Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/hL7gjsE__TvimmJVNhYnW8HxcTk.roa
File: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (raw, json)
Hash identifier: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=
Subject key identifier: 84:BE:E0:8E:C1:3F:FD:3B:E2:9A:62:55:36:16:27:5B:C1:F1:71:39
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0194244543C3F568C819C8DDD2309654D686
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/hL7gjsE__TvimmJVNhYnW8HxcTk.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61094
IP address blocks: 185.92.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:c3:f5:68:c8:19:c8:dd:d2:30:96:54:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84bee08ec13ffd3be29a62553616275bc1f17139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:50:51:09:15:f9:db:dd:d0:18:77:27:67:
82:3d:cf:8d:b3:5f:bc:3d:c6:5a:57:6d:17:09:b9:
05:01:94:ee:44:ec:06:b1:54:3a:25:ac:ff:38:c8:
3c:7c:5c:96:35:9e:6d:45:86:95:b4:0f:c7:0f:d1:
5b:ed:38:52:a4:76:a3:f9:ae:12:53:72:2d:23:69:
88:d1:5a:df:c4:c1:8f:0a:bc:8b:5f:a2:3e:9f:1a:
3e:66:27:b7:1a:c6:78:44:c1:9a:1a:6e:14:1a:a3:
93:1b:7f:59:d3:c5:7e:9b:e7:7f:be:d8:9a:87:af:
b2:70:e7:24:90:55:e6:33:84:17:69:40:70:85:2c:
e4:e0:e5:cd:b3:38:9a:4e:57:c5:8b:da:4b:4e:a8:
2b:c4:83:50:e9:b0:61:c9:8d:e6:0d:d3:b8:d3:c3:
50:a3:60:0b:d4:30:69:70:83:37:da:3b:27:8b:ac:
17:f3:6f:ca:7d:db:d9:29:2e:12:2d:6b:10:32:11:
6a:cc:24:1d:b2:5e:af:8c:49:47:d5:35:f6:39:f4:
ac:44:f9:ec:6c:54:1c:2b:25:21:2b:19:79:93:d8:
26:fc:86:22:1a:95:8c:76:f3:e8:58:00:60:6f:df:
b0:f0:1a:50:99:a8:13:1b:4c:77:88:db:7e:5f:2a:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:E0:8E:C1:3F:FD:3B:E2:9A:62:55:36:16:27:5B:C1:F1:71:39
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/hL7gjsE__TvimmJVNhYnW8HxcTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.124.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0c:dd:68:62:69:fd:cc:01:8b:91:0f:c2:e6:bd:4d:96:7a:
01:36:91:8c:14:83:8d:6d:33:d5:08:2f:c6:da:9a:7c:11:e6:
8f:6f:60:27:f0:9a:1e:a3:c9:08:4a:f3:72:cb:09:a0:c9:a5:
19:bf:5d:29:04:20:5b:aa:19:10:31:0e:3f:9e:95:e0:b8:94:
2d:d5:c7:8d:3e:f9:bd:4e:3a:3a:f6:90:42:19:65:9b:8d:8f:
8b:e1:a0:aa:1a:41:51:c6:70:5f:53:07:ae:33:66:69:ef:57:
fa:81:a8:45:d5:81:d7:ba:f7:27:32:d1:57:43:26:a3:68:7c:
a2:8e:7a:49:07:e1:c5:51:1d:8f:eb:26:ec:e4:b3:88:f9:7f:
50:d3:81:38:27:54:c6:7a:85:4b:ba:dc:83:d4:fb:b8:c3:a3:
25:a2:e3:16:70:aa:95:20:dc:23:8b:9d:dc:d9:06:be:ff:f0:
52:32:c3:42:f2:59:57:c7:f7:b8:d5:12:fc:11:7e:a2:3a:27:
78:a0:13:c3:0b:73:70:45:36:8e:b5:74:48:19:88:7e:71:aa:
24:1f:fa:6f:b2:4e:a5:eb:1a:a3:b1:8f:5b:90:99:a1:38:76:
e2:7b:c4:fb:ee:5e:21:03:8f:1b:51:11:8d:da:2d:f1:12:d6:
0e:15:1f:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRUPD9WjIGcjd0jCWVNaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjUwMTAxMjM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGJlZTA4ZWMxM2ZmZDNiZTI5YTYyNTUzNjE2Mjc1YmMxZjE3MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIdQUQkV+dvd0Bh3J2eCPc+Ns1+8
PcZaV20XCbkFAZTuROwGsVQ6Jaz/OMg8fFyWNZ5tRYaVtA/HD9Fb7ThSpHaj+a4S
U3ItI2mI0VrfxMGPCryLX6I+nxo+Zie3GsZ4RMGaGm4UGqOTG39Z08V+m+d/vtia
h6+ycOckkFXmM4QXaUBwhSzk4OXNsziaTlfFi9pLTqgrxINQ6bBhyY3mDdO408NQ
o2AL1DBpcIM32jsni6wX82/KfdvZKS4SLWsQMhFqzCQdsl6vjElH1TX2OfSsRPns
bFQcKyUhKxl5k9gm/IYiGpWMdvPoWABgb9+w8BpQmagTG0x3iNt+XypjawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIS+4I7BP/074ppiVTYWJ1vB8XE5MB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvaEw3Z2pzRV9fVHZpbW1KVk5oWW5XOEh4Y1RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVx8MA0G
CSqGSIb3DQEBCwUAA4IBAQCVDN1oYmn9zAGLkQ/C5r1NlnoBNpGMFIONbTPVCC/G
2pp8EeaPb2An8Joeo8kISvNyywmgyaUZv10pBCBbqhkQMQ4/npXguJQt1ceNPvm9
Tjo69pBCGWWbjY+L4aCqGkFRxnBfUweuM2Zp71f6gahF1YHXuvcnMtFXQyajaHyi
jnpJB+HFUR2P6ybs5LOI+X9Q04E4J1TGeoVLutyD1Pu4w6MlouMWcKqVINwji53c
2Qa+//BSMsNC8llXx/e41RL8EX6iOid4oBPDC3NwRTaOtXRIGYh+caokH/pvsk6l
6xqjsY9bkJmhOHbie8T77l4hA48bURGN2i3xEtYOFR+5
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:07:06 2025 by rpki-client