Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/5eRiGQx5boAqRAuznUmYz2xfqMQ.roa
File: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (raw, json)
Hash identifier: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=
Subject key identifier: E5:E4:62:19:0C:79:6E:80:2A:44:0B:B3:9D:49:98:CF:6C:5F:A8:C4
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01942369E7A3D1078288FFFF8609C6D0D4CA
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/5eRiGQx5boAqRAuznUmYz2xfqMQ.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201913
IP address blocks: 185.77.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e7:a3:d1:07:82:88:ff:ff:86:09:c6:d0:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5e462190c796e802a440bb39d4998cf6c5fa8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0d:90:9e:0a:bb:9d:8a:32:6e:29:5f:2c:dc:
da:1e:03:cb:60:e8:66:b8:e2:3a:54:fa:87:e8:b5:
c1:88:2f:eb:f9:66:43:ae:ed:cf:9c:6a:68:7a:78:
79:26:70:bb:1c:16:0c:e7:c3:1e:98:36:59:57:4e:
48:60:fd:a8:cf:73:b4:3c:f6:bd:29:75:e8:fb:84:
8d:7a:57:c5:68:70:da:44:a5:bf:47:bc:54:0a:a2:
56:8d:19:9d:b3:89:9d:13:d7:80:5f:12:d9:74:37:
06:e0:e3:af:29:99:70:d7:0f:4a:64:f4:a8:7a:c8:
23:50:80:d6:15:c9:3c:11:4f:cc:a3:c7:78:25:45:
3e:69:c9:55:1b:a0:7c:95:fd:0e:02:71:8c:b2:04:
91:39:38:f1:6e:e5:23:64:88:87:a4:1c:d9:5b:f4:
a3:f0:18:f9:74:13:4b:a4:7c:19:4d:db:a0:d6:47:
d1:e7:23:b0:4d:a4:3b:8a:43:e1:e1:91:61:4f:2e:
ee:bd:07:53:61:96:3c:b9:78:ea:2d:ef:80:b9:64:
b2:00:b4:0b:09:8e:28:15:ca:4c:2c:20:4b:46:16:
e2:0b:9c:10:32:ae:af:01:7f:df:07:9a:83:40:f1:
4f:fe:b7:82:80:80:6c:44:08:09:89:94:0b:e0:88:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:62:19:0C:79:6E:80:2A:44:0B:B3:9D:49:98:CF:6C:5F:A8:C4
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/5eRiGQx5boAqRAuznUmYz2xfqMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:24:53:a8:8d:35:e6:3a:98:98:73:6f:74:01:4a:82:3e:69:
ee:4e:2d:e4:fd:2d:09:5b:a7:64:3b:47:9f:96:df:ac:60:ab:
4d:16:bd:80:23:1c:89:0f:65:8f:80:25:f6:3e:41:a0:8e:92:
42:fe:1a:4f:33:cc:8a:a1:b4:ce:8c:c2:f9:05:f8:9e:d1:c0:
60:19:38:b4:43:fb:4b:17:2d:bc:99:23:c3:ac:59:8f:ce:db:
fc:2e:f4:f2:6a:5a:2b:44:1b:19:ed:e6:44:e7:a9:1e:c8:a7:
c1:40:19:cf:79:52:52:db:0d:72:c6:d8:50:f1:a1:a2:37:58:
c4:63:44:05:65:4c:23:63:86:a5:f2:16:f9:7d:d3:07:c4:72:
02:34:5c:db:8a:4d:ee:e1:f7:2b:88:bb:bb:28:65:0e:dc:ac:
a0:60:78:71:96:72:b4:88:21:7d:87:6e:50:97:45:03:e3:96:
2e:83:d7:b5:8e:fc:58:9f:2b:b7:74:ee:99:84:23:c8:7a:30:
92:16:c9:7a:63:1c:0b:83:ed:ce:f9:79:e6:6c:7b:b9:65:1d:
8c:13:cd:36:c2:8f:92:91:79:71:75:43:f6:b4:cd:3c:4a:84:
4d:7c:5e:31:33:93:35:7a:50:7f:44:c8:1e:3c:f5:7e:bd:12:
86:ca:4f:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaeej0QeCiP//hgnG0NTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjUwMTAxMTk0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU0NjIxOTBjNzk2ZTgwMmE0NDBiYjM5ZDQ5OThjZjZjNWZhOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q2Qngq7nYoybilfLNzaHgPLYOhm
uOI6VPqH6LXBiC/r+WZDru3PnGpoenh5JnC7HBYM58MemDZZV05IYP2oz3O0PPa9
KXXo+4SNelfFaHDaRKW/R7xUCqJWjRmds4mdE9eAXxLZdDcG4OOvKZlw1w9KZPSo
esgjUIDWFck8EU/Mo8d4JUU+aclVG6B8lf0OAnGMsgSROTjxbuUjZIiHpBzZW/Sj
8Bj5dBNLpHwZTdug1kfR5yOwTaQ7ikPh4ZFhTy7uvQdTYZY8uXjqLe+AuWSyALQL
CY4oFcpMLCBLRhbiC5wQMq6vAX/fB5qDQPFP/reCgIBsRAgJiZQL4IjLyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXkYhkMeW6AKkQLs51JmM9sX6jEMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvNWVSaUdReDVib0FxUkF1em5VbVl6MnhmcU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU0LMA0G
CSqGSIb3DQEBCwUAA4IBAQDUJFOojTXmOpiYc290AUqCPmnuTi3k/S0JW6dkO0ef
lt+sYKtNFr2AIxyJD2WPgCX2PkGgjpJC/hpPM8yKobTOjML5Bfie0cBgGTi0Q/tL
Fy28mSPDrFmPztv8LvTyalorRBsZ7eZE56keyKfBQBnPeVJS2w1yxthQ8aGiN1jE
Y0QFZUwjY4al8hb5fdMHxHICNFzbik3u4fcriLu7KGUO3KygYHhxlnK0iCF9h25Q
l0UD45Yug9e1jvxYnyu3dO6ZhCPIejCSFsl6YxwLg+3O+XnmbHu5ZR2ME802wo+S
kXlxdUP2tM08SoRNfF4xM5M1elB/RMgePPV+vRKGyk9j
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:09:14 2025 by rpki-client