Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/fyoGinJNnbCXVA-FGTyI6g0iqfg.roa
File: fyoGinJNnbCXVA-FGTyI6g0iqfg.roa (raw, json)
Hash identifier: Qmtjez3xLzGPUsipebbDVEIAH1OV1oGj/8BaZ2trCyc=
Subject key identifier: 7F:2A:06:8A:72:4D:9D:B0:97:54:0F:85:19:3C:88:EA:0D:22:A9:F8
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 0194252115FCE1DEA4C45A5FCD3982A097AD
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/fyoGinJNnbCXVA-FGTyI6g0iqfg.roa
Signing time: Thu 02 Jan 2025 03:48:32 +0000
ROA not before: Thu 02 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30740
IP address blocks: 185.144.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:15:fc:e1:de:a4:c4:5a:5f:cd:39:82:a0:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Jan 2 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f2a068a724d9db097540f85193c88ea0d22a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:f1:b1:22:c5:be:d2:6c:54:4c:32:86:bb:
8d:77:49:71:3b:ec:94:22:54:9d:73:bd:9d:ff:f6:
84:e8:99:29:e0:02:93:27:8f:40:81:92:0a:7e:1a:
10:b7:38:b6:9a:be:ee:2a:24:93:b6:1c:ef:84:dd:
9a:ae:51:ca:71:2a:ab:e2:e8:20:f2:7b:88:96:e3:
50:b1:a5:01:fa:07:17:67:45:4d:96:86:f1:40:bf:
50:54:7e:6d:a5:f3:9c:40:08:08:f9:8e:33:d6:2b:
83:1d:c3:55:9a:e4:cb:32:ff:5e:76:37:d3:a1:be:
a9:09:eb:5a:8d:b2:2b:ea:84:13:3f:78:9e:12:06:
3e:39:bf:d5:cb:d5:c2:41:17:f0:98:fc:09:98:cc:
ac:f8:f2:c0:88:9b:2f:2d:48:2d:f2:e4:21:83:46:
ea:30:31:7b:96:94:f5:5d:e3:16:ef:36:37:a7:7c:
6e:40:25:ce:2e:e7:b7:c9:2f:27:40:6f:a6:d8:1c:
20:f9:3d:0d:72:f8:fa:eb:04:1c:0c:fd:e6:22:2c:
81:16:7c:ef:b0:ae:d5:47:95:58:2d:59:2b:c7:03:
be:c5:0f:60:57:58:a9:94:79:1b:c9:ce:c5:46:cd:
27:78:1f:48:28:97:d4:c6:fd:16:99:c0:c0:7a:9d:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:06:8A:72:4D:9D:B0:97:54:0F:85:19:3C:88:EA:0D:22:A9:F8
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/fyoGinJNnbCXVA-FGTyI6g0iqfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.109.0/24
Signature Algorithm: sha256WithRSAEncryption
af:48:2e:8f:61:70:ff:fa:fb:98:1c:52:dc:78:64:79:bd:7b:
bf:f2:0a:94:bf:6d:4c:a6:f1:7f:40:6f:f7:9c:17:3d:99:13:
0a:b9:0a:20:ce:47:83:77:4d:1a:49:ff:d5:47:08:fc:16:0e:
70:7f:b8:4f:36:b1:11:2c:0e:ec:b2:ed:c1:1a:2d:35:e1:95:
d7:fb:e5:4e:e2:65:72:b7:0d:6f:54:0b:a9:ae:a9:19:32:7d:
43:00:3a:d8:57:37:be:c3:5a:64:54:9b:d3:fb:f8:f7:64:ca:
23:42:9a:94:75:ad:6e:65:95:a9:3a:ef:f2:b1:0d:19:22:00:
7a:51:fb:0c:36:1d:51:9c:8c:16:c0:d5:0e:30:cc:6d:7a:83:
da:16:35:ac:7d:53:d3:e4:6e:37:8e:43:87:97:b3:67:19:91:
cb:c7:81:87:73:32:34:0c:21:b4:c8:3d:61:5e:5b:3e:12:0c:
81:da:75:29:f6:ab:21:52:bf:9c:c7:0e:f2:ff:02:68:62:f1:
95:92:8d:1c:9b:f3:13:bd:c2:22:34:9f:1b:37:cf:8d:26:02:
57:ba:42:6c:b6:aa:d6:79:b5:31:24:a8:c2:e8:ab:e3:29:c4:
ea:71:fe:94:1f:f1:43:6b:01:66:87:4e:ed:68:92:51:b3:ee:
46:c7:cd:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIRX84d6kxFpfzTmCoJetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5
MWExODYwHhcNMjUwMTAyMDM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjJhMDY4YTcyNGQ5ZGIwOTc1NDBmODUxOTNjODhlYTBkMjJhOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqELxsSLFvtJsVEwyhruNd0lxO+yU
IlSdc72d//aE6Jkp4AKTJ49AgZIKfhoQtzi2mr7uKiSTthzvhN2arlHKcSqr4ugg
8nuIluNQsaUB+gcXZ0VNlobxQL9QVH5tpfOcQAgI+Y4z1iuDHcNVmuTLMv9edjfT
ob6pCetajbIr6oQTP3ieEgY+Ob/Vy9XCQRfwmPwJmMys+PLAiJsvLUgt8uQhg0bq
MDF7lpT1XeMW7zY3p3xuQCXOLue3yS8nQG+m2Bwg+T0Ncvj66wQcDP3mIiyBFnzv
sK7VR5VYLVkrxwO+xQ9gV1iplHkbyc7FRs0neB9IKJfUxv0WmcDAep1RIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH8qBopyTZ2wl1QPhRk8iOoNIqn4MB8GA1UdIwQY
MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt
MTYxOWQwOGM2OTY1LzEvZnlvR2luSk5uYkNYVkEtRkdUeUk2ZzBpcWZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1
LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZBtMA0G
CSqGSIb3DQEBCwUAA4IBAQCvSC6PYXD/+vuYHFLceGR5vXu/8gqUv21MpvF/QG/3
nBc9mRMKuQogzkeDd00aSf/VRwj8Fg5wf7hPNrERLA7ssu3BGi014ZXX++VO4mVy
tw1vVAuprqkZMn1DADrYVze+w1pkVJvT+/j3ZMojQpqUda1uZZWpOu/ysQ0ZIgB6
UfsMNh1RnIwWwNUOMMxteoPaFjWsfVPT5G43jkOHl7NnGZHLx4GHczI0DCG0yD1h
Xls+EgyB2nUp9qshUr+cxw7y/wJoYvGVko0cm/MTvcIiNJ8bN8+NJgJXukJstqrW
ebUxJKjC6KvjKcTqcf6UH/FDawFmh07taJJRs+5Gx83C
-----END CERTIFICATE-----
Generated at Tue Apr 15 04:38:27 2025 by rpki-client