Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-eNEKfl9vEfE2O4M-ISxllJRVy4.roa
File: 1-eNEKfl9vEfE2O4M-ISxllJRVy4.roa (raw, json)
Hash identifier: TfwkqugnAP8i0BfEqHc9UPwgNKrK2VpTbCuFVGsvH+c=
Subject key identifier: F9:E3:44:29:F9:7D:BC:47:C4:D8:EE:0C:F8:84:B1:96:52:51:57:2E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214403B4DDE8B8A6F982D7F419CCEC2E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-eNEKfl9vEfE2O4M-ISxllJRVy4.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49648
IP address blocks: 37.140.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:03:b4:dd:e8:b8:a6:f9:82:d7:f4:19:cc:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9e34429f97dbc47c4d8ee0cf884b1965251572e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:ab:43:12:ac:3a:4d:6b:12:1f:db:0e:ee:
dd:c6:dd:ca:b6:ee:6c:5d:b5:61:a3:82:b1:bc:19:
76:8d:15:70:1e:ef:7f:4e:36:0e:51:7f:a4:fb:74:
2d:aa:07:82:20:45:76:42:8e:4a:6f:24:e9:28:9f:
83:e2:78:0e:f8:65:5e:66:e3:8d:c1:1d:40:4b:2c:
86:ea:d9:2c:c3:c0:82:e4:3e:87:dc:e5:ec:82:e9:
43:e6:0a:e2:5e:97:af:5a:7e:43:3c:ee:c3:06:31:
18:f7:b9:c0:3c:2a:5e:5c:0a:36:6e:20:82:53:2f:
1d:cf:63:31:d7:0e:bd:83:f9:ae:2a:b1:17:cf:bc:
b3:98:db:27:2a:e9:5a:67:07:09:bf:64:6d:f8:05:
47:1f:cf:51:ac:0c:eb:a5:ec:18:ca:e4:27:b5:54:
2c:7d:c1:9c:cb:9c:3c:69:78:61:5b:ef:97:60:1d:
e4:41:83:11:6d:2a:cb:00:97:28:38:aa:65:d4:44:
7e:06:25:7a:69:25:69:94:8d:86:97:8b:fb:9a:44:
84:1a:dd:9b:f9:73:6b:dc:64:90:09:f3:d4:8a:e4:
5d:69:b3:0b:45:1b:40:a4:ac:09:14:9c:ae:05:f9:
58:fe:4c:96:21:54:af:d2:e4:34:4d:fb:ce:60:76:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:44:29:F9:7D:BC:47:C4:D8:EE:0C:F8:84:B1:96:52:51:57:2E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-eNEKfl9vEfE2O4M-ISxllJRVy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b2:57:a3:8c:24:3f:96:e8:bd:6e:e0:20:0d:0f:c7:21:d9:
a2:17:59:31:42:f4:1c:be:f0:c6:b6:d9:9f:e5:ed:8d:ba:74:
42:be:93:12:c9:a9:c9:f5:fc:4a:ea:fc:27:0f:b3:4f:84:39:
ef:f6:23:c4:e8:fc:70:77:51:bc:d2:73:3e:dc:67:9d:95:e7:
2a:b4:c9:51:2f:46:5a:e7:cb:d1:c5:b0:d1:85:b6:4f:9d:85:
06:57:04:8b:4a:a0:fa:70:7f:23:61:e9:3d:33:11:f6:2a:01:
49:ca:fc:a7:50:17:02:8c:9b:f3:5c:52:b4:b7:a0:ac:91:3c:
47:9e:23:a8:32:6c:10:5c:a1:bf:91:b7:07:1e:10:3b:ac:30:
c4:1d:a2:b3:5f:4f:7b:e1:1a:16:ab:c3:ea:8b:df:c1:ee:dd:
37:b0:0c:62:8d:e8:4e:d7:4a:c4:01:c1:27:ac:0c:9f:52:5e:
b9:11:1e:ab:ee:78:de:47:29:92:42:51:10:2f:90:16:7d:38:
86:f8:71:ab:8a:7a:13:e0:0b:68:ef:c1:9d:71:50:6a:48:b6:
ad:58:23:89:bc:94:e1:8d:f2:7e:f2:4a:b9:e0:d5:37:9c:e3:
aa:96:2c:f6:0a:b5:ce:ce:84:25:92:a6:84:45:1f:82:45:6a:
8a:20:3a:d5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhRAO03ei4pvmC1/QZzOwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWUzNDQyOWY5N2RiYzQ3YzRkOGVlMGNmODg0YjE5NjUyNTE1NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h+rQxKsOk1rEh/bDu7dxt3Ktu5s
XbVho4KxvBl2jRVwHu9/TjYOUX+k+3QtqgeCIEV2Qo5KbyTpKJ+D4ngO+GVeZuON
wR1ASyyG6tksw8CC5D6H3OXsgulD5griXpevWn5DPO7DBjEY97nAPCpeXAo2biCC
Uy8dz2Mx1w69g/muKrEXz7yzmNsnKulaZwcJv2Rt+AVHH89RrAzrpewYyuQntVQs
fcGcy5w8aXhhW++XYB3kQYMRbSrLAJcoOKpl1ER+BiV6aSVplI2Gl4v7mkSEGt2b
+XNr3GSQCfPUiuRdabMLRRtApKwJFJyuBflY/kyWIVSv0uQ0TfvOYHZUKwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPnjRCn5fbxHxNjuDPiEsZZSUVcuMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvMS1lTkVLZmw5dkVmRTJPNE0tSVN4bGxKUlZ5NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvN2I5MzM2LWU5ZjgtNGUyNy1hZjRiLTIzOWQyZmUzOThi
MS8xL0NUTlR3ZnEtaVdyNHVGX25ZQTVHTkphUHpFdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWM9TAN
BgkqhkiG9w0BAQsFAAOCAQEAarJXo4wkP5bovW7gIA0PxyHZohdZMUL0HL7wxrbZ
n+Xtjbp0Qr6TEsmpyfX8Sur8Jw+zT4Q57/YjxOj8cHdRvNJzPtxnnZXnKrTJUS9G
WufL0cWw0YW2T52FBlcEi0qg+nB/I2HpPTMR9ioBScr8p1AXAoyb81xStLegrJE8
R54jqDJsEFyhv5G3Bx4QO6wwxB2is19Pe+EaFqvD6ovfwe7dN7AMYo3oTtdKxAHB
J6wMn1JeuREeq+543kcpkkJREC+QFn04hvhxq4p6E+ALaO/BnXFQaki2rVgjibyU
4Y3yfvJKueDVN5zjqpYs9gq1zs6EJZKmhEUfgkVqiiA61Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:12 2025 by rpki-client