Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t7PV1YUnLKc7Cko6g6z0vrTjenE.roa
File: t7PV1YUnLKc7Cko6g6z0vrTjenE.roa (raw, json)
Hash identifier: UyQZz0xrtZCZq92Y9gmJOxFB2nMf9YXSsG2JHo36YNA=
Subject key identifier: B7:B3:D5:D5:85:27:2C:A7:3B:0A:4A:3A:83:AC:F4:BE:B4:E3:7A:71
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCA4BD458D07B5A94E41B38CCBD91
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t7PV1YUnLKc7Cko6g6z0vrTjenE.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59577
IP address blocks: 92.253.212.0/22 maxlen: 24
92.253.236.0/22 maxlen: 24
146.120.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ca:4b:d4:58:d0:7b:5a:94:e4:1b:38:cc:bd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b3d5d585272ca73b0a4a3a83acf4beb4e37a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:2e:50:02:f4:7e:78:f0:c7:b6:d7:25:40:
00:ea:fc:2d:da:00:e1:b2:75:05:76:a6:78:57:cb:
38:88:90:b6:58:af:16:cc:6e:50:86:47:9c:9a:4a:
98:0a:21:b0:80:06:db:e4:25:b8:86:91:42:8b:cd:
0b:67:50:8b:00:b0:4b:53:de:3a:75:06:40:58:15:
b5:27:61:c4:20:df:02:fc:3e:26:2a:e6:27:26:51:
0e:91:29:87:c0:59:74:30:75:fc:f4:82:c0:0b:c7:
0c:fe:f0:1e:6d:71:ef:0b:1e:3f:b3:a4:d9:b3:6b:
28:c7:d0:8f:48:9b:03:4e:d8:a4:81:15:ed:7e:ef:
d5:89:d5:e8:44:28:40:e5:87:47:17:cb:f3:37:e0:
1d:da:95:dc:3d:b6:2f:48:14:60:69:67:9b:80:16:
e4:c4:3a:5e:5e:4d:c5:e6:bf:a5:a9:f4:3a:a8:81:
e8:5d:61:90:00:d8:c3:9a:3f:ba:ce:ab:53:8b:1b:
d3:d5:3d:bc:87:cf:57:66:d8:f1:ce:6c:8e:e6:b8:
d6:e2:3e:2d:8e:dd:a4:bb:a4:58:59:bd:14:eb:1d:
87:a6:c7:c7:7d:1c:41:5e:32:7d:ef:ef:aa:03:be:
ff:c2:78:7d:99:60:52:56:b6:b4:92:c1:3c:8d:58:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:D5:D5:85:27:2C:A7:3B:0A:4A:3A:83:AC:F4:BE:B4:E3:7A:71
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t7PV1YUnLKc7Cko6g6z0vrTjenE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.212.0/22
92.253.236.0/22
146.120.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:c3:a3:53:b4:d4:46:3f:e8:8d:82:da:a4:3e:75:5a:b4:ce:
42:b0:16:85:a9:b8:dd:56:d4:cb:f8:9e:61:35:d1:5a:39:b7:
cc:1d:c1:1f:57:41:82:ff:e2:33:d2:58:d2:8e:f1:9b:8b:0e:
d6:eb:86:5f:3a:b1:fe:ac:36:52:5c:5e:82:85:14:b6:73:bc:
69:d2:5d:7c:10:9a:a4:aa:8f:ab:dd:84:c8:06:0e:f4:29:04:
cc:d0:e7:89:5d:a6:35:ee:97:19:67:05:7b:60:13:a1:ec:bd:
17:f1:84:68:57:7e:1b:5c:5c:fc:2d:fa:b8:91:13:35:b0:9d:
29:b1:2a:01:fd:cf:27:5e:6b:42:27:42:f2:9b:5a:13:0a:d9:
9f:0e:80:25:71:62:72:22:9d:94:be:d6:e1:e3:b2:e3:6f:10:
82:6c:8a:bc:ca:a6:7c:52:be:32:8f:11:2c:d1:7f:aa:ff:22:
a3:e0:5e:b9:9b:95:19:5b:4e:c4:25:78:7d:2b:ee:fe:f6:2a:
e1:88:5b:58:96:d3:d9:95:70:20:40:bf:8e:34:4c:dc:81:9a:
c5:35:12:be:a7:d3:42:bf:03:5b:aa:e9:08:b8:02:70:44:07:
5e:df:0c:a4:a3:d8:d7:aa:e0:55:e8:b1:8f:7d:69:67:93:7f:
61:fb:d8:f7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlj8pL1FjQe1qU5Bs4zL2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2IzZDVkNTg1MjcyY2E3M2IwYTRhM2E4M2FjZjRiZWI0ZTM3YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCIuUAL0fnjwx7bXJUAA6vwt2gDh
snUFdqZ4V8s4iJC2WK8WzG5QhkecmkqYCiGwgAbb5CW4hpFCi80LZ1CLALBLU946
dQZAWBW1J2HEIN8C/D4mKuYnJlEOkSmHwFl0MHX89ILAC8cM/vAebXHvCx4/s6TZ
s2sox9CPSJsDTtikgRXtfu/VidXoRChA5YdHF8vzN+Ad2pXcPbYvSBRgaWebgBbk
xDpeXk3F5r+lqfQ6qIHoXWGQANjDmj+6zqtTixvT1T28h89XZtjxzmyO5rjW4j4t
jt2ku6RYWb0U6x2HpsfHfRxBXjJ97++qA77/wnh9mWBSVra0ksE8jVjwewIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLez1dWFJyynOwpKOoOs9L6043pxMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdDdQVjFZVW5MS2M3Q2tvNmc2ejB2clRqZW5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXP3UAwQC
XP3sAwQCkni8MA0GCSqGSIb3DQEBCwUAA4IBAQA7w6NTtNRGP+iNgtqkPnVatM5C
sBaFqbjdVtTL+J5hNdFaObfMHcEfV0GC/+Iz0ljSjvGbiw7W64ZfOrH+rDZSXF6C
hRS2c7xp0l18EJqkqo+r3YTIBg70KQTM0OeJXaY17pcZZwV7YBOh7L0X8YRoV34b
XFz8Lfq4kRM1sJ0psSoB/c8nXmtCJ0Lym1oTCtmfDoAlcWJyIp2Uvtbh47LjbxCC
bIq8yqZ8Ur4yjxEs0X+q/yKj4F65m5UZW07EJXh9K+7+9irhiFtYltPZlXAgQL+O
NEzcgZrFNRK+p9NCvwNbqukIuAJwRAde3wyko9jXquBV6LGPfWlnk39h+9j3
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:23 2025 by rpki-client