Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa
File: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (raw, json)
Hash identifier: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=
Subject key identifier: EE:1A:E8:C2:B2:32:43:FC:A1:0A:7E:CD:A8:9C:8F:C2:56:E7:8E:F5
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D653FE7049B02BB88DA271125D39D7
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134963
IP address blocks: 194.30.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:fe:70:49:b0:2b:b8:8d:a2:71:12:5d:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee1ae8c2b23243fca10a7ecda89c8fc256e78ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:90:ac:fc:17:e3:ef:01:05:fb:4f:37:51:
f6:09:e9:0a:53:b7:40:f6:0b:6c:8d:14:84:c3:e8:
e2:fa:8a:b7:27:58:c5:0e:8c:81:0b:9d:23:78:16:
8c:38:39:6a:6e:a9:be:8c:fc:37:1d:e6:45:bf:99:
f8:86:e0:3d:e4:73:c5:0f:07:32:0d:38:2e:3a:d1:
2a:67:c5:57:e0:8c:68:ad:68:5c:88:d5:8a:77:4d:
e7:30:1e:0e:ef:77:dc:60:a0:cb:5d:c9:84:4b:94:
57:8b:ed:89:a9:6c:0e:43:aa:c7:8e:e7:72:8a:19:
1e:f1:b3:6c:a8:a6:4c:f1:42:c4:54:f6:45:1b:f8:
1c:bb:8a:19:92:b9:69:8d:53:65:e9:ad:13:91:b9:
cc:2d:61:6c:ca:3d:03:ec:aa:67:cc:6b:d0:2e:91:
d7:27:6c:a7:66:b9:57:38:9a:41:5e:e4:83:c7:95:
70:64:28:8e:00:f1:e2:a9:29:3a:d6:66:e5:3e:44:
a5:b4:35:30:64:f1:39:3a:17:70:4f:dc:0e:a6:57:
5a:d4:29:e5:73:0a:2f:91:2b:18:93:5f:01:08:2b:
13:bf:af:86:4f:93:83:0b:60:d2:07:79:aa:8a:14:
d1:88:e1:c4:0a:9f:66:0f:b3:03:01:0f:9a:c2:ee:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:E8:C2:B2:32:43:FC:A1:0A:7E:CD:A8:9C:8F:C2:56:E7:8E:F5
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.142.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5a:ba:77:ac:cc:2e:12:4c:bc:e5:ef:8f:44:7d:88:32:52:
9f:2b:10:90:3f:fc:9f:00:7a:92:1b:c7:bb:4d:17:52:4c:b8:
4f:62:6e:c3:0f:82:8d:ac:0c:a9:cc:1d:71:60:57:ef:11:0c:
c4:19:27:33:53:c4:e0:bc:ba:4f:43:c9:27:e1:06:c3:01:84:
2c:fa:fc:2f:3c:16:3e:68:1f:cf:40:35:e3:82:93:9e:ba:c6:
a9:c2:48:70:54:e8:aa:ef:d2:35:b0:19:b2:4e:8c:79:b7:14:
09:2b:d7:4a:d9:4e:cf:ed:5a:75:2b:7f:9b:41:10:53:3f:39:
c8:3c:9f:5e:9c:8d:55:73:45:a2:0f:fb:89:27:c3:ad:dc:90:
5e:c7:6c:20:7c:ea:6e:2a:a8:76:b5:04:6c:ab:c6:6e:21:de:
21:bc:aa:f9:48:60:b0:e0:f6:f6:37:89:f5:ad:d7:82:65:1f:
64:78:4e:4b:85:53:2a:2d:6c:2b:0a:86:dc:cd:61:f3:a1:07:
3f:2c:e0:ab:a2:c6:71:d5:38:55:21:02:46:75:b0:6e:10:8f:
a5:83:89:de:7c:4e:fc:fa:7e:d5:e4:b3:6a:1b:d1:29:cc:a4:
ef:b9:cc:78:d9:f8:7b:ee:dc:43:ec:45:71:1f:0a:0c:af:6a:
fc:6a:ea:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lP+cEmwK7iNonESXTnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTFhZThjMmIyMzI0M2ZjYTEwYTdlY2RhODljOGZjMjU2ZTc4ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8qQrPwX4+8BBftPN1H2CekKU7dA
9gtsjRSEw+ji+oq3J1jFDoyBC50jeBaMODlqbqm+jPw3HeZFv5n4huA95HPFDwcy
DTguOtEqZ8VX4IxorWhciNWKd03nMB4O73fcYKDLXcmES5RXi+2JqWwOQ6rHjudy
ihke8bNsqKZM8ULEVPZFG/gcu4oZkrlpjVNl6a0TkbnMLWFsyj0D7KpnzGvQLpHX
J2ynZrlXOJpBXuSDx5VwZCiOAPHiqSk61mblPkSltDUwZPE5OhdwT9wOplda1Cnl
cwovkSsYk18BCCsTv6+GT5ODC2DSB3mqihTRiOHECp9mD7MDAQ+awu7yawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4a6MKyMkP8oQp+zaicj8JW5471MB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvN2hyb3dySXlRX3loQ243TnFKeVB3bGJuanZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh6OMA0G
CSqGSIb3DQEBCwUAA4IBAQBTWrp3rMwuEky85e+PRH2IMlKfKxCQP/yfAHqSG8e7
TRdSTLhPYm7DD4KNrAypzB1xYFfvEQzEGSczU8TgvLpPQ8kn4QbDAYQs+vwvPBY+
aB/PQDXjgpOeusapwkhwVOiq79I1sBmyTox5txQJK9dK2U7P7Vp1K3+bQRBTPznI
PJ9enI1Vc0WiD/uJJ8Ot3JBex2wgfOpuKqh2tQRsq8ZuId4hvKr5SGCw4Pb2N4n1
rdeCZR9keE5LhVMqLWwrCobczWHzoQc/LOCrosZx1ThVIQJGdbBuEI+lg4nefE78
+n7V5LNqG9EpzKTvucx42fh77txD7EVxHwoMr2r8auqI
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:25:24 2025 by rpki-client