Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/k1igTi7iZQMlav5Y7S_wTES9NGE.roa
File: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (raw, json)
Hash identifier: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=
Subject key identifier: 93:58:A0:4E:2E:E2:65:03:25:6A:FE:58:ED:2F:F0:4C:44:BD:34:61
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01969C31C926618F9355A671A50802055CD4
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/k1igTi7iZQMlav5Y7S_wTES9NGE.roa
Signing time: Sun 04 May 2025 16:47:10 +0000
ROA not before: Sun 04 May 2025 16:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.167.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:31:c9:26:61:8f:93:55:a6:71:a5:08:02:05:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: May 4 16:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9358a04e2ee26503256afe58ed2ff04c44bd3461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:1e:c7:d8:54:89:c9:0e:c6:1f:20:c3:d1:
6a:68:7e:d7:2d:95:f6:e5:87:de:85:22:ab:a0:28:
8c:f3:64:2f:c1:f6:2a:fe:7a:22:d6:6f:bc:5e:27:
d3:55:b3:aa:65:2a:20:a5:63:5a:61:44:7e:a5:10:
6e:3a:a5:6d:9d:39:e9:d2:58:e5:c6:05:8f:d7:26:
a2:10:db:2f:f4:36:f7:5f:45:41:46:da:77:93:11:
05:6a:2e:18:6c:e4:ee:8d:84:32:54:eb:6b:98:95:
63:7c:a3:fb:ab:f8:ab:5f:21:37:b3:75:0b:2e:24:
a3:00:5e:e5:ff:45:99:f4:a0:e5:bc:86:17:38:83:
d9:0e:f8:86:ea:ae:aa:bd:b8:6d:50:6b:37:f1:cf:
ab:4c:7d:f0:a3:f4:8f:55:12:b7:5d:4e:1a:85:66:
30:f5:fb:8b:4d:92:bd:09:3a:3e:52:60:f2:9f:07:
ef:4b:98:7f:66:6f:be:95:b3:2c:1d:8c:6a:c2:a8:
7a:6e:77:d6:06:16:ed:3e:66:5a:aa:21:5b:96:92:
e4:fe:d6:4f:0b:89:22:34:71:d2:24:d2:3e:00:02:
86:9f:59:4f:d6:2c:d5:d3:91:af:c9:63:0e:81:ec:
b9:65:9e:5b:58:27:5c:5d:4d:18:ef:79:26:3f:87:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:A0:4E:2E:E2:65:03:25:6A:FE:58:ED:2F:F0:4C:44:BD:34:61
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/k1igTi7iZQMlav5Y7S_wTES9NGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.234.0/24
Signature Algorithm: sha256WithRSAEncryption
94:28:77:df:8b:80:14:19:9d:99:79:35:90:c9:f2:fb:b3:fc:
9f:71:06:aa:ea:72:84:45:db:71:64:c5:f6:b5:dd:e6:92:6a:
e3:63:6b:1a:3d:53:ba:65:f2:0e:cb:40:f1:a7:d4:0c:df:9c:
5c:44:ac:a4:d7:03:8a:e5:e7:a9:e3:f8:79:2c:29:82:0c:a9:
f2:13:ca:4d:cb:d4:6f:80:df:48:4f:c5:03:b4:21:fb:41:50:
95:a3:7d:1a:49:58:e2:8f:6f:25:2b:ff:ce:85:14:a4:1d:42:
23:d2:f1:c1:65:aa:23:a5:ff:11:52:7d:6d:e0:e6:76:b6:43:
21:ee:f4:12:8a:a0:5a:bf:8b:aa:27:00:78:e7:bd:85:74:a4:
68:43:d8:b9:69:67:38:9a:49:48:15:28:49:f9:18:23:2f:6c:
5e:e0:f1:3b:fa:fe:10:c6:d4:d4:6f:22:13:e4:e1:5f:e0:a6:
a3:03:9a:97:ba:29:a6:49:fc:93:2c:4c:e0:36:9e:b4:b9:3a:
b6:ce:78:51:c9:a0:5e:9f:6a:d5:c9:1e:f9:82:57:ae:1b:46:
d0:d7:f8:1c:d7:fe:72:d4:c7:b3:70:de:5b:a7:49:ef:62:87:
d9:8d:42:15:5e:f1:51:d1:06:39:6d:dd:44:6b:8f:6f:4a:ea:
4d:d7:87:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZacMckmYY+TVaZxpQgCBVzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjUwNTA0MTY0NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzU4YTA0ZTJlZTI2NTAzMjU2YWZlNThlZDJmZjA0YzQ0YmQzNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq8ex9hUickOxh8gw9FqaH7XLZX2
5YfehSKroCiM82QvwfYq/noi1m+8XifTVbOqZSogpWNaYUR+pRBuOqVtnTnp0ljl
xgWP1yaiENsv9Db3X0VBRtp3kxEFai4YbOTujYQyVOtrmJVjfKP7q/irXyE3s3UL
LiSjAF7l/0WZ9KDlvIYXOIPZDviG6q6qvbhtUGs38c+rTH3wo/SPVRK3XU4ahWYw
9fuLTZK9CTo+UmDynwfvS5h/Zm++lbMsHYxqwqh6bnfWBhbtPmZaqiFblpLk/tZP
C4kiNHHSJNI+AAKGn1lP1izV05GvyWMOgey5ZZ5bWCdcXU0Y73kmP4fq/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNYoE4u4mUDJWr+WO0v8ExEvTRhMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvazFpZ1RpN2laUU1sYXY1WTdTX3dURVM5TkdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafqMA0G
CSqGSIb3DQEBCwUAA4IBAQCUKHffi4AUGZ2ZeTWQyfL7s/yfcQaq6nKERdtxZMX2
td3mkmrjY2saPVO6ZfIOy0Dxp9QM35xcRKyk1wOK5eep4/h5LCmCDKnyE8pNy9Rv
gN9IT8UDtCH7QVCVo30aSVjij28lK//OhRSkHUIj0vHBZaojpf8RUn1t4OZ2tkMh
7vQSiqBav4uqJwB4572FdKRoQ9i5aWc4mklIFShJ+RgjL2xe4PE7+v4QxtTUbyIT
5OFf4KajA5qXuimmSfyTLEzgNp60uTq2znhRyaBen2rVyR75gleuG0bQ1/gc1/5y
1MezcN5bp0nvYofZjUIVXvFR0QY5bd1Ea49vSupN14ex
-----END CERTIFICATE-----
Generated at Sun May 11 10:19:24 2025 by rpki-client