Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/iuf1b83yCqya2r6SoEi10QBv190.roa
File: iuf1b83yCqya2r6SoEi10QBv190.roa (raw, json)
Hash identifier: ++uDnasIym2V1Yn9GHYgHuJhGJWPQjDwf8/BrQDt/1o=
Subject key identifier: 8A:E7:F5:6F:CD:F2:0A:AC:9A:DA:BE:92:A0:48:B5:D1:00:6F:D7:DD
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 0195A55CAFED925C2D0E85F176BA9402D98A
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/iuf1b83yCqya2r6SoEi10QBv190.roa
Signing time: Mon 17 Mar 2025 18:27:49 +0000
ROA not before: Mon 17 Mar 2025 18:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215462
IP address blocks: 176.65.137.0/24 maxlen: 24
176.65.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:5c:af:ed:92:5c:2d:0e:85:f1:76:ba:94:02:d9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Mar 17 18:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae7f56fcdf20aac9adabe92a048b5d1006fd7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:30:c3:d4:ef:0d:f1:ec:e9:d7:4d:e2:5f:
ae:f8:c9:59:75:bd:d0:c3:c7:b0:66:5a:a6:19:d8:
f6:57:ff:39:af:bb:f1:46:74:7a:27:77:c5:32:cc:
73:50:5f:03:35:12:17:f7:c9:43:fc:9f:6b:bd:1d:
1a:e2:15:23:5a:68:49:b9:da:82:d4:94:a0:51:51:
f4:35:07:cf:e6:41:03:f9:3b:5f:ea:03:e7:7c:cf:
18:e3:56:90:36:60:40:83:4b:00:2b:2b:22:a1:9b:
fd:47:bd:e8:fb:14:6a:93:37:a2:48:1d:23:be:c9:
ff:83:4f:3b:8b:9c:18:75:aa:b4:1c:8d:fc:e2:8a:
44:25:26:c3:da:45:1b:ed:42:fe:68:c0:47:5a:c4:
ca:1c:c7:fa:b7:2b:27:94:85:da:91:08:56:17:a7:
51:18:c4:dc:8b:1d:51:3c:c4:89:1a:23:67:2b:98:
7e:b7:9e:a4:8d:70:e0:69:44:16:7a:9e:2d:70:5f:
1e:da:eb:83:c3:db:63:1b:85:71:b5:ea:38:50:5c:
7b:b8:61:95:85:6e:1c:15:c8:8a:5d:fc:ab:02:a6:
8c:e7:fc:3c:cd:c2:51:3c:02:9e:1b:db:f2:2c:d8:
46:29:be:dd:ae:e7:26:fd:ec:ba:a8:e0:88:42:de:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:F5:6F:CD:F2:0A:AC:9A:DA:BE:92:A0:48:B5:D1:00:6F:D7:DD
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/iuf1b83yCqya2r6SoEi10QBv190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.137.0-176.65.138.255
Signature Algorithm: sha256WithRSAEncryption
18:a2:fc:9f:37:f2:fa:2e:1f:78:36:c7:31:62:5c:37:dd:89:
b9:83:5a:d1:7d:1a:e8:65:ce:f0:75:3b:86:07:0d:af:81:7b:
ea:4a:4d:51:ce:cb:f5:f0:0a:92:24:e3:e9:99:17:d1:6a:c0:
99:5c:d2:52:de:05:c5:09:7d:73:51:1c:f4:f5:0d:04:28:f3:
f8:15:28:fc:a0:08:9f:3c:f1:5d:79:dc:a6:77:5b:3a:55:17:
95:e8:a4:45:35:4f:9c:b8:37:9a:06:99:8c:4f:8d:c8:03:b8:
41:aa:52:f1:6e:d8:d6:07:12:e5:53:3c:23:cc:6b:8e:cf:92:
1d:9d:01:0e:1d:9a:6b:f1:ef:99:dd:b7:5a:89:63:3f:24:86:
bf:2d:19:30:2f:4c:04:6f:21:8a:5d:d6:05:ca:46:6f:9a:05:
8d:78:16:d9:32:ab:38:e0:01:a6:26:5d:49:5e:6d:3b:69:81:
e1:9a:11:49:52:02:e8:12:3b:4d:2d:1c:d1:b1:15:73:2f:d6:
c5:f8:a1:76:05:65:b0:3c:92:61:06:ef:d8:b9:dd:71:62:b6:
b2:fe:db:3d:a1:e2:11:e3:17:d3:e5:a4:8a:3e:be:f1:e2:5e:
03:eb:d4:42:f0:7a:7c:95:92:a7:b0:df:7c:03:8b:0b:95:cf:
88:2b:05:58
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZWlXK/tklwtDoXxdrqUAtmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx
MTI4YzMwHhcNMjUwMzE3MTgyNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWU3ZjU2ZmNkZjIwYWFjOWFkYWJlOTJhMDQ4YjVkMTAwNmZkN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIww9TvDfHs6ddN4l+u+MlZdb3Q
w8ewZlqmGdj2V/85r7vxRnR6J3fFMsxzUF8DNRIX98lD/J9rvR0a4hUjWmhJudqC
1JSgUVH0NQfP5kED+Ttf6gPnfM8Y41aQNmBAg0sAKysioZv9R73o+xRqkzeiSB0j
vsn/g087i5wYdaq0HI384opEJSbD2kUb7UL+aMBHWsTKHMf6tysnlIXakQhWF6dR
GMTcix1RPMSJGiNnK5h+t56kjXDgaUQWep4tcF8e2uuDw9tjG4Vxteo4UFx7uGGV
hW4cFciKXfyrAqaM5/w8zcJRPAKeG9vyLNhGKb7drucm/ey6qOCIQt4aZQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIrn9W/N8gqsmtq+kqBItdEAb9fdMB8GA1UdIwQY
MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt
MzE5YjBjODc0NDQwLzEvaXVmMWI4M3lDcXlhMnI2U29FaTEwUUJ2MTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw
LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwQYkD
BACwQYowDQYJKoZIhvcNAQELBQADggEBABii/J838vouH3g2xzFiXDfdibmDWtF9
GuhlzvB1O4YHDa+Be+pKTVHOy/XwCpIk4+mZF9FqwJlc0lLeBcUJfXNRHPT1DQQo
8/gVKPygCJ888V153KZ3WzpVF5XopEU1T5y4N5oGmYxPjcgDuEGqUvFu2NYHEuVT
PCPMa47Pkh2dAQ4dmmvx75ndt1qJYz8khr8tGTAvTARvIYpd1gXKRm+aBY14Ftky
qzjgAaYmXUlebTtpgeGaEUlSAugSO00tHNGxFXMv1sX4oXYFZbA8kmEG79i53XFi
trL+2z2h4hHjF9PlpIo+vvHiXgPr1ELwenyVkqew33wDiwuVz4grBVg=
-----END CERTIFICATE-----
Generated at Tue Apr 15 12:57:32 2025 by rpki-client