Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/7chXrCB-kcx4BDbNvUre62zCVs0.roa
File: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (raw, json)
Hash identifier: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=
Subject key identifier: ED:C8:57:AC:20:7E:91:CC:78:04:36:CD:BD:4A:DE:EB:6C:C2:56:CD
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 019426D93EB553EDC4A58190C986B9034620
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/7chXrCB-kcx4BDbNvUre62zCVs0.roa
Signing time: Thu 02 Jan 2025 11:49:19 +0000
ROA not before: Thu 02 Jan 2025 11:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198955
IP address blocks: 91.240.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3e:b5:53:ed:c4:a5:81:90:c9:86:b9:03:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc857ac207e91cc780436cdbd4adeeb6cc256cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:30:c5:d6:d8:cf:b9:f6:0b:65:48:e6:4f:
b2:99:c4:5d:7a:80:44:3b:d9:5b:c1:73:3a:5d:f4:
d9:96:2a:14:ed:b6:5b:ff:39:55:5e:c4:90:eb:c1:
dc:aa:b1:85:db:93:17:ac:09:66:3e:eb:10:7f:d2:
4d:f0:1b:4a:89:7f:39:71:53:62:02:a7:65:b3:a5:
e5:16:47:8f:ae:af:86:fd:98:78:32:1d:16:56:bc:
ac:fb:2f:da:7c:87:7a:52:19:01:97:c1:5f:2e:87:
58:ea:50:4b:ec:bc:95:f6:d4:8f:f3:94:60:cb:a4:
34:8b:f5:4b:e3:f7:c9:43:48:98:0a:fd:a8:8d:81:
ab:15:97:48:1e:c8:df:db:b0:82:66:29:e8:79:f8:
63:75:96:38:7b:8d:ee:dd:79:e8:e8:6d:34:c4:1b:
eb:a0:93:bf:29:82:b8:4c:97:56:98:ac:93:65:7c:
4f:13:4a:55:76:98:70:2d:ea:46:54:eb:80:d7:85:
39:0f:90:e0:42:d3:c8:6e:0c:17:47:f1:47:22:c4:
8e:c6:9e:ae:0d:6a:0f:0c:da:64:42:d9:97:e3:8b:
18:49:cc:07:63:97:0a:67:cd:ae:45:a1:f6:9f:2f:
d6:e8:af:38:7c:eb:41:80:3a:c4:93:47:4a:f1:35:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:57:AC:20:7E:91:CC:78:04:36:CD:BD:4A:DE:EB:6C:C2:56:CD
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/7chXrCB-kcx4BDbNvUre62zCVs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.155.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3d:4f:4b:30:b2:87:87:cf:74:f9:53:77:3a:54:78:f5:f2:
c7:e0:86:5f:66:47:df:ff:2e:9a:30:61:db:22:b1:cb:fc:26:
e7:7a:23:f6:8c:52:db:a8:22:b2:88:e9:dc:22:6e:b6:a2:89:
fe:26:75:57:e3:51:db:33:a9:bd:78:80:57:21:a7:62:fb:e9:
e8:fb:04:66:f6:ed:e0:13:73:0f:44:c7:dd:8c:64:6d:fc:24:
31:01:54:5f:2f:cb:1f:00:14:87:64:a7:ba:df:32:a6:9e:07:
95:53:08:29:ef:91:7f:3d:fa:07:b4:e6:b9:03:e4:71:65:ed:
79:21:33:08:3c:6f:20:d6:37:49:5d:dc:c0:16:91:b8:63:6a:
a3:ea:48:ab:08:60:bb:d3:30:6c:7c:5d:6e:76:dc:72:bb:2a:
f7:74:e3:f0:cb:1f:f9:a2:3b:11:76:c7:d2:7b:42:06:bc:a9:
75:d3:e8:66:c4:36:5c:da:6e:a2:58:8d:c0:6f:d4:5d:7c:0f:
53:c8:07:74:f3:9d:2e:53:9c:5d:fb:cb:d1:ea:56:80:a4:7c:
0f:f0:6c:12:7e:a2:c2:58:60:88:5e:fd:78:5b:44:cb:5c:4f:
dd:ef:13:cd:ec:8c:90:62:30:d4:9a:68:49:ad:31:e7:8e:98:
35:26:55:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2T61U+3EpYGQyYa5A0YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyN2U5ZjlkNWZkNDVkYTAxMDY5NWNjNDIxMmFmN2U2N2I3
YjM0OGYwHhcNMjUwMTAyMTE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGM4NTdhYzIwN2U5MWNjNzgwNDM2Y2RiZDRhZGVlYjZjYzI1NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ4wxdbYz7n2C2VI5k+ymcRdeoBE
O9lbwXM6XfTZlioU7bZb/zlVXsSQ68HcqrGF25MXrAlmPusQf9JN8BtKiX85cVNi
Aqdls6XlFkePrq+G/Zh4Mh0WVrys+y/afId6UhkBl8FfLodY6lBL7LyV9tSP85Rg
y6Q0i/VL4/fJQ0iYCv2ojYGrFZdIHsjf27CCZinoefhjdZY4e43u3Xno6G00xBvr
oJO/KYK4TJdWmKyTZXxPE0pVdphwLepGVOuA14U5D5DgQtPIbgwXR/FHIsSOxp6u
DWoPDNpkQtmX44sYScwHY5cKZ82uRaH2ny/W6K84fOtBgDrEk0dK8TXFdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3IV6wgfpHMeAQ2zb1K3utswlbNMB8GA1UdIwQY
MBaAFBJ+n51f1F2gEGlcxCEq9+Z7ezSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzIt
MTVhOWYyMWNhYTg1LzEvN2NoWHJDQi1rY3g0QkRiTnZVcmU2MnpDVnMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yNGQxZWItMmNlMS00ZTZmLTgzYzItMTVhOWYyMWNhYTg1
LzEvRW42Zm5WX1VYYUFRYVZ6RUlTcjM1bnQ3Tkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/CbMA0G
CSqGSIb3DQEBCwUAA4IBAQBRPU9LMLKHh890+VN3OlR49fLH4IZfZkff/y6aMGHb
IrHL/CbneiP2jFLbqCKyiOncIm62oon+JnVX41HbM6m9eIBXIadi++no+wRm9u3g
E3MPRMfdjGRt/CQxAVRfL8sfABSHZKe63zKmngeVUwgp75F/PfoHtOa5A+RxZe15
ITMIPG8g1jdJXdzAFpG4Y2qj6kirCGC70zBsfF1udtxyuyr3dOPwyx/5ojsRdsfS
e0IGvKl10+hmxDZc2m6iWI3Ab9RdfA9TyAd0850uU5xd+8vR6laApHwP8GwSfqLC
WGCIXv14W0TLXE/d7xPN7IyQYjDUmmhJrTHnjpg1JlWx
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:29:55 2025 by rpki-client