Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hR7mj62BLAX5mjDAeBmg-11m7wk.roa
File: hR7mj62BLAX5mjDAeBmg-11m7wk.roa (raw, json)
Hash identifier: ZjyNf/lrepm1W/sRpZPeDS5Z9NJxrw8snIV8gXVEd2A=
Subject key identifier: 85:1E:E6:8F:AD:81:2C:05:F9:9A:30:C0:78:19:A0:FB:5D:66:EF:09
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D28A5A2ECB9D2571838D685FA292
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hR7mj62BLAX5mjDAeBmg-11m7wk.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201870
IP address blocks: 195.65.24.0/24 maxlen: 24
195.65.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:8a:5a:2e:cb:9d:25:71:83:8d:68:5f:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851ee68fad812c05f99a30c07819a0fb5d66ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:27:8d:d8:b3:10:64:5c:28:93:2f:7b:88:
00:37:8a:bc:f9:12:70:bd:cc:49:07:45:c6:70:c3:
1b:77:0b:5b:1b:07:58:1b:1e:fc:60:30:22:9e:4b:
31:43:c3:86:d4:4a:e6:62:d6:c7:f5:03:89:2d:cb:
0e:dd:ed:2e:49:c5:11:f2:95:2e:25:62:32:3f:08:
de:07:be:d3:ee:e3:9d:40:8b:08:b4:42:25:6b:87:
a6:d1:c5:ec:a4:5d:b2:44:d4:8b:59:66:aa:eb:39:
8f:99:1a:8c:78:ef:93:3e:e2:1a:2d:a0:9c:28:d2:
82:a4:32:82:4c:20:7e:24:fb:ff:43:88:95:b9:e6:
72:cc:08:1a:e0:5c:fd:9e:db:df:1c:99:aa:27:a3:
78:0d:45:6b:48:43:aa:90:b2:97:a8:07:5d:e7:8e:
ce:1b:6c:b7:99:14:53:5c:6f:f9:00:ad:2e:21:d8:
c6:a3:f8:18:60:d7:23:70:95:bb:36:d5:65:60:a7:
47:dd:9d:c8:f3:e8:bc:85:72:77:4f:b1:b9:4e:50:
fe:41:f7:fd:ff:fb:59:39:3d:c9:c7:23:82:8a:81:
b1:59:51:cf:ee:73:c3:7a:a3:18:82:3a:bf:d0:4b:
31:b4:f5:4b:b0:34:e2:ff:b5:28:70:0b:b1:7d:ca:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:E6:8F:AD:81:2C:05:F9:9A:30:C0:78:19:A0:FB:5D:66:EF:09
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hR7mj62BLAX5mjDAeBmg-11m7wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.24.0/24
195.65.33.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8c:2c:66:05:1e:eb:6a:c8:9c:b3:2f:58:ad:6b:5c:93:e5:
ba:a7:f5:86:bd:45:c9:eb:8b:80:c8:46:47:26:cf:1c:ac:4f:
d8:f3:1d:77:32:fd:30:c0:f8:15:ad:44:08:79:8e:ec:72:2f:
9f:3d:ed:2c:bd:cc:3b:45:c8:4a:5f:d2:4e:e6:2d:d7:b7:4d:
08:3e:ba:c9:e8:0f:c5:8f:52:e5:17:de:4a:3d:1f:8a:da:9c:
8e:e2:43:ca:1d:d7:aa:3a:64:51:53:6c:d0:95:47:41:30:0d:
16:1f:f5:07:32:4e:83:92:1e:a8:f8:89:26:c2:79:6d:03:6d:
53:ed:cc:45:34:82:a1:d1:a1:80:8b:bd:42:7f:ee:91:ce:ef:
a7:16:39:7e:4e:68:73:d8:27:c6:98:2e:10:af:8a:a3:f5:3a:
6a:6a:18:ad:7e:45:f7:2a:dd:af:52:41:3f:e1:76:d4:25:53:
01:8c:59:70:18:32:7a:60:c0:37:4d:11:04:19:b4:9f:83:3c:
8f:76:9b:81:34:64:df:4e:ef:98:0c:d5:50:8f:1f:39:59:09:
19:51:a5:e7:9c:f6:56:70:df:fc:c6:42:dc:4c:19:93:97:62:
42:6f:7e:14:dc:39:3e:6e:04:8a:73:13:ee:11:93:f2:5f:df:
06:26:a5:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgZ9KKWi7LnSVxg41oX6KSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTFlZTY4ZmFkODEyYzA1Zjk5YTMwYzA3ODE5YTBmYjVkNjZlZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRcnjdizEGRcKJMve4gAN4q8+RJw
vcxJB0XGcMMbdwtbGwdYGx78YDAinksxQ8OG1ErmYtbH9QOJLcsO3e0uScUR8pUu
JWIyPwjeB77T7uOdQIsItEIla4em0cXspF2yRNSLWWaq6zmPmRqMeO+TPuIaLaCc
KNKCpDKCTCB+JPv/Q4iVueZyzAga4Fz9ntvfHJmqJ6N4DUVrSEOqkLKXqAdd547O
G2y3mRRTXG/5AK0uIdjGo/gYYNcjcJW7NtVlYKdH3Z3I8+i8hXJ3T7G5TlD+Qff9
//tZOT3JxyOCioGxWVHP7nPDeqMYgjq/0EsxtPVLsDTi/7UocAuxfcp58QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIUe5o+tgSwF+ZowwHgZoPtdZu8JMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvaFI3bWo2MkJMQVg1bWpEQWVCbWctMTFtN3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw0EYAwQA
w0EhMA0GCSqGSIb3DQEBCwUAA4IBAQCSjCxmBR7rasicsy9YrWtck+W6p/WGvUXJ
64uAyEZHJs8crE/Y8x13Mv0wwPgVrUQIeY7sci+fPe0svcw7RchKX9JO5i3Xt00I
PrrJ6A/Fj1LlF95KPR+K2pyO4kPKHdeqOmRRU2zQlUdBMA0WH/UHMk6Dkh6o+Ikm
wnltA21T7cxFNIKh0aGAi71Cf+6Rzu+nFjl+Tmhz2CfGmC4Qr4qj9TpqahitfkX3
Kt2vUkE/4XbUJVMBjFlwGDJ6YMA3TREEGbSfgzyPdpuBNGTfTu+YDNVQjx85WQkZ
UaXnnPZWcN/8xkLcTBmTl2JCb34U3Dk+bgSKcxPuEZPyX98GJqWk
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:32:58 2025 by rpki-client