Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/pqMuZUmnJkNOPYxu6HyYgqehHLI.roa
File: pqMuZUmnJkNOPYxu6HyYgqehHLI.roa (raw, json)
Hash identifier: j6HeHGze3fA2sILtlslcsGakMweVVXiFHLha+j3ToYY=
Subject key identifier: A6:A3:2E:65:49:A7:26:43:4E:3D:8C:6E:E8:7C:98:82:A7:A1:1C:B2
Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial: 019425FD412CF6FAD02D25A05D222C049E3E
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/pqMuZUmnJkNOPYxu6HyYgqehHLI.roa
Signing time: Thu 02 Jan 2025 07:49:01 +0000
ROA not before: Thu 02 Jan 2025 07:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 176.57.64.0/23 maxlen: 23
176.57.67.0/24 maxlen: 24
185.215.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:41:2c:f6:fa:d0:2d:25:a0:5d:22:2c:04:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Validity
Not Before: Jan 2 07:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a32e6549a726434e3d8c6ee87c9882a7a11cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:bc:be:7c:30:52:18:0d:3a:e8:86:f8:d3:
d1:43:77:63:55:2a:96:f9:5c:e3:c5:75:fd:c4:6a:
00:e4:97:a0:64:30:52:35:08:09:3b:5f:ae:46:8e:
a2:a4:ff:53:f0:08:d3:d4:09:fa:4a:c2:c0:79:f9:
45:ab:88:9a:62:ed:95:c4:f5:60:db:e5:33:5d:f6:
9a:11:f2:40:b0:29:d6:3a:9c:7f:91:ee:e7:e1:6b:
5f:16:87:32:7f:6a:b7:31:fe:ef:40:67:65:a6:27:
f2:48:2d:5b:34:64:01:c5:e7:72:d8:a7:05:c9:fc:
99:30:27:1b:34:e1:ab:f1:5c:69:28:ea:e3:68:f8:
fd:f2:d6:57:e2:d7:67:8f:da:af:14:86:2c:2f:e6:
34:8b:c6:71:bb:d8:1e:80:15:98:7d:a5:96:e0:8d:
d4:72:d5:da:60:5d:81:4f:14:c2:98:57:55:01:e2:
dd:07:33:9b:54:91:74:c7:ea:d4:25:cc:a5:53:26:
c0:c4:55:4f:9e:73:ea:34:6d:72:e5:19:14:b6:9d:
67:86:35:6d:7b:28:f1:6f:53:f6:a7:ed:16:e4:ce:
57:bf:6d:fb:bd:e6:25:79:30:36:38:86:2c:86:8e:
40:bc:45:50:85:c0:d9:2c:5d:77:52:16:58:67:c6:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:2E:65:49:A7:26:43:4E:3D:8C:6E:E8:7C:98:82:A7:A1:1C:B2
X509v3 Authority Key Identifier:
keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/pqMuZUmnJkNOPYxu6HyYgqehHLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.64.0/23
176.57.67.0/24
185.215.4.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c0:0c:98:a7:82:d5:2d:2c:cf:fb:58:0e:41:d4:a0:71:6b:
81:9c:92:20:6e:d7:2e:d5:64:36:0a:98:66:af:2b:a3:5f:f5:
67:ef:bf:3a:6f:36:b7:44:a6:b0:3d:d0:06:2b:c9:b5:cd:81:
ba:59:b8:41:bb:83:13:32:0f:60:5c:5f:2c:9f:93:a1:c6:1c:
4c:d9:5e:fa:95:40:d0:af:7e:e9:16:3a:ec:46:09:12:43:ed:
1a:2d:78:0b:3c:8d:79:7e:77:cc:1c:b7:09:9b:66:bd:2c:1f:
f6:11:a7:2d:3d:06:f5:be:f4:11:04:85:e2:ad:63:4b:de:26:
70:dc:87:ea:27:3e:6f:82:d0:94:fc:50:fb:6b:04:12:a0:86:
92:c1:63:90:6f:12:34:8b:e1:d2:6e:a0:91:0d:63:2f:47:fa:
c9:bd:0f:56:d4:ca:70:9a:8e:94:ed:30:90:5b:0b:71:ff:4c:
73:86:63:8b:b8:f7:d0:26:53:b8:c8:7a:05:1d:d4:e4:50:40:
03:fb:52:c8:46:24:33:86:62:19:fb:ea:1b:99:56:4d:5d:d0:
d4:9c:cd:93:7b:70:f5:cf:b2:24:e3:3c:10:5c:2a:ed:bd:1f:
30:aa:ad:c4:fb:07:66:df:f6:e8:f5:73:8c:c1:ba:3d:7e:60:
3d:b6:06:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/UEs9vrQLSWgXSIsBJ4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEyYmI4ODEzYjc0ZDc4MjgzYjE3MjhmZGI5YmJjNWQ1
Nzg0NWQwHhcNMjUwMTAyMDc0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmEzMmU2NTQ5YTcyNjQzNGUzZDhjNmVlODdjOTg4MmE3YTExY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLK8vnwwUhgNOuiG+NPRQ3djVSqW
+VzjxXX9xGoA5JegZDBSNQgJO1+uRo6ipP9T8AjT1An6SsLAeflFq4iaYu2VxPVg
2+UzXfaaEfJAsCnWOpx/ke7n4WtfFocyf2q3Mf7vQGdlpifySC1bNGQBxedy2KcF
yfyZMCcbNOGr8VxpKOrjaPj98tZX4tdnj9qvFIYsL+Y0i8Zxu9gegBWYfaWW4I3U
ctXaYF2BTxTCmFdVAeLdBzObVJF0x+rUJcylUybAxFVPnnPqNG1y5RkUtp1nhjVt
eyjxb1P2p+0W5M5Xv237veYleTA2OIYsho5AvEVQhcDZLF13UhZYZ8YYyQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKajLmVJpyZDTj2Mbuh8mIKnoRyyMB8GA1UdIwQY
MBaAFI8KK7iBO3TXgoOxco/bm7xdV4RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2Mt
YWEyYjNiZWEwOGJmLzEvcHFNdVpVbW5Ka05PUFl4dTZIeVlncWVoSExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2MtYWEyYjNiZWEwOGJm
LzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsDlAAwQA
sDlDAwQAudcEMA0GCSqGSIb3DQEBCwUAA4IBAQCEwAyYp4LVLSzP+1gOQdSgcWuB
nJIgbtcu1WQ2CphmryujX/Vn7786bza3RKawPdAGK8m1zYG6WbhBu4MTMg9gXF8s
n5OhxhxM2V76lUDQr37pFjrsRgkSQ+0aLXgLPI15fnfMHLcJm2a9LB/2EactPQb1
vvQRBIXirWNL3iZw3IfqJz5vgtCU/FD7awQSoIaSwWOQbxI0i+HSbqCRDWMvR/rJ
vQ9W1Mpwmo6U7TCQWwtx/0xzhmOLuPfQJlO4yHoFHdTkUEAD+1LIRiQzhmIZ++ob
mVZNXdDUnM2Te3D1z7Ik4zwQXCrtvR8wqq3E+wdm3/bo9XOMwbo9fmA9tgZB
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:16:56 2025 by rpki-client