Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/x1_M_bS9TlyMefn7CSi3G_mxYag.roa
File: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (raw, json)
Hash identifier: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=
Subject key identifier: C7:5F:CC:FD:B4:BD:4E:5C:8C:79:F9:FB:09:28:B7:1B:F9:B1:61:A8
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 0194221FBB7275DF595132BF7CFDA67BA957
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/x1_M_bS9TlyMefn7CSi3G_mxYag.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44295
IP address blocks: 92.42.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bb:72:75:df:59:51:32:bf:7c:fd:a6:7b:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c75fccfdb4bd4e5c8c79f9fb0928b71bf9b161a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:b8:8d:6e:0a:00:9e:18:42:5c:64:b4:ef:
ab:c1:dc:e6:84:e0:20:21:7b:6d:4a:5f:13:18:44:
b9:d5:25:44:1d:10:d6:9c:f0:b0:9a:50:41:4e:52:
21:e3:3a:3d:cb:f1:06:dd:77:09:3e:53:5a:b3:f1:
94:d1:aa:d6:ea:05:73:0f:2a:84:33:b6:dc:79:30:
35:e8:b9:13:f8:c7:fb:d0:62:8e:7e:8e:65:e3:e0:
da:f7:b4:53:ce:62:e1:92:d1:a4:a7:41:b8:96:bb:
42:0d:c8:e1:af:1f:d3:51:b3:b8:90:12:95:71:ab:
eb:7d:ac:c8:a1:cf:2c:5f:c9:6d:d1:c0:a1:c8:24:
78:9e:75:6c:47:c9:b7:93:27:0a:55:a5:3d:84:f2:
c7:36:23:da:d2:37:1a:cd:eb:c3:5f:ed:1f:cb:94:
8c:64:17:96:29:57:d7:a5:3a:52:bb:1b:e9:23:4b:
5b:79:a9:b7:09:6b:63:0a:f1:11:17:92:66:ba:44:
40:81:68:bd:73:11:4a:55:07:3b:fc:46:1d:52:f9:
66:95:0e:16:38:a3:33:3a:12:05:ad:17:1a:c9:8a:
52:53:3c:66:60:1a:e7:57:8e:c9:d3:9e:69:e0:cf:
d3:c9:d4:aa:77:d2:fd:cf:6a:5b:5e:22:fa:a4:3a:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:CC:FD:B4:BD:4E:5C:8C:79:F9:FB:09:28:B7:1B:F9:B1:61:A8
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/x1_M_bS9TlyMefn7CSi3G_mxYag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.176.0/21
Signature Algorithm: sha256WithRSAEncryption
16:6e:2b:ad:3e:67:14:c0:73:50:1d:58:06:64:0c:6d:dc:d7:
3c:2d:10:45:a4:ea:a5:7b:36:70:98:2f:02:55:38:a9:18:9c:
67:02:94:86:c1:97:f3:98:9b:3f:ca:20:3d:7d:5f:fa:a9:38:
88:32:96:31:c0:a7:d5:09:56:b2:31:df:f3:a0:42:fb:32:b8:
de:49:df:60:ae:89:f1:d9:d5:21:7c:b3:3d:c5:76:12:47:29:
09:2b:8e:4c:c6:c2:57:12:df:27:0c:09:d2:0d:b7:86:37:99:
32:a7:4b:45:11:bd:eb:7e:1e:6c:da:dd:ff:90:90:00:1d:e4:
c2:f1:96:0b:84:24:05:1e:5f:26:3b:29:8d:e9:e3:61:45:f3:
ab:2b:f8:ed:8c:f8:95:7f:73:30:5b:d4:b3:8d:61:98:a5:df:
b3:40:15:45:71:c2:a8:c2:b0:4e:87:bd:7c:4d:dd:b6:21:0b:
e9:a2:d7:af:5a:ab:89:f7:17:5e:f9:fd:4b:fe:ee:a6:d7:dc:
da:59:e8:d6:e4:14:59:41:98:d7:00:2e:6f:d9:9c:15:4c:0d:
98:d6:9b:20:4d:83:e8:20:0d:c3:22:39:fc:6c:d4:cb:f4:f1:
31:3e:05:69:66:7c:e9:39:ec:e1:e8:91:bd:88:3b:39:69:03:
5f:f9:23:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH7tydd9ZUTK/fP2me6lXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTc3OWViOTBiZTdkNWJlMGMxZGM0OGE2Y2QyM2RiZDQz
Yjk3YzgwHhcNMjUwMTAxMTM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzVmY2NmZGI0YmQ0ZTVjOGM3OWY5ZmIwOTI4YjcxYmY5YjE2MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogi4jW4KAJ4YQlxktO+rwdzmhOAg
IXttSl8TGES51SVEHRDWnPCwmlBBTlIh4zo9y/EG3XcJPlNas/GU0arW6gVzDyqE
M7bceTA16LkT+Mf70GKOfo5l4+Da97RTzmLhktGkp0G4lrtCDcjhrx/TUbO4kBKV
cavrfazIoc8sX8lt0cChyCR4nnVsR8m3kycKVaU9hPLHNiPa0jcazevDX+0fy5SM
ZBeWKVfXpTpSuxvpI0tbeam3CWtjCvERF5JmukRAgWi9cxFKVQc7/EYdUvlmlQ4W
OKMzOhIFrRcayYpSUzxmYBrnV47J055p4M/TydSqd9L9z2pbXiL6pDrWkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdfzP20vU5cjHn5+wkotxv5sWGoMB8GA1UdIwQY
MBaAFAvneeuQvn1b4MHcSKbNI9vUO5fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUt
Mzg3YThmYmIxMDQyLzEveDFfTV9iUzlUbHlNZWZuN0NTaTNHX214WWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUtMzg3YThmYmIxMDQy
LzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCqwMA0G
CSqGSIb3DQEBCwUAA4IBAQAWbiutPmcUwHNQHVgGZAxt3Nc8LRBFpOqlezZwmC8C
VTipGJxnApSGwZfzmJs/yiA9fV/6qTiIMpYxwKfVCVayMd/zoEL7MrjeSd9gronx
2dUhfLM9xXYSRykJK45MxsJXEt8nDAnSDbeGN5kyp0tFEb3rfh5s2t3/kJAAHeTC
8ZYLhCQFHl8mOymN6eNhRfOrK/jtjPiVf3MwW9SzjWGYpd+zQBVFccKowrBOh718
Td22IQvpotevWquJ9xde+f1L/u6m19zaWejW5BRZQZjXAC5v2ZwVTA2Y1psgTYPo
IA3DIjn8bNTL9PExPgVpZnzpOezh6JG9iDs5aQNf+SOg
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:42 2025 by rpki-client