Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/f5Ho3akgKmzjlMiu9k3MEwxgpfE.roa
File: f5Ho3akgKmzjlMiu9k3MEwxgpfE.roa (raw, json)
Hash identifier: w7wkP3SoIISV8wD3GVBDY5Bg3VOKaV91+ogwxeEjZVY=
Subject key identifier: 7F:91:E8:DD:A9:20:2A:6C:E3:94:C8:AE:F6:4D:CC:13:0C:60:A5:F1
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244565A4ED44C8671A701DD5E04F30B4
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/f5Ho3akgKmzjlMiu9k3MEwxgpfE.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213858
IP address blocks: 84.44.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:65:a4:ed:44:c8:67:1a:70:1d:d5:e0:4f:30:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f91e8dda9202a6ce394c8aef64dcc130c60a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:90:89:d9:0f:81:bc:97:bb:20:6b:46:8c:
13:f4:46:59:95:a8:13:13:ad:3a:c4:47:4d:0c:74:
0e:79:94:10:c5:c7:37:31:94:b9:8d:90:c3:08:aa:
ba:e7:53:e0:d7:ba:72:57:86:1c:f0:0a:90:d2:99:
c7:94:6a:ad:5f:2e:a2:3e:51:72:4a:eb:59:75:b3:
53:f6:35:83:f2:4f:5c:6a:44:17:f3:8b:14:6a:c8:
61:9c:b1:72:64:19:8d:1e:5a:f6:f2:9b:b2:e2:d8:
8a:ed:65:7f:9d:b9:05:14:35:25:79:fe:3d:fc:cd:
5c:56:3e:5f:37:09:e0:13:5d:e0:57:1c:c4:8b:ae:
fb:a7:7c:98:73:8f:e3:e1:d2:75:71:1c:4f:61:1a:
d2:34:de:1e:54:72:94:95:5a:a4:1e:b7:7a:b0:1c:
c4:07:16:d2:c0:2b:6f:6c:8b:f8:41:fd:d1:d9:4d:
99:b2:54:f0:4c:fe:3f:7c:ad:10:25:43:96:15:5a:
f3:e2:5f:a0:ed:38:cd:5b:a5:45:bb:72:68:a8:31:
95:be:11:f3:f6:b8:f8:c4:94:a9:45:e4:d8:a4:5f:
44:89:68:8d:10:cb:4b:b9:d1:b9:cf:ac:2a:eb:06:
00:69:91:cb:1c:17:a4:de:41:da:0c:d0:4e:9d:0d:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:E8:DD:A9:20:2A:6C:E3:94:C8:AE:F6:4D:CC:13:0C:60:A5:F1
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/f5Ho3akgKmzjlMiu9k3MEwxgpfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.113.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:74:ec:ce:82:e1:93:b0:5e:95:e9:0d:c9:28:8d:a0:a8:58:
30:f3:35:11:74:d6:2e:b3:f9:ce:82:c9:59:89:3f:05:05:c4:
db:16:38:ac:21:15:12:40:bf:f6:4b:9d:50:0f:17:99:65:e8:
73:35:87:cd:95:b2:74:b4:cd:66:ff:9d:47:a6:94:d2:67:6a:
2c:68:1a:04:50:3b:eb:f9:14:7a:d1:62:0d:84:1a:c6:da:bb:
a1:ec:ca:5e:76:5b:e7:25:49:5c:7b:fa:5e:e0:a0:55:21:73:
f6:4a:b6:21:91:f4:1a:78:2f:87:3a:f8:5f:71:40:d5:11:df:
68:50:26:ab:d9:1e:6b:76:14:ea:01:7e:0f:88:06:09:fe:ce:
bf:c6:72:44:39:1b:f3:24:35:90:dd:65:c6:25:20:fc:09:58:
77:c3:47:cc:c5:8d:21:72:f6:32:74:6d:9b:43:31:21:c0:6f:
86:60:ec:35:68:7d:ab:c4:62:4c:9a:69:f4:c6:61:9c:5a:aa:
d1:bd:eb:e5:01:15:e3:8e:cd:39:dc:2a:33:66:c3:c4:28:2d:
a0:d9:e8:1b:79:3d:90:4e:44:9c:3f:b3:bc:81:57:ed:c7:11:
86:12:35:9f:83:24:57:0a:bf:59:b1:c5:5e:95:69:22:03:dd:
cf:16:5d:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRWWk7UTIZxpwHdXgTzC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjUwMTAxMjM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjkxZThkZGE5MjAyYTZjZTM5NGM4YWVmNjRkY2MxMzBjNjBhNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYGQidkPgbyXuyBrRowT9EZZlagT
E606xEdNDHQOeZQQxcc3MZS5jZDDCKq651Pg17pyV4Yc8AqQ0pnHlGqtXy6iPlFy
SutZdbNT9jWD8k9cakQX84sUashhnLFyZBmNHlr28puy4tiK7WV/nbkFFDUlef49
/M1cVj5fNwngE13gVxzEi677p3yYc4/j4dJ1cRxPYRrSNN4eVHKUlVqkHrd6sBzE
BxbSwCtvbIv4Qf3R2U2ZslTwTP4/fK0QJUOWFVrz4l+g7TjNW6VFu3JoqDGVvhHz
9rj4xJSpReTYpF9EiWiNEMtLudG5z6wq6wYAaZHLHBek3kHaDNBOnQ0oKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+R6N2pICps45TIrvZNzBMMYKXxMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvZjVIbzNha2dLbXpqbE1pdTlrM01Fd3hncGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCxxMA0G
CSqGSIb3DQEBCwUAA4IBAQDNdOzOguGTsF6V6Q3JKI2gqFgw8zURdNYus/nOgslZ
iT8FBcTbFjisIRUSQL/2S51QDxeZZehzNYfNlbJ0tM1m/51HppTSZ2osaBoEUDvr
+RR60WINhBrG2ruh7MpedlvnJUlce/pe4KBVIXP2SrYhkfQaeC+HOvhfcUDVEd9o
UCar2R5rdhTqAX4PiAYJ/s6/xnJEORvzJDWQ3WXGJSD8CVh3w0fMxY0hcvYydG2b
QzEhwG+GYOw1aH2rxGJMmmn0xmGcWqrRvevlARXjjs053CozZsPEKC2g2egbeT2Q
TkScP7O8gVftxxGGEjWfgyRXCr9ZscVelWkiA93PFl1A
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:58 2025 by rpki-client