Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa
File: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (raw, json)
Hash identifier: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=
Subject key identifier: ED:25:16:84:BA:84:F0:0E:EA:5A:21:94:41:F5:91:93:73:FB:8F:F9
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019420D5C1FBF6DE87CF3A189B0354E8AFBF
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa
Signing time: Wed 01 Jan 2025 07:47:47 +0000
ROA not before: Wed 01 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216332
IP address blocks: 94.142.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c1:fb:f6:de:87:cf:3a:18:9b:03:54:e8:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed251684ba84f00eea5a219441f5919373fb8ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:be:73:96:83:83:52:a2:71:91:68:90:d6:
5f:c3:f8:93:e5:ff:35:5f:12:51:d0:2f:7b:83:36:
0e:93:fe:fa:eb:5b:eb:69:fe:c7:1b:e8:b0:66:f2:
e5:91:c8:89:90:01:e7:bb:0e:f5:86:82:d9:31:30:
c1:13:2f:a5:98:d1:c5:ea:4f:d6:5a:51:48:24:e9:
5a:72:db:10:d7:e1:58:c8:59:19:40:bf:a2:74:af:
87:2f:5f:63:c8:1e:f9:23:cd:4b:61:14:13:1b:4f:
f6:52:78:16:e9:70:aa:2e:46:97:97:03:0c:a9:60:
d0:ce:f3:38:03:56:e5:fa:5d:3f:4f:0c:76:4b:4d:
b0:62:11:a4:e3:85:64:f3:82:7c:21:78:72:74:b8:
b9:97:0a:b9:12:80:89:88:27:21:3a:59:85:e1:92:
55:6c:9d:a5:0e:d9:1d:6a:14:06:01:09:96:ea:a5:
59:82:e1:df:35:21:28:3d:31:d2:65:4a:8f:ef:ad:
87:e4:cf:04:12:f1:14:05:ad:1b:99:dd:0f:b4:92:
95:e9:68:71:38:d9:03:f1:cb:1c:98:d5:41:23:9f:
ad:62:c5:1f:0f:32:53:7a:45:f7:7e:2a:a0:19:42:
4d:2c:43:fc:05:c8:38:b8:62:fb:30:29:88:12:f6:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:16:84:BA:84:F0:0E:EA:5A:21:94:41:F5:91:93:73:FB:8F:F9
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:51:78:91:55:23:04:77:bb:75:1e:eb:f2:13:a0:34:e5:a2:
1c:dc:13:f6:7e:84:ec:84:b2:ea:ea:48:5f:77:d7:e0:f7:b0:
87:8f:71:84:e4:d9:4e:5b:08:d1:97:0a:c6:79:d2:60:e8:cd:
ed:63:9e:44:ee:29:11:3e:80:64:4e:cf:a1:97:4d:27:e3:c4:
fb:31:be:7e:32:c6:d8:06:c6:e0:c4:e3:b8:5f:8d:49:c7:99:
96:7b:e1:70:22:1e:52:cd:9e:4e:96:90:44:e9:e4:7d:9d:11:
d0:1a:8b:3b:6d:3d:98:a8:2e:f8:b0:c8:0e:d8:df:12:9c:ae:
95:5c:16:0e:ca:dd:68:e5:46:b6:b9:87:68:51:e7:4a:39:74:
49:05:0e:6a:ce:96:9e:a4:7d:5c:9d:90:ea:c2:26:75:2d:8a:
35:dd:8d:fd:fe:de:8e:25:04:10:02:af:02:44:4c:41:03:c3:
af:b4:fc:91:1b:6c:a4:76:64:d7:27:90:6b:ea:b7:d8:97:c5:
87:db:e3:a8:93:7b:6d:66:2a:3c:f3:92:b4:3a:07:bd:d6:71:
67:da:72:bf:fe:91:eb:ea:4e:36:b5:d8:97:f6:5c:06:d1:07:
83:e9:66:93:08:d2:3b:78:f5:f7:72:ff:1b:69:38:2e:82:f9:
f2:e5:77:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1cH79t6HzzoYmwNU6K+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk
NjYyNjkwHhcNMjUwMTAxMDc0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI1MTY4NGJhODRmMDBlZWE1YTIxOTQ0MWY1OTE5MzczZmI4ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXK+c5aDg1KicZFokNZfw/iT5f81
XxJR0C97gzYOk/7661vraf7HG+iwZvLlkciJkAHnuw71hoLZMTDBEy+lmNHF6k/W
WlFIJOlactsQ1+FYyFkZQL+idK+HL19jyB75I81LYRQTG0/2UngW6XCqLkaXlwMM
qWDQzvM4A1bl+l0/Twx2S02wYhGk44Vk84J8IXhydLi5lwq5EoCJiCchOlmF4ZJV
bJ2lDtkdahQGAQmW6qVZguHfNSEoPTHSZUqP762H5M8EEvEUBa0bmd0PtJKV6Whx
ONkD8cscmNVBI5+tYsUfDzJTekX3fiqgGUJNLEP8Bcg4uGL7MCmIEvZnAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0lFoS6hPAO6lohlEH1kZNz+4/5MB8GA1UdIwQY
MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt
NzBiMmViZDUxNDM4LzEvN1NVV2hMcUU4QTdxV2lHVVFmV1JrM1A3al9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4
LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo76MA0G
CSqGSIb3DQEBCwUAA4IBAQC3UXiRVSMEd7t1HuvyE6A05aIc3BP2foTshLLq6khf
d9fg97CHj3GE5NlOWwjRlwrGedJg6M3tY55E7ikRPoBkTs+hl00n48T7Mb5+MsbY
BsbgxOO4X41Jx5mWe+FwIh5SzZ5OlpBE6eR9nRHQGos7bT2YqC74sMgO2N8SnK6V
XBYOyt1o5Ua2uYdoUedKOXRJBQ5qzpaepH1cnZDqwiZ1LYo13Y39/t6OJQQQAq8C
RExBA8OvtPyRG2ykdmTXJ5Br6rfYl8WH2+Ook3ttZio885K0Oge91nFn2nK//pHr
6k42tdiX9lwG0QeD6WaTCNI7ePX3cv8baTgugvny5Xdf
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:16 2025 by rpki-client