Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7DPyUtc9n8WTweBBkrOb_SjAkcE.roa
File: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (raw, json)
Hash identifier: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=
Subject key identifier: EC:33:F2:52:D7:3D:9F:C5:93:C1:E0:41:92:B3:9B:FD:28:C0:91:C1
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5AB55E1C6165E1B0E19895296EC54
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7DPyUtc9n8WTweBBkrOb_SjAkcE.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ab:55:e1:c6:16:5e:1b:0e:19:89:52:96:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec33f252d73d9fc593c1e04192b39bfd28c091c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:83:31:c1:d0:3a:6a:65:ad:f6:e4:ff:7d:
11:a1:04:de:c8:ab:b6:32:cd:58:94:ea:d4:de:a0:
ef:21:0a:42:2e:12:1c:41:0a:b4:bd:03:24:1a:cf:
b3:bf:86:a0:64:55:4d:ef:b5:4f:cb:c4:ee:0e:c9:
de:9e:69:05:a8:52:12:d4:ef:0f:34:b5:b8:5c:a4:
f8:dd:ca:2b:5f:9d:fb:26:75:c9:f6:c3:12:5c:96:
ea:b6:c4:b7:dc:3f:12:8b:b2:5f:80:d7:bb:cd:02:
4d:f0:3f:84:98:88:81:4d:26:dd:e1:b2:b4:cc:d1:
c9:12:f3:77:18:09:30:6c:f9:bd:bb:64:37:5a:d8:
4d:ff:57:b2:e2:33:45:8d:c3:38:91:69:4f:78:d3:
1c:fd:c4:38:7a:27:e7:6d:5d:c2:f2:5a:46:c2:b7:
51:5d:d7:80:df:50:d9:29:2f:ee:36:69:60:9c:b2:
a0:d9:ac:79:a0:b1:e3:7a:56:36:5e:6a:e0:ea:2e:
5d:68:a5:0e:63:58:83:f0:26:77:66:af:9b:73:e6:
fd:a9:e4:83:bf:f1:86:bb:b6:56:11:79:40:3e:e7:
2a:2c:26:1a:60:9e:02:e0:72:a4:25:56:38:d8:f3:
36:b4:a5:ba:fb:8d:23:93:1c:fa:fa:7f:41:60:e6:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:F2:52:D7:3D:9F:C5:93:C1:E0:41:92:B3:9B:FD:28:C0:91:C1
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7DPyUtc9n8WTweBBkrOb_SjAkcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3b:5f:51:0f:00:14:02:88:38:bd:dc:23:ba:df:a1:f8:fc:
61:24:81:c7:3a:cd:49:d2:db:5c:ba:13:81:9c:3e:d7:8c:ad:
23:64:95:59:84:ae:05:1f:43:06:7f:b0:09:ef:4c:75:37:22:
16:39:cc:62:14:4d:fc:63:16:58:1a:31:50:ea:a3:bb:0c:21:
c9:8f:94:f5:72:16:50:16:e9:3c:53:a2:70:6b:5f:34:c3:5b:
5d:9d:30:68:ef:24:9b:97:4c:69:58:d1:25:0a:76:d2:b1:8b:
bf:73:32:a6:c0:5a:c6:b6:e1:53:50:17:55:c4:0e:31:64:55:
f4:31:e6:15:a9:de:23:35:0d:7e:c5:4a:8c:53:34:dc:d2:05:
7b:0b:04:f2:a3:59:86:21:58:d5:72:0d:a5:20:00:80:e1:fc:
12:0a:1b:33:72:30:bd:28:8c:0c:73:9c:3b:0f:d7:bf:88:83:
4d:c5:49:14:5e:8e:f6:82:b3:8a:7b:ba:ce:3b:49:15:2f:d6:
20:5f:ce:51:65:c5:01:49:e5:28:99:f7:8a:c9:0f:b8:bc:41:
0e:1a:bc:d4:4a:bd:2a:af:f9:a4:f3:4e:e1:f4:eb:c8:ae:6d:
cf:1a:9e:4d:2d:ee:27:28:a2:f7:7b:5c:e0:1e:5c:2f:e5:ea:
ee:a4:71:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntatV4cYWXhsOGYlSluxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUwMTAyMTU1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzMzZjI1MmQ3M2Q5ZmM1OTNjMWUwNDE5MmIzOWJmZDI4YzA5MWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmuDMcHQOmplrfbk/30RoQTeyKu2
Ms1YlOrU3qDvIQpCLhIcQQq0vQMkGs+zv4agZFVN77VPy8TuDsnenmkFqFIS1O8P
NLW4XKT43corX537JnXJ9sMSXJbqtsS33D8Si7JfgNe7zQJN8D+EmIiBTSbd4bK0
zNHJEvN3GAkwbPm9u2Q3WthN/1ey4jNFjcM4kWlPeNMc/cQ4eifnbV3C8lpGwrdR
XdeA31DZKS/uNmlgnLKg2ax5oLHjelY2Xmrg6i5daKUOY1iD8CZ3Zq+bc+b9qeSD
v/GGu7ZWEXlAPucqLCYaYJ4C4HKkJVY42PM2tKW6+40jkxz6+n9BYObUswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwz8lLXPZ/Fk8HgQZKzm/0owJHBMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvN0RQeVV0YzluOFdUd2VCQmtyT2JfU2pBa2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEIbMA0G
CSqGSIb3DQEBCwUAA4IBAQAkO19RDwAUAog4vdwjut+h+PxhJIHHOs1J0ttcuhOB
nD7XjK0jZJVZhK4FH0MGf7AJ70x1NyIWOcxiFE38YxZYGjFQ6qO7DCHJj5T1chZQ
Fuk8U6Jwa180w1tdnTBo7ySbl0xpWNElCnbSsYu/czKmwFrGtuFTUBdVxA4xZFX0
MeYVqd4jNQ1+xUqMUzTc0gV7CwTyo1mGIVjVcg2lIACA4fwSChszcjC9KIwMc5w7
D9e/iINNxUkUXo72grOKe7rOO0kVL9YgX85RZcUBSeUomfeKyQ+4vEEOGrzUSr0q
r/mk807h9OvIrm3PGp5NLe4nKKL3e1zgHlwv5erupHHn
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:34 2025 by rpki-client