Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa
File: kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa (raw, json)
Hash identifier: LC5M9URWylDvxfMKsYWhEBj1id9NYxvTcyivO+BgMe0=
Subject key identifier: 93:02:C2:F1:79:2F:FB:C1:2D:A3:56:A5:3A:3C:83:56:AD:64:E3:1A
Certificate issuer: /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial: 01941F8C3EF4833FFE0509FC671A69337F96
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 195.14.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:f4:83:3f:fe:05:09:fc:67:1a:69:33:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9302c2f1792ffbc12da356a53a3c8356ad64e31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:91:ff:f8:42:06:57:56:f5:4b:f6:e6:3a:
11:b7:d1:98:df:1d:3a:46:28:d0:6f:1c:e7:fa:86:
a0:ee:1d:a5:03:e4:da:0c:73:52:2b:d5:b8:46:b9:
20:a8:fe:55:90:05:59:68:5d:8d:3a:55:79:1a:50:
60:dd:a3:06:c1:ed:db:dc:c7:77:d0:29:e6:fa:ab:
75:40:da:ed:a4:86:54:90:c4:31:dd:2f:c4:bf:0d:
be:fb:b2:92:63:ec:a4:59:2c:6d:82:3d:88:89:03:
a4:ab:57:1e:4a:82:58:5a:c1:db:29:e7:02:eb:df:
68:9c:31:c9:23:e4:a9:f4:aa:79:0d:3e:e4:83:94:
ea:bb:97:cb:6b:e8:67:9c:c0:fd:6d:f7:b2:45:db:
22:62:39:a8:5a:67:31:78:39:0d:5c:3e:f8:b5:10:
a8:2f:b2:16:c6:a1:fa:30:27:24:0b:de:c6:ca:34:
2a:0f:55:da:ab:35:52:a2:65:0f:52:58:33:56:ac:
cb:7f:4d:a7:a3:f5:02:1a:56:31:e5:52:64:a7:5d:
d5:16:c5:e5:e7:29:ab:a1:a9:90:9f:5b:e1:d3:7a:
c5:60:97:b0:25:87:6e:af:b8:7f:87:84:3c:f0:70:
08:ac:af:6c:64:e2:aa:ab:9c:aa:88:b7:9d:b6:c6:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:C2:F1:79:2F:FB:C1:2D:A3:56:A5:3A:3C:83:56:AD:64:E3:1A
X509v3 Authority Key Identifier:
keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ab:31:3d:96:e4:1f:b3:16:09:a6:cb:10:64:bb:4a:de:68:
20:d5:91:79:40:1c:25:70:a2:e6:26:66:49:31:b4:46:fd:aa:
8d:05:af:4f:87:fc:6c:c0:e3:79:ea:66:a9:9c:61:96:b8:45:
68:b5:37:bc:f2:13:ab:26:5e:d3:8f:2a:b7:a4:41:4a:93:c3:
d4:4f:54:39:c2:64:36:57:c6:88:89:7f:5f:b5:2b:bb:5e:6b:
e2:a7:7f:ba:27:7e:ac:c5:db:c9:85:62:f9:c0:28:e7:86:dc:
0e:ea:79:d4:6a:43:57:4e:15:4a:de:dd:3d:5d:a1:4e:58:24:
fa:e2:aa:9d:a2:8b:22:bc:5e:e7:c6:21:83:95:54:88:21:f8:
32:17:86:21:3d:c7:a1:f5:c3:fa:1b:92:f3:77:90:d8:d0:01:
58:42:18:f3:84:d6:59:1a:e1:a9:5b:e1:1e:bc:7a:8c:87:3d:
ea:b6:c1:0a:67:f2:e3:2c:cf:d3:64:6b:d4:b0:fd:e8:dd:b3:
d2:94:23:24:01:d0:a0:65:91:f8:0d:c8:5d:81:39:68:e8:5c:
b0:05:0f:22:e8:7a:a7:e4:a9:4d:55:3d:31:0c:f9:f0:1a:7f:
a7:c2:8f:14:6c:3f:b9:59:f5:9d:f6:9c:12:e3:a0:57:b3:24:
83:20:1d:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjD70gz/+BQn8ZxppM3+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODUwYTllNWU3YmUzYjRkMmI2NDIyNjVmODI1Yjg1MGMw
NzIzNjYwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzAyYzJmMTc5MmZmYmMxMmRhMzU2YTUzYTNjODM1NmFkNjRlMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEWR//hCBldW9Uv25joRt9GY3x06
RijQbxzn+oag7h2lA+TaDHNSK9W4RrkgqP5VkAVZaF2NOlV5GlBg3aMGwe3b3Md3
0Cnm+qt1QNrtpIZUkMQx3S/Evw2++7KSY+ykWSxtgj2IiQOkq1ceSoJYWsHbKecC
699onDHJI+Sp9Kp5DT7kg5Tqu5fLa+hnnMD9bfeyRdsiYjmoWmcxeDkNXD74tRCo
L7IWxqH6MCckC97GyjQqD1XaqzVSomUPUlgzVqzLf02no/UCGlYx5VJkp13VFsXl
5ymroamQn1vh03rFYJewJYdur7h/h4Q88HAIrK9sZOKqq5yqiLedtsbp3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMCwvF5L/vBLaNWpTo8g1atZOMaMB8GA1UdIwQY
MBaAFLeFCp5ee+O00rZCJl+CW4UMByNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQt
OGEwMTAyYWU3YTlmLzEva3dMQzhYa3YtOEV0bzFhbE9qeURWcTFrNHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wN2U5YWEtYTk4MC00NmE2LTllODQtOGEwMTAyYWU3YTlm
LzEvdDRVS25sNTc0N1RTdGtJbVg0SmJoUXdISTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww4JMA0G
CSqGSIb3DQEBCwUAA4IBAQCZqzE9luQfsxYJpssQZLtK3mgg1ZF5QBwlcKLmJmZJ
MbRG/aqNBa9Ph/xswON56mapnGGWuEVotTe88hOrJl7Tjyq3pEFKk8PUT1Q5wmQ2
V8aIiX9ftSu7Xmvip3+6J36sxdvJhWL5wCjnhtwO6nnUakNXThVK3t09XaFOWCT6
4qqdoosivF7nxiGDlVSIIfgyF4YhPceh9cP6G5Lzd5DY0AFYQhjzhNZZGuGpW+Ee
vHqMhz3qtsEKZ/LjLM/TZGvUsP3o3bPSlCMkAdCgZZH4DchdgTlo6FywBQ8i6Hqn
5KlNVT0xDPnwGn+nwo8UbD+5WfWd9pwS46BXsySDIB2m
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:38 2025 by rpki-client