Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa
File: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (raw, json)
Hash identifier: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=
Subject key identifier: FA:AE:CE:B3:E6:A0:DC:B1:68:EC:C8:05:F1:97:C9:82:18:15:7E:07
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0194258F182319400093FA8CFF542BCEFE1A
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60793
IP address blocks: 193.19.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:18:23:19:40:00:93:fa:8c:ff:54:2b:ce:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faaeceb3e6a0dcb168ecc805f197c98218157e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:99:26:54:20:6f:de:ba:91:11:a3:85:af:
00:69:06:44:f0:eb:65:19:2e:95:0e:cc:81:eb:77:
0b:2e:bf:af:a6:e3:93:9b:d2:4a:2d:52:ca:56:b9:
29:68:ee:17:70:12:47:16:17:bc:e0:02:15:7f:50:
d1:14:be:05:de:b8:9f:08:26:20:61:8e:65:ee:aa:
14:ca:a6:e2:f4:1b:13:a7:8d:10:54:6e:d8:e1:9f:
11:c7:d2:31:37:18:93:f9:df:15:77:0d:26:a4:4b:
8a:c7:08:18:cb:0a:50:1e:33:19:6c:1e:d5:a0:44:
6b:04:b4:1b:4c:94:a4:d0:f8:d5:1e:2c:0d:7f:63:
26:8f:70:c7:dc:02:86:cf:2b:1c:bb:fc:e2:a2:45:
6c:e9:a6:c1:eb:fe:ea:4c:a9:4b:50:e2:fb:b7:60:
aa:5f:f7:f0:c5:8f:83:79:ca:3f:79:e9:bd:a0:b7:
32:8b:40:0d:8f:2d:8a:25:a8:10:ed:74:77:de:e3:
b2:88:a3:26:08:6b:8f:6d:b0:d1:68:8d:c9:a8:ed:
b6:76:ce:6d:e1:51:fb:1e:07:fb:3b:9b:e2:d6:f1:
79:2b:0f:6a:48:88:10:b6:dc:2e:57:13:60:f9:bd:
2b:09:7c:fa:6b:a6:03:92:04:7d:30:bc:aa:d5:67:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:CE:B3:E6:A0:DC:B1:68:EC:C8:05:F1:97:C9:82:18:15:7E:07
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.88.0/24
Signature Algorithm: sha256WithRSAEncryption
49:12:41:ef:70:17:bf:78:3b:1f:26:ee:a5:ec:ad:c9:0a:59:
59:6f:e7:f6:9b:49:33:26:c3:35:93:f7:48:c1:7b:ef:35:96:
82:15:46:b5:cd:ce:b8:dd:b3:25:04:ae:e2:74:a0:20:e3:0d:
99:6d:63:0f:fd:6e:4f:f9:3b:ba:cc:9d:83:9f:c3:13:85:98:
75:18:9b:75:bf:0c:ba:67:49:e9:92:6c:bf:ab:09:d2:bd:6b:
a9:4a:81:35:0c:36:d6:f5:56:a5:b3:13:4d:73:7e:63:42:64:
4d:43:f5:3a:db:5a:e2:0d:fd:27:d4:a8:5f:c1:bd:4f:67:d4:
2d:44:21:4e:7c:25:e3:33:30:89:65:16:2d:97:43:16:e6:10:
a7:9c:fb:6b:42:f2:14:dc:36:b6:92:29:ec:c3:1e:6f:8c:c9:
f9:bc:e8:24:10:a8:34:01:6f:1e:8e:a7:64:b7:7f:b6:e3:4f:
ab:59:f3:a1:be:0d:db:27:3a:dd:5d:8e:b1:86:88:d1:3d:8c:
cd:c8:fa:46:49:1a:b8:49:81:c5:3f:ad:b2:17:de:ac:8b:5e:
6d:7d:d5:66:24:4a:db:8a:68:ff:ba:35:af:03:8e:27:89:db:
9f:9e:3e:62:91:5e:ab:76:37:4b:c9:87:95:8f:62:56:e3:ed:
41:58:42:d4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQljxgjGUAAk/qM/1Qrzv4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw
ODkwNDMwHhcNMjUwMTAyMDU0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWFlY2ViM2U2YTBkY2IxNjhlY2M4MDVmMTk3Yzk4MjE4MTU3ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxqZJlQgb966kRGjha8AaQZE8Otl
GS6VDsyB63cLLr+vpuOTm9JKLVLKVrkpaO4XcBJHFhe84AIVf1DRFL4F3rifCCYg
YY5l7qoUyqbi9BsTp40QVG7Y4Z8Rx9IxNxiT+d8Vdw0mpEuKxwgYywpQHjMZbB7V
oERrBLQbTJSk0PjVHiwNf2Mmj3DH3AKGzyscu/ziokVs6abB6/7qTKlLUOL7t2Cq
X/fwxY+Deco/eem9oLcyi0ANjy2KJagQ7XR33uOyiKMmCGuPbbDRaI3JqO22ds5t
4VH7Hgf7O5vi1vF5Kw9qSIgQttwuVxNg+b0rCXz6a6YDkgR9MLyq1WcLswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPquzrPmoNyxaOzIBfGXyYIYFX4HMB8GA1UdIwQY
MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt
N2U2NjY0OGZjMjY0LzEvMS1xN09zLWFnM0xGbzdNZ0Y4WmZKZ2hnVmZnYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWMvMjg1ZjMyLTAzZWEtNDE2ZS05Y2IwLTdlNjY2NDhmYzI2
NC8xLzlPblZNeEFrTVljSVA5eVdDWE5VWmJFSWtFTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMETWDAN
BgkqhkiG9w0BAQsFAAOCAQEASRJB73AXv3g7HybupeytyQpZWW/n9ptJMybDNZP3
SMF77zWWghVGtc3OuN2zJQSu4nSgIOMNmW1jD/1uT/k7usydg5/DE4WYdRibdb8M
umdJ6ZJsv6sJ0r1rqUqBNQw21vVWpbMTTXN+Y0JkTUP1Otta4g39J9SoX8G9T2fU
LUQhTnwl4zMwiWUWLZdDFuYQp5z7a0LyFNw2tpIp7MMeb4zJ+bzoJBCoNAFvHo6n
ZLd/tuNPq1nzob4N2yc63V2OsYaI0T2Mzcj6RkkauEmBxT+tshferItebX3VZiRK
24po/7o1rwOOJ4nbn54+YpFeq3Y3S8mHlY9iVuPtQVhC1A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:23:12 2025 by rpki-client