Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa
File: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (raw, json)
Hash identifier: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=
Subject key identifier: 07:D8:10:6C:00:7D:C6:C3:7A:A5:07:D0:74:92:30:4F:0D:26:37:CC
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 0194206827BFF1C9CA18C877C512C82B2273
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9053
IP address blocks: 185.115.0.0/24 maxlen: 24
2a02:5420:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:bf:f1:c9:ca:18:c8:77:c5:12:c8:2b:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d8106c007dc6c37aa507d07492304f0d2637cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:55:57:fa:eb:0e:14:6b:0d:95:26:69:78:
d8:2e:d7:e2:fe:5d:c4:a0:1b:b1:fb:12:ff:6f:46:
3f:6e:0e:ac:d6:b7:36:ae:57:de:df:04:1d:44:ba:
71:e2:99:a5:8b:07:38:fe:0c:9b:c2:6d:79:d7:e3:
b8:17:85:c3:19:ac:a7:d4:26:1e:0d:cb:70:59:2b:
58:c1:17:f8:01:1e:fd:ca:e6:aa:30:ee:6e:e7:0c:
39:6f:1f:a7:31:c9:bc:1e:b2:e8:0d:10:c3:54:f1:
c9:e8:0d:36:0d:2b:19:ae:8b:2b:83:f2:9e:6f:08:
94:9f:c8:d4:38:eb:17:b5:00:f6:16:8d:fd:37:a0:
aa:1d:93:8d:52:92:5f:02:67:a9:25:1f:2d:a5:dc:
00:90:33:d0:52:77:87:a9:19:8e:65:fa:c8:31:85:
b6:90:52:20:21:ba:2b:54:07:4d:72:ef:0b:13:25:
58:e4:03:e9:ca:10:f7:2b:f4:af:4c:fb:42:c2:72:
3c:b2:80:3e:55:d4:da:00:11:2c:d6:5b:f3:dd:03:
f4:ec:84:c1:8a:6a:75:36:3f:c1:2a:9b:25:a6:26:
b6:76:b5:48:38:3b:13:9c:34:fb:cf:d6:8a:d2:f5:
07:fa:a3:29:44:a6:97:42:37:90:35:ce:b8:28:ff:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:10:6C:00:7D:C6:C3:7A:A5:07:D0:74:92:30:4F:0D:26:37:CC
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.0.0/24
IPv6:
2a02:5420:1::/48
Signature Algorithm: sha256WithRSAEncryption
66:df:20:9d:98:1c:41:9c:4e:dd:a3:1a:ab:a5:44:35:ba:18:
64:eb:db:5a:07:55:c7:26:82:33:2c:2a:2c:26:94:77:76:df:
59:6b:ff:b2:be:b0:8d:a2:08:42:c8:6d:4a:e1:01:4f:6a:ab:
5d:19:33:e6:17:18:57:60:31:d3:16:1e:03:75:87:fc:fb:38:
b1:94:de:11:bc:03:30:b0:b6:c4:94:be:3f:fe:35:2b:be:20:
12:27:2f:1b:77:da:4c:59:b2:99:ff:37:bb:2f:8c:14:0b:d3:
b2:4e:d3:e7:39:f2:9c:b3:89:94:02:d6:f1:88:9d:f6:d8:d9:
54:4c:a4:e2:36:00:52:36:d7:93:49:66:59:1e:9a:62:56:44:
29:c3:a1:3c:09:08:87:21:62:08:d7:45:bf:e3:72:59:e6:48:
e8:80:77:bf:92:89:1c:0c:bd:33:1d:27:c7:27:fc:78:b2:49:
ea:f0:c4:f5:0b:85:f4:49:ac:da:cd:33:ba:b4:98:43:ab:c5:
15:e0:b4:0b:01:ab:be:d6:ac:a6:6e:73:bb:5a:07:89:e2:1a:
2a:02:4f:39:c1:ff:45:9a:cf:d9:95:82:47:a4:65:80:ee:76:
7f:89:70:aa:2d:60:56:7e:fc:91:a9:a8:b4:51:71:60:cb:0f:
1c:d6:4f:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQgaCe/8cnKGMh3xRLIKyJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjUwMTAxMDU0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Q4MTA2YzAwN2RjNmMzN2FhNTA3ZDA3NDkyMzA0ZjBkMjYzN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvVVV/rrDhRrDZUmaXjYLtfi/l3E
oBux+xL/b0Y/bg6s1rc2rlfe3wQdRLpx4pmliwc4/gybwm151+O4F4XDGayn1CYe
DctwWStYwRf4AR79yuaqMO5u5ww5bx+nMcm8HrLoDRDDVPHJ6A02DSsZrosrg/Ke
bwiUn8jUOOsXtQD2Fo39N6CqHZONUpJfAmepJR8tpdwAkDPQUneHqRmOZfrIMYW2
kFIgIborVAdNcu8LEyVY5APpyhD3K/SvTPtCwnI8soA+VdTaABEs1lvz3QP07ITB
imp1Nj/BKpslpia2drVIODsTnDT7z9aK0vUH+qMpRKaXQjeQNc64KP9NiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAfYEGwAfcbDeqUH0HSSME8NJjfMMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvQjlnUWJBQjl4c042cFFmUWRKSXdUdzBtTjh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXMAMA8E
AgACMAkDBwAqAlQgAAEwDQYJKoZIhvcNAQELBQADggEBAGbfIJ2YHEGcTt2jGqul
RDW6GGTr21oHVccmgjMsKiwmlHd231lr/7K+sI2iCELIbUrhAU9qq10ZM+YXGFdg
MdMWHgN1h/z7OLGU3hG8AzCwtsSUvj/+NSu+IBInLxt32kxZspn/N7svjBQL07JO
0+c58pyziZQC1vGInfbY2VRMpOI2AFI215NJZlkemmJWRCnDoTwJCIchYgjXRb/j
clnmSOiAd7+SiRwMvTMdJ8cn/HiySerwxPULhfRJrNrNM7q0mEOrxRXgtAsBq77W
rKZuc7taB4niGioCTznB/0Waz9mVgkekZYDudn+JcKotYFZ+/JGpqLRRcWDLDxzW
Ty4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 12:04:21 2025 by rpki-client