Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/gSkIa_heLgXoxXWpRCNJvp9Xs88.roa
File: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (raw, json)
Hash identifier: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=
Subject key identifier: 81:29:08:6B:F8:5E:2E:05:E8:C5:75:A9:44:23:49:BE:9F:57:B3:CF
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019427B5694837FDFF584503D5DEF44126E9
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/gSkIa_heLgXoxXWpRCNJvp9Xs88.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211104
IP address blocks: 185.182.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:69:48:37:fd:ff:58:45:03:d5:de:f4:41:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8129086bf85e2e05e8c575a9442349be9f57b3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:0f:0c:7d:27:3a:fa:38:b2:52:56:02:e3:
89:37:99:49:c6:ed:09:e2:8b:4c:a3:8d:c5:09:e7:
7b:d1:e1:5b:2c:08:23:5f:b7:b3:b6:7e:f8:eb:c8:
ed:fa:85:15:f7:bb:bf:f7:d0:76:3b:11:13:43:31:
d1:c0:c5:48:85:22:c8:db:91:f3:5c:84:3b:3c:57:
82:54:02:eb:f7:c6:22:45:94:39:cd:37:02:32:c4:
29:55:bb:63:ee:8b:e8:b8:b7:41:ca:fc:38:18:d9:
b9:55:a4:db:39:b2:8b:ee:eb:7f:b0:6d:8a:f2:d9:
f8:f3:a1:ff:9b:44:46:e3:27:5c:3a:7b:19:72:72:
66:2c:a9:86:c3:91:67:d6:74:b7:93:6c:81:1d:80:
6e:aa:46:e2:e8:49:c3:c3:13:44:3e:56:9d:04:f2:
6b:09:e6:4d:51:b8:da:c1:ff:42:b6:7a:e1:23:b2:
01:1b:37:f6:b3:30:21:43:d9:fd:ea:20:cc:09:75:
44:26:5a:6b:23:fa:d7:85:79:6a:2f:b9:de:02:e5:
d1:4c:51:32:2d:b2:99:ba:63:ce:b6:7f:4d:95:74:
e2:f7:be:7e:b6:1b:91:6a:42:09:49:27:bd:66:b1:
de:eb:d8:8d:27:9e:8b:83:06:6f:cf:39:88:c5:62:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:08:6B:F8:5E:2E:05:E8:C5:75:A9:44:23:49:BE:9F:57:B3:CF
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/gSkIa_heLgXoxXWpRCNJvp9Xs88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.156.0/24
Signature Algorithm: sha256WithRSAEncryption
82:94:0b:8f:54:c0:4a:36:e2:19:6d:7e:07:0a:aa:71:3f:6b:
9e:06:a6:a7:fa:27:78:a6:6f:9b:f7:89:7a:b4:a1:5e:77:0b:
33:f7:98:81:35:72:39:05:45:72:63:f3:93:be:19:92:ba:f4:
bb:fb:b9:25:f7:4e:b9:98:81:5a:c3:9a:ff:55:c1:95:df:f5:
57:0f:06:70:0c:bb:b2:38:6c:22:d5:5b:ec:51:48:92:ae:a8:
f2:94:5d:05:f3:98:e3:ec:5c:52:02:59:52:5d:ae:58:a1:9f:
77:31:e6:06:c9:0b:a2:90:88:9a:e5:54:a4:b1:ee:81:c4:78:
a9:9b:6d:7d:f5:50:bd:da:ff:d5:d3:98:ad:47:0b:58:92:19:
fb:f7:9c:f7:cf:07:05:ac:bc:f0:dd:3d:de:bf:2b:c9:62:8d:
db:50:82:f4:d5:c9:68:e4:8a:03:ee:ba:fe:08:96:02:57:89:
5d:d1:3c:1a:de:46:d3:bc:fc:8f:9d:cf:65:66:d7:c4:79:84:
42:72:42:b5:e3:98:94:ef:99:b5:02:86:f0:d4:ca:27:60:49:
04:fe:df:e6:f6:48:86:94:7b:cd:9d:2d:74:5f:7d:4b:02:c7:
dc:89:53:54:67:1e:f1:e5:79:23:61:77:b5:68:22:a0:7f:00:
9a:a5:12:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntWlIN/3/WEUD1d70QSbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTYzN2U3Y2UyMWQ2YzkxYjU0YTA2ODhlMjBmOTI0MTYy
MjIyMzcwHhcNMjUwMTAyMTU0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTI5MDg2YmY4NWUyZTA1ZThjNTc1YTk0NDIzNDliZTlmNTdiM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX4PDH0nOvo4slJWAuOJN5lJxu0J
4otMo43FCed70eFbLAgjX7eztn7468jt+oUV97u/99B2OxETQzHRwMVIhSLI25Hz
XIQ7PFeCVALr98YiRZQ5zTcCMsQpVbtj7ovouLdByvw4GNm5VaTbObKL7ut/sG2K
8tn486H/m0RG4ydcOnsZcnJmLKmGw5Fn1nS3k2yBHYBuqkbi6EnDwxNEPladBPJr
CeZNUbjawf9CtnrhI7IBGzf2szAhQ9n96iDMCXVEJlprI/rXhXlqL7neAuXRTFEy
LbKZumPOtn9NlXTi975+thuRakIJSSe9ZrHe69iNJ56LgwZvzzmIxWIw8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEpCGv4Xi4F6MV1qUQjSb6fV7PPMB8GA1UdIwQY
MBaAFH3mN+fOIdbJG1SgaI4g+SQWIiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQt
MDM5NjFlMmIwNjAxLzEvZ1NrSWFfaGVMZ1hveFhXcFJDTkp2cDlYczg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQtMDM5NjFlMmIwNjAx
LzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubacMA0G
CSqGSIb3DQEBCwUAA4IBAQCClAuPVMBKNuIZbX4HCqpxP2ueBqan+id4pm+b94l6
tKFedwsz95iBNXI5BUVyY/OTvhmSuvS7+7kl9065mIFaw5r/VcGV3/VXDwZwDLuy
OGwi1VvsUUiSrqjylF0F85jj7FxSAllSXa5YoZ93MeYGyQuikIia5VSkse6BxHip
m2199VC92v/V05itRwtYkhn795z3zwcFrLzw3T3evyvJYo3bUIL01clo5IoD7rr+
CJYCV4ld0Twa3kbTvPyPnc9lZtfEeYRCckK145iU75m1Aobw1MonYEkE/t/m9kiG
lHvNnS10X31LAsfciVNUZx7x5XkjYXe1aCKgfwCapRIw
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:54 2025 by rpki-client