Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/F-IifLCSbkSEOgi4sKV1jV1DQV8.roa
File: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (raw, json)
Hash identifier: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=
Subject key identifier: 17:E2:22:7C:B0:92:6E:44:84:3A:08:B8:B0:A5:75:8D:5D:43:41:5F
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D71E85C3E1CB1AFCF66816BA2A1422
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/F-IifLCSbkSEOgi4sKV1jV1DQV8.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393954
IP address blocks: 31.186.225.0/24 maxlen: 24
95.172.65.0/24 maxlen: 24
2a02:b50:4013::/48 maxlen: 48
2a02:b50:8002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:85:c3:e1:cb:1a:fc:f6:68:16:ba:2a:14:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e2227cb0926e44843a08b8b0a5758d5d43415f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:f1:e4:3d:f1:9a:39:7c:2d:e6:53:51:62:
41:e8:62:48:3e:ea:b9:96:c1:73:d4:58:65:3c:f9:
70:0a:5e:e1:a7:14:4d:06:89:31:69:11:44:74:fb:
6c:e7:74:5c:d9:b9:65:ec:37:66:4e:94:b7:6e:80:
e1:b9:e8:be:0c:a6:d2:6c:4a:a8:ba:88:51:4c:11:
41:5c:24:50:07:6f:94:06:3c:a8:cc:91:c6:a5:71:
45:7a:4c:af:74:13:3a:ff:7d:12:3f:a3:70:99:ca:
5c:24:73:c5:53:30:c7:af:72:02:e8:70:93:75:8a:
b1:d8:b5:bd:5c:d1:5f:58:d8:a3:7f:50:e8:b0:cb:
5b:80:02:d0:61:e7:7f:8f:78:66:c2:5e:b8:6a:0b:
38:b0:5d:8f:3e:d1:7a:99:d4:1c:f4:94:7c:b5:f6:
51:27:ec:e6:38:35:a7:f6:a7:42:47:94:7b:f4:a2:
de:04:95:08:7e:f9:72:c7:14:82:42:f6:98:63:9f:
87:ce:c5:f4:19:b0:5d:c9:06:a1:ea:8f:bc:a4:52:
2c:90:89:d9:83:47:30:fe:83:6b:50:67:52:0c:c2:
f6:c0:da:bd:e1:6d:31:d4:e9:4a:ae:7a:d6:9a:d9:
01:f5:10:ed:c3:db:da:b8:d0:30:46:5a:ec:4d:70:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:22:7C:B0:92:6E:44:84:3A:08:B8:B0:A5:75:8D:5D:43:41:5F
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/F-IifLCSbkSEOgi4sKV1jV1DQV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.225.0/24
95.172.65.0/24
IPv6:
2a02:b50:4013::/48
2a02:b50:8002::/48
Signature Algorithm: sha256WithRSAEncryption
14:09:01:89:68:94:73:9d:b2:11:da:df:a8:4f:1a:c6:54:6c:
f6:c1:bd:dc:d7:ef:b4:23:01:f6:40:4e:66:77:d6:40:9f:e3:
8e:69:c2:95:03:af:61:86:be:2f:8a:3c:ef:bc:c2:c9:11:bd:
89:80:ab:96:af:70:ec:9f:ed:63:23:7a:5c:bb:65:06:be:80:
5e:19:88:f5:fe:56:d0:b2:4e:c4:79:50:56:d4:2b:a8:f3:d1:
25:a4:b0:a1:ec:3d:0d:01:35:30:09:af:be:5e:d8:ee:f0:07:
3f:8a:b0:88:de:7d:4c:19:05:37:03:6a:d4:80:23:87:aa:0d:
30:81:e6:40:be:bc:f3:6a:f4:96:5e:f5:ca:d9:35:9b:9d:40:
28:c6:a1:f2:a5:22:1e:85:10:b0:20:af:af:5e:cf:3e:ad:00:
cc:95:29:42:81:28:e3:48:f1:b3:60:a4:31:58:ec:b7:e4:4a:
b8:67:aa:32:8e:44:c9:9a:ad:ed:a5:d0:df:04:9e:15:98:62:
be:0e:62:dd:e5:8b:57:f4:fd:6f:b6:97:71:d2:18:19:e0:99:
af:58:a8:6b:21:ec:cc:35:c1:9a:6b:e7:34:50:05:a8:df:60:
11:2f:cf:29:b5:99:70:32:54:6f:bd:02:34:15:66:17:62:3f:
8c:32:9d:df
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQj1x6Fw+HLGvz2aBa6KhQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjUwMTAxMjE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2UyMjI3Y2IwOTI2ZTQ0ODQzYTA4YjhiMGE1NzU4ZDVkNDM0MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKjx5D3xmjl8LeZTUWJB6GJIPuq5
lsFz1FhlPPlwCl7hpxRNBokxaRFEdPts53Rc2bll7DdmTpS3boDhuei+DKbSbEqo
uohRTBFBXCRQB2+UBjyozJHGpXFFekyvdBM6/30SP6NwmcpcJHPFUzDHr3IC6HCT
dYqx2LW9XNFfWNijf1DosMtbgALQYed/j3hmwl64ags4sF2PPtF6mdQc9JR8tfZR
J+zmODWn9qdCR5R79KLeBJUIfvlyxxSCQvaYY5+HzsX0GbBdyQah6o+8pFIskInZ
g0cw/oNrUGdSDML2wNq94W0x1OlKrnrWmtkB9RDtw9vauNAwRlrsTXACKwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBfiInywkm5EhDoIuLCldY1dQ0FfMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvRi1JaWZMQ1Nia1NFT2dpNHNLVjFqVjFEUVY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAH7rhAwQA
X6xBMBgEAgACMBIDBwAqAgtQQBMDBwAqAgtQgAIwDQYJKoZIhvcNAQELBQADggEB
ABQJAYlolHOdshHa36hPGsZUbPbBvdzX77QjAfZATmZ31kCf445pwpUDr2GGvi+K
PO+8wskRvYmAq5avcOyf7WMjely7ZQa+gF4ZiPX+VtCyTsR5UFbUK6jz0SWksKHs
PQ0BNTAJr75e2O7wBz+KsIjefUwZBTcDatSAI4eqDTCB5kC+vPNq9JZe9crZNZud
QCjGofKlIh6FELAgr69ezz6tAMyVKUKBKONI8bNgpDFY7LfkSrhnqjKORMmare2l
0N8EnhWYYr4OYt3li1f0/W+2l3HSGBngma9YqGsh7Mw1wZpr5zRQBajfYBEvzym1
mXAyVG+9AjQVZhdiP4wynd8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:33:30 2025 by rpki-client