Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa
File: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (raw, json)
Hash identifier: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=
Subject key identifier: 7D:69:CF:B6:94:4D:0B:CC:E0:6C:A8:97:62:D3:6A:C6:17:51:2F:A2
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F7FB9A1C8A293A7ECE122E8987ACA
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29001
IP address blocks: 217.170.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7f:b9:a1:c8:a2:93:a7:ec:e1:22:e8:98:7a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d69cfb6944d0bcce06ca89762d36ac617512fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:42:5b:da:45:60:ae:49:b4:ca:8d:04:bf:
e7:bb:1a:ae:a3:b0:31:45:98:59:6a:e4:9b:37:5c:
e4:99:9a:ce:37:8e:47:28:ca:d3:06:62:43:8e:31:
23:a1:c1:c0:9c:9b:96:b5:aa:9c:65:bc:20:f0:dc:
36:b4:c5:52:58:1b:df:35:2b:cd:75:ae:53:e3:fe:
97:23:80:b1:5c:0a:b6:ec:41:4e:0c:63:4e:ed:f3:
ee:c4:8c:9b:f9:46:43:46:49:9c:c7:d6:0d:11:df:
c3:c6:d6:26:63:c9:29:0e:0c:d1:98:11:00:1b:16:
19:c5:86:59:c3:d1:61:d9:1f:5a:d0:e6:fb:4b:5d:
10:aa:ac:ee:02:91:0f:42:9c:f0:bb:75:df:e9:99:
ce:f6:fe:75:bb:49:47:cd:29:08:c8:0f:a8:6a:b9:
d9:87:c5:d9:2e:11:58:00:44:cd:89:a7:b3:00:da:
e3:fe:35:dc:85:46:05:ea:8f:88:03:07:85:44:46:
2f:54:ce:40:67:63:3a:32:37:17:03:10:92:93:ac:
e8:30:c9:d8:56:1d:75:88:82:eb:87:be:a2:5e:63:
ea:27:2e:68:42:21:d8:d1:f3:f5:02:4c:b2:9c:5f:
67:97:4e:18:12:eb:2a:f3:46:36:30:5d:bc:5e:1b:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:CF:B6:94:4D:0B:CC:E0:6C:A8:97:62:D3:6A:C6:17:51:2F:A2
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.170.16.0/23
Signature Algorithm: sha256WithRSAEncryption
37:8a:ac:30:28:30:e3:d5:37:60:14:ad:a4:04:4e:af:36:b0:
9f:2a:16:8e:29:a2:38:79:6d:42:06:9b:11:ba:01:0e:ae:af:
2b:72:d6:32:63:ef:8a:d2:5f:13:11:75:5d:3f:3d:d3:5f:e6:
cb:6e:5e:48:e9:aa:f3:8c:fb:9f:0e:82:42:dc:97:70:6c:06:
ca:5e:b2:4c:66:81:67:04:0b:14:4f:99:32:c3:a6:81:95:a6:
bc:16:49:c9:a0:55:90:fa:02:e5:f8:40:f3:93:f9:06:13:d2:
68:00:df:2a:9b:1f:4c:03:53:d4:88:29:43:d0:2b:d5:58:f8:
c8:bc:a1:91:64:e8:cd:b2:4a:5b:dc:85:e0:a3:95:15:1d:16:
73:22:50:56:e7:6c:20:9a:fc:4a:0c:6e:4b:d1:36:81:32:aa:
ea:e0:93:e7:e3:67:2a:db:43:27:3b:1c:dd:a7:60:aa:bd:52:
3c:8e:4a:9c:eb:51:86:38:34:0c:a0:eb:d4:19:c0:83:d6:48:
c4:a5:aa:5a:f5:05:a0:53:ca:8e:07:19:96:82:8f:74:a4:64:
b6:18:6c:ae:92:4d:e9:15:ca:58:54:b6:e1:94:f2:72:2a:2f:
b9:d8:da:ae:82:85:a9:e9:6d:87:84:fa:cb:0d:2a:50:b1:84:
8f:64:b1:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj3+5ociik6fs4SLomHrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjUwMTAyMDU0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDY5Y2ZiNjk0NGQwYmNjZTA2Y2E4OTc2MmQzNmFjNjE3NTEyZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HJCW9pFYK5JtMqNBL/nuxquo7Ax
RZhZauSbN1zkmZrON45HKMrTBmJDjjEjocHAnJuWtaqcZbwg8Nw2tMVSWBvfNSvN
da5T4/6XI4CxXAq27EFODGNO7fPuxIyb+UZDRkmcx9YNEd/DxtYmY8kpDgzRmBEA
GxYZxYZZw9Fh2R9a0Ob7S10QqqzuApEPQpzwu3Xf6ZnO9v51u0lHzSkIyA+oarnZ
h8XZLhFYAETNiaezANrj/jXchUYF6o+IAweFREYvVM5AZ2M6MjcXAxCSk6zoMMnY
Vh11iILrh76iXmPqJy5oQiHY0fP1AkyynF9nl04YEusq80Y2MF28XhtfKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1pz7aUTQvM4Gyol2LTasYXUS+iMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvZlduUHRwUk5DOHpnYktpWFl0TnF4aGRSTDZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2aoQMA0G
CSqGSIb3DQEBCwUAA4IBAQA3iqwwKDDj1TdgFK2kBE6vNrCfKhaOKaI4eW1CBpsR
ugEOrq8rctYyY++K0l8TEXVdPz3TX+bLbl5I6arzjPufDoJC3JdwbAbKXrJMZoFn
BAsUT5kyw6aBlaa8FknJoFWQ+gLl+EDzk/kGE9JoAN8qmx9MA1PUiClD0CvVWPjI
vKGRZOjNskpb3IXgo5UVHRZzIlBW52wgmvxKDG5L0TaBMqrq4JPn42cq20MnOxzd
p2CqvVI8jkqc61GGODQMoOvUGcCD1kjEpapa9QWgU8qOBxmWgo90pGS2GGyukk3p
FcpYVLbhlPJyKi+52NqugoWp6W2HhPrLDSpQsYSPZLHu
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:14:07 2025 by rpki-client