Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/790iVL4e4fee91oD970D0-w9Sb4.roa
File: 790iVL4e4fee91oD970D0-w9Sb4.roa (raw, json)
Hash identifier: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=
Subject key identifier: EF:DD:22:54:BE:1E:E1:F7:9E:F7:5A:03:F7:BD:03:D3:EC:3D:49:BE
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019428266FE772A5B39DCDCA98817438BC10
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/790iVL4e4fee91oD970D0-w9Sb4.roa
Signing time: Thu 02 Jan 2025 17:53:15 +0000
ROA not before: Thu 02 Jan 2025 17:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:6f:e7:72:a5:b3:9d:cd:ca:98:81:74:38:bc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efdd2254be1ee1f79ef75a03f7bd03d3ec3d49be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:bc:e6:cb:34:5f:f7:95:45:82:55:65:61:
db:d0:51:f4:59:cd:80:4d:37:f4:23:91:41:17:3a:
e9:d9:5a:33:e7:25:7c:9c:eb:d1:89:4f:1c:40:94:
67:e2:72:40:72:14:6b:15:cf:0a:c9:be:9d:b4:a1:
6c:91:c8:f9:f3:4e:d9:82:9d:30:86:90:42:27:8d:
e6:6b:85:a0:f6:24:27:7f:b3:c3:3a:d2:b3:7b:b0:
d4:5e:30:d4:72:56:60:06:be:b7:7a:8f:a9:49:9d:
cb:65:24:85:bd:b4:86:e3:01:ff:3b:7d:bd:38:e0:
25:48:ed:74:37:c2:60:bc:8e:a8:70:71:96:60:fb:
01:17:aa:13:02:78:21:60:0b:dc:6b:ee:b0:8a:be:
69:c0:1b:54:cd:d1:d7:a8:88:71:68:97:1b:4c:3c:
6e:2d:8d:54:e7:99:cf:9f:28:1f:15:e7:17:2f:17:
ea:74:b7:61:81:55:e5:6e:01:21:b9:d9:3f:88:2a:
00:67:25:2d:6c:50:a4:98:bc:b2:71:c4:a3:a1:00:
1d:e3:b3:1d:6f:d9:ce:d9:2f:a8:5c:65:08:3a:bf:
7e:a5:4a:45:36:a6:73:7d:6e:6f:4f:e1:96:21:30:
29:10:15:46:4b:9b:78:5f:43:dd:ea:ec:76:fb:a0:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:22:54:BE:1E:E1:F7:9E:F7:5A:03:F7:BD:03:D3:EC:3D:49:BE
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/790iVL4e4fee91oD970D0-w9Sb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:14:1e:c3:94:35:73:d6:e7:95:58:fb:f2:b4:18:63:be:3a:
7f:9d:40:75:1e:94:c1:01:6e:84:d4:9e:24:a2:3e:ad:a9:a7:
63:8d:8a:eb:7c:40:03:df:1f:43:d9:8f:d3:ad:96:94:8d:cf:
0d:8a:ab:2d:9e:61:e7:fb:c6:ee:c4:72:d9:40:8e:4a:5e:d3:
7e:97:b9:0f:7b:1a:97:a5:8f:ec:7a:c6:84:06:eb:e3:82:d0:
a0:b3:cc:38:56:4e:25:d3:3a:48:69:5a:ef:c9:e7:51:a7:d0:
ad:b2:d9:5b:9a:7d:20:ff:11:9f:13:96:9a:97:1d:b1:f9:92:
30:ff:90:4e:ca:9b:56:e9:21:c3:32:b3:4e:62:4a:f1:b9:34:
9a:10:e5:23:3b:ae:9f:2c:30:02:5f:29:26:f3:d2:11:de:ca:
8c:f4:71:ca:17:b3:b2:ee:bf:02:59:72:f8:76:c0:df:45:b6:
0b:82:ce:05:f1:b3:5f:57:62:ba:b7:f9:c1:6a:93:a3:fb:37:
f2:f1:15:a6:57:6f:91:d4:5f:20:67:1e:19:15:b1:77:ba:e9:
75:0e:6c:ca:94:06:28:a8:6e:7e:5a:18:12:0f:db:65:b4:64:
85:fd:7c:74:e1:e4:01:41:f7:0b:88:0e:ae:bf:1d:0e:32:aa:
96:34:9a:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJm/ncqWznc3KmIF0OLwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjUwMTAyMTc1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmRkMjI1NGJlMWVlMWY3OWVmNzVhMDNmN2JkMDNkM2VjM2Q0OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoO85ss0X/eVRYJVZWHb0FH0Wc2A
TTf0I5FBFzrp2Voz5yV8nOvRiU8cQJRn4nJAchRrFc8Kyb6dtKFskcj5807Zgp0w
hpBCJ43ma4Wg9iQnf7PDOtKze7DUXjDUclZgBr63eo+pSZ3LZSSFvbSG4wH/O329
OOAlSO10N8JgvI6ocHGWYPsBF6oTAnghYAvca+6wir5pwBtUzdHXqIhxaJcbTDxu
LY1U55nPnygfFecXLxfqdLdhgVXlbgEhudk/iCoAZyUtbFCkmLyyccSjoQAd47Md
b9nO2S+oXGUIOr9+pUpFNqZzfW5vT+GWITApEBVGS5t4X0Pd6ux2+6D3GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/dIlS+HuH3nvdaA/e9A9PsPUm+MB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvNzkwaVZMNGU0ZmVlOTFvRDk3MEQwLXc5U2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRX9MA0G
CSqGSIb3DQEBCwUAA4IBAQBRFB7DlDVz1ueVWPvytBhjvjp/nUB1HpTBAW6E1J4k
oj6tqadjjYrrfEAD3x9D2Y/TrZaUjc8NiqstnmHn+8buxHLZQI5KXtN+l7kPexqX
pY/sesaEBuvjgtCgs8w4Vk4l0zpIaVrvyedRp9Ctstlbmn0g/xGfE5aalx2x+ZIw
/5BOyptW6SHDMrNOYkrxuTSaEOUjO66fLDACXykm89IR3sqM9HHKF7Oy7r8CWXL4
dsDfRbYLgs4F8bNfV2K6t/nBapOj+zfy8RWmV2+R1F8gZx4ZFbF3uul1DmzKlAYo
qG5+WhgSD9tltGSF/Xx04eQBQfcLiA6uvx0OMqqWNJr6
-----END CERTIFICATE-----
Generated at Wed Feb 5 18:56:07 2025 by rpki-client