Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/7gxbTtd2MWAA1UFCEQXYPpfPvms.roa
File: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (raw, json)
Hash identifier: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=
Subject key identifier: EE:0C:5B:4E:D7:76:31:60:00:D5:41:42:11:05:D8:3E:97:CF:BE:6B
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 019427B3C062AAB13B4B851C70F26558530A
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/7gxbTtd2MWAA1UFCEQXYPpfPvms.roa
Signing time: Thu 02 Jan 2025 15:47:59 +0000
ROA not before: Thu 02 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.225.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:c0:62:aa:b1:3b:4b:85:1c:70:f2:65:58:53:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 2 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0c5b4ed776316000d541421105d83e97cfbe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:d6:43:dd:01:ec:13:07:c7:a9:d9:30:55:
b5:74:a9:2b:b5:3f:86:bc:34:5f:14:65:5a:3f:47:
58:a8:e3:a1:19:b4:4e:26:7c:64:52:d9:b7:18:eb:
81:4f:48:57:a4:4a:02:85:3c:88:02:ee:1d:e5:a9:
07:53:65:42:a1:ec:f8:2c:22:9c:bb:51:1c:3c:bf:
5a:2e:62:26:41:e0:08:f9:76:4e:e6:89:5b:1a:81:
d7:5b:0f:9b:ef:5d:71:d6:12:dc:77:42:6a:f6:11:
c3:39:e0:3d:37:42:97:bd:6b:f2:1f:ea:94:7f:63:
db:38:61:00:f4:e0:79:f2:b8:6d:7f:92:d6:f9:00:
c0:f6:7f:d7:e8:5a:6a:fe:c7:d6:8c:bd:05:e4:cd:
36:b9:85:67:f4:a8:b1:2f:a8:b2:58:f1:bc:08:41:
4b:be:47:36:62:4f:ec:4d:30:e6:8e:70:60:35:e3:
cb:f7:21:56:7d:c0:e9:ed:ea:d4:84:6a:fc:93:62:
89:ef:fd:2f:b9:96:3e:79:a1:fe:a6:e5:1d:28:c3:
9a:4b:35:ff:65:c2:5c:2c:ee:17:d0:97:a8:58:77:
32:fd:38:27:01:ec:f0:c3:04:6c:5d:54:3c:42:72:
c8:ee:4b:9d:a9:39:43:33:a0:e7:a1:69:88:c3:51:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:5B:4E:D7:76:31:60:00:D5:41:42:11:05:D8:3E:97:CF:BE:6B
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/7gxbTtd2MWAA1UFCEQXYPpfPvms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:3d:2b:78:d6:fa:f4:93:47:e6:65:04:4c:ce:39:eb:03:35:
99:2a:c6:0a:e5:e4:17:4f:ea:23:4c:d7:86:bc:f8:d0:f4:8a:
70:14:40:fb:30:a7:44:75:ce:16:be:81:86:5c:bb:37:f5:6a:
82:74:af:7e:a2:21:5d:46:32:0c:8b:58:58:af:b9:b3:2b:bb:
2d:8e:bf:bc:0d:50:7d:2b:90:54:1d:5a:e3:64:c0:d8:dd:3a:
cd:c1:62:ab:1d:8f:ee:21:75:58:18:80:84:9a:9e:2e:6c:e4:
7a:35:20:ad:ee:0d:15:38:8a:7b:4b:8d:46:40:86:fb:ba:7c:
f5:90:9d:a1:de:8f:98:b1:2b:cd:dd:53:f4:15:68:e9:23:eb:
0a:13:a8:09:6f:55:5c:21:70:9d:da:8b:78:b0:7b:e7:55:6a:
67:89:61:0c:11:b3:ec:7a:f6:9c:ef:d4:2d:08:db:1b:ba:de:
e3:c7:64:f2:b5:6c:68:7d:b4:a8:81:a2:4a:22:90:1b:ae:4a:
d2:78:c0:ff:20:f9:49:2f:bf:57:f7:5b:73:d4:3a:d9:85:b5:
d8:bf:e8:70:7d:18:55:bd:49:a2:e4:28:07:e2:52:6e:c4:9f:
a1:9f:7c:b6:f1:bd:35:07:bc:e2:e4:86:44:88:69:80:63:ab:
06:06:8f:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQns8BiqrE7S4UccPJlWFMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx
NDExMTEwHhcNMjUwMTAyMTU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTBjNWI0ZWQ3NzYzMTYwMDBkNTQxNDIxMTA1ZDgzZTk3Y2ZiZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4bWQ90B7BMHx6nZMFW1dKkrtT+G
vDRfFGVaP0dYqOOhGbROJnxkUtm3GOuBT0hXpEoChTyIAu4d5akHU2VCoez4LCKc
u1EcPL9aLmImQeAI+XZO5olbGoHXWw+b711x1hLcd0Jq9hHDOeA9N0KXvWvyH+qU
f2PbOGEA9OB58rhtf5LW+QDA9n/X6Fpq/sfWjL0F5M02uYVn9KixL6iyWPG8CEFL
vkc2Yk/sTTDmjnBgNePL9yFWfcDp7erUhGr8k2KJ7/0vuZY+eaH+puUdKMOaSzX/
ZcJcLO4X0JeoWHcy/TgnAezwwwRsXVQ8QnLI7kudqTlDM6DnoWmIw1EYtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4MW07XdjFgANVBQhEF2D6Xz75rMB8GA1UdIwQY
MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt
NzI2ZjgzZDIzODkyLzEvN2d4YlR0ZDJNV0FBMVVGQ0VRWFlQcGZQdm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky
LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueHsMA0G
CSqGSIb3DQEBCwUAA4IBAQBcPSt41vr0k0fmZQRMzjnrAzWZKsYK5eQXT+ojTNeG
vPjQ9IpwFED7MKdEdc4WvoGGXLs39WqCdK9+oiFdRjIMi1hYr7mzK7stjr+8DVB9
K5BUHVrjZMDY3TrNwWKrHY/uIXVYGICEmp4ubOR6NSCt7g0VOIp7S41GQIb7unz1
kJ2h3o+YsSvN3VP0FWjpI+sKE6gJb1VcIXCd2ot4sHvnVWpniWEMEbPsevac79Qt
CNsbut7jx2TytWxofbSogaJKIpAbrkrSeMD/IPlJL79X91tz1DrZhbXYv+hwfRhV
vUmi5CgH4lJuxJ+hn3y28b01B7zi5IZEiGmAY6sGBo9Z
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:08 2025 by rpki-client