Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa
File: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (raw, json)
Hash identifier: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=
Subject key identifier: 73:79:23:E5:ED:05:42:CF:9A:19:E2:3F:A6:AB:E9:1B:F3:F9:F8:22
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 019423D7F58B85B31DD8A12559719A44E091
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59488
IP address blocks: 95.215.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f5:8b:85:b3:1d:d8:a1:25:59:71:9a:44:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737923e5ed0542cf9a19e23fa6abe91bf3f9f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:68:39:38:dd:82:3a:a1:80:27:82:2c:a5:
fe:a5:3f:ce:bb:4f:96:85:38:aa:d3:60:62:df:43:
fd:60:d7:6e:e8:81:f6:c8:f2:7d:bc:9c:08:3a:a3:
9c:ed:34:b9:27:70:78:96:e4:ae:a0:22:f8:44:6d:
46:bb:3a:e3:e6:4d:7c:43:98:86:c5:af:9a:5b:9f:
fc:8b:fb:92:3a:0b:23:32:1c:71:f0:16:d6:c9:39:
65:71:f8:6f:98:1e:86:7a:37:1a:ac:2f:7a:42:19:
54:ea:ac:06:a5:0d:42:8d:9d:d1:02:06:81:43:81:
1c:de:e3:0d:9e:0e:6e:15:7f:6c:83:96:5b:33:bc:
bb:67:9a:18:e3:07:2e:10:1c:27:f1:b8:a6:2b:34:
57:95:74:dd:92:86:93:f0:36:e5:7b:3e:ff:86:78:
20:ee:ea:b6:ed:47:a5:b1:ad:12:55:b9:24:ac:67:
9c:02:7b:ae:e1:12:8f:08:0f:46:4a:2c:7d:b2:9e:
ac:0a:76:1b:49:1c:01:3d:7f:c1:c7:fb:54:37:4e:
cb:3b:5a:ff:8f:c9:06:d6:11:3d:74:55:36:26:e7:
3b:19:65:25:5e:0c:75:7b:8e:55:70:4f:bb:01:32:
ef:86:34:e5:dc:df:54:84:b4:24:19:6d:d1:72:97:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:79:23:E5:ED:05:42:CF:9A:19:E2:3F:A6:AB:E9:1B:F3:F9:F8:22
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f9:c6:d6:d1:ec:b3:3a:e5:ab:45:e5:b2:38:e3:21:aa:c8:
cb:55:8a:54:33:f4:a3:67:50:2a:c5:3b:b1:21:22:be:15:fe:
3f:3f:02:9a:c9:ec:4b:0f:88:e3:e5:96:04:31:81:e5:49:03:
8c:82:80:28:8e:48:7e:72:cb:a8:f5:b4:83:be:77:d8:2a:eb:
a7:95:e9:37:08:7f:12:24:62:a4:03:45:d4:6d:aa:2c:24:fe:
7e:d8:29:24:ab:33:de:d2:93:80:f0:b8:b9:20:26:17:41:2a:
dc:4a:72:af:0d:6d:4b:b8:df:c1:a8:bf:5a:92:81:73:74:eb:
58:b8:d8:aa:57:42:65:9d:15:74:b8:a6:72:08:df:99:10:23:
33:a6:ee:60:3a:27:59:dd:db:c3:bc:c3:bc:73:92:6c:c0:4c:
40:10:90:36:76:47:5e:6a:fe:f7:32:76:4e:ec:6b:26:1e:9b:
da:12:41:79:75:89:3c:1e:41:24:c1:b8:9d:85:eb:55:ef:95:
ae:40:ed:d2:39:e5:5b:5b:4b:6c:50:67:30:8b:1c:cf:a1:77:
a0:97:82:ec:f9:95:95:79:25:1e:ce:ae:84:f3:05:d2:e2:63:
34:33:a8:46:ac:19:31:37:9c:a7:b2:44:09:33:fe:63:54:60:
60:1a:29:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1/WLhbMd2KElWXGaROCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl
ZmE1MGYwHhcNMjUwMTAxMjE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzc5MjNlNWVkMDU0MmNmOWExOWUyM2ZhNmFiZTkxYmYzZjlmODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m5oOTjdgjqhgCeCLKX+pT/Ou0+W
hTiq02Bi30P9YNdu6IH2yPJ9vJwIOqOc7TS5J3B4luSuoCL4RG1Guzrj5k18Q5iG
xa+aW5/8i/uSOgsjMhxx8BbWyTllcfhvmB6GejcarC96QhlU6qwGpQ1CjZ3RAgaB
Q4Ec3uMNng5uFX9sg5ZbM7y7Z5oY4wcuEBwn8bimKzRXlXTdkoaT8Dblez7/hngg
7uq27Uelsa0SVbkkrGecAnuu4RKPCA9GSix9sp6sCnYbSRwBPX/Bx/tUN07LO1r/
j8kG1hE9dFU2Juc7GWUlXgx1e45VcE+7ATLvhjTl3N9UhLQkGW3RcpccewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHN5I+XtBULPmhniP6ar6Rvz+fgiMB8GA1UdIwQY
MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt
MDExNzg0MWQyNTViLzEvYzNrajVlMEZRcy1hR2VJX3BxdnBHX1A1LUNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi
LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9feMA0G
CSqGSIb3DQEBCwUAA4IBAQBt+cbW0eyzOuWrReWyOOMhqsjLVYpUM/SjZ1AqxTux
ISK+Ff4/PwKayexLD4jj5ZYEMYHlSQOMgoAojkh+csuo9bSDvnfYKuunlek3CH8S
JGKkA0XUbaosJP5+2CkkqzPe0pOA8Li5ICYXQSrcSnKvDW1LuN/BqL9akoFzdOtY
uNiqV0JlnRV0uKZyCN+ZECMzpu5gOidZ3dvDvMO8c5JswExAEJA2dkdeav73MnZO
7GsmHpvaEkF5dYk8HkEkwbidhetV75WuQO3SOeVbW0tsUGcwixzPoXegl4Ls+ZWV
eSUezq6E8wXS4mM0M6hGrBkxN5ynskQJM/5jVGBgGikO
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:12 2025 by rpki-client