Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa
File: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (raw, json)
Hash identifier: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=
Subject key identifier: BB:BB:90:D8:39:B7:40:3E:E5:F9:7C:6B:C9:DF:46:F1:EC:6A:E5:E4
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019420D63352FC4501A0EA588727A98D8B17
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.150.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:33:52:fc:45:01:a0:ea:58:87:27:a9:8d:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbbb90d839b7403ee5f97c6bc9df46f1ec6ae5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:3e:bb:5e:f1:e5:7d:fd:21:42:aa:6a:3c:
f1:fa:08:3b:6b:c8:aa:5e:b6:e3:27:20:a9:7c:c4:
14:18:06:27:f7:1a:9f:32:fe:4e:70:c9:2b:99:a7:
0f:53:97:e9:6a:40:7b:b3:0b:d2:fd:d7:10:de:a8:
3a:b1:40:27:78:69:ce:1b:2f:76:9e:6c:b6:12:05:
9d:9f:3b:c3:ec:de:3a:29:91:f7:2a:72:ba:f2:95:
c1:6d:c0:c9:1b:6f:ac:f4:80:21:ee:23:06:ae:0e:
f6:48:e0:53:31:29:85:c0:ae:a3:59:77:91:2b:0b:
f5:8c:e5:84:f9:27:90:79:f6:e6:7f:c7:fa:9f:21:
50:cf:2e:44:c0:df:5b:09:1c:8a:89:3e:0a:01:c0:
97:b5:28:df:ce:25:50:5e:23:0b:c6:7b:3c:d6:83:
cb:92:7e:c2:de:0a:49:b5:80:fa:68:c1:b3:5a:8e:
de:90:c0:b7:80:ca:8c:24:d5:bc:62:c4:d0:b2:a5:
f7:32:91:24:5b:6d:81:c0:99:af:de:a7:24:8f:28:
39:10:da:59:8d:c7:8f:d5:10:5a:9d:00:92:f6:40:
ce:12:25:a1:33:03:39:94:75:ab:2c:a6:aa:7b:96:
00:cb:1a:87:57:90:1c:2a:91:3b:33:3f:06:17:c1:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:90:D8:39:B7:40:3E:E5:F9:7C:6B:C9:DF:46:F1:EC:6A:E5:E4
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.193.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d2:a4:2f:36:cf:d3:91:c9:5a:00:fe:4a:2d:73:e5:fa:5a:
3e:c7:94:e3:8d:84:85:78:d3:f9:6a:2a:ff:ec:08:2a:cc:a4:
1e:b1:17:59:eb:80:48:0d:ad:5c:3d:b5:4f:e7:42:56:9f:e4:
20:ea:b4:eb:a6:dd:52:cf:75:90:0e:3a:3c:a5:08:cd:55:c8:
9d:40:b7:d6:c1:ed:3d:31:bc:10:9f:bf:99:d0:04:85:90:d5:
51:79:b5:ec:9a:29:f5:9a:11:17:2a:eb:04:e4:e2:1f:88:9b:
9a:93:ea:f6:da:e2:30:17:72:94:8e:54:9e:3c:bd:70:7d:7a:
d3:1f:16:d5:3b:d5:46:92:2a:26:80:03:0b:e5:2c:08:47:53:
1f:7f:d7:b5:57:ca:dc:25:d3:cf:0d:f6:22:29:6e:9e:b6:b6:
85:07:62:a3:3a:7f:79:34:59:20:0f:46:c6:87:fe:79:cf:bf:
32:40:60:04:dd:88:a8:12:95:b0:cd:91:83:be:a3:c4:ee:b1:
c9:d8:12:5b:c3:24:f4:c2:34:b7:d2:b3:94:c1:a6:81:b6:56:
38:cd:41:80:df:e0:6a:18:19:5a:e7:a9:c0:36:9f:5e:a9:84:
d8:95:24:d6:87:f5:0b:01:0f:af:ac:ed:c2:33:d0:ce:c1:49:
9b:79:6d:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jNS/EUBoOpYhyepjYsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUwMTAxMDc0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmJiOTBkODM5Yjc0MDNlZTVmOTdjNmJjOWRmNDZmMWVjNmFlNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Fw+u17x5X39IUKqajzx+gg7a8iq
XrbjJyCpfMQUGAYn9xqfMv5OcMkrmacPU5fpakB7swvS/dcQ3qg6sUAneGnOGy92
nmy2EgWdnzvD7N46KZH3KnK68pXBbcDJG2+s9IAh7iMGrg72SOBTMSmFwK6jWXeR
Kwv1jOWE+SeQefbmf8f6nyFQzy5EwN9bCRyKiT4KAcCXtSjfziVQXiMLxns81oPL
kn7C3gpJtYD6aMGzWo7ekMC3gMqMJNW8YsTQsqX3MpEkW22BwJmv3qckjyg5ENpZ
jceP1RBanQCS9kDOEiWhMwM5lHWrLKaqe5YAyxqHV5AcKpE7Mz8GF8ErrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLu7kNg5t0A+5fl8a8nfRvHsauXkMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvdTd1UTJEbTNRRDdsLVh4cnlkOUc4ZXhxNWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpbBMA0G
CSqGSIb3DQEBCwUAA4IBAQBY0qQvNs/TkclaAP5KLXPl+lo+x5TjjYSFeNP5air/
7AgqzKQesRdZ64BIDa1cPbVP50JWn+Qg6rTrpt1Sz3WQDjo8pQjNVcidQLfWwe09
MbwQn7+Z0ASFkNVRebXsmin1mhEXKusE5OIfiJuak+r22uIwF3KUjlSePL1wfXrT
HxbVO9VGkiomgAML5SwIR1Mff9e1V8rcJdPPDfYiKW6etraFB2KjOn95NFkgD0bG
h/55z78yQGAE3YioEpWwzZGDvqPE7rHJ2BJbwyT0wjS30rOUwaaBtlY4zUGA3+Bq
GBla56nANp9eqYTYlSTWh/ULAQ+vrO3CM9DOwUmbeW1W
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:41 2025 by rpki-client