Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa
File: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (raw, json)
Hash identifier: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=
Subject key identifier: F5:16:CF:30:6C:AB:C7:11:83:8E:17:E1:BA:4C:9F:37:AA:3E:67:85
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67C1C388D8CD6A3EA3242CEFEAD6A
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa
Signing time: Thu 02 Jan 2025 15:50:58 +0000
ROA not before: Thu 02 Jan 2025 15:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12400
IP address blocks: 2.22.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7c:1c:38:8d:8c:d6:a3:ea:32:42:ce:fe:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f516cf306cabc711838e17e1ba4c9f37aa3e6785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:8c:8b:33:3e:a5:9b:01:92:42:d0:3b:cb:
d0:f7:82:09:43:95:54:25:13:29:6c:0c:c4:56:82:
dd:3e:76:64:e6:fa:70:78:72:3e:78:3e:e9:8b:34:
56:27:28:d9:cf:00:ce:47:da:b2:54:c9:b0:98:f8:
73:0b:31:87:6e:a1:07:86:70:25:d2:01:94:41:83:
7b:c5:3f:09:19:90:f3:d9:d0:46:68:b0:71:e1:05:
de:59:7c:3c:66:d6:ac:1f:6e:58:c6:02:ac:28:70:
6a:a5:b1:49:41:99:59:e6:13:48:b1:6c:fe:d8:6a:
94:47:d5:b2:60:c1:f4:bb:11:23:39:0b:07:e7:08:
2b:cc:5c:3d:a8:bd:f0:01:46:69:84:33:f5:7e:db:
14:d3:b6:3e:c3:9d:24:34:35:40:19:be:d7:22:f4:
b1:8e:a9:96:e4:8e:2b:1c:79:3f:d4:af:57:35:12:
42:6b:c2:98:81:b6:a5:70:f6:14:22:09:99:47:86:
85:5d:5d:e3:85:35:b2:0e:07:af:15:11:45:fb:5a:
65:86:c4:8a:45:c0:2f:a6:e9:13:9c:d7:25:d1:0b:
6e:6c:63:b1:be:de:9c:63:4e:f9:03:39:24:ec:99:
c5:2e:bc:db:61:bf:03:86:a3:4c:a8:7a:6b:c4:e1:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:CF:30:6C:AB:C7:11:83:8E:17:E1:BA:4C:9F:37:AA:3E:67:85
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.22.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7f:c2:27:a0:a8:49:ec:57:d2:ae:2d:68:dc:7d:4d:54:27:
99:2c:54:fe:80:8e:c8:b0:1d:35:b2:09:e6:98:c0:85:60:ad:
83:54:23:4d:ca:55:ca:6b:3d:0e:01:3f:f8:f5:25:f2:7c:02:
38:03:86:f4:0f:80:d4:e0:4c:a4:c8:21:6c:b6:af:12:2f:16:
d7:f4:68:56:92:2f:85:0f:8a:eb:2b:51:d7:49:fb:0b:66:46:
25:2a:c3:c2:ef:72:d4:f0:96:99:06:d2:ff:2c:97:9c:26:cf:
03:fc:e8:db:1a:a6:2f:a4:dc:d5:5a:92:17:8d:5b:b9:bd:15:
fb:31:0b:33:70:e9:2f:81:e5:8a:71:6d:77:a4:3d:fb:c4:95:
4b:cc:68:ea:c8:a7:ea:76:59:37:b1:35:6c:34:8e:4a:97:3c:
15:93:7e:15:bc:b3:8f:63:1c:ba:d2:d7:2d:59:ba:94:f4:83:
c4:0e:7c:b1:c2:24:ff:76:39:b3:8f:08:08:3f:6a:d1:68:e7:
92:c8:7d:d3:18:44:8b:bb:d1:04:1f:8b:68:bc:0a:62:bb:c2:
3d:81:72:85:a3:20:8e:ad:cd:bc:41:c8:88:83:27:f0:3e:90:
4b:56:9e:0b:df:f9:69:9c:6e:f8:fe:4d:e4:c3:36:e1:3c:7a:
71:d9:ba:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntnwcOI2M1qPqMkLO/q1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTE2Y2YzMDZjYWJjNzExODM4ZTE3ZTFiYTRjOWYzN2FhM2U2Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTWMizM+pZsBkkLQO8vQ94IJQ5VU
JRMpbAzEVoLdPnZk5vpweHI+eD7pizRWJyjZzwDOR9qyVMmwmPhzCzGHbqEHhnAl
0gGUQYN7xT8JGZDz2dBGaLBx4QXeWXw8ZtasH25YxgKsKHBqpbFJQZlZ5hNIsWz+
2GqUR9WyYMH0uxEjOQsH5wgrzFw9qL3wAUZphDP1ftsU07Y+w50kNDVAGb7XIvSx
jqmW5I4rHHk/1K9XNRJCa8KYgbalcPYUIgmZR4aFXV3jhTWyDgevFRFF+1plhsSK
RcAvpukTnNcl0QtubGOxvt6cY075Azkk7JnFLrzbYb8DhqNMqHprxOHDjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUWzzBsq8cRg44X4bpMnzeqPmeFMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvOVJiUE1HeXJ4eEdEamhmaHVreWZONm8tWjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhbpMA0G
CSqGSIb3DQEBCwUAA4IBAQBbf8InoKhJ7FfSri1o3H1NVCeZLFT+gI7IsB01sgnm
mMCFYK2DVCNNylXKaz0OAT/49SXyfAI4A4b0D4DU4EykyCFstq8SLxbX9GhWki+F
D4rrK1HXSfsLZkYlKsPC73LU8JaZBtL/LJecJs8D/OjbGqYvpNzVWpIXjVu5vRX7
MQszcOkvgeWKcW13pD37xJVLzGjqyKfqdlk3sTVsNI5KlzwVk34VvLOPYxy60tct
WbqU9IPEDnyxwiT/djmzjwgIP2rRaOeSyH3TGESLu9EEH4tovApiu8I9gXKFoyCO
rc28QciIgyfwPpBLVp4L3/lpnG74/k3kwzbhPHpx2brI
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:42 2025 by rpki-client