Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/8mAlHe2FGnjgTwZXLbd1VbzducA.roa
File: 8mAlHe2FGnjgTwZXLbd1VbzducA.roa (raw, json)
Hash identifier: xfkeplqiL9J7I3nJX5h7L4Din6AgPcOKqd05WlD4vO8=
Subject key identifier: F2:60:25:1D:ED:85:1A:78:E0:4F:06:57:2D:B7:75:55:BC:DD:B9:C0
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 019675FF0904B3DA00A135A432954D4E7343
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/8mAlHe2FGnjgTwZXLbd1VbzducA.roa
Signing time: Sun 27 Apr 2025 06:46:10 +0000
ROA not before: Sun 27 Apr 2025 06:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 185.164.20.0/24 maxlen: 24
185.164.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:ff:09:04:b3:da:00:a1:35:a4:32:95:4d:4e:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Apr 27 06:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f260251ded851a78e04f06572db77555bcddb9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:74:c6:84:66:df:df:73:3c:84:40:78:e7:
30:8c:4c:61:c5:36:e4:5f:95:40:b6:d1:58:77:8c:
2a:96:07:fa:e2:dd:e0:b6:ee:47:c2:15:be:f5:a3:
d0:8a:c2:68:0e:d4:4b:07:08:68:01:f3:b1:05:f7:
f0:a3:55:f2:97:ec:90:bf:82:79:d3:c3:59:d3:f7:
48:17:79:ed:ff:12:06:a9:39:04:2e:0a:22:59:1b:
7e:c2:c0:1f:aa:43:ba:70:c4:d9:49:ee:e0:01:89:
a0:82:87:2c:ac:e8:19:1c:2d:db:36:41:88:07:e7:
f0:6b:6a:b9:5d:56:a9:16:55:db:03:b8:36:80:5c:
90:78:7a:99:6e:82:90:45:28:a5:c3:df:fc:35:4c:
ba:57:89:9c:f8:c4:fc:2f:a6:88:ba:00:0a:ad:e0:
0d:ac:64:8b:9a:5b:51:1c:22:b6:b7:b3:6a:10:4b:
4f:9d:50:5e:bc:18:fd:45:47:65:66:2a:1f:c6:33:
86:ac:3d:44:b9:cf:0a:6c:2c:54:3b:a7:a9:85:b3:
9a:9e:15:f6:b6:07:80:0e:40:e4:39:59:ae:48:c1:
c5:40:91:52:26:d7:b3:c3:bb:3f:2f:40:d7:cb:dd:
0b:b6:58:7d:09:9c:83:3f:a0:50:e2:8c:dc:2f:45:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:25:1D:ED:85:1A:78:E0:4F:06:57:2D:B7:75:55:BC:DD:B9:C0
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/8mAlHe2FGnjgTwZXLbd1VbzducA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.20.0/23
Signature Algorithm: sha256WithRSAEncryption
10:7a:62:53:03:25:1a:ed:88:59:2d:1e:c3:63:69:d6:0a:10:
0d:ba:29:bd:82:fa:dd:59:c2:28:45:36:41:41:c0:c3:9e:e4:
dc:af:ac:a4:e0:06:2e:10:7d:43:57:69:6a:d3:ea:b3:c6:c3:
5f:ce:3b:94:da:73:7f:e0:23:cb:f9:c8:ea:b2:79:47:25:c7:
5c:36:c5:ae:a4:da:f6:3d:3a:83:3a:c1:9a:ee:8a:e7:e4:fe:
f7:a9:f0:21:fd:89:f2:fc:e0:81:57:59:0c:9a:46:5e:0f:d8:
f1:24:79:8c:f9:a2:cd:13:49:eb:ee:a1:5c:59:8c:17:bc:05:
9d:4f:f5:95:bf:d5:2c:5e:41:9c:50:dd:a4:cf:f5:aa:83:c3:
ae:45:a7:fd:b4:ca:31:04:be:3d:f0:38:9d:cb:74:c1:56:f8:
e8:63:e3:92:19:43:57:19:e1:b1:a3:b4:45:04:9d:a2:5c:6a:
a7:f1:8d:6a:0c:99:c4:6c:82:00:a9:73:49:76:61:90:86:f5:
66:85:bf:91:d0:fe:5b:c5:90:37:d3:72:54:39:92:dd:2c:f3:
43:95:81:a1:25:45:f1:50:3b:c9:e4:80:fb:90:c2:3c:0b:09:
18:fb:cd:8e:9d:c0:cb:c3:41:20:7e:13:3e:95:8f:68:99:54:
e3:9f:f9:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZ1/wkEs9oAoTWkMpVNTnNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx
N2MzOGMwHhcNMjUwNDI3MDY0NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjYwMjUxZGVkODUxYTc4ZTA0ZjA2NTcyZGI3NzU1NWJjZGRiOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTd0xoRm399zPIRAeOcwjExhxTbk
X5VAttFYd4wqlgf64t3gtu5HwhW+9aPQisJoDtRLBwhoAfOxBffwo1Xyl+yQv4J5
08NZ0/dIF3nt/xIGqTkELgoiWRt+wsAfqkO6cMTZSe7gAYmggocsrOgZHC3bNkGI
B+fwa2q5XVapFlXbA7g2gFyQeHqZboKQRSilw9/8NUy6V4mc+MT8L6aIugAKreAN
rGSLmltRHCK2t7NqEEtPnVBevBj9RUdlZiofxjOGrD1Euc8KbCxUO6ephbOanhX2
tgeADkDkOVmuSMHFQJFSJtezw7s/L0DXy90Ltlh9CZyDP6BQ4ozcL0VmcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJgJR3thRp44E8GVy23dVW83bnAMB8GA1UdIwQY
MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt
OWM3NmQxMGVjNTMyLzEvOG1BbEhlMkZHbmpnVHdaWExiZDFWYnpkdWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy
LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaQUMA0G
CSqGSIb3DQEBCwUAA4IBAQAQemJTAyUa7YhZLR7DY2nWChANuim9gvrdWcIoRTZB
QcDDnuTcr6yk4AYuEH1DV2lq0+qzxsNfzjuU2nN/4CPL+cjqsnlHJcdcNsWupNr2
PTqDOsGa7orn5P73qfAh/Yny/OCBV1kMmkZeD9jxJHmM+aLNE0nr7qFcWYwXvAWd
T/WVv9UsXkGcUN2kz/Wqg8OuRaf9tMoxBL498Didy3TBVvjoY+OSGUNXGeGxo7RF
BJ2iXGqn8Y1qDJnEbIIAqXNJdmGQhvVmhb+R0P5bxZA303JUOZLdLPNDlYGhJUXx
UDvJ5ID7kMI8CwkY+82OncDLw0EgfhM+lY9omVTjn/kV
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:53 2025 by rpki-client