Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/_AxdM0TapJRwZRPAoGLBTsCIVsg.roa
File: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (raw, json)
Hash identifier: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=
Subject key identifier: FC:0C:5D:33:44:DA:A4:94:70:65:13:C0:A0:62:C1:4E:C0:88:56:C8
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 019427488D46398B84E5475CBA91E6F51FD7
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/_AxdM0TapJRwZRPAoGLBTsCIVsg.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210819
IP address blocks: 92.246.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8d:46:39:8b:84:e5:47:5c:ba:91:e6:f5:1f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0c5d3344daa494706513c0a062c14ec08856c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:38:77:1b:0f:71:cf:d1:9f:7b:a1:f5:19:
c1:15:6f:cc:18:07:84:61:54:61:be:01:83:ca:68:
a2:5c:0e:67:53:43:a2:e3:df:c9:8c:d4:f3:7e:55:
51:18:6b:1b:81:6d:ea:a0:8f:2e:1c:b6:46:60:8b:
5c:a2:14:72:c3:0d:1f:05:2b:68:4b:a9:85:50:6d:
25:7b:af:82:48:c5:55:91:9a:2e:92:9f:2c:76:97:
43:a1:77:45:0f:ca:8e:f4:95:02:85:c9:9b:a8:5c:
a2:53:79:cd:ad:c0:de:32:fa:60:b9:bc:45:00:22:
04:07:ef:d3:2f:b9:9c:6c:42:18:ba:2c:80:22:3f:
5e:ca:3e:78:01:f7:5e:34:a0:68:4c:79:60:2e:07:
7f:e9:df:76:13:e8:42:6d:0f:f1:5b:08:b8:7f:28:
18:39:04:63:c4:39:7d:da:37:b5:6b:03:37:4c:ea:
6c:29:2f:60:c8:b7:f8:fa:bc:2c:0e:94:57:2c:61:
2d:e6:4e:c7:34:41:80:41:31:73:6c:a0:12:e4:1d:
ad:75:ff:9e:0d:3f:9a:0c:cf:8c:34:a2:fa:97:e5:
19:b6:e5:49:ee:db:53:df:75:fd:f4:aa:e5:a0:ef:
45:32:46:0f:e2:d5:8e:42:f1:eb:77:d3:cf:bd:3b:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:5D:33:44:DA:A4:94:70:65:13:C0:A0:62:C1:4E:C0:88:56:C8
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/_AxdM0TapJRwZRPAoGLBTsCIVsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:14:8a:34:0e:ce:10:8a:d6:f4:7c:33:c6:6b:b2:71:6d:95:
8a:c5:a0:49:6c:f4:c7:11:88:29:07:fb:c8:b8:e1:a3:59:80:
96:86:b2:d4:0c:49:9e:ba:53:7c:38:68:99:87:3a:4d:a7:eb:
8b:4a:d1:b3:54:c8:93:33:d9:10:35:18:f3:6f:25:72:3c:f5:
fc:b7:f7:68:e3:84:a1:d5:de:4f:a2:96:68:5e:ab:23:84:6e:
24:a3:8a:3e:31:51:f9:f4:f9:8d:74:7a:41:5a:2b:de:b3:02:
3f:53:52:3e:b5:9d:b0:9e:45:74:22:21:ee:06:9a:4d:42:be:
a1:05:a8:d4:8b:45:81:cf:bb:90:dc:a4:48:1c:b4:d8:02:48:
e2:73:35:32:ad:00:2d:29:c2:89:c0:ae:bc:57:23:04:2a:cb:
05:d7:82:d8:8c:ff:6a:f9:57:5e:d9:5e:9b:f1:2d:15:fc:d5:
2d:27:f9:85:a7:fe:e3:cd:95:e2:d6:4d:c6:a9:53:7c:54:f7:
f5:c4:9f:d2:9c:36:cb:d6:4a:70:99:32:44:42:20:27:b8:2a:
e5:a0:d7:a1:43:0d:ee:15:01:a5:5a:d4:b8:0c:d0:f5:0a:d8:
a0:a8:45:c4:e5:93:46:67:9e:1b:4c:21:fe:98:e7:aa:b8:3c:
63:80:11:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSI1GOYuE5UdcupHm9R/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3
YjlmYzEwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzBjNWQzMzQ0ZGFhNDk0NzA2NTEzYzBhMDYyYzE0ZWMwODg1NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzM4dxsPcc/Rn3uh9RnBFW/MGAeE
YVRhvgGDymiiXA5nU0Oi49/JjNTzflVRGGsbgW3qoI8uHLZGYItcohRyww0fBSto
S6mFUG0le6+CSMVVkZoukp8sdpdDoXdFD8qO9JUChcmbqFyiU3nNrcDeMvpgubxF
ACIEB+/TL7mcbEIYuiyAIj9eyj54AfdeNKBoTHlgLgd/6d92E+hCbQ/xWwi4fygY
OQRjxDl92je1awM3TOpsKS9gyLf4+rwsDpRXLGEt5k7HNEGAQTFzbKAS5B2tdf+e
DT+aDM+MNKL6l+UZtuVJ7ttT33X99KrloO9FMkYP4tWOQvHrd9PPvTv90wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwMXTNE2qSUcGUTwKBiwU7AiFbIMB8GA1UdIwQY
MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt
YTUyYTg3OTVkOTU2LzEvX0F4ZE0wVGFwSlJ3WlJQQW9HTEJUc0NJVnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2
LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPZYMA0G
CSqGSIb3DQEBCwUAA4IBAQCgFIo0Ds4Qitb0fDPGa7JxbZWKxaBJbPTHEYgpB/vI
uOGjWYCWhrLUDEmeulN8OGiZhzpNp+uLStGzVMiTM9kQNRjzbyVyPPX8t/do44Sh
1d5PopZoXqsjhG4ko4o+MVH59PmNdHpBWiveswI/U1I+tZ2wnkV0IiHuBppNQr6h
BajUi0WBz7uQ3KRIHLTYAkjiczUyrQAtKcKJwK68VyMEKssF14LYjP9q+Vde2V6b
8S0V/NUtJ/mFp/7jzZXi1k3GqVN8VPf1xJ/SnDbL1kpwmTJEQiAnuCrloNehQw3u
FQGlWtS4DND1CtigqEXE5ZNGZ54bTCH+mOequDxjgBG8
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:45 2025 by rpki-client