Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/MBsPUAFCElkz9qaG43qjjQj1qf4.roa
File: MBsPUAFCElkz9qaG43qjjQj1qf4.roa (raw, json)
Hash identifier: vSWAgGTm7jYxOpiAtKnKd7IfryMpisQqN5QHCosVJVk=
Subject key identifier: 30:1B:0F:50:01:42:12:59:33:F6:A6:86:E3:7A:A3:8D:08:F5:A9:FE
Certificate issuer: /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial: 01941F8C3538BE9E40568D8A8FE38774D6A4
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/MBsPUAFCElkz9qaG43qjjQj1qf4.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211468
IP address blocks: 185.190.38.0/24 maxlen: 24
194.169.166.0/24 maxlen: 24
194.169.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:35:38:be:9e:40:56:8d:8a:8f:e3:87:74:d6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301b0f500142125933f6a686e37aa38d08f5a9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:24:60:87:cd:73:e2:cb:03:ea:25:65:6c:
90:9e:32:3e:45:18:a4:60:cb:b6:48:be:76:56:0e:
d6:cc:84:50:a0:40:1c:c1:ec:48:61:b7:c1:a2:7c:
b0:2f:fc:23:3c:fd:2e:c6:71:69:c3:e1:e8:ad:99:
b7:06:a1:00:d5:d3:bb:8b:fe:0a:54:b5:60:8d:8c:
02:37:21:8f:85:c1:e0:3c:41:ab:ea:3d:01:66:b0:
e1:0e:ba:f9:cb:e7:83:b3:50:4e:30:b4:e8:97:10:
02:af:b5:4a:68:d2:7e:79:cc:ce:bb:07:db:95:79:
f6:c7:8c:49:b5:1d:e3:76:e0:17:d9:c7:9b:a0:27:
f4:5d:80:f1:d9:3d:9e:f0:8e:f2:f1:00:5b:48:17:
f9:34:3c:2e:aa:a4:15:77:32:af:50:84:62:09:a5:
1a:bd:89:71:45:53:f4:a3:35:be:24:e3:0a:6b:c9:
76:15:54:84:af:19:c9:f4:36:92:d0:2f:31:9a:27:
58:53:91:36:d7:d4:16:40:a8:78:fb:e8:7f:ae:2d:
17:9d:5e:f0:01:eb:f2:11:d4:ba:50:23:37:55:0e:
f1:8f:c5:c6:11:67:9c:0a:1b:18:16:91:a3:6f:18:
66:17:27:45:24:2c:c5:e8:2e:2e:82:fd:22:18:f3:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1B:0F:50:01:42:12:59:33:F6:A6:86:E3:7A:A3:8D:08:F5:A9:FE
X509v3 Authority Key Identifier:
keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/MBsPUAFCElkz9qaG43qjjQj1qf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.38.0/24
194.169.166.0/23
Signature Algorithm: sha256WithRSAEncryption
30:70:2c:ab:f6:7b:f8:a4:0e:63:41:7c:71:62:22:c5:38:57:
59:3c:36:42:b7:1c:9b:28:80:ef:6a:d8:00:d0:8f:64:6c:52:
63:cb:e2:4d:e5:9b:d8:2d:60:cf:28:96:b3:14:0e:4d:1f:9f:
58:33:a4:6e:ed:45:c0:b4:91:f2:66:63:a1:87:c0:3b:67:85:
00:9a:e8:2e:be:cd:66:42:83:42:20:be:78:bd:5e:48:d4:d9:
9b:6f:ff:ef:ba:cc:10:b5:94:2d:b6:d6:fb:22:4f:15:b5:7b:
be:8b:cc:9e:61:d4:68:94:4c:f3:d8:67:bc:d8:6d:60:44:dd:
18:4b:81:bb:9c:8e:fe:25:3b:34:e1:31:d3:51:d8:5b:b1:b0:
ea:dd:a5:74:05:ad:e8:c9:21:91:1a:b4:84:ee:f7:cf:a3:08:
c2:a2:16:c3:3e:0a:1f:98:ae:53:12:51:e0:b9:4b:e2:68:ae:
28:84:71:d8:cf:74:a0:72:d2:c0:96:c4:a9:87:b8:d2:de:e8:
86:70:d0:81:57:e0:08:cb:7a:0c:93:3b:8a:3a:75:4c:85:1c:
0a:2c:97:60:27:4f:0e:ad:18:73:5a:20:30:6f:6e:07:43:08:
e5:1a:2d:05:74:3e:1c:80:1a:f4:36:43:18:7e:f9:3c:3a:b3:
29:f9:ca:42
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjDU4vp5AVo2Kj+OHdNakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNmVkMDI3ZDM3YmQ2MTA5YTAzMTFlMjg2OWQzNDRhZDk1
OTM1ZjkwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDFiMGY1MDAxNDIxMjU5MzNmNmE2ODZlMzdhYTM4ZDA4ZjVhOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mUkYIfNc+LLA+olZWyQnjI+RRik
YMu2SL52Vg7WzIRQoEAcwexIYbfBonywL/wjPP0uxnFpw+HorZm3BqEA1dO7i/4K
VLVgjYwCNyGPhcHgPEGr6j0BZrDhDrr5y+eDs1BOMLTolxACr7VKaNJ+eczOuwfb
lXn2x4xJtR3jduAX2ceboCf0XYDx2T2e8I7y8QBbSBf5NDwuqqQVdzKvUIRiCaUa
vYlxRVP0ozW+JOMKa8l2FVSErxnJ9DaS0C8xmidYU5E219QWQKh4++h/ri0XnV7w
AevyEdS6UCM3VQ7xj8XGEWecChsYFpGjbxhmFydFJCzF6C4ugv0iGPN79wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDAbD1ABQhJZM/amhuN6o40I9an+MB8GA1UdIwQY
MBaAFHtu0CfTe9YQmgMR4oadNErZWTX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEt
Yzk3ZTM3M2Q3MDRjLzEvTUJzUFVBRkNFbGt6OXFhRzQzcWpqUWoxcWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEtYzk3ZTM3M2Q3MDRj
LzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAub4mAwQB
wqmmMA0GCSqGSIb3DQEBCwUAA4IBAQAwcCyr9nv4pA5jQXxxYiLFOFdZPDZCtxyb
KIDvatgA0I9kbFJjy+JN5ZvYLWDPKJazFA5NH59YM6Ru7UXAtJHyZmOhh8A7Z4UA
muguvs1mQoNCIL54vV5I1Nmbb//vuswQtZQtttb7Ik8VtXu+i8yeYdRolEzz2Ge8
2G1gRN0YS4G7nI7+JTs04THTUdhbsbDq3aV0Ba3oySGRGrSE7vfPowjCohbDPgof
mK5TElHguUviaK4ohHHYz3SgctLAlsSph7jS3uiGcNCBV+AIy3oMkzuKOnVMhRwK
LJdgJ08OrRhzWiAwb24HQwjlGi0FdD4cgBr0NkMYfvk8OrMp+cpC
-----END CERTIFICATE-----
Generated at Thu May 1 19:17:02 2025 by rpki-client