Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/rw7mvGsBN1ywLg0aU0WOnuWPa30.roa
File: rw7mvGsBN1ywLg0aU0WOnuWPa30.roa (raw, json)
Hash identifier: Kkop8VBeWFXHnSavZNOMJQZHo1FfDtxgbSsG84Nc5jo=
Subject key identifier: AF:0E:E6:BC:6B:01:37:5C:B0:2E:0D:1A:53:45:8E:9E:E5:8F:6B:7D
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 019422FB7FE83DE89E0EC0B57E861B1D3803
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/rw7mvGsBN1ywLg0aU0WOnuWPa30.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9211
IP address blocks: 194.156.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7f:e8:3d:e8:9e:0e:c0:b5:7e:86:1b:1d:38:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af0ee6bc6b01375cb02e0d1a53458e9ee58f6b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:3d:64:8c:7c:bf:fd:f9:bc:32:93:21:db:
4f:15:58:a0:9c:1a:93:33:82:93:7d:b8:f6:a4:3d:
2f:f5:03:25:8d:4f:93:f1:77:09:7c:6e:11:dd:c9:
64:98:52:98:91:b9:68:f7:1b:c2:4c:85:ce:e9:2d:
ec:f9:20:1c:32:50:63:1d:1a:02:06:35:e2:f3:c6:
ee:ad:c3:3a:d9:d9:24:69:54:90:13:69:b4:89:80:
4c:b5:97:35:47:5e:ec:d5:18:ec:85:d7:b3:6d:67:
ce:3b:7a:fc:f4:85:18:e2:b7:8b:a8:96:af:b5:b5:
8e:03:01:05:1e:66:23:b3:44:c6:2f:fc:c1:ed:93:
27:8c:4b:c0:89:74:50:14:a2:94:fd:1d:7a:2d:59:
32:da:df:97:83:3b:63:10:ef:a2:d4:e1:34:c9:c3:
0e:54:7a:57:1f:16:ab:d2:83:cc:2a:d0:4e:1f:39:
2b:ce:3a:80:c9:f4:c6:89:fa:f1:eb:40:32:9b:64:
ed:43:77:04:31:cd:e3:a6:20:ec:5c:b1:b5:8d:d0:
fe:7e:83:52:18:15:cb:20:46:f8:fe:2b:f8:41:f0:
cf:eb:fa:98:95:7d:ab:f2:aa:c7:d1:8a:b4:7b:b0:
af:c9:42:30:13:a0:fa:97:54:74:5c:ca:c3:fe:23:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:E6:BC:6B:01:37:5C:B0:2E:0D:1A:53:45:8E:9E:E5:8F:6B:7D
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/rw7mvGsBN1ywLg0aU0WOnuWPa30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.189.0/24
Signature Algorithm: sha256WithRSAEncryption
62:92:22:98:56:2d:f4:37:08:e4:c6:2d:f4:db:2f:5e:18:1d:
ea:b5:27:d6:fd:69:00:be:32:78:1c:ad:d4:30:ab:cb:40:78:
fd:2f:38:9e:c9:b3:fc:47:3b:04:e4:65:86:82:9a:58:f5:df:
0c:99:7e:b1:39:61:3e:15:1c:c0:00:28:95:c2:21:01:87:80:
90:a3:79:36:ef:dd:94:02:3d:f5:1a:e5:b8:07:96:85:dd:79:
88:8c:c6:a4:14:fa:8f:40:0c:07:2b:1b:56:9a:2b:29:bb:18:
7c:51:c2:17:90:f3:78:a8:38:70:e7:5a:e9:35:a4:f5:73:92:
7e:e0:78:ec:d5:40:60:a3:fe:99:51:71:66:0a:b8:eb:8b:cb:
ba:84:22:a5:84:3c:c3:93:38:c6:75:9e:d9:fe:06:0a:ee:95:
83:41:ca:54:e3:c4:06:18:0f:c2:54:c3:cd:1e:31:6e:be:29:
b8:79:4a:52:ba:7a:87:1a:2d:82:ed:1d:9f:4a:a4:f7:a2:ae:
ae:1a:7f:06:a7:d9:05:52:13:ef:90:99:f8:87:69:d8:41:18:
01:53:8c:f9:83:11:c4:f2:25:98:5a:9c:63:39:95:ce:de:5f:
42:66:05:ee:a6:97:74:02:2f:c8:42:5a:5b:9a:df:62:d4:c3:
45:02:b9:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+3/oPeieDsC1foYbHTgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw
OTE5ODYwHhcNMjUwMTAxMTc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjBlZTZiYzZiMDEzNzVjYjAyZTBkMWE1MzQ1OGU5ZWU1OGY2YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27I9ZIx8v/35vDKTIdtPFVignBqT
M4KTfbj2pD0v9QMljU+T8XcJfG4R3clkmFKYkblo9xvCTIXO6S3s+SAcMlBjHRoC
BjXi88burcM62dkkaVSQE2m0iYBMtZc1R17s1RjshdezbWfOO3r89IUY4reLqJav
tbWOAwEFHmYjs0TGL/zB7ZMnjEvAiXRQFKKU/R16LVky2t+XgztjEO+i1OE0ycMO
VHpXHxar0oPMKtBOHzkrzjqAyfTGifrx60Aym2TtQ3cEMc3jpiDsXLG1jdD+foNS
GBXLIEb4/iv4QfDP6/qYlX2r8qrH0Yq0e7CvyUIwE6D6l1R0XMrD/iOqAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8O5rxrATdcsC4NGlNFjp7lj2t9MB8GA1UdIwQY
MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt
MzhjMmMyYTc5YzM1LzEvcnc3bXZHc0JOMXl3TGcwYVUwV09udVdQYTMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1
LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpy9MA0G
CSqGSIb3DQEBCwUAA4IBAQBikiKYVi30Nwjkxi302y9eGB3qtSfW/WkAvjJ4HK3U
MKvLQHj9LzieybP8RzsE5GWGgppY9d8MmX6xOWE+FRzAACiVwiEBh4CQo3k2792U
Aj31GuW4B5aF3XmIjMakFPqPQAwHKxtWmispuxh8UcIXkPN4qDhw51rpNaT1c5J+
4Hjs1UBgo/6ZUXFmCrjri8u6hCKlhDzDkzjGdZ7Z/gYK7pWDQcpU48QGGA/CVMPN
HjFuvim4eUpSunqHGi2C7R2fSqT3oq6uGn8Gp9kFUhPvkJn4h2nYQRgBU4z5gxHE
8iWYWpxjOZXO3l9CZgXuppd0Ai/IQlpbmt9i1MNFArlp
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:05 2025 by rpki-client