Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/86boHivP--hrPsLAtM943IHkPZA.roa
File: 86boHivP--hrPsLAtM943IHkPZA.roa (raw, json)
Hash identifier: aXAxMBGf8sPKlP7rpFtS43tCwfMPhGP90Dl0tv0LJaA=
Subject key identifier: F3:A6:E8:1E:2B:CF:FB:E8:6B:3E:C2:C0:B4:CF:78:DC:81:E4:3D:90
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FEA8D1B0864441AB3EAD5C24A870A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/86boHivP--hrPsLAtM943IHkPZA.roa
Signing time: Thu 02 Jan 2025 05:49:36 +0000
ROA not before: Thu 02 Jan 2025 05:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201593
IP address blocks: 95.46.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ea:8d:1b:08:64:44:1a:b3:ea:d5:c2:4a:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a6e81e2bcffbe86b3ec2c0b4cf78dc81e43d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:92:28:20:c5:1f:82:25:ee:31:4b:14:2d:
9b:81:48:cc:2b:42:2f:bc:62:46:43:e8:9d:09:71:
79:e9:04:b6:5f:0f:5c:1e:52:13:0e:25:79:b8:c0:
e8:c4:0d:18:93:12:bc:6b:de:c5:dd:ab:56:d6:1c:
14:eb:4f:3c:d1:c4:ab:37:d7:0e:97:d0:19:61:1e:
a8:b3:45:c7:4c:16:c8:38:2d:b9:a1:ad:5b:d5:b1:
6e:51:ca:56:cd:61:54:69:29:1f:e0:16:3f:72:ae:
61:32:b6:57:1c:0f:46:58:51:bf:53:64:f9:f1:bd:
10:89:c8:aa:9b:7d:b2:da:6a:ff:74:eb:5a:39:e1:
b3:70:b9:25:0d:fb:a9:ef:d3:52:4e:45:51:e5:6c:
75:71:c4:e2:28:33:89:af:38:34:ec:90:ee:8f:52:
6b:2e:72:ce:6e:36:1c:b1:b6:27:d4:92:a3:fa:43:
7b:08:7f:00:b6:c4:82:4a:12:74:fb:3d:aa:da:1d:
52:ef:c0:e6:f1:e1:38:9c:eb:41:25:1a:36:c4:d3:
69:f9:7d:9a:3d:ab:0c:6b:1a:85:b8:a9:f3:43:f4:
43:77:cc:8c:e6:01:38:c9:d9:4b:5c:9d:5a:dd:81:
c0:b4:7a:03:67:65:fc:31:e8:b6:46:a5:11:81:9d:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:E8:1E:2B:CF:FB:E8:6B:3E:C2:C0:B4:CF:78:DC:81:E4:3D:90
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/86boHivP--hrPsLAtM943IHkPZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.197.0/24
Signature Algorithm: sha256WithRSAEncryption
89:24:d2:d9:be:21:f0:81:50:98:54:3a:fd:e7:ee:bf:ee:a9:
8b:f9:f7:64:1d:16:2c:af:27:f3:da:b4:96:33:e2:d2:af:2c:
29:3d:7e:a5:cf:59:8f:d5:4e:3c:c9:bd:55:97:5c:c7:45:08:
1e:a1:fc:4b:05:9c:a5:62:30:07:c0:16:59:9d:b4:f3:20:c9:
e9:71:59:2c:41:96:8b:47:48:3e:9d:02:b8:98:9b:f2:82:2c:
97:f7:f8:45:9d:53:0c:a2:12:31:60:46:a1:47:9b:b8:06:43:
e4:57:67:ea:e9:dc:33:8d:7c:b1:a5:3c:9d:d0:85:29:76:b6:
19:0a:4f:1f:5b:f5:e6:1d:64:94:09:b6:19:87:e9:4b:a6:54:
72:90:0a:16:7c:00:9d:45:1d:8e:8d:a6:ad:35:f1:a2:11:f3:
e6:3f:36:8d:fb:45:65:e1:4f:25:8d:a2:9f:ae:8d:97:75:16:
bc:9d:15:46:c8:09:55:06:94:f8:e9:3a:1b:a4:c9:7c:f7:16:
6e:33:99:6d:50:a8:28:0d:ed:8f:84:b3:80:38:66:17:59:25:
c5:30:1f:39:ea:53:38:cb:04:27:99:55:78:fb:ee:3c:fa:7d:
6f:e8:72:34:ab:f7:8d:fd:62:97:9d:c1:85:14:82:02:1e:d3:
57:7d:ca:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj+qNGwhkRBqz6tXCSocKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2E2ZTgxZTJiY2ZmYmU4NmIzZWMyYzBiNGNmNzhkYzgxZTQzZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rmSKCDFH4Il7jFLFC2bgUjMK0Iv
vGJGQ+idCXF56QS2Xw9cHlITDiV5uMDoxA0YkxK8a97F3atW1hwU60880cSrN9cO
l9AZYR6os0XHTBbIOC25oa1b1bFuUcpWzWFUaSkf4BY/cq5hMrZXHA9GWFG/U2T5
8b0Qiciqm32y2mr/dOtaOeGzcLklDfup79NSTkVR5Wx1ccTiKDOJrzg07JDuj1Jr
LnLObjYcsbYn1JKj+kN7CH8AtsSCShJ0+z2q2h1S78Dm8eE4nOtBJRo2xNNp+X2a
PasMaxqFuKnzQ/RDd8yM5gE4ydlLXJ1a3YHAtHoDZ2X8Mei2RqURgZ3uMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOm6B4rz/voaz7CwLTPeNyB5D2QMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvODZib0hpdlAtLWhyUHNMQXRNOTQzSUhrUFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy7FMA0G
CSqGSIb3DQEBCwUAA4IBAQCJJNLZviHwgVCYVDr95+6/7qmL+fdkHRYsryfz2rSW
M+LSrywpPX6lz1mP1U48yb1Vl1zHRQgeofxLBZylYjAHwBZZnbTzIMnpcVksQZaL
R0g+nQK4mJvygiyX9/hFnVMMohIxYEahR5u4BkPkV2fq6dwzjXyxpTyd0IUpdrYZ
Ck8fW/XmHWSUCbYZh+lLplRykAoWfACdRR2OjaatNfGiEfPmPzaN+0Vl4U8ljaKf
ro2XdRa8nRVGyAlVBpT46TobpMl89xZuM5ltUKgoDe2PhLOAOGYXWSXFMB856lM4
ywQnmVV4++48+n1v6HI0q/eN/WKXncGFFIICHtNXfcpu
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:36 2025 by rpki-client