Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/rh7_88ku0NVEacOTg4kYRNyhUIs.roa
File: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (raw, json)
Hash identifier: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=
Subject key identifier: AE:1E:FF:F3:C9:2E:D0:D5:44:69:C3:93:83:89:18:44:DC:A1:50:8B
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 019424457FF508614B54A9E027AF4CEF6E3F
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/rh7_88ku0NVEacOTg4kYRNyhUIs.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47602
IP address blocks: 185.131.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7f:f5:08:61:4b:54:a9:e0:27:af:4c:ef:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae1efff3c92ed0d54469c39383891844dca1508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:5b:11:31:ca:98:54:c3:a8:96:85:47:40:
e7:dd:af:3d:07:f6:8d:cd:b1:bd:00:f6:7b:b5:8a:
57:c0:b2:ec:67:01:e7:e7:6c:9a:d8:d3:f7:61:3a:
e1:68:7b:f5:66:42:fc:8d:93:40:ec:66:3d:ae:83:
1d:9f:bb:ad:ee:15:32:68:a9:cc:5a:79:9f:65:8c:
6f:cb:56:ef:99:bb:f6:4e:d6:21:34:87:1b:62:db:
1f:5e:1e:bc:73:be:2f:42:a8:34:08:52:6d:1f:c0:
e2:06:c4:5b:14:19:b0:25:65:93:97:7b:d2:ed:c6:
01:23:ab:45:0e:f5:b8:40:dc:89:e3:df:6f:6d:c1:
80:07:44:d9:b5:39:97:e4:51:19:9d:d6:cd:20:3f:
ae:fa:9f:a2:21:99:57:8e:54:e3:b5:1f:b5:b5:1a:
28:4d:ce:90:3b:a5:3c:d3:78:b8:04:e2:b9:ea:81:
ff:b5:c9:cd:ff:f8:75:18:21:57:d8:e1:79:82:4c:
9b:c5:a0:e5:f2:e3:bf:77:b8:7f:e6:d8:3c:fb:5f:
ab:7f:35:c1:27:7d:d3:fa:2f:9d:aa:f1:be:28:89:
d1:fa:c2:8d:60:14:84:6d:44:68:b7:8c:33:c8:4f:
d7:d8:25:ab:e4:99:b9:ce:3d:ea:5f:8f:3a:6b:b8:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:FF:F3:C9:2E:D0:D5:44:69:C3:93:83:89:18:44:DC:A1:50:8B
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/rh7_88ku0NVEacOTg4kYRNyhUIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:49:96:c6:21:9c:20:c7:45:c0:35:04:8d:cb:47:ae:df:56:
33:fd:40:66:79:49:f7:60:42:a3:6a:b4:18:d3:87:12:8e:6c:
39:ee:53:dc:e2:0c:91:7a:4c:2b:60:2c:0d:ae:91:eb:af:88:
45:ac:c5:45:6f:18:45:73:b4:c6:7b:cb:e2:98:0a:df:7f:2c:
1c:56:0b:3c:bf:03:ff:c6:89:2e:c3:9f:db:bd:4e:03:ce:05:
d3:90:12:e1:12:8f:fd:04:88:45:b3:d9:c3:7a:15:72:a7:7c:
4d:42:22:3a:a0:4f:94:48:b9:bd:e2:9c:3b:b5:1e:c4:0b:dc:
f6:72:e1:f0:10:77:d8:89:c6:53:a6:15:98:c7:98:ef:88:bf:
e6:c7:7c:48:df:98:31:5e:d2:7e:05:44:c0:21:a6:7b:cf:13:
57:6a:42:1b:71:7b:43:c1:60:1b:12:69:ae:ab:47:b7:59:95:
a5:88:48:38:28:c8:41:ae:df:39:2c:00:5c:08:99:82:77:b7:
76:f5:19:b7:e2:ff:00:30:5d:7f:18:bc:e9:71:c6:c6:fa:cc:
e1:ed:a5:b6:e1:57:cb:2b:ea:62:6e:7c:c7:20:eb:37:8a:1c:
95:14:2f:c2:95:9e:c4:95:36:35:91:51:a2:19:4c:95:43:5d:
84:fc:12:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRX/1CGFLVKngJ69M724/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1
NjI4ZjkwHhcNMjUwMTAxMjM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTFlZmZmM2M5MmVkMGQ1NDQ2OWMzOTM4Mzg5MTg0NGRjYTE1MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxFbETHKmFTDqJaFR0Dn3a89B/aN
zbG9APZ7tYpXwLLsZwHn52ya2NP3YTrhaHv1ZkL8jZNA7GY9roMdn7ut7hUyaKnM
WnmfZYxvy1bvmbv2TtYhNIcbYtsfXh68c74vQqg0CFJtH8DiBsRbFBmwJWWTl3vS
7cYBI6tFDvW4QNyJ499vbcGAB0TZtTmX5FEZndbNID+u+p+iIZlXjlTjtR+1tRoo
Tc6QO6U803i4BOK56oH/tcnN//h1GCFX2OF5gkybxaDl8uO/d7h/5tg8+1+rfzXB
J33T+i+dqvG+KInR+sKNYBSEbURot4wzyE/X2CWr5Jm5zj3qX486a7j6WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK4e//PJLtDVRGnDk4OJGETcoVCLMB8GA1UdIwQY
MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt
ZTQ0MTliNjQyMTJlLzEvcmg3Xzg4a3UwTlZFYWNPVGc0a1lSTnloVUlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl
LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPfMA0G
CSqGSIb3DQEBCwUAA4IBAQBYSZbGIZwgx0XANQSNy0eu31Yz/UBmeUn3YEKjarQY
04cSjmw57lPc4gyRekwrYCwNrpHrr4hFrMVFbxhFc7TGe8vimArffywcVgs8vwP/
xokuw5/bvU4DzgXTkBLhEo/9BIhFs9nDehVyp3xNQiI6oE+USLm94pw7tR7EC9z2
cuHwEHfYicZTphWYx5jviL/mx3xI35gxXtJ+BUTAIaZ7zxNXakIbcXtDwWAbEmmu
q0e3WZWliEg4KMhBrt85LABcCJmCd7d29Rm34v8AMF1/GLzpccbG+szh7aW24VfL
K+pibnzHIOs3ihyVFC/ClZ7ElTY1kVGiGUyVQ12E/BIv
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:50:56 2025 by rpki-client