Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7uqhdpnENgy_GpbuAZO4VF6zM88.roa
File: 7uqhdpnENgy_GpbuAZO4VF6zM88.roa (raw, json)
Hash identifier: EezHZs1/ZmjQleO11ZZDiOJsIzGetsp+bm+72weD24Q=
Subject key identifier: EE:EA:A1:76:99:C4:36:0C:BF:1A:96:EE:01:93:B8:54:5E:B3:33:CF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3EFF97CF79EF92C01BDFB7F4C359
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7uqhdpnENgy_GpbuAZO4VF6zM88.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209644
IP address blocks: 80.97.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:ff:97:cf:79:ef:92:c0:1b:df:b7:f4:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeeaa17699c4360cbf1a96ee0193b8545eb333cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:46:4f:ae:eb:1d:58:2f:4e:0e:cd:c5:c0:
a0:8f:b3:a6:cc:51:0e:31:7d:66:27:be:f3:f5:9a:
ad:3f:88:80:14:89:06:6d:a5:f5:74:9d:7b:22:8f:
af:8b:fc:bf:04:4b:48:7b:38:ad:58:53:52:28:1c:
03:d0:3e:3b:23:6e:e4:8f:53:56:39:70:ce:e6:87:
63:8f:f9:e5:7d:b4:4a:04:ad:f7:64:4b:41:52:d2:
bc:85:7b:f3:ae:99:41:6c:1b:26:62:60:9c:32:a2:
b3:b0:c7:bd:1c:91:06:ec:67:b1:75:75:61:9a:cd:
43:e8:10:17:40:2c:e1:55:2c:1d:8c:a8:4f:2b:ae:
74:63:44:77:81:a0:5e:7e:76:59:f1:11:0e:ba:6a:
73:bc:60:5d:75:b1:cb:92:59:db:4e:fc:0e:9f:09:
21:d9:62:af:8a:b3:f7:ce:fe:6e:9f:d8:40:60:45:
b8:4a:99:c5:f7:cf:24:56:01:e1:ab:5c:63:71:85:
ad:00:bb:e4:a1:c3:53:cb:c0:35:8f:12:45:a9:c6:
30:c3:ed:57:c4:bd:79:e5:6c:aa:87:53:1f:f1:d2:
32:94:6c:64:24:d1:00:f0:3c:fc:9c:1a:9d:ca:f6:
03:93:aa:16:04:90:b2:ae:48:46:68:a7:58:6b:c1:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:A1:76:99:C4:36:0C:BF:1A:96:EE:01:93:B8:54:5E:B3:33:CF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7uqhdpnENgy_GpbuAZO4VF6zM88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5d:80:5f:a1:d5:1d:74:65:db:bf:10:ae:0b:bc:17:c2:43:
0e:cc:8e:88:13:ee:fe:cc:89:c9:54:e6:8d:53:36:1f:34:48:
09:bd:d4:ae:88:58:db:9e:fb:60:da:86:62:a7:6f:48:53:a0:
9e:ef:0c:81:15:ed:51:a9:0e:d7:cc:44:ae:6e:be:85:85:95:
72:a4:f3:cb:f4:f9:08:6f:cb:ad:80:80:14:b9:da:77:8a:7a:
c7:fb:22:df:54:ab:8f:a3:9b:0c:e8:41:02:db:28:53:35:60:
ef:77:51:d0:62:b6:7d:86:f7:37:8d:7a:aa:4b:a9:9a:40:3e:
8b:9d:12:f4:5c:b6:3f:e6:d8:4d:9e:4a:34:50:2c:e2:4e:52:
bd:8a:e7:6d:87:2c:45:9c:cf:f5:b2:f3:f8:32:b1:a4:d1:7f:
6f:4d:7a:09:0d:06:98:45:ac:52:bb:3f:d5:e6:b2:48:2a:8f:
f7:a8:07:21:4d:37:60:ad:6b:3c:a5:10:a3:52:ee:f2:dc:d5:
1b:91:a1:9b:8f:35:78:5f:6d:6a:88:98:35:75:0f:e9:bf:db:
fa:5e:55:23:47:14:f3:70:f6:11:84:d6:49:8e:c6:46:97:b7:
b2:47:65:4e:78:8d:34:bf:28:7e:b2:5f:1a:60:9a:6b:be:39:
5f:d6:82:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjD7/l89575LAG9+39MNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWVhYTE3Njk5YzQzNjBjYmYxYTk2ZWUwMTkzYjg1NDVlYjMzM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnZGT67rHVgvTg7NxcCgj7OmzFEO
MX1mJ77z9ZqtP4iAFIkGbaX1dJ17Io+vi/y/BEtIezitWFNSKBwD0D47I27kj1NW
OXDO5odjj/nlfbRKBK33ZEtBUtK8hXvzrplBbBsmYmCcMqKzsMe9HJEG7GexdXVh
ms1D6BAXQCzhVSwdjKhPK650Y0R3gaBefnZZ8REOumpzvGBddbHLklnbTvwOnwkh
2WKvirP3zv5un9hAYEW4SpnF988kVgHhq1xjcYWtALvkocNTy8A1jxJFqcYww+1X
xL155Wyqh1Mf8dIylGxkJNEA8Dz8nBqdyvYDk6oWBJCyrkhGaKdYa8GYjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7qoXaZxDYMvxqW7gGTuFReszPPMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvN3VxaGRwbkVOZ3lfR3BidUFaTzRWRjZ6TTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGE0MA0G
CSqGSIb3DQEBCwUAA4IBAQBdXYBfodUddGXbvxCuC7wXwkMOzI6IE+7+zInJVOaN
UzYfNEgJvdSuiFjbnvtg2oZip29IU6Ce7wyBFe1RqQ7XzESubr6FhZVypPPL9PkI
b8utgIAUudp3inrH+yLfVKuPo5sM6EEC2yhTNWDvd1HQYrZ9hvc3jXqqS6maQD6L
nRL0XLY/5thNnko0UCziTlK9iudthyxFnM/1svP4MrGk0X9vTXoJDQaYRaxSuz/V
5rJIKo/3qAchTTdgrWs8pRCjUu7y3NUbkaGbjzV4X21qiJg1dQ/pv9v6XlUjRxTz
cPYRhNZJjsZGl7eyR2VOeI00vyh+sl8aYJprvjlf1oIB
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:55 2025 by rpki-client