Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/FK7ySAm15wLL-A5orFXHLmT_3-4.roa
File: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (raw, json)
Hash identifier: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=
Subject key identifier: 14:AE:F2:48:09:B5:E7:02:CB:F8:0E:68:AC:55:C7:2E:64:FF:DF:EE
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 0194282381AABCD61E8920663AAD191919B5
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/FK7ySAm15wLL-A5orFXHLmT_3-4.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41952
IP address blocks: 185.228.206.0/24 maxlen: 24
193.32.192.0/22 maxlen: 22
193.32.192.0/24 maxlen: 24
193.32.193.0/24 maxlen: 24
193.32.194.0/24 maxlen: 24
193.32.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:81:aa:bc:d6:1e:89:20:66:3a:ad:19:19:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14aef24809b5e702cbf80e68ac55c72e64ffdfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:5b:6c:fc:ea:2d:99:a8:ee:8d:9a:a9:bc:
0e:8b:05:b5:cb:79:fb:9d:eb:91:af:3c:cc:a6:50:
fa:d7:63:81:62:c3:7e:5e:ba:c3:1d:f2:8f:dc:de:
2b:54:0c:95:f2:01:28:a9:d1:58:1d:49:1b:8a:f9:
d2:5e:82:bd:fb:e7:26:b5:7f:93:75:2c:6b:94:04:
a3:36:b0:ac:02:44:c8:64:e9:81:38:98:5d:f8:87:
1b:ae:2f:96:4a:6d:74:6a:44:c4:c5:64:e1:af:94:
77:fe:8f:5c:a1:65:ae:15:f5:26:ce:9d:ca:1b:a2:
d7:69:50:b2:62:f3:ce:17:db:9f:c2:c3:0c:dd:c5:
fd:45:2d:8c:33:c6:18:ee:b0:fb:0a:14:1a:ea:7f:
b5:56:65:03:d6:c5:b9:86:ec:86:88:3c:ca:82:e9:
8a:18:b2:2b:8a:f5:c8:e8:e4:fd:0a:55:47:77:70:
e5:74:d8:fc:95:b2:22:57:8e:aa:0d:3e:8d:98:98:
e1:cd:ad:84:1b:d3:01:6b:4d:bb:dc:cd:5d:d0:4b:
02:99:a5:ff:a2:ea:49:2e:eb:5d:69:a8:9e:d6:2c:
4b:00:9a:95:8f:bd:51:64:5a:67:58:90:65:ca:96:
7a:ce:b9:7d:52:f0:5b:5b:8c:de:28:fb:60:a3:71:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:F2:48:09:B5:E7:02:CB:F8:0E:68:AC:55:C7:2E:64:FF:DF:EE
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/FK7ySAm15wLL-A5orFXHLmT_3-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.206.0/24
193.32.192.0/22
Signature Algorithm: sha256WithRSAEncryption
40:d7:57:b7:c9:95:5f:1a:76:3f:3f:28:9b:28:a9:bb:be:dd:
a0:34:e2:28:8f:ef:51:03:4a:f1:ae:75:6c:90:59:8a:e0:c7:
44:e9:8d:d9:95:81:22:42:e8:74:48:00:c3:84:44:f8:76:6e:
f5:1f:df:7e:49:4b:d6:03:65:23:26:f0:b1:04:6b:59:49:2d:
f7:35:60:a2:11:4f:8d:be:0c:06:33:c3:0b:54:e3:4f:08:41:
e2:5d:d1:91:02:fb:24:e7:5a:5c:ca:90:a2:11:71:dc:c9:8e:
9d:6a:9f:88:ab:fd:3e:b5:b0:fb:86:36:cf:7f:00:8a:a6:ec:
0c:2d:79:3d:74:e4:3e:c1:4c:d9:3e:a3:83:ce:7d:93:ae:d7:
21:8a:3f:10:b6:62:96:ce:4d:af:e0:ac:cd:fd:a9:10:53:f8:
9b:cc:67:f8:ed:6d:5b:3d:aa:5b:ce:08:d2:71:d7:52:47:5d:
d8:6e:d3:b6:8e:92:f3:5a:cc:de:d1:f8:60:99:80:5f:98:28:
c7:a8:d7:3e:e4:43:b7:c6:c3:60:a0:47:35:30:af:ed:7e:9d:
d0:e3:83:90:fd:9d:b8:de:b7:ef:a9:fd:34:15:d6:f2:36:a4:
08:1c:7a:b8:28:98:78:7a:5d:4a:aa:49:a9:31:b0:d3:aa:50:
85:bc:75:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI4GqvNYeiSBmOq0ZGRm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjUwMTAyMTc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGFlZjI0ODA5YjVlNzAyY2JmODBlNjhhYzU1YzcyZTY0ZmZkZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P9bbPzqLZmo7o2aqbwOiwW1y3n7
neuRrzzMplD612OBYsN+XrrDHfKP3N4rVAyV8gEoqdFYHUkbivnSXoK9++cmtX+T
dSxrlASjNrCsAkTIZOmBOJhd+Icbri+WSm10akTExWThr5R3/o9coWWuFfUmzp3K
G6LXaVCyYvPOF9ufwsMM3cX9RS2MM8YY7rD7ChQa6n+1VmUD1sW5huyGiDzKgumK
GLIrivXI6OT9ClVHd3DldNj8lbIiV46qDT6NmJjhza2EG9MBa0273M1d0EsCmaX/
oupJLutdaaie1ixLAJqVj71RZFpnWJBlypZ6zrl9UvBbW4zeKPtgo3H0DwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBSu8kgJtecCy/gOaKxVxy5k/9/uMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvRks3eVNBbTE1d0xMLUE1b3JGWEhMbVRfMy00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueTOAwQC
wSDAMA0GCSqGSIb3DQEBCwUAA4IBAQBA11e3yZVfGnY/PyibKKm7vt2gNOIoj+9R
A0rxrnVskFmK4MdE6Y3ZlYEiQuh0SADDhET4dm71H99+SUvWA2UjJvCxBGtZSS33
NWCiEU+NvgwGM8MLVONPCEHiXdGRAvsk51pcypCiEXHcyY6dap+Iq/0+tbD7hjbP
fwCKpuwMLXk9dOQ+wUzZPqODzn2Trtchij8QtmKWzk2v4KzN/akQU/ibzGf47W1b
PapbzgjScddSR13YbtO2jpLzWsze0fhgmYBfmCjHqNc+5EO3xsNgoEc1MK/tfp3Q
44OQ/Z243rfvqf00FdbyNqQIHHq4KJh4el1KqkmpMbDTqlCFvHUP
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:25:39 2025 by rpki-client