Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/B7e_rOOepZWmaiFWJH1w3a37GGg.roa
File: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (raw, json)
Hash identifier: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=
Subject key identifier: 07:B7:BF:AC:E3:9E:A5:95:A6:6A:21:56:24:7D:70:DD:AD:FB:18:68
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0194282365DDB63359ABE381CD0246F90462
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/B7e_rOOepZWmaiFWJH1w3a37GGg.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9094
IP address blocks: 213.9.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:65:dd:b6:33:59:ab:e3:81:cd:02:46:f9:04:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07b7bface39ea595a66a2156247d70ddadfb1868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:d5:3e:49:ed:db:a3:a4:cd:ee:41:d8:a2:
86:00:ca:29:ab:1e:87:92:61:32:c4:70:5b:22:e5:
d0:45:75:cf:35:67:cf:08:e7:76:5f:be:09:ca:e8:
10:f2:f3:09:06:68:84:81:e0:cd:81:2f:4c:12:6e:
53:3b:cf:db:44:73:34:ba:a9:25:79:b9:f8:d8:69:
c3:b9:23:b2:1b:61:75:b6:a9:06:2c:40:69:f9:ba:
e8:c5:f7:83:2e:c0:29:99:71:96:44:51:5f:f3:34:
7c:08:8c:25:62:df:9f:07:00:02:e7:c9:2b:2c:0b:
1e:d9:d3:23:1c:45:a4:db:4a:eb:a4:0a:db:94:0f:
40:7a:69:61:58:b9:53:5d:32:5c:66:3f:63:6f:72:
f8:54:48:59:77:c0:fb:58:bc:01:f2:59:60:97:08:
25:d9:31:a8:01:e1:f2:5e:81:cc:6a:a5:ae:d6:f3:
19:f7:80:07:a3:1e:61:f5:09:d8:4c:f2:52:68:bb:
45:55:2a:eb:c9:ca:64:19:5a:d1:2b:44:05:d5:50:
d1:61:ac:d9:c8:78:e2:79:d5:2f:15:06:da:e2:fe:
af:88:08:7c:9b:ea:23:b0:c1:ba:38:08:11:6d:a0:
da:ad:78:5e:39:8e:2c:30:70:1f:8f:6e:1c:d5:f1:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:BF:AC:E3:9E:A5:95:A6:6A:21:56:24:7D:70:DD:AD:FB:18:68
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/B7e_rOOepZWmaiFWJH1w3a37GGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d1:6e:68:ba:15:3a:05:84:ec:34:ec:a4:a3:a7:4a:20:f9:
61:a9:50:f3:5d:97:12:24:a8:34:8b:f0:8f:92:f9:26:aa:f2:
17:30:ff:3d:1b:51:03:f7:ff:7d:99:dd:1f:98:67:ea:3f:a6:
f8:eb:c6:22:39:3c:b7:1c:f1:bf:dc:82:ee:d7:ff:5b:84:26:
89:58:34:fa:29:c7:1a:c9:2e:3e:35:60:d1:e1:a9:51:78:c2:
ba:ef:a2:5d:a7:95:f1:24:b0:17:05:c6:03:9b:96:88:cb:12:
01:a0:9c:ab:b8:d4:11:75:19:c5:d5:95:f2:5b:58:a5:f8:a1:
66:5c:5a:dd:b9:de:14:de:fc:ee:d5:84:c3:6c:7b:ea:c8:51:
fd:d8:c2:cc:04:1a:ac:1f:aa:e4:93:5d:38:8e:eb:fd:c9:b9:
54:13:ab:dd:37:1f:1b:88:54:09:af:77:da:16:51:d3:c3:98:
ae:61:36:39:31:e3:d3:1e:82:ac:61:fa:e5:6c:4c:ec:54:08:
8d:7f:37:bd:fc:20:1d:af:96:86:54:50:67:9b:18:7d:c5:cc:
39:d8:1a:bb:ec:d2:75:0f:8a:35:31:8a:22:aa:5e:c7:9f:a0:
66:f7:fe:dc:40:7c:ae:49:f3:9a:db:08:ae:64:9f:5f:c3:74:
26:ca:9a:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI2XdtjNZq+OBzQJG+QRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx
ZDA5OWIwHhcNMjUwMTAyMTc0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2I3YmZhY2UzOWVhNTk1YTY2YTIxNTYyNDdkNzBkZGFkZmIxODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDHVPknt26Okze5B2KKGAMopqx6H
kmEyxHBbIuXQRXXPNWfPCOd2X74JyugQ8vMJBmiEgeDNgS9MEm5TO8/bRHM0uqkl
ebn42GnDuSOyG2F1tqkGLEBp+broxfeDLsApmXGWRFFf8zR8CIwlYt+fBwAC58kr
LAse2dMjHEWk20rrpArblA9AemlhWLlTXTJcZj9jb3L4VEhZd8D7WLwB8llglwgl
2TGoAeHyXoHMaqWu1vMZ94AHox5h9QnYTPJSaLtFVSrrycpkGVrRK0QF1VDRYazZ
yHjiedUvFQba4v6viAh8m+ojsMG6OAgRbaDarXheOY4sMHAfj24c1fHnBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAe3v6zjnqWVpmohViR9cN2t+xhoMB8GA1UdIwQY
MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt
Mjc0NzNjYTYxMmRlLzEvQjdlX3JPT2VwWldtYWlGV0pIMXczYTM3R0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl
LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1QnzMA0G
CSqGSIb3DQEBCwUAA4IBAQCe0W5ouhU6BYTsNOyko6dKIPlhqVDzXZcSJKg0i/CP
kvkmqvIXMP89G1ED9/99md0fmGfqP6b468YiOTy3HPG/3ILu1/9bhCaJWDT6Kcca
yS4+NWDR4alReMK676Jdp5XxJLAXBcYDm5aIyxIBoJyruNQRdRnF1ZXyW1il+KFm
XFrdud4U3vzu1YTDbHvqyFH92MLMBBqsH6rkk104juv9yblUE6vdNx8biFQJr3fa
FlHTw5iuYTY5MePTHoKsYfrlbEzsVAiNfze9/CAdr5aGVFBnmxh9xcw52Bq77NJ1
D4o1MYoiql7Hn6Bm9/7cQHyuSfOa2wiuZJ9fw3QmypqU
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:55 2025 by rpki-client