Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/7-L8h3vxgPMOucvJUyn6jvtlWq4.roa
File: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (raw, json)
Hash identifier: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=
Subject key identifier: EF:E2:FC:87:7B:F1:80:F3:0E:B9:CB:C9:53:29:FA:8E:FB:65:5A:AE
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019422FB66B58281662407A6CCFED30F8C1A
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/7-L8h3vxgPMOucvJUyn6jvtlWq4.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.45.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:66:b5:82:81:66:24:07:a6:cc:fe:d3:0f:8c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe2fc877bf180f30eb9cbc95329fa8efb655aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:a1:24:69:18:5b:08:27:c8:10:da:5f:3a:
ab:3e:b1:7b:e0:15:e5:47:a1:d6:d0:a1:f7:01:0c:
7d:10:31:06:12:90:e5:5c:7a:0d:ec:e2:48:4e:e7:
47:2a:79:ae:bc:76:05:1a:a4:e7:b5:6a:64:5f:65:
61:ac:b0:0a:ba:5d:a9:f4:eb:1e:dc:c5:be:55:dc:
fd:7f:9b:43:c0:11:ae:ce:77:b3:d1:01:8b:c5:48:
fc:62:a5:25:61:ce:3f:f7:07:34:b7:c6:a6:86:6a:
be:90:0f:9b:39:26:7a:df:ba:ab:be:fb:45:5e:5c:
79:89:26:18:7f:be:d8:60:2f:fc:5a:e7:d3:03:e5:
84:19:f6:47:cb:c3:22:95:3e:79:e6:d3:89:4b:e3:
b9:d7:83:b0:ae:a0:fd:24:14:f1:d1:21:9f:ca:b1:
4a:17:ac:0c:82:37:36:d5:42:94:9a:60:b9:00:03:
72:72:e6:0a:86:c7:d1:01:0b:cc:27:e7:0b:7c:c5:
e3:f6:f7:70:d0:91:11:40:ab:62:30:da:98:57:0e:
a1:3a:eb:40:bb:18:4c:7f:8e:4e:2d:11:81:10:99:
b9:09:b4:80:a5:59:81:21:d6:cc:20:f5:af:25:53:
f7:c4:1f:ed:d7:b6:7a:8d:bb:f8:90:08:db:1a:41:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:FC:87:7B:F1:80:F3:0E:B9:CB:C9:53:29:FA:8E:FB:65:5A:AE
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/7-L8h3vxgPMOucvJUyn6jvtlWq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f7:0c:ab:be:9b:96:ad:59:d6:00:e1:01:d3:73:ae:5b:ae:
f9:df:8b:d9:24:fb:14:c9:e3:0f:05:a7:ac:40:3c:ab:c3:b2:
88:bc:f2:b7:81:97:77:89:67:a9:57:6e:77:df:ed:40:ca:57:
8c:b9:0b:bc:d1:df:23:bd:a9:6c:e5:ce:1e:4d:53:97:75:af:
16:9e:a2:54:de:fc:c3:d8:64:64:e7:99:cd:1c:f4:dd:f6:6c:
43:36:be:10:bf:9c:96:2c:18:e7:fb:73:ce:ad:0e:db:e2:2e:
15:b5:28:8d:47:6f:59:14:db:af:47:2d:7e:49:7e:43:38:d4:
46:b4:87:9c:b1:f5:44:48:76:92:b3:01:19:b2:04:02:53:6a:
06:cd:ca:f3:6f:bb:69:ac:5a:41:d2:aa:ae:43:d4:56:79:f8:
c1:fa:6c:34:1c:f8:e9:a3:cc:d8:f8:6d:ee:38:96:50:94:31:
cb:eb:da:4d:f1:5e:00:b5:38:1f:78:24:d3:44:a0:6d:90:fb:
57:f9:3a:e0:43:25:60:34:f3:95:b8:1a:71:11:46:1f:c1:bd:
33:28:e3:fc:95:cd:62:67:01:a9:9b:29:c5:b3:07:3e:50:db:
0e:ad:95:72:6a:2e:d9:8e:b8:8c:95:01:42:18:c2:9d:b5:db:
c1:49:2e:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+2a1goFmJAemzP7TD4waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw
YzI0ZGMwHhcNMjUwMTAxMTc0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmUyZmM4NzdiZjE4MGYzMGViOWNiYzk1MzI5ZmE4ZWZiNjU1YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksKhJGkYWwgnyBDaXzqrPrF74BXl
R6HW0KH3AQx9EDEGEpDlXHoN7OJITudHKnmuvHYFGqTntWpkX2VhrLAKul2p9Ose
3MW+Vdz9f5tDwBGuznez0QGLxUj8YqUlYc4/9wc0t8amhmq+kA+bOSZ637qrvvtF
Xlx5iSYYf77YYC/8WufTA+WEGfZHy8MilT555tOJS+O514OwrqD9JBTx0SGfyrFK
F6wMgjc21UKUmmC5AANycuYKhsfRAQvMJ+cLfMXj9vdw0JERQKtiMNqYVw6hOutA
uxhMf45OLRGBEJm5CbSApVmBIdbMIPWvJVP3xB/t17Z6jbv4kAjbGkFFBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/i/Id78YDzDrnLyVMp+o77ZVquMB8GA1UdIwQY
MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt
NzM5MjNkYWVmMTE0LzEvNy1MOGgzdnhnUE1PdWN2SlV5bjZqdnRsV3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0
LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS1fMA0G
CSqGSIb3DQEBCwUAA4IBAQB99wyrvpuWrVnWAOEB03OuW67534vZJPsUyeMPBaes
QDyrw7KIvPK3gZd3iWepV2533+1AyleMuQu80d8jvals5c4eTVOXda8WnqJU3vzD
2GRk55nNHPTd9mxDNr4Qv5yWLBjn+3POrQ7b4i4VtSiNR29ZFNuvRy1+SX5DONRG
tIecsfVESHaSswEZsgQCU2oGzcrzb7tprFpB0qquQ9RWefjB+mw0HPjpo8zY+G3u
OJZQlDHL69pN8V4AtTgfeCTTRKBtkPtX+TrgQyVgNPOVuBpxEUYfwb0zKOP8lc1i
ZwGpmynFswc+UNsOrZVyai7ZjriMlQFCGMKdtdvBSS55
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:28 2025 by rpki-client