Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa
File: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (raw, json)
Hash identifier: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=
Subject key identifier: D5:75:C0:0F:0D:46:8B:72:05:1E:57:D3:E1:31:9B:C9:9D:0B:6F:8F
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 019426D955E3C97825347F8DD53B1F693565
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13130
IP address blocks: 194.114.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:55:e3:c9:78:25:34:7f:8d:d5:3b:1f:69:35:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d575c00f0d468b72051e57d3e1319bc99d0b6f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:d5:67:0a:fb:18:16:ba:09:be:c2:25:50:
d7:a4:d3:7f:35:76:b9:52:66:3b:90:c4:ac:61:52:
28:68:2a:ca:44:90:d5:2b:e5:d1:e0:f6:24:99:fa:
82:de:f8:70:c4:07:ba:5c:b8:71:fb:82:29:af:93:
b2:0b:5c:e5:6d:8b:d8:48:07:4c:26:bd:ae:3e:c0:
dd:31:5a:76:42:0a:5a:44:ff:91:17:76:5e:48:95:
94:b9:87:43:03:0a:d9:67:cf:00:e5:79:66:92:53:
04:ff:3f:3e:f6:71:cb:16:fd:69:cc:b5:f7:8d:8c:
1a:eb:b8:72:50:a1:06:49:54:09:ae:f7:c1:3a:ed:
cc:20:37:40:c7:95:df:db:83:d4:da:80:f9:5f:3c:
58:c7:4d:f9:2a:b0:61:6d:e3:35:83:06:b9:66:32:
34:0c:38:b9:8c:30:a3:c8:20:cf:07:e0:33:ea:e3:
cc:e2:82:05:b3:5b:a4:f6:f9:fd:5c:7a:64:b5:5b:
bf:fa:a9:87:2a:5b:e4:4b:25:d0:8b:5e:04:40:e8:
09:bf:99:f2:9e:f0:6f:c2:64:fa:ff:68:31:06:4d:
58:f0:54:21:14:88:6d:2d:08:76:73:04:cd:67:dc:
0f:e2:79:a9:a5:4a:fa:dd:a3:14:c3:5c:7f:82:17:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:C0:0F:0D:46:8B:72:05:1E:57:D3:E1:31:9B:C9:9D:0B:6F:8F
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.76.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fc:9e:c9:31:b2:b7:08:86:81:4d:7c:08:0a:7a:bd:27:e8:
12:6d:71:15:83:95:54:fa:3a:02:de:f4:9f:aa:2c:26:90:cd:
06:13:ae:a4:f2:f9:8c:fd:87:48:57:37:15:52:78:d0:e6:4d:
7d:16:bd:0f:ac:b8:92:54:e2:97:be:16:c5:43:19:f1:e7:fe:
f2:a5:90:c8:40:ab:ff:11:4f:20:13:2c:a1:6d:8d:b9:b0:68:
18:a7:51:93:39:6a:85:04:a3:98:32:dd:29:bb:ad:76:d8:e3:
15:40:bf:a2:f3:d0:3d:e3:9d:6c:dd:d0:a3:e8:71:fd:fc:fb:
68:9c:ac:92:69:cb:4f:07:08:f9:cc:c4:93:af:7f:c5:51:06:
a0:fe:1d:65:f3:ac:12:24:70:22:db:9a:90:1f:1d:4e:55:46:
2f:c2:99:0b:1d:2b:15:c4:cf:98:ab:f4:00:60:77:77:ef:78:
93:5f:77:53:d0:9f:1c:5e:86:5a:af:97:20:87:e7:42:8e:13:
47:72:aa:4d:30:4c:ee:7c:51:c5:74:92:8d:76:b7:46:d8:d0:
84:39:47:64:87:31:9f:3b:0a:85:51:2f:a8:b6:2c:f3:22:fa:
d0:55:2c:34:7e:4f:d8:fc:fb:8e:18:d9:c8:1f:6b:3f:de:04:
48:a5:6d:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2VXjyXglNH+N1TsfaTVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw
ZjE4NjUwHhcNMjUwMTAyMTE0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTc1YzAwZjBkNDY4YjcyMDUxZTU3ZDNlMTMxOWJjOTlkMGI2ZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpTVZwr7GBa6Cb7CJVDXpNN/NXa5
UmY7kMSsYVIoaCrKRJDVK+XR4PYkmfqC3vhwxAe6XLhx+4Ipr5OyC1zlbYvYSAdM
Jr2uPsDdMVp2QgpaRP+RF3ZeSJWUuYdDAwrZZ88A5XlmklME/z8+9nHLFv1pzLX3
jYwa67hyUKEGSVQJrvfBOu3MIDdAx5Xf24PU2oD5XzxYx035KrBhbeM1gwa5ZjI0
DDi5jDCjyCDPB+Az6uPM4oIFs1uk9vn9XHpktVu/+qmHKlvkSyXQi14EQOgJv5ny
nvBvwmT6/2gxBk1Y8FQhFIhtLQh2cwTNZ9wP4nmppUr63aMUw1x/ghf7RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNV1wA8NRotyBR5X0+Exm8mdC2+PMB8GA1UdIwQY
MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct
ZjQzNzgzOTA5NWQxLzEvMVhYQUR3MUdpM0lGSGxmVDRUR2J5WjBMYjQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx
LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnJMMA0G
CSqGSIb3DQEBCwUAA4IBAQCE/J7JMbK3CIaBTXwICnq9J+gSbXEVg5VU+joC3vSf
qiwmkM0GE66k8vmM/YdIVzcVUnjQ5k19Fr0PrLiSVOKXvhbFQxnx5/7ypZDIQKv/
EU8gEyyhbY25sGgYp1GTOWqFBKOYMt0pu6122OMVQL+i89A9451s3dCj6HH9/Pto
nKySactPBwj5zMSTr3/FUQag/h1l86wSJHAi25qQHx1OVUYvwpkLHSsVxM+Yq/QA
YHd373iTX3dT0J8cXoZar5cgh+dCjhNHcqpNMEzufFHFdJKNdrdG2NCEOUdkhzGf
OwqFUS+otizzIvrQVSw0fk/Y/PuOGNnIH2s/3gRIpW2w
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:58:42 2025 by rpki-client