Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/7yxzEpwrPvkVtysBCZ9w3NvniME.roa
File: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (raw, json)
Hash identifier: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=
Subject key identifier: EF:2C:73:12:9C:2B:3E:F9:15:B7:2B:01:09:9F:70:DC:DB:E7:88:C1
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8E5710922E6EDD7D74894D0C282F
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/7yxzEpwrPvkVtysBCZ9w3NvniME.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 94.124.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8e:57:10:92:2e:6e:dd:7d:74:89:4d:0c:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef2c73129c2b3ef915b72b01099f70dcdbe788c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:c9:7d:18:22:fa:e3:67:04:f7:60:e7:e3:
12:13:0c:d7:83:76:b6:f4:bf:55:ab:1e:1f:43:2d:
6c:33:c9:47:11:4b:5b:e8:38:81:fd:25:10:ff:5c:
09:42:bf:c0:91:cf:dc:e4:df:6c:74:80:0b:2b:8b:
05:7e:03:25:7c:7a:91:6d:0c:f8:29:bc:27:ab:e3:
a2:83:4d:27:ac:1f:9b:04:63:94:fe:73:ac:aa:b1:
46:44:69:ed:42:77:6e:9a:ec:3f:9f:b7:5b:9e:6d:
f0:0b:a1:63:53:73:de:a1:b9:d0:b1:b7:21:2f:b5:
04:df:83:b2:d2:2f:a3:e0:09:d7:3e:78:14:0e:f8:
42:6a:85:34:48:aa:3a:27:a0:ea:1a:89:3b:8e:f2:
7f:0a:22:c7:76:02:54:b3:28:09:03:7b:54:bb:97:
d1:7d:64:f6:03:f4:12:30:ca:d8:d8:6c:1a:54:52:
eb:f5:66:ee:c9:4d:a0:9c:01:19:8a:fc:c6:39:91:
50:88:c4:4b:a2:1b:a0:4d:31:7c:76:2d:d3:f9:e5:
11:4e:74:57:99:af:a2:bc:2a:8a:e4:d5:38:4d:69:
88:a3:fa:40:85:3f:76:19:53:8a:08:f4:d0:21:ac:
55:80:21:38:51:4a:31:04:fb:c1:89:c3:e0:b7:44:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2C:73:12:9C:2B:3E:F9:15:B7:2B:01:09:9F:70:DC:DB:E7:88:C1
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/7yxzEpwrPvkVtysBCZ9w3NvniME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.161.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a8:1a:78:73:98:31:7d:46:0e:8b:1d:d7:4f:cf:50:c8:31:
24:35:ee:5c:da:09:6e:4d:dd:5b:57:dc:29:7a:ad:14:84:48:
1c:8a:89:b1:41:bb:4c:f8:7d:ec:37:31:f6:a5:42:52:a7:5d:
14:ea:8a:02:1a:77:a2:76:31:5e:9c:f5:9f:fd:ab:b2:d4:35:
77:e0:ea:1c:4b:c5:7b:9f:0e:3a:e8:39:af:95:48:fd:2a:f3:
5d:5e:e7:7a:31:76:60:e1:66:ef:f1:a3:1e:4f:b4:a7:99:51:
a8:22:88:0a:09:19:6c:84:7e:89:a8:c2:4e:06:73:dc:db:f1:
94:ee:d5:1d:52:f8:38:0a:08:b8:bb:50:f4:45:c1:a4:da:d8:
5a:75:fb:ba:92:1b:a3:5a:18:0c:ac:14:99:61:9d:a9:b6:06:
1a:3a:0f:e4:80:ce:31:80:58:40:9d:19:06:55:b8:33:96:78:
2c:8e:12:1b:11:9e:4b:3e:a4:83:02:b1:8f:76:03:41:7b:cc:
a2:05:8e:69:e9:c5:cd:8d:74:6e:fb:a9:05:f2:94:25:48:b4:
97:46:c3:6b:c0:76:dc:79:95:9f:d0:78:ff:f5:49:32:b0:3a:
0f:cc:1c:24:6e:f2:26:33:86:6f:67:fa:0b:c6:a9:9d:99:ff:
08:41:f1:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma45XEJIubt19dIlNDCgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjUwMTAyMDk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjJjNzMxMjljMmIzZWY5MTViNzJiMDEwOTlmNzBkY2RiZTc4OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUPJfRgi+uNnBPdg5+MSEwzXg3a2
9L9Vqx4fQy1sM8lHEUtb6DiB/SUQ/1wJQr/Akc/c5N9sdIALK4sFfgMlfHqRbQz4
Kbwnq+Oig00nrB+bBGOU/nOsqrFGRGntQndumuw/n7dbnm3wC6FjU3PeobnQsbch
L7UE34Oy0i+j4AnXPngUDvhCaoU0SKo6J6DqGok7jvJ/CiLHdgJUsygJA3tUu5fR
fWT2A/QSMMrY2GwaVFLr9WbuyU2gnAEZivzGOZFQiMRLohugTTF8di3T+eURTnRX
ma+ivCqK5NU4TWmIo/pAhT92GVOKCPTQIaxVgCE4UUoxBPvBicPgt0RhfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8scxKcKz75FbcrAQmfcNzb54jBMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvN3l4ekVwd3JQdmtWdHlzQkNaOXczTnZuaU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnyhMA0G
CSqGSIb3DQEBCwUAA4IBAQAUqBp4c5gxfUYOix3XT89QyDEkNe5c2gluTd1bV9wp
eq0UhEgciomxQbtM+H3sNzH2pUJSp10U6ooCGneidjFenPWf/auy1DV34OocS8V7
nw466DmvlUj9KvNdXud6MXZg4Wbv8aMeT7SnmVGoIogKCRlshH6JqMJOBnPc2/GU
7tUdUvg4Cgi4u1D0RcGk2thadfu6khujWhgMrBSZYZ2ptgYaOg/kgM4xgFhAnRkG
VbgzlngsjhIbEZ5LPqSDArGPdgNBe8yiBY5p6cXNjXRu+6kF8pQlSLSXRsNrwHbc
eZWf0Hj/9UkysDoPzBwkbvImM4ZvZ/oLxqmdmf8IQfE8
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:50:52 2025 by rpki-client