Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/7iPtEMlcS-95zv2l-9LcExzrIMU.roa
File: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (raw, json)
Hash identifier: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=
Subject key identifier: EE:23:ED:10:C9:5C:4B:EF:79:CE:FD:A5:FB:D2:DC:13:1C:EB:20:C5
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0195483DBB02AB2E9F5098B36CDF3DB29584
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/7iPtEMlcS-95zv2l-9LcExzrIMU.roa
Signing time: Thu 27 Feb 2025 16:29:19 +0000
ROA not before: Thu 27 Feb 2025 16:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26337
IP address blocks: 185.195.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:3d:bb:02:ab:2e:9f:50:98:b3:6c:df:3d:b2:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Feb 27 16:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee23ed10c95c4bef79cefda5fbd2dc131ceb20c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:f7:1f:8a:d1:f5:e6:8a:35:f0:d9:d8:22:
66:87:98:88:22:80:a6:34:15:a6:14:5f:b9:c0:9d:
ba:4c:c8:76:9d:b8:76:8b:b8:98:e5:99:b1:50:ec:
ae:a8:bc:8f:63:6f:8d:68:d8:bf:9e:1b:5a:91:51:
a5:2e:1b:22:92:62:a0:0d:44:e1:23:f9:32:55:f9:
f1:85:f3:5f:74:f1:86:18:2a:4f:ad:0e:47:09:59:
7f:de:5e:92:b2:29:18:ef:17:e7:d8:44:49:9a:46:
ec:4b:a2:d5:fa:54:12:e2:f2:90:53:db:65:cc:4b:
a4:54:4c:30:a6:e1:bb:f3:b7:17:98:aa:7a:71:6e:
49:ce:1a:c9:84:96:3a:10:1f:23:de:9b:be:6d:fb:
c6:b6:c6:77:11:3e:08:57:35:f2:f0:00:a4:f3:f4:
4e:bd:a2:3c:83:03:3d:42:71:16:df:8c:86:1a:76:
37:2c:17:bd:ad:ea:c8:24:d7:59:e0:cc:be:12:01:
8f:2f:65:76:ec:ed:5f:42:86:82:b5:4a:0a:5d:d5:
bc:ff:50:7e:03:89:36:63:87:55:c6:53:74:4a:85:
d9:9d:f0:b2:fa:33:c0:c5:b8:d3:13:a7:e9:74:8c:
f4:be:4d:a5:28:b8:74:13:1a:90:f0:f6:4a:a8:e8:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:ED:10:C9:5C:4B:EF:79:CE:FD:A5:FB:D2:DC:13:1C:EB:20:C5
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/7iPtEMlcS-95zv2l-9LcExzrIMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:63:ea:cd:84:b4:2a:7c:ed:61:e1:29:04:e9:4e:37:6c:b8:
ff:a7:3c:f5:0d:f2:8f:c0:bf:b2:70:4c:cc:8a:9c:4e:50:b0:
14:f8:b8:3c:ad:fa:01:56:b6:10:05:0b:00:8c:4b:1d:f7:4d:
f5:c6:36:96:8d:15:d2:5f:c2:93:ef:72:5c:e1:0e:90:6b:72:
75:58:a2:3b:3a:21:de:68:10:15:99:1a:2b:49:56:8e:48:d5:
eb:6c:b4:9a:e7:49:a4:5d:60:01:8e:03:b4:da:60:ec:45:b9:
d3:f6:3b:7c:94:0c:d9:75:01:4d:03:4d:40:db:81:3b:19:ad:
c8:75:66:12:3e:22:c8:b1:5e:31:f7:59:27:e6:d6:e0:d8:7d:
37:4a:f4:8c:7d:24:35:38:2b:5a:d4:32:c0:94:b1:b5:bd:ee:
46:b3:54:4a:ec:92:27:0f:50:82:2e:53:51:24:00:cc:59:53:
13:85:f6:c6:19:d6:0c:83:2f:f4:b2:a4:b1:89:15:18:0e:fd:
d5:1c:48:4e:ad:45:ff:f7:0f:1a:97:ce:f9:14:3f:4e:a6:da:
ad:ef:b7:67:19:70:16:f1:33:60:7e:af:78:da:1c:68:98:a5:
a5:30:6b:1b:c4:4b:07:d1:66:9b:cb:ea:ef:53:3a:fc:5e:a1:
be:af:1e:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVIPbsCqy6fUJizbN89spWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm
MGU4OWUwHhcNMjUwMjI3MTYyOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTIzZWQxMGM5NWM0YmVmNzljZWZkYTVmYmQyZGMxMzFjZWIyMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i33H4rR9eaKNfDZ2CJmh5iIIoCm
NBWmFF+5wJ26TMh2nbh2i7iY5ZmxUOyuqLyPY2+NaNi/nhtakVGlLhsikmKgDUTh
I/kyVfnxhfNfdPGGGCpPrQ5HCVl/3l6SsikY7xfn2ERJmkbsS6LV+lQS4vKQU9tl
zEukVEwwpuG787cXmKp6cW5JzhrJhJY6EB8j3pu+bfvGtsZ3ET4IVzXy8ACk8/RO
vaI8gwM9QnEW34yGGnY3LBe9rerIJNdZ4My+EgGPL2V27O1fQoaCtUoKXdW8/1B+
A4k2Y4dVxlN0SoXZnfCy+jPAxbjTE6fpdIz0vk2lKLh0ExqQ8PZKqOghswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4j7RDJXEvvec79pfvS3BMc6yDFMB8GA1UdIwQY
MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt
ZmRhNGU4YTViNDZlLzEvN2lQdEVNbGNTLTk1enYybC05TGNFeHpySU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl
LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucMMMA0G
CSqGSIb3DQEBCwUAA4IBAQAbY+rNhLQqfO1h4SkE6U43bLj/pzz1DfKPwL+ycEzM
ipxOULAU+Lg8rfoBVrYQBQsAjEsd9031xjaWjRXSX8KT73Jc4Q6Qa3J1WKI7OiHe
aBAVmRorSVaOSNXrbLSa50mkXWABjgO02mDsRbnT9jt8lAzZdQFNA01A24E7Ga3I
dWYSPiLIsV4x91kn5tbg2H03SvSMfSQ1OCta1DLAlLG1ve5Gs1RK7JInD1CCLlNR
JADMWVMThfbGGdYMgy/0sqSxiRUYDv3VHEhOrUX/9w8al875FD9Optqt77dnGXAW
8TNgfq942hxomKWlMGsbxEsH0Waby+rvUzr8XqG+rx7P
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:00:05 2025 by rpki-client