Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FoDPK5Q9eEc-y2rXdE_uo3UDu3Y.roa
File: FoDPK5Q9eEc-y2rXdE_uo3UDu3Y.roa (raw, json)
Hash identifier: rBMeghZiLx18/gcbJsMYWOXUoR/6nrKCh9rrGUiZJrE=
Subject key identifier: 16:80:CF:2B:94:3D:78:47:3E:CB:6A:D7:74:4F:EE:A3:75:03:BB:76
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0195EB2E87536DB6C3AD7AA6B433179C53BE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FoDPK5Q9eEc-y2rXdE_uo3UDu3Y.roa
Signing time: Mon 31 Mar 2025 07:50:49 +0000
ROA not before: Mon 31 Mar 2025 07:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 5.188.207.0/24 maxlen: 24
31.184.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:2e:87:53:6d:b6:c3:ad:7a:a6:b4:33:17:9c:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 31 07:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1680cf2b943d78473ecb6ad7744feea37503bb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:68:c3:b0:2f:7e:88:61:51:03:4d:8e:2b:
74:72:df:5e:11:ad:d1:05:79:71:17:34:77:fa:17:
16:03:58:d1:94:6f:e4:c3:dd:40:84:ea:53:f8:c9:
e9:a0:b8:ff:ac:19:4b:88:16:a7:87:05:4e:47:5a:
5c:94:30:3a:41:26:5c:5e:80:44:48:e4:6a:b7:54:
19:98:38:73:84:a1:75:dc:cc:f8:2c:b9:da:55:e8:
3c:87:95:95:90:12:5f:4b:96:90:45:aa:2d:74:3b:
f1:17:d8:bd:7f:7d:28:2a:47:92:84:07:f7:ee:be:
70:35:ff:77:18:be:d4:e0:fe:b3:27:ab:96:1f:a3:
19:5f:34:8a:82:fb:19:af:12:31:73:e4:d1:58:e4:
66:92:41:1f:82:42:ae:62:92:13:35:bc:a7:df:14:
9b:a3:e0:3c:90:da:4b:43:9e:ef:6e:32:53:c8:8a:
69:75:88:a5:8a:f8:66:fb:76:32:8c:14:9f:ab:fd:
02:0b:9e:0d:bf:0e:2e:84:17:ea:9f:cc:e4:3a:c0:
54:9d:d7:2c:9b:cf:d9:77:c2:74:80:6d:c6:fd:e3:
01:4a:2c:c3:5c:ff:06:3b:83:d3:58:d5:f8:06:a9:
85:3f:33:bc:2f:7f:41:97:af:0e:92:7d:39:bc:07:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:CF:2B:94:3D:78:47:3E:CB:6A:D7:74:4F:EE:A3:75:03:BB:76
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FoDPK5Q9eEc-y2rXdE_uo3UDu3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.207.0/24
31.184.231.0/24
Signature Algorithm: sha256WithRSAEncryption
87:69:a0:26:86:65:26:1c:09:5d:d7:62:30:9d:b2:ec:de:7a:
d9:06:4e:d8:29:0e:03:0b:55:ab:83:b6:74:68:b5:df:de:b4:
95:6b:15:d2:2b:47:a8:e4:46:2b:1e:2a:da:ae:67:5f:f0:a5:
c0:63:b0:13:f6:15:fe:56:50:5b:dc:6f:a8:b6:99:8a:4f:d6:
c9:a3:21:47:1b:1a:39:42:f8:da:8c:27:b6:53:f2:5f:47:30:
45:d8:65:10:c7:99:45:43:a9:6d:c3:b9:47:29:fb:11:0b:99:
3e:d4:c2:0e:61:7e:bd:16:91:bc:12:ec:16:44:01:08:59:3f:
d2:f9:9e:cd:46:69:9a:8f:db:5e:97:97:86:8f:89:95:1d:c1:
be:5f:27:25:5d:5d:a8:27:4c:b6:df:55:e1:ad:2e:7d:9f:0f:
f6:bc:b9:c9:bf:66:9d:c1:02:d7:5a:b9:ce:2c:68:93:c0:34:
e8:1c:ef:90:a0:d4:68:4a:a8:bb:ef:19:05:93:ef:f2:65:99:
aa:27:77:2c:c4:ae:bf:7a:44:8b:23:b4:8f:b3:47:d8:e1:2f:
a7:2f:ca:3e:20:20:79:72:e0:8e:f1:55:28:63:86:88:bf:14:
93:20:51:38:46:6d:d2:a4:9d:47:be:ae:db:f4:05:b9:e5:87:
80:9c:90:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXrLodTbbbDrXqmtDMXnFO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMzMxMDc1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjgwY2YyYjk0M2Q3ODQ3M2VjYjZhZDc3NDRmZWVhMzc1MDNiYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtow7AvfohhUQNNjit0ct9eEa3R
BXlxFzR3+hcWA1jRlG/kw91AhOpT+MnpoLj/rBlLiBanhwVOR1pclDA6QSZcXoBE
SORqt1QZmDhzhKF13Mz4LLnaVeg8h5WVkBJfS5aQRaotdDvxF9i9f30oKkeShAf3
7r5wNf93GL7U4P6zJ6uWH6MZXzSKgvsZrxIxc+TRWORmkkEfgkKuYpITNbyn3xSb
o+A8kNpLQ57vbjJTyIppdYilivhm+3YyjBSfq/0CC54Nvw4uhBfqn8zkOsBUndcs
m8/Zd8J0gG3G/eMBSizDXP8GO4PTWNX4BqmFPzO8L39Bl68Okn05vAfD0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBaAzyuUPXhHPstq13RP7qN1A7t2MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvRm9EUEs1UTllRWMteTJyWGRFX3VvM1VEdTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbzPAwQA
H7jnMA0GCSqGSIb3DQEBCwUAA4IBAQCHaaAmhmUmHAld12IwnbLs3nrZBk7YKQ4D
C1Wrg7Z0aLXf3rSVaxXSK0eo5EYrHirarmdf8KXAY7AT9hX+VlBb3G+otpmKT9bJ
oyFHGxo5QvjajCe2U/JfRzBF2GUQx5lFQ6ltw7lHKfsRC5k+1MIOYX69FpG8EuwW
RAEIWT/S+Z7NRmmaj9tel5eGj4mVHcG+XyclXV2oJ0y231XhrS59nw/2vLnJv2ad
wQLXWrnOLGiTwDToHO+QoNRoSqi77xkFk+/yZZmqJ3csxK6/ekSLI7SPs0fY4S+n
L8o+ICB5cuCO8VUoY4aIvxSTIFE4Rm3SpJ1Hvq7b9AW55YeAnJBD
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:33 2025 by rpki-client