Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/_b9uzDBnaBhrr4RiKYd-HrjhIyY.roa
File: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (raw, json)
Hash identifier: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=
Subject key identifier: FD:BF:6E:CC:30:67:68:18:6B:AF:84:62:29:87:7E:1E:B8:E1:23:26
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 0194228DEB577E32F79590798B3F30A747B2
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/_b9uzDBnaBhrr4RiKYd-HrjhIyY.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34509
IP address blocks: 84.205.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:eb:57:7e:32:f7:95:90:79:8b:3f:30:a7:47:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdbf6ecc306768186baf846229877e1eb8e12326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:4a:48:ad:e3:95:95:11:a3:0a:28:28:0d:
23:6c:0d:0a:61:05:61:59:ac:bc:c7:56:95:f4:32:
a6:01:da:9c:f8:c1:4b:b9:0d:03:1a:b1:21:96:36:
b0:a9:b8:e3:5d:a3:e7:06:25:b8:c2:ae:90:6a:6c:
8b:ca:00:78:0b:fb:09:0a:80:53:93:f4:f1:be:40:
87:11:a3:5b:a9:bd:32:4f:38:7e:6f:4b:1b:b2:bf:
d9:91:b1:8b:1e:64:da:49:f9:a6:50:ce:3a:4f:fd:
a8:fd:e1:97:77:23:e4:26:7c:0d:0e:5d:36:57:d4:
2a:fc:cc:f0:03:e7:24:6a:8a:1c:21:46:d6:26:ac:
a8:48:69:82:7a:a4:15:6d:5b:09:27:f7:95:bc:5c:
f4:95:5b:c5:bc:b0:08:20:6a:c5:e0:ae:2e:00:70:
c2:ad:e2:dd:22:52:c6:f0:80:be:1a:bc:dc:1a:79:
36:98:68:a4:4f:8f:34:a4:66:78:83:75:24:5e:32:
04:cf:2c:67:43:81:b8:45:95:4a:08:b2:31:3c:f0:
46:33:ff:60:85:15:a4:2c:98:c3:0f:f2:35:1c:44:
ae:f7:c5:30:6b:65:d8:e6:fb:7e:cd:f1:25:d0:cc:
30:e6:48:74:5a:65:75:24:e5:fd:f6:a5:26:d6:e1:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:6E:CC:30:67:68:18:6B:AF:84:62:29:87:7E:1E:B8:E1:23:26
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/_b9uzDBnaBhrr4RiKYd-HrjhIyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e8:9e:ea:14:47:4c:c9:ae:b7:2b:09:98:ce:00:bd:4f:14:
57:5a:24:fe:bb:5a:17:37:39:fb:77:57:56:af:86:0d:52:77:
55:27:5e:8b:4f:ad:e6:40:6f:c0:1b:a5:b5:ca:2a:cd:0c:39:
d2:4d:15:f4:f5:7b:b8:4e:96:37:d3:9d:7f:bf:c9:97:ce:24:
72:27:11:69:e4:f8:e3:95:19:fd:d6:ef:26:f5:09:72:9e:76:
1d:e6:91:a8:70:c3:2b:66:87:11:1d:1c:5b:a1:ab:5d:8b:a2:
fd:24:d7:cd:13:74:75:0e:db:35:96:2c:4c:67:dd:5c:4d:eb:
4b:54:a5:69:74:09:f0:be:c7:21:a4:53:1b:5d:d9:70:85:67:
9d:54:e9:17:e9:a6:d6:fb:34:dc:e3:e9:b3:0e:34:eb:a6:f0:
52:1c:b1:06:2f:f8:88:2f:be:6e:67:fa:43:02:91:d8:bb:f3:
82:3e:f2:ae:c2:78:9a:3b:c6:12:5d:29:d6:25:71:e7:20:b3:
d2:f9:70:5c:a0:19:29:7b:6c:20:22:ab:dc:fc:39:24:63:3d:
ca:df:d6:52:e1:e2:60:a4:f4:28:9c:97:0d:28:95:0e:95:4d:
08:4a:b2:cc:cc:7c:30:aa:6a:57:c8:18:86:9f:08:3f:d3:0d:
8a:f9:9a:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijetXfjL3lZB5iz8wp0eyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDk0MzE4M2I2MTFiZTNhMDc3NTM4MjUwOTQ5MDA0OGIw
YWQ3MzgwHhcNMjUwMTAxMTU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGJmNmVjYzMwNjc2ODE4NmJhZjg0NjIyOTg3N2UxZWI4ZTEyMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyslKSK3jlZURowooKA0jbA0KYQVh
Way8x1aV9DKmAdqc+MFLuQ0DGrEhljawqbjjXaPnBiW4wq6QamyLygB4C/sJCoBT
k/TxvkCHEaNbqb0yTzh+b0sbsr/ZkbGLHmTaSfmmUM46T/2o/eGXdyPkJnwNDl02
V9Qq/MzwA+ckaoocIUbWJqyoSGmCeqQVbVsJJ/eVvFz0lVvFvLAIIGrF4K4uAHDC
reLdIlLG8IC+GrzcGnk2mGikT480pGZ4g3UkXjIEzyxnQ4G4RZVKCLIxPPBGM/9g
hRWkLJjDD/I1HESu98Uwa2XY5vt+zfEl0Mww5kh0WmV1JOX99qUm1uGImwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2/bswwZ2gYa6+EYimHfh644SMmMB8GA1UdIwQY
MBaAFKpJQxg7YRvjoHdTglCUkASLCtc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQt
ZDIyMjc0YmJhNzEzLzEvX2I5dXpEQm5hQmhycjRSaUtZZC1IcmpoSXlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQtZDIyMjc0YmJhNzEz
LzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVM2gMA0G
CSqGSIb3DQEBCwUAA4IBAQBM6J7qFEdMya63KwmYzgC9TxRXWiT+u1oXNzn7d1dW
r4YNUndVJ16LT63mQG/AG6W1yirNDDnSTRX09Xu4TpY3051/v8mXziRyJxFp5Pjj
lRn91u8m9QlynnYd5pGocMMrZocRHRxboatdi6L9JNfNE3R1Dts1lixMZ91cTetL
VKVpdAnwvschpFMbXdlwhWedVOkX6abW+zTc4+mzDjTrpvBSHLEGL/iIL75uZ/pD
ApHYu/OCPvKuwniaO8YSXSnWJXHnILPS+XBcoBkpe2wgIqvc/DkkYz3K39ZS4eJg
pPQonJcNKJUOlU0ISrLMzHwwqmpXyBiGnwg/0w2K+ZqW
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:41 2025 by rpki-client