Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/7l7s34fjkn1jL3Cf38Am0uWsDxc.roa
File: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (raw, json)
Hash identifier: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=
Subject key identifier: EE:5E:EC:DF:87:E3:92:7D:63:2F:70:9F:DF:C0:26:D2:E5:AC:0F:17
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444EF8BF8C128B40280D4E698458A24
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/7l7s34fjkn1jL3Cf38Am0uWsDxc.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21209
IP address blocks: 213.253.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ef:8b:f8:c1:28:b4:02:80:d4:e6:98:45:8a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee5eecdf87e3927d632f709fdfc026d2e5ac0f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:92:c0:1d:6f:b2:1b:64:b6:84:b5:7c:47:
b3:54:73:2f:45:d0:df:8d:c9:4c:da:59:cc:ad:2f:
51:a5:23:72:66:5f:8c:38:58:34:e7:1b:4a:e5:78:
28:6a:76:b2:f2:3e:ae:cd:9b:f2:87:f7:cc:74:5f:
da:39:a6:2a:ab:44:8a:d9:96:89:e4:3d:f5:fd:30:
cc:dc:7e:43:27:b1:2c:ca:47:40:cf:09:1f:74:fc:
79:26:72:08:f7:14:aa:9b:5d:41:64:d6:2a:d6:96:
ef:b0:65:70:98:4a:fa:b0:e7:7e:f0:88:48:80:06:
fd:53:3c:7e:94:76:09:5c:c3:4a:6f:b9:c8:40:a3:
cd:39:7d:9c:f0:dd:4c:19:46:f8:94:75:70:bd:e1:
0a:eb:70:b7:87:79:92:08:47:83:5d:40:51:60:27:
04:32:28:d6:ac:1c:af:56:0e:b8:83:9e:51:80:df:
09:ff:23:dd:0b:e9:a7:e9:ff:f5:18:59:56:6e:90:
f4:99:98:2d:12:41:ab:a5:00:14:6a:ee:ae:f0:44:
66:9b:f6:1f:14:20:7d:33:fe:bc:e1:b1:c2:cf:19:
61:ea:a7:89:09:84:d5:06:b4:6e:3b:ed:43:13:fe:
a8:d1:9d:d8:6c:d4:e2:1e:f6:71:66:63:52:6a:0c:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5E:EC:DF:87:E3:92:7D:63:2F:70:9F:DF:C0:26:D2:E5:AC:0F:17
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/7l7s34fjkn1jL3Cf38Am0uWsDxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
65:38:1a:64:dd:10:58:80:85:89:a5:0a:01:81:ed:59:79:e8:
4b:02:46:47:6f:a4:f5:58:2a:08:80:5a:7b:8d:b6:53:4b:a6:
53:53:5f:76:d1:68:76:70:3a:4d:38:83:ab:76:29:09:67:7f:
0e:0c:8a:03:e8:7f:8f:71:26:81:94:fa:25:f8:66:35:49:55:
d5:3a:34:05:90:52:a1:ce:35:86:81:a5:a7:79:a8:d3:d3:65:
e0:e1:a3:38:99:32:3d:a8:6c:8c:ba:3a:00:59:44:3a:8e:17:
3c:cf:e1:fe:de:6f:48:61:98:9e:ac:78:5e:e5:d3:ea:36:69:
81:95:55:69:d8:1b:f1:ab:d1:fc:5d:1a:a8:c9:06:e8:97:3f:
af:37:b8:4d:d6:c3:c0:fa:0d:cb:e7:0d:07:19:0f:16:a2:c6:
19:9a:6c:ff:2a:56:a7:50:e2:03:f5:09:eb:7f:15:7b:d4:0c:
b5:28:5b:da:75:fe:31:54:54:92:5d:6b:31:e8:00:be:83:1e:
43:02:a2:a4:4d:55:8f:3f:bb:b9:c2:3f:71:0c:3e:76:e7:66:
47:32:0f:95:de:52:eb:fc:4e:12:95:3e:5d:33:a1:68:d0:87:
3e:df:ea:18:6d:75:1d:9e:c5:23:5e:c7:18:6e:c5:56:b2:67:
31:74:bc:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRO+L+MEotAKA1OaYRYokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5
ZDQyODgwHhcNMjUwMTAxMjM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTVlZWNkZjg3ZTM5MjdkNjMyZjcwOWZkZmMwMjZkMmU1YWMwZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW+SwB1vshtktoS1fEezVHMvRdDf
jclM2lnMrS9RpSNyZl+MOFg05xtK5Xgoanay8j6uzZvyh/fMdF/aOaYqq0SK2ZaJ
5D31/TDM3H5DJ7EsykdAzwkfdPx5JnII9xSqm11BZNYq1pbvsGVwmEr6sOd+8IhI
gAb9Uzx+lHYJXMNKb7nIQKPNOX2c8N1MGUb4lHVwveEK63C3h3mSCEeDXUBRYCcE
MijWrByvVg64g55RgN8J/yPdC+mn6f/1GFlWbpD0mZgtEkGrpQAUau6u8ERmm/Yf
FCB9M/684bHCzxlh6qeJCYTVBrRuO+1DE/6o0Z3YbNTiHvZxZmNSagzbHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5e7N+H45J9Yy9wn9/AJtLlrA8XMB8GA1UdIwQY
MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It
ZWNjNDliZGMyYWQ4LzEvN2w3czM0ZmprbjFqTDNDZjM4QW0wdVdzRHhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4
LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f3XMA0G
CSqGSIb3DQEBCwUAA4IBAQBlOBpk3RBYgIWJpQoBge1ZeehLAkZHb6T1WCoIgFp7
jbZTS6ZTU1920Wh2cDpNOIOrdikJZ38ODIoD6H+PcSaBlPol+GY1SVXVOjQFkFKh
zjWGgaWneajT02Xg4aM4mTI9qGyMujoAWUQ6jhc8z+H+3m9IYZierHhe5dPqNmmB
lVVp2Bvxq9H8XRqoyQbolz+vN7hN1sPA+g3L5w0HGQ8WosYZmmz/KlanUOID9Qnr
fxV71Ay1KFvadf4xVFSSXWsx6AC+gx5DAqKkTVWPP7u5wj9xDD5252ZHMg+V3lLr
/E4SlT5dM6Fo0Ic+3+oYbXUdnsUjXscYbsVWsmcxdLyj
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:18:52 2025 by rpki-client