Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/7d2f98bHzqHWx5M7oEXVyJyz8B4.roa
File: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (raw, json)
Hash identifier: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=
Subject key identifier: ED:DD:9F:F7:C6:C7:CE:A1:D6:C7:93:3B:A0:45:D5:C8:9C:B3:F0:1E
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 0194244593FAC300A6575A37D6E5EC9821BF
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/7d2f98bHzqHWx5M7oEXVyJyz8B4.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 194.0.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:93:fa:c3:00:a6:57:5a:37:d6:e5:ec:98:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eddd9ff7c6c7cea1d6c7933ba045d5c89cb3f01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:a0:d0:e2:59:77:cf:f8:7e:42:32:4b:f6:
79:89:43:7b:fa:b5:47:e9:b6:b4:82:e8:e1:08:71:
6d:30:9f:16:25:73:39:fa:69:f2:cb:94:83:0e:26:
95:7e:00:0d:e1:ae:0c:11:da:3d:5d:18:55:11:ca:
3e:59:8a:1c:ed:10:65:83:c9:32:51:0b:3c:65:7a:
94:df:50:cc:4e:42:84:7a:73:da:7c:44:83:97:1e:
f0:53:82:37:b5:da:94:c4:91:46:81:c8:07:9d:37:
14:f4:a7:58:16:5a:82:c5:59:b9:26:e4:77:4d:24:
25:19:e4:13:db:5c:d3:1f:2e:9e:e4:d5:81:05:86:
05:5a:8d:eb:37:c9:f2:bf:6a:f2:b2:c0:16:ff:3f:
b9:56:43:77:ac:6a:ed:41:5c:f8:96:06:b0:66:6c:
3b:ce:53:af:12:fa:46:99:33:f6:1c:cd:21:fb:e0:
b6:61:c9:7c:75:74:d0:b0:1f:56:a6:fe:ee:8a:b7:
44:0a:c4:33:1e:f9:f9:bd:f3:95:bb:3b:aa:c7:cc:
f3:69:fb:61:85:ac:cc:d2:c0:63:a9:0d:98:93:ad:
76:2f:ef:8f:97:46:4a:36:de:21:0c:b1:6d:e1:0e:
f6:64:de:00:59:e4:46:49:c0:0a:55:1c:a0:ff:28:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:9F:F7:C6:C7:CE:A1:D6:C7:93:3B:A0:45:D5:C8:9C:B3:F0:1E
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/7d2f98bHzqHWx5M7oEXVyJyz8B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.163.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b6:e2:1d:ae:a0:08:0d:eb:01:c1:03:1f:73:4c:ae:6c:7b:
ba:2a:a8:f8:6d:5a:51:a5:51:e8:85:16:f9:b4:7c:80:2c:38:
3f:0d:aa:5e:54:66:fb:17:67:7f:47:4b:01:50:db:61:15:0e:
13:75:93:68:a4:a1:4f:3a:6b:60:db:4d:ff:2e:bc:35:d4:cc:
d4:98:72:68:cd:8e:9c:44:03:2f:2b:99:6d:0f:4c:93:a6:d1:
38:be:da:f9:d6:2b:5f:bd:5d:5d:52:bf:f7:aa:25:33:7e:92:
f9:15:86:37:9f:a7:5b:e2:8d:e4:08:d4:4d:8f:e6:03:50:85:
46:d0:fe:15:60:4f:af:4c:21:12:d4:59:e9:35:87:cb:1f:9a:
9a:f7:ff:e6:8a:b1:b5:fc:13:b2:5b:69:e9:24:d6:c7:66:96:
fe:c1:fd:5f:07:7b:2c:2a:60:56:08:cc:0f:57:3f:be:94:6d:
78:cc:07:be:33:14:16:5d:fc:af:e5:25:48:2b:9d:65:a1:49:
62:f9:42:23:f5:19:56:1f:fa:f6:ba:cf:09:28:d5:1e:32:5f:
2e:a0:fb:73:22:a8:69:23:0e:99:0f:ca:5c:37:d7:cd:82:b0:
57:fa:3a:12:78:e9:71:a1:64:ea:69:45:7f:ab:57:a9:e9:a2:
ac:ec:55:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRZP6wwCmV1o31uXsmCG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3MzEzMzM3NWQ5NTcyYjhjZmNhNWM4YjVmMWZiYmJk
YzliYjYwHhcNMjUwMTAxMjM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGRkOWZmN2M2YzdjZWExZDZjNzkzM2JhMDQ1ZDVjODljYjNmMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnSg0OJZd8/4fkIyS/Z5iUN7+rVH
6ba0gujhCHFtMJ8WJXM5+mnyy5SDDiaVfgAN4a4MEdo9XRhVEco+WYoc7RBlg8ky
UQs8ZXqU31DMTkKEenPafESDlx7wU4I3tdqUxJFGgcgHnTcU9KdYFlqCxVm5JuR3
TSQlGeQT21zTHy6e5NWBBYYFWo3rN8nyv2ryssAW/z+5VkN3rGrtQVz4lgawZmw7
zlOvEvpGmTP2HM0h++C2Ycl8dXTQsB9Wpv7uirdECsQzHvn5vfOVuzuqx8zzafth
hazM0sBjqQ2Yk612L++Pl0ZKNt4hDLFt4Q72ZN4AWeRGScAKVRyg/yiJhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3dn/fGx86h1seTO6BF1cics/AeMB8GA1UdIwQY
MBaAFMwecxMzddlXK4z8pci18fu73Ju2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQt
Mjk4MzhmNGFjNjBlLzEvN2QyZjk4Ykh6cUhXeDVNN29FWFZ5Snl6OEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQtMjk4MzhmNGFjNjBl
LzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCjMA0G
CSqGSIb3DQEBCwUAA4IBAQBEtuIdrqAIDesBwQMfc0yubHu6Kqj4bVpRpVHohRb5
tHyALDg/DapeVGb7F2d/R0sBUNthFQ4TdZNopKFPOmtg203/Lrw11MzUmHJozY6c
RAMvK5ltD0yTptE4vtr51itfvV1dUr/3qiUzfpL5FYY3n6db4o3kCNRNj+YDUIVG
0P4VYE+vTCES1FnpNYfLH5qa9//mirG1/BOyW2npJNbHZpb+wf1fB3ssKmBWCMwP
Vz++lG14zAe+MxQWXfyv5SVIK51loUli+UIj9RlWH/r2us8JKNUeMl8uoPtzIqhp
Iw6ZD8pcN9fNgrBX+joSeOlxoWTqaUV/q1ep6aKs7FXt
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:46 2025 by rpki-client