Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I5QYvq4IicclfQWoviXNqVkoJ1Y.roa
File: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (raw, json)
Hash identifier: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=
Subject key identifier: 23:94:18:BE:AE:08:89:C7:25:7D:05:A8:BE:25:CD:A9:59:28:27:56
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF752BF5B16DBDFB10B1A377D414C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I5QYvq4IicclfQWoviXNqVkoJ1Y.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 147.185.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 19:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f7:52:bf:5b:16:db:df:b1:0b:1a:37:7d:41:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239418beae0889c7257d05a8be25cda959282756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:c4:23:da:7d:1a:a9:f7:97:7e:2a:ce:07:
8c:e9:4c:02:bc:31:77:94:b1:48:33:e0:f6:79:80:
46:7c:36:8f:a5:05:4f:1e:d4:77:e0:0e:fb:c4:0b:
e5:74:c3:c4:53:96:af:48:f3:e8:17:86:70:85:2b:
f2:cf:b5:29:44:65:69:ff:50:ed:1c:45:7a:48:08:
85:a9:60:11:39:8e:7f:5a:43:cf:59:25:45:a2:f8:
13:86:6b:13:f7:11:66:c3:ee:f6:68:6b:d7:b4:e4:
66:c0:54:7a:a9:fc:2c:e2:71:0c:0d:dc:bd:2b:ea:
e1:90:f6:6e:8a:41:01:c3:7a:c8:a0:54:d3:46:f8:
b4:0e:d9:7c:36:ac:00:57:5e:3e:e8:a6:be:83:33:
69:48:93:9d:8c:cb:8e:f8:c3:c3:22:84:48:b2:a8:
8a:15:29:51:5d:78:c7:29:8f:35:19:97:13:c7:64:
fa:cc:52:86:30:01:c5:df:71:be:bb:cb:8a:05:70:
09:9d:7b:a5:74:19:88:18:d0:e1:85:9c:28:9d:a0:
50:36:3a:fe:6f:0d:51:96:9a:94:7a:94:71:1b:93:
0b:d4:f1:82:b9:c7:f6:d9:b2:01:23:6d:9e:15:34:
d7:eb:8d:ab:9d:11:56:57:e0:c6:d0:c4:a0:a1:e7:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:18:BE:AE:08:89:C7:25:7D:05:A8:BE:25:CD:A9:59:28:27:56
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I5QYvq4IicclfQWoviXNqVkoJ1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2e:c3:58:6b:8f:6b:0d:7e:47:2a:fd:45:18:b3:d0:ad:c9:
60:09:b2:9a:24:e5:30:f5:fc:b6:60:a6:f5:3d:85:f0:05:0f:
c5:ba:06:9b:35:f4:9d:aa:c8:b2:6e:cb:71:f4:05:88:60:20:
a8:d4:20:99:94:25:28:29:83:70:aa:cc:1a:b7:59:39:00:25:
af:12:f8:1a:38:cc:c8:5a:d1:0c:c5:3c:dd:7d:3e:e9:e7:76:
07:12:eb:41:2e:2b:36:cc:01:65:ef:9f:fb:c9:ae:39:2e:b0:
a8:13:e3:bd:e0:29:1e:75:57:bb:a0:8d:03:96:8c:b1:77:be:
59:7d:57:88:e9:1c:87:f5:34:e2:c2:38:fa:e2:34:3a:8d:b9:
68:02:8e:65:13:fc:90:ee:90:7a:38:69:53:92:2f:dc:73:0b:
2d:86:cc:30:eb:7e:64:7c:27:a4:0a:c9:8a:27:b9:be:d5:36:
b2:9a:2b:07:5a:d8:b2:00:63:07:41:73:d8:6f:48:6b:55:23:
5f:41:37:76:09:9a:c3:95:d7:da:8c:51:d6:ed:a5:34:e5:f2:
11:fb:24:22:85:53:94:42:ba:8f:3b:d7:53:4e:79:41:a8:77:
40:81:bb:40:8d:da:fa:24:a3:77:d7:8b:c7:50:74:42:75:58:
21:d5:a0:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH/dSv1sW29+xCxo3fUFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwMTAxMTM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzk0MThiZWFlMDg4OWM3MjU3ZDA1YThiZTI1Y2RhOTU5MjgyNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFDEI9p9Gqn3l34qzgeM6UwCvDF3
lLFIM+D2eYBGfDaPpQVPHtR34A77xAvldMPEU5avSPPoF4ZwhSvyz7UpRGVp/1Dt
HEV6SAiFqWAROY5/WkPPWSVFovgThmsT9xFmw+72aGvXtORmwFR6qfws4nEMDdy9
K+rhkPZuikEBw3rIoFTTRvi0Dtl8NqwAV14+6Ka+gzNpSJOdjMuO+MPDIoRIsqiK
FSlRXXjHKY81GZcTx2T6zFKGMAHF33G+u8uKBXAJnXuldBmIGNDhhZwonaBQNjr+
bw1RlpqUepRxG5ML1PGCucf22bIBI22eFTTX642rnRFWV+DG0MSgoecgTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCOUGL6uCInHJX0FqL4lzalZKCdWMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvSTVRWXZxNElpY2NsZlFXb3ZpWE5xVmtvSjFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nPMA0G
CSqGSIb3DQEBCwUAA4IBAQBPLsNYa49rDX5HKv1FGLPQrclgCbKaJOUw9fy2YKb1
PYXwBQ/FugabNfSdqsiybstx9AWIYCCo1CCZlCUoKYNwqswat1k5ACWvEvgaOMzI
WtEMxTzdfT7p53YHEutBLis2zAFl75/7ya45LrCoE+O94CkedVe7oI0Dloyxd75Z
fVeI6RyH9TTiwjj64jQ6jbloAo5lE/yQ7pB6OGlTki/ccwsthsww635kfCekCsmK
J7m+1TaymisHWtiyAGMHQXPYb0hrVSNfQTd2CZrDldfajFHW7aU05fIR+yQihVOU
QrqPO9dTTnlBqHdAgbtAjdr6JKN314vHUHRCdVgh1aAg
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:30 2025 by rpki-client