Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/Xb2vaf1WumE3rEaoURHut1_s3Jg.roa
File: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (raw, json)
Hash identifier: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=
Subject key identifier: 5D:BD:AF:69:FD:56:BA:61:37:AC:46:A8:51:11:EE:B7:5F:EC:DC:98
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019693488ED8A951B97A5479FF1F14CED4A8
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/Xb2vaf1WumE3rEaoURHut1_s3Jg.roa
Signing time: Fri 02 May 2025 23:15:28 +0000
ROA not before: Fri 02 May 2025 23:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205570
IP address blocks: 185.213.170.0/24 maxlen: 24
2a0b:8b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:48:8e:d8:a9:51:b9:7a:54:79:ff:1f:14:ce:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: May 2 23:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dbdaf69fd56ba6137ac46a85111eeb75fecdc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:09:4f:48:41:ac:77:a3:ca:98:72:c6:f7:
a0:5a:23:2f:eb:d3:78:2a:6b:ed:d3:96:e3:76:b6:
b7:f0:0b:1c:7b:7b:0a:4f:18:7d:ea:ae:65:36:c5:
7a:97:e5:e8:9a:4d:62:16:d9:66:9b:ab:78:4d:ed:
3e:2c:9a:78:1b:0a:f0:ed:9e:cd:d0:ae:c8:cd:09:
fd:5d:15:c1:b4:64:9c:d4:89:dd:d6:cc:76:9f:c3:
08:33:ab:f7:45:d9:fb:d1:2c:f3:73:fd:87:a8:b1:
c8:20:2d:e0:2c:b2:ea:23:86:2c:f2:94:a8:95:33:
64:23:f3:d9:11:90:26:a2:bc:11:f4:f7:58:b4:73:
bc:92:e0:43:8c:7c:6b:cf:ec:00:a8:2b:c1:e9:e6:
a0:27:d1:7f:3c:b9:87:1a:ad:c5:35:da:30:1b:53:
e0:d7:dd:12:7a:20:11:04:2e:b2:e0:ca:5f:e1:4a:
25:43:e3:6a:02:d1:be:d6:20:82:c2:31:64:d5:c3:
b6:a6:14:73:e7:15:7c:01:64:3a:a0:ef:68:be:6e:
de:6c:26:58:13:08:60:29:62:2a:fb:70:37:f7:8c:
a7:c2:17:80:7a:74:7f:50:8f:d9:f7:76:32:75:8a:
25:97:e6:3e:a8:d1:fa:c3:a2:98:0b:7b:b1:f0:e4:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:AF:69:FD:56:BA:61:37:AC:46:A8:51:11:EE:B7:5F:EC:DC:98
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/Xb2vaf1WumE3rEaoURHut1_s3Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.170.0/24
IPv6:
2a0b:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
5d:24:92:51:a2:e0:b4:cd:d9:44:43:e6:b1:ab:ac:06:7e:d4:
19:2f:f2:03:74:59:9d:dd:0d:ac:4a:1d:50:bf:b4:31:ee:00:
59:dc:51:b0:7f:ad:a3:68:c9:2e:f3:ef:00:17:0d:46:ad:1c:
c8:48:3d:9c:91:87:2c:11:23:45:8d:5f:01:25:6d:c9:b5:28:
36:7e:2f:42:4c:4c:0b:ba:1a:1a:a5:c4:dc:8b:dd:f5:92:d7:
e5:e9:e2:0a:05:a7:ae:6b:48:29:3e:4b:69:f0:15:16:75:4a:
06:3b:c1:8d:ef:01:5e:20:4f:0e:ad:91:a6:49:1f:75:a5:b1:
8e:7d:82:0c:ee:61:18:3e:77:c4:b7:d5:74:88:4a:a0:54:40:
7a:ff:ca:45:c1:bf:84:32:6c:6c:f7:8b:a5:05:c0:78:8a:29:
0c:e6:e4:d9:12:e0:8e:4c:1b:c6:a1:32:44:54:e9:ac:c4:96:
fe:a0:ce:93:5d:bf:a9:49:32:55:9d:94:16:a1:e0:e2:fa:0f:
7c:94:0f:16:5e:e4:53:9f:21:f6:51:43:71:93:c9:f4:c6:01:
25:16:58:87:66:cb:b7:3a:da:78:48:43:73:b1:fe:17:6f:dd:
55:eb:58:e3:95:2b:b5:b1:56:d4:21:d5:b5:71:bc:f6:07:16:
4a:23:5a:f0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZaTSI7YqVG5elR5/x8UztSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjUwNTAyMjMxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGJkYWY2OWZkNTZiYTYxMzdhYzQ2YTg1MTExZWViNzVmZWNkYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupIJT0hBrHejyphyxvegWiMv69N4
Kmvt05bjdra38Asce3sKTxh96q5lNsV6l+Xomk1iFtlmm6t4Te0+LJp4Gwrw7Z7N
0K7IzQn9XRXBtGSc1Ind1sx2n8MIM6v3Rdn70Szzc/2HqLHIIC3gLLLqI4Ys8pSo
lTNkI/PZEZAmorwR9PdYtHO8kuBDjHxrz+wAqCvB6eagJ9F/PLmHGq3FNdowG1Pg
190SeiARBC6y4Mpf4UolQ+NqAtG+1iCCwjFk1cO2phRz5xV8AWQ6oO9ovm7ebCZY
EwhgKWIq+3A394ynwheAenR/UI/Z93YydYoll+Y+qNH6w6KYC3ux8OSH3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF29r2n9VrphN6xGqFER7rdf7NyYMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvWGIydmFmMVd1bUUzckVhb1VSSHV0MV9zM0pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudWqMA0E
AgACMAcDBQMqC4tAMA0GCSqGSIb3DQEBCwUAA4IBAQBdJJJRouC0zdlEQ+axq6wG
ftQZL/IDdFmd3Q2sSh1Qv7Qx7gBZ3FGwf62jaMku8+8AFw1GrRzISD2ckYcsESNF
jV8BJW3JtSg2fi9CTEwLuhoapcTci931ktfl6eIKBaeua0gpPktp8BUWdUoGO8GN
7wFeIE8OrZGmSR91pbGOfYIM7mEYPnfEt9V0iEqgVEB6/8pFwb+EMmxs94ulBcB4
iikM5uTZEuCOTBvGoTJEVOmsxJb+oM6TXb+pSTJVnZQWoeDi+g98lA8WXuRTnyH2
UUNxk8n0xgElFliHZsu3Otp4SENzsf4Xb91V61jjlSu1sVbUIdW1cbz2BxZKI1rw
-----END CERTIFICATE-----
Generated at Sun May 11 15:09:59 2025 by rpki-client