Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/9Hxo6fI9QehJzkwT4jlRnU3srEg.roa
File: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (raw, json)
Hash identifier: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=
Subject key identifier: F4:7C:68:E9:F2:3D:41:E8:49:CE:4C:13:E2:39:51:9D:4D:EC:AC:48
Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial: 01951ACBDD1933659C821B88B3E0A083ED35
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/9Hxo6fI9QehJzkwT4jlRnU3srEg.roa
Signing time: Tue 18 Feb 2025 20:42:02 +0000
ROA not before: Tue 18 Feb 2025 20:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.130.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:cb:dd:19:33:65:9c:82:1b:88:b3:e0:a0:83:ed:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Validity
Not Before: Feb 18 20:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f47c68e9f23d41e849ce4c13e239519d4decac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:3b:b7:5b:59:2c:c3:51:45:d3:4f:5a:05:
6b:9b:f8:cb:e4:7d:9a:87:f2:9e:35:97:d9:10:a6:
c0:73:8d:1a:aa:f9:58:82:19:fc:57:6b:f2:cd:36:
1a:4b:fa:3c:1f:87:14:dc:ce:9e:00:00:4c:38:f6:
a2:f8:84:d4:7b:9d:d8:6d:54:a6:64:34:f0:06:4e:
85:b4:67:49:97:45:a5:19:7c:73:e5:bc:11:4c:5c:
84:b2:6c:9b:a2:98:8f:0b:50:db:3d:1a:3e:ad:3e:
f5:f4:5a:42:4f:b5:6e:a2:fa:fc:5e:78:1b:cd:8c:
ad:82:52:fa:f1:79:30:2b:e8:24:f4:2e:04:85:fd:
cb:89:d1:15:94:c4:1d:dd:6e:9e:28:1f:1c:06:fc:
7c:7f:21:1c:67:cd:a7:0d:6d:75:82:20:1c:7e:19:
64:b1:2f:9c:fb:e8:69:1b:51:b3:00:cc:b7:d9:51:
df:d7:64:d9:bf:c9:9a:4f:36:de:a5:9d:8c:1a:dc:
a4:5e:8e:fb:5a:1c:28:bf:a9:f8:d9:a3:1b:39:50:
7b:c2:89:fe:2f:8b:8b:55:19:5c:cc:f7:11:e1:e4:
ff:37:a3:f1:8e:28:a7:85:1a:94:04:29:67:d1:97:
54:26:57:f3:50:63:e1:6d:fd:3a:47:85:f4:d1:10:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:68:E9:F2:3D:41:E8:49:CE:4C:13:E2:39:51:9D:4D:EC:AC:48
X509v3 Authority Key Identifier:
keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/9Hxo6fI9QehJzkwT4jlRnU3srEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.130.116.0/23
Signature Algorithm: sha256WithRSAEncryption
45:aa:76:24:db:7c:49:ce:c4:2a:2f:05:27:ae:8f:04:1e:55:
36:52:ee:c3:7d:8f:6a:d6:2c:51:a8:92:6f:bc:c1:37:87:20:
9b:b5:31:7f:be:39:dc:96:d7:94:bf:18:d9:78:da:ce:21:a1:
58:a3:cd:c5:df:50:2f:67:81:bc:63:b5:5a:e6:b6:7f:b1:62:
3a:d8:0e:4e:ca:bc:df:64:51:db:d2:2b:b0:76:8d:9e:7a:f3:
9a:44:7c:5a:5e:fe:27:4b:ea:94:23:56:51:22:26:d5:dc:b2:
56:42:98:bb:36:e0:a2:04:0b:51:b0:29:61:c0:d1:91:42:a0:
14:3d:1c:00:16:8c:08:12:e8:f7:73:56:96:3d:a7:75:0b:d4:
c7:e6:39:68:87:f6:cb:3a:c7:0a:31:73:8c:e9:1f:1c:1a:a6:
04:62:2f:3c:fe:ad:57:84:53:4d:1c:6c:ea:d1:33:a1:ea:33:
93:e1:8a:f8:43:0d:26:c8:97:ec:0f:43:89:5a:9f:53:67:5d:
d6:90:cc:a9:3d:b9:b6:79:92:01:c0:d2:aa:5b:fc:38:ae:3c:
a5:74:06:8f:0d:63:82:7f:6e:2b:0f:7f:e0:07:1a:0b:84:e0:
e5:ee:61:17:b6:59:c9:df:63:8e:a8:ba:c0:1e:07:f2:e5:2f:
9f:f3:59:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUay90ZM2WcghuIs+Cgg+01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm
N2YwNTQwHhcNMjUwMjE4MjA0MjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDdjNjhlOWYyM2Q0MWU4NDljZTRjMTNlMjM5NTE5ZDRkZWNhYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1A7t1tZLMNRRdNPWgVrm/jL5H2a
h/KeNZfZEKbAc40aqvlYghn8V2vyzTYaS/o8H4cU3M6eAABMOPai+ITUe53YbVSm
ZDTwBk6FtGdJl0WlGXxz5bwRTFyEsmybopiPC1DbPRo+rT719FpCT7Vuovr8Xngb
zYytglL68XkwK+gk9C4Ehf3LidEVlMQd3W6eKB8cBvx8fyEcZ82nDW11giAcfhlk
sS+c++hpG1GzAMy32VHf12TZv8maTzbepZ2MGtykXo77Whwov6n42aMbOVB7won+
L4uLVRlczPcR4eT/N6PxjiinhRqUBCln0ZdUJlfzUGPhbf06R4X00RCqwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPR8aOnyPUHoSc5ME+I5UZ1N7KxIMB8GA1UdIwQY
MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct
MTE3NWU1YTA3YTU1LzEvOUh4bzZmSTlRZWhKemt3VDRqbFJuVTNzckVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1
LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwoJ0MA0G
CSqGSIb3DQEBCwUAA4IBAQBFqnYk23xJzsQqLwUnro8EHlU2Uu7DfY9q1ixRqJJv
vME3hyCbtTF/vjnclteUvxjZeNrOIaFYo83F31AvZ4G8Y7Va5rZ/sWI62A5Oyrzf
ZFHb0iuwdo2eevOaRHxaXv4nS+qUI1ZRIibV3LJWQpi7NuCiBAtRsClhwNGRQqAU
PRwAFowIEuj3c1aWPad1C9TH5jloh/bLOscKMXOM6R8cGqYEYi88/q1XhFNNHGzq
0TOh6jOT4Yr4Qw0myJfsD0OJWp9TZ13WkMypPbm2eZIBwNKqW/w4rjyldAaPDWOC
f24rD3/gBxoLhODl7mEXtlnJ32OOqLrAHgfy5S+f81ne
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:45 2025 by rpki-client