Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/G8bE9rNhOTpRz7BYRiZMhbdnbn8.roa
File: G8bE9rNhOTpRz7BYRiZMhbdnbn8.roa (raw, json)
Hash identifier: 6KI9UsXQQ5OyZaXivomWzYZMD8RMxoC0XXuaunBcSmQ=
Subject key identifier: 1B:C6:C4:F6:B3:61:39:3A:51:CF:B0:58:46:26:4C:85:B7:67:6E:7F
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77B0D7985E203E23F647A18FB9060
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/G8bE9rNhOTpRz7BYRiZMhbdnbn8.roa
Signing time: Wed 01 Jan 2025 21:48:31 +0000
ROA not before: Wed 01 Jan 2025 21:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21325
IP address blocks: 87.246.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7b:0d:79:85:e2:03:e2:3f:64:7a:18:fb:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc6c4f6b361393a51cfb05846264c85b7676e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:4d:12:5d:11:94:54:e6:05:19:06:f4:9e:
9f:a1:a0:09:28:8f:1f:92:db:08:85:0d:e5:ac:1d:
96:a8:07:ae:0f:e5:60:f6:b7:00:9b:8b:5d:79:3d:
34:0d:22:59:8d:13:e5:8c:37:86:09:c0:e3:3a:71:
7c:9f:12:11:ad:bb:02:e4:3f:8e:f7:15:f5:33:c1:
5d:24:dc:28:ad:33:3f:5c:21:4a:b7:7f:7c:39:0a:
52:cd:7e:c8:0a:a2:a5:a6:53:cb:49:0d:ad:c1:bc:
31:31:e7:91:30:55:bc:0a:d8:db:67:73:ed:62:db:
2d:4d:96:88:f1:4e:d6:8f:05:23:a0:c6:5c:c9:a4:
b9:3c:c3:2b:18:9e:31:f2:1c:75:d9:07:22:ea:74:
47:9d:a9:84:e4:6c:1a:1f:cf:17:ae:2e:de:0a:d4:
72:1f:15:b3:f7:2b:10:60:ea:5d:35:a6:0b:6f:15:
ba:10:7f:fe:0b:8d:2c:31:d7:f7:d4:e1:be:e4:7a:
56:06:f2:e5:a4:c3:36:12:68:53:cb:65:da:7c:54:
43:29:ff:fc:a4:33:c0:1f:9f:95:97:f6:88:e7:74:
97:c9:e0:e9:84:d4:48:49:f1:2a:31:c3:4f:ef:e5:
31:f2:60:53:3e:c2:75:24:31:58:2f:6b:f5:b3:05:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:C4:F6:B3:61:39:3A:51:CF:B0:58:46:26:4C:85:B7:67:6E:7F
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/G8bE9rNhOTpRz7BYRiZMhbdnbn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f6:68:38:5d:fc:c7:25:f4:2f:bc:e7:4d:9e:18:da:84:f5:
1a:9c:9c:d2:60:78:8b:d0:27:b5:4c:2d:7d:b3:0a:9f:66:aa:
40:5b:18:e3:1b:f3:50:57:cb:ef:ae:af:c6:93:37:22:09:2f:
6c:2e:0f:81:6b:57:0b:bc:cd:48:68:6c:98:38:88:59:f1:cb:
94:ca:0e:87:bd:3b:fd:9c:9c:6a:30:85:d0:45:d2:fb:9b:06:
1a:5f:66:cf:0e:63:63:41:43:8c:35:36:2f:34:5c:c2:4f:b4:
cd:2b:e0:92:82:3f:61:31:eb:d1:c6:fa:ab:16:ed:ad:6e:4a:
35:39:dc:8c:8f:8a:c0:4b:b3:c7:08:56:d0:e9:e6:61:e4:f6:
04:c3:18:92:01:7e:35:59:3d:e0:1d:6b:90:2b:5d:b7:eb:79:
14:e5:cf:e0:c1:f9:9c:6e:dc:15:bd:0c:8b:4a:77:a1:c1:31:
93:e3:0f:35:ec:39:9a:bd:32:55:d4:23:67:66:9d:37:b3:0d:
89:b7:5d:6a:ea:77:04:a7:19:9d:dc:cd:15:02:0f:3d:b9:ee:
2d:be:57:af:e4:43:e4:18:9e:ac:24:a4:b6:4d:6a:c6:e7:aa:
71:f7:1a:e9:04:12:64:e8:27:51:42:6c:1d:ba:56:18:6b:b9:
02:92:0b:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj13sNeYXiA+I/ZHoY+5BgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmM2YzRmNmIzNjEzOTNhNTFjZmIwNTg0NjI2NGM4NWI3Njc2ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QRNEl0RlFTmBRkG9J6foaAJKI8f
ktsIhQ3lrB2WqAeuD+Vg9rcAm4tdeT00DSJZjRPljDeGCcDjOnF8nxIRrbsC5D+O
9xX1M8FdJNworTM/XCFKt398OQpSzX7ICqKlplPLSQ2twbwxMeeRMFW8CtjbZ3Pt
YtstTZaI8U7WjwUjoMZcyaS5PMMrGJ4x8hx12Qci6nRHnamE5GwaH88Xri7eCtRy
HxWz9ysQYOpdNaYLbxW6EH/+C40sMdf31OG+5HpWBvLlpMM2EmhTy2XafFRDKf/8
pDPAH5+Vl/aI53SXyeDphNRISfEqMcNP7+Ux8mBTPsJ1JDFYL2v1swVjuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvGxPazYTk6Uc+wWEYmTIW3Z25/MB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvRzhiRTlyTmhPVHBSejdCWVJpWk1oYmRuYm44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/a4MA0G
CSqGSIb3DQEBCwUAA4IBAQBG9mg4XfzHJfQvvOdNnhjahPUanJzSYHiL0Ce1TC19
swqfZqpAWxjjG/NQV8vvrq/GkzciCS9sLg+Ba1cLvM1IaGyYOIhZ8cuUyg6HvTv9
nJxqMIXQRdL7mwYaX2bPDmNjQUOMNTYvNFzCT7TNK+CSgj9hMevRxvqrFu2tbko1
OdyMj4rAS7PHCFbQ6eZh5PYEwxiSAX41WT3gHWuQK12363kU5c/gwfmcbtwVvQyL
SnehwTGT4w817DmavTJV1CNnZp03sw2Jt11q6ncEpxmd3M0VAg89ue4tvlev5EPk
GJ6sJKS2TWrG56px9xrpBBJk6CdRQmwdulYYa7kCkgv7
-----END CERTIFICATE-----
Generated at Tue Apr 15 04:03:24 2025 by rpki-client