Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cIQWq2TK2HHqTbgfeJu3PSLgwjs.roa
File: cIQWq2TK2HHqTbgfeJu3PSLgwjs.roa (raw, json)
Hash identifier: o6U3k7Ulc0/lfJ/FfGSm+1BXLUhRPlzclaCD30YOO9w=
Subject key identifier: 70:84:16:AB:64:CA:D8:71:EA:4D:B8:1F:78:9B:B7:3D:22:E0:C2:3B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282778D86B9470EBA2C67C5D518B7BAA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cIQWq2TK2HHqTbgfeJu3PSLgwjs.roa
Signing time: Thu 02 Jan 2025 17:54:22 +0000
ROA not before: Thu 02 Jan 2025 17:54:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216262
IP address blocks: 37.156.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:78:d8:6b:94:70:eb:a2:c6:7c:5d:51:8b:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=708416ab64cad871ea4db81f789bb73d22e0c23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:d8:1d:78:a5:9d:41:87:d7:7c:7a:22:05:
21:ab:5d:43:7a:2a:00:30:45:bc:a2:6a:e3:e3:ac:
05:02:26:ae:2c:a9:36:0f:49:6b:e3:2a:9f:44:dc:
47:4a:4d:fd:1d:0d:20:83:11:48:22:4e:73:1e:d3:
7b:9c:64:79:86:1e:d2:d1:c4:be:6f:f7:55:c7:db:
23:54:36:ab:5f:33:4e:ae:24:6f:b1:3d:9a:03:6a:
94:04:00:96:e5:51:11:10:68:e9:ca:36:23:4e:b0:
98:9d:45:57:47:2f:f6:ee:9f:1a:9b:ec:45:7c:a1:
8d:49:31:3a:c2:53:69:de:69:18:44:c6:8e:ad:42:
02:72:f9:92:d1:9c:93:e3:e9:42:8f:d7:f5:04:0e:
48:cb:76:c6:11:79:b9:69:5c:f6:78:61:1c:a8:e3:
1d:42:aa:bc:cb:fb:1d:d2:63:7e:57:e4:10:4e:e3:
18:09:d7:90:32:b4:dc:9d:94:5e:a4:3b:d8:65:87:
2b:14:4b:8a:64:80:28:40:94:eb:9a:7f:22:17:58:
14:f8:37:aa:1c:db:33:ae:44:26:ae:79:28:a7:ce:
b2:9d:c4:c4:59:60:e1:e1:76:9e:11:1f:05:db:9d:
de:43:64:8c:be:ff:f8:0f:3f:e6:f0:a4:b1:b7:4f:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:16:AB:64:CA:D8:71:EA:4D:B8:1F:78:9B:B7:3D:22:E0:C2:3B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cIQWq2TK2HHqTbgfeJu3PSLgwjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6a:cb:fe:f5:cc:38:fe:1c:af:1c:ee:6a:55:3d:67:4c:a4:
97:6e:97:0f:90:8b:d5:ca:96:91:05:e9:80:1c:52:f9:b4:c1:
56:f2:44:07:e5:13:f0:61:0e:12:3e:f7:11:82:ac:2a:65:c4:
b3:7e:8d:84:c2:b6:6e:b5:19:b3:c2:b6:cf:4d:e2:85:7a:bc:
fb:47:d3:10:be:c7:8d:16:08:42:6e:c7:5c:fc:fe:fb:27:0a:
a1:c2:64:78:1a:db:6b:c2:c4:f9:3d:8b:ce:1e:6d:60:9e:28:
30:02:eb:3d:a7:03:ef:6e:e7:d6:c0:21:45:c3:ed:ed:71:28:
6c:d3:63:5e:63:dc:59:96:51:dd:11:52:67:21:60:76:85:96:
b8:1c:d8:f2:1d:32:95:6a:e7:7f:77:70:24:87:f7:7b:a9:14:
0f:1a:e9:bc:9d:fd:7c:e4:48:58:e8:8d:35:5b:16:39:86:f1:
39:22:fc:16:5a:1b:59:a5:2a:e6:c6:18:a5:00:8d:88:e1:fd:
ab:f0:f3:92:e9:06:03:e7:1d:31:98:dd:db:62:65:fb:b1:cd:
43:48:63:33:63:d1:c5:85:dc:3a:89:5c:eb:49:14:03:5d:e4:
a6:8e:e4:f6:32:59:f7:d9:c8:94:43:7f:68:a8:15:a9:15:64:
c3:4b:10:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ3jYa5Rw66LGfF1Ri3uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDg0MTZhYjY0Y2FkODcxZWE0ZGI4MWY3ODliYjczZDIyZTBjMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/nYHXilnUGH13x6IgUhq11DeioA
MEW8omrj46wFAiauLKk2D0lr4yqfRNxHSk39HQ0ggxFIIk5zHtN7nGR5hh7S0cS+
b/dVx9sjVDarXzNOriRvsT2aA2qUBACW5VEREGjpyjYjTrCYnUVXRy/27p8am+xF
fKGNSTE6wlNp3mkYRMaOrUICcvmS0ZyT4+lCj9f1BA5Iy3bGEXm5aVz2eGEcqOMd
Qqq8y/sd0mN+V+QQTuMYCdeQMrTcnZRepDvYZYcrFEuKZIAoQJTrmn8iF1gU+Deq
HNszrkQmrnkop86yncTEWWDh4XaeER8F253eQ2SMvv/4Dz/m8KSxt0/njwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHCEFqtkythx6k24H3ibtz0i4MI7MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvY0lRV3EyVEsySEhxVGJnZmVKdTNQU0xnd2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZwFMA0G
CSqGSIb3DQEBCwUAA4IBAQBEasv+9cw4/hyvHO5qVT1nTKSXbpcPkIvVypaRBemA
HFL5tMFW8kQH5RPwYQ4SPvcRgqwqZcSzfo2EwrZutRmzwrbPTeKFerz7R9MQvseN
FghCbsdc/P77JwqhwmR4GttrwsT5PYvOHm1gnigwAus9pwPvbufWwCFFw+3tcShs
02NeY9xZllHdEVJnIWB2hZa4HNjyHTKVaud/d3Akh/d7qRQPGum8nf185EhY6I01
WxY5hvE5IvwWWhtZpSrmxhilAI2I4f2r8POS6QYD5x0xmN3bYmX7sc1DSGMzY9HF
hdw6iVzrSRQDXeSmjuT2Mln32ciUQ39oqBWpFWTDSxDx
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:54:17 2025 by rpki-client