S17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5
YTM2ODkwHhcNMjUwMTAxMTk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGFkN2NlOTY4Y2MxMjEwYWFhNTMwMjk5ZmJkOWE3NTYxODk0ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5wqQtaMfOG3EYAd96EwfUNGf+Pg
o0OguDDTg3hcfPG0SAnyDG1s6KDbHxTYK0fax+OBoS526gEjTqRQdDfw96h7AU/d
P5HCzmisovORl7UaQEIBtOvp5uuWzaRYT90NX8kePolA7nb2wcmG3f3YCS8CuJMw
awEXVQkGuaGDqEgJ0Fp14R8mwzzJR4dgA8y3I9upP5WV+Cj2QffK+SL8HeDzPGMx
1TFgEKIgi2HWXRnZwNrtoFQzXgSvrx7c1MDxa0y+pwUXUjWs91qR0xKI1D6RnEVT
iWttn7xL08fL+tvTbKdJkbTj4hS4HcaFUrixOsSWKbcLqaCza+GU8rNbSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKStfOlozBIQqqUwKZ+9mnVhiU3NMB8GA1UdIwQY
MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt
MGEwZDA1ZWQwYzZiLzEvcEsxODZXak1FaENxcFRBcG43MmFkV0dKVGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi
LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTGEMA0G
CSqGSIb3DQEBCwUAA4IBAQAcymmLIRVSuHx48/JDZq/tKo+xp9DR7oAh3QSfC8lE
zxkAz/mj1lVuNO1/C5yYFjiA/+qlPUEcPnuzgUEr/Ge75f+wRj12ayZpAGzaAhLG
ExGvpWH7suq/1s1/BIT93JXg5RUusz2Uf4yomkhGJtueBHvocnuewxOxnJZ6hSa9
TAOMuWSfzITV70kHc9b2Ah7QDb30yH411gmRQS7TKa44q9mhtrnnVBnSTIOMgywa
vtSXA8kgYFBrO0Qyrv5aSxtgLhG/GS3dcuhPKszn13QalzFRn163kZKyoTqRj3Ta
nPFIo41jRbuNwlWL6vtIcTP23wpwUZneFWN/lbuOZtin
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:55:18 2025 by rpki-client