Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hGqZ-FRlI55t4voAlR-n3NqPej0.roa
File: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (raw, json)
Hash identifier: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=
Subject key identifier: 84:6A:99:F8:54:65:23:9E:6D:E2:FA:00:95:1F:A7:DC:DA:8F:7A:3D
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01958AD8F78FB405488FCE6FBB764692284E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hGqZ-FRlI55t4voAlR-n3NqPej0.roa
Signing time: Wed 12 Mar 2025 14:53:49 +0000
ROA not before: Wed 12 Mar 2025 14:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 92.62.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:d8:f7:8f:b4:05:48:8f:ce:6f:bb:76:46:92:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 12 14:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=846a99f85465239e6de2fa00951fa7dcda8f7a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:3d:dd:91:36:83:61:ac:20:39:fc:94:d3:
2d:f9:a8:25:86:ac:45:61:c8:a5:b1:53:58:af:d2:
82:e2:6d:e1:94:80:20:fe:28:a3:79:19:a3:5f:d1:
36:2f:ab:e9:31:cb:0b:e1:ae:46:7c:fd:5d:91:d0:
16:c6:a4:8e:ec:78:bf:02:bd:40:d8:f1:f0:ee:d8:
54:3b:56:d7:e5:9a:95:3f:91:6c:ab:65:41:4f:d1:
92:10:59:71:95:7f:9d:28:fe:9c:a7:52:34:1e:a3:
c0:df:bd:99:b8:ea:77:d9:17:0f:5d:45:15:37:ab:
c8:13:f9:84:f2:44:f0:50:bd:b4:6b:7a:02:fb:13:
c4:25:02:d2:1c:38:96:d2:07:af:e4:6c:51:86:e8:
95:8f:c9:03:7f:08:14:93:5f:7e:ed:6b:94:6a:e4:
56:c0:4f:be:d1:32:f3:3e:a6:db:df:94:05:56:5a:
98:20:f4:30:67:b8:1f:ab:5d:c5:19:86:cd:34:81:
25:28:49:97:78:ec:09:e3:e5:9c:a1:b3:00:fa:ac:
28:90:33:8a:31:70:4c:58:f8:21:63:04:94:b0:fb:
52:90:2f:c5:ed:a8:85:d1:08:57:c6:2d:95:88:3b:
6a:4f:d7:f1:79:8a:fa:b6:4b:e2:d5:6e:55:e2:6b:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:99:F8:54:65:23:9E:6D:E2:FA:00:95:1F:A7:DC:DA:8F:7A:3D
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/hGqZ-FRlI55t4voAlR-n3NqPej0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e3:cc:82:5a:d6:42:fc:39:fa:a8:76:58:aa:1b:d3:e4:ae:
dc:6d:6f:88:0d:cb:59:49:61:2b:fd:5d:cc:c1:1f:3e:61:75:
65:d7:02:c8:92:f1:18:b6:14:36:0c:04:c3:3a:19:99:6b:08:
26:6a:3b:46:77:8e:3c:1a:f3:50:8a:8a:78:43:9f:b5:38:aa:
a7:76:64:89:f5:24:18:16:d8:61:b9:eb:02:ea:f0:28:6d:12:
d2:78:0c:d1:93:0f:a3:57:0d:da:c1:4a:db:a9:3c:c8:07:a4:
aa:f6:a1:2d:42:97:4f:d2:c6:fa:7c:c6:67:a3:da:8e:df:02:
91:e1:5d:52:6b:56:29:81:b6:26:1d:db:c8:5f:9f:f0:d4:8b:
7a:07:fa:3e:4d:31:f5:9e:06:9f:c3:e8:a8:a1:5f:0a:a5:42:
da:a8:a9:92:69:95:1b:f2:3f:a4:38:dd:96:8c:f3:b9:42:8b:
bf:cc:fd:66:83:e1:0a:0b:7f:24:f9:65:7a:b8:18:22:fb:59:
65:f1:44:b3:aa:85:da:53:f0:93:59:1c:1c:4d:50:00:80:41:
6b:f8:3e:ad:6b:7d:b7:cb:90:5a:a6:45:5a:c1:9d:b3:2a:fc:
ce:52:62:9d:8a:08:a3:ff:37:ff:4b:a6:d3:84:6e:68:4a:e5:
2d:1f:81:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWK2PePtAVIj85vu3ZGkihOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwMzEyMTQ1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDZhOTlmODU0NjUyMzllNmRlMmZhMDA5NTFmYTdkY2RhOGY3YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2g93ZE2g2GsIDn8lNMt+aglhqxF
YcilsVNYr9KC4m3hlIAg/iijeRmjX9E2L6vpMcsL4a5GfP1dkdAWxqSO7Hi/Ar1A
2PHw7thUO1bX5ZqVP5Fsq2VBT9GSEFlxlX+dKP6cp1I0HqPA372ZuOp32RcPXUUV
N6vIE/mE8kTwUL20a3oC+xPEJQLSHDiW0gev5GxRhuiVj8kDfwgUk19+7WuUauRW
wE++0TLzPqbb35QFVlqYIPQwZ7gfq13FGYbNNIElKEmXeOwJ4+WcobMA+qwokDOK
MXBMWPghYwSUsPtSkC/F7aiF0QhXxi2ViDtqT9fxeYr6tkvi1W5V4mu55QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRqmfhUZSOebeL6AJUfp9zaj3o9MB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvaEdxWi1GUmxJNTV0NHZvQWxSLW4zTnFQZWowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD77MA0G
CSqGSIb3DQEBCwUAA4IBAQC548yCWtZC/Dn6qHZYqhvT5K7cbW+IDctZSWEr/V3M
wR8+YXVl1wLIkvEYthQ2DATDOhmZawgmajtGd448GvNQiop4Q5+1OKqndmSJ9SQY
FthhuesC6vAobRLSeAzRkw+jVw3awUrbqTzIB6Sq9qEtQpdP0sb6fMZno9qO3wKR
4V1Sa1YpgbYmHdvIX5/w1It6B/o+TTH1ngafw+iooV8KpULaqKmSaZUb8j+kON2W
jPO5Qou/zP1mg+EKC38k+WV6uBgi+1ll8USzqoXaU/CTWRwcTVAAgEFr+D6ta323
y5BapkVawZ2zKvzOUmKdigij/zf/S6bThG5oSuUtH4Ha
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:07 2025 by rpki-client