Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/8Z1U6oiaYILl5QFuSVlM1xZVAo0.roa
File: 8Z1U6oiaYILl5QFuSVlM1xZVAo0.roa (raw, json)
Hash identifier: Z0yQrMp3DnhS8bJWMvt8Fv7YgMbkZzaeLDljUW2aX8Y=
Subject key identifier: F1:9D:54:EA:88:9A:60:82:E5:E5:01:6E:49:59:4C:D7:16:55:02:8D
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5EE564BF15D5DA488215CCBA48579
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/8Z1U6oiaYILl5QFuSVlM1xZVAo0.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9096
IP address blocks: 188.172.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ee:56:4b:f1:5d:5d:a4:88:21:5c:cb:a4:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19d54ea889a6082e5e5016e49594cd71655028d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:0b:0c:34:5d:38:46:6b:40:45:2c:60:92:
2c:51:60:a8:81:48:ac:2b:93:11:7d:da:e3:e7:44:
ff:ec:b2:8a:22:96:d6:61:90:fe:16:5f:48:37:4a:
2f:23:bd:f0:02:2d:4b:88:7a:9e:5d:c0:bb:94:e8:
a3:19:0f:f3:2c:40:c2:fa:56:86:ec:52:ae:ba:53:
e4:6d:ff:a0:68:6a:e2:3e:65:b6:e6:a4:3e:7c:2a:
11:29:bc:45:c7:80:d0:e3:0d:62:2b:54:76:0c:e3:
c0:f7:fc:08:1c:d2:35:c7:97:b6:7e:de:d9:11:06:
ee:99:d1:f7:46:87:00:df:34:97:09:6a:b9:05:97:
29:73:85:90:db:c8:56:46:90:0f:d9:14:4c:01:30:
5f:46:a4:7a:ce:eb:48:41:5f:84:50:7d:11:89:bd:
bb:89:b5:a1:98:b9:c6:3f:15:6a:55:bb:c8:70:4a:
bd:f0:4e:b4:9a:2a:71:b9:a0:13:73:b7:51:dc:a8:
fe:67:89:b8:55:63:fa:e5:cd:b1:77:7e:8f:72:a7:
f9:7d:15:76:91:a6:3b:25:da:ae:1a:6d:c8:d0:b5:
55:1f:aa:15:1e:a2:ee:17:e0:32:96:a8:69:d4:ec:
00:4f:15:e6:03:03:5a:c6:b7:2f:de:0b:fa:7d:36:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:54:EA:88:9A:60:82:E5:E5:01:6E:49:59:4C:D7:16:55:02:8D
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/8Z1U6oiaYILl5QFuSVlM1xZVAo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.197.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:48:67:00:4c:76:1f:2c:52:b4:42:23:cb:d9:54:71:73:06:
b7:a7:95:27:32:7b:77:84:80:8e:6d:b5:6a:fb:c0:6b:92:4d:
89:ce:8e:60:92:00:c5:38:bc:fd:5a:34:76:9f:d2:12:b6:49:
d8:7f:25:1c:31:3c:0b:95:0c:e3:37:5c:9a:53:f5:a9:a0:ee:
e6:df:d5:ee:b4:ee:e6:da:b8:9c:c8:6c:6f:25:e0:11:ad:34:
7b:1e:6d:9d:9a:90:82:d0:39:e4:26:d0:a5:8d:2a:fd:bd:0b:
d5:ef:55:7c:c1:75:68:56:0b:bd:8a:56:b1:88:73:08:58:a2:
5b:69:02:1c:67:fe:37:cd:b6:98:09:6e:75:bb:e8:56:3b:07:
c4:7c:88:0a:e1:32:c1:7d:09:1f:75:32:94:64:f8:cb:de:c0:
9e:df:76:da:3d:4a:e5:02:a0:96:ea:08:65:f7:37:f6:b4:12:
c0:22:88:d0:47:2d:ab:c8:62:9c:74:15:3b:b2:64:ea:ca:a5:
b4:da:78:b4:a7:17:b9:65:a6:16:5d:21:6c:d4:8a:60:5b:c6:
11:76:56:80:7d:02:7c:4a:78:ca:67:89:fd:94:15:08:73:6a:
67:fc:1e:e9:d4:3d:79:a8:c5:35:cd:d8:1e:67:0d:b3:2c:b6:
1f:e4:35:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1e5WS/FdXaSIIVzLpIV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjUwMTAxMDc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTlkNTRlYTg4OWE2MDgyZTVlNTAxNmU0OTU5NGNkNzE2NTUwMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BcLDDRdOEZrQEUsYJIsUWCogUis
K5MRfdrj50T/7LKKIpbWYZD+Fl9IN0ovI73wAi1LiHqeXcC7lOijGQ/zLEDC+laG
7FKuulPkbf+gaGriPmW25qQ+fCoRKbxFx4DQ4w1iK1R2DOPA9/wIHNI1x5e2ft7Z
EQbumdH3RocA3zSXCWq5BZcpc4WQ28hWRpAP2RRMATBfRqR6zutIQV+EUH0Rib27
ibWhmLnGPxVqVbvIcEq98E60mipxuaATc7dR3Kj+Z4m4VWP65c2xd36Pcqf5fRV2
kaY7JdquGm3I0LVVH6oVHqLuF+Aylqhp1OwATxXmAwNaxrcv3gv6fTaMHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGdVOqImmCC5eUBbklZTNcWVQKNMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvOFoxVTZvaWFZSUxsNVFGdVNWbE0xeFpWQW8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvKzFMA0G
CSqGSIb3DQEBCwUAA4IBAQDHSGcATHYfLFK0QiPL2VRxcwa3p5UnMnt3hICObbVq
+8Brkk2Jzo5gkgDFOLz9WjR2n9IStknYfyUcMTwLlQzjN1yaU/WpoO7m39XutO7m
2ricyGxvJeARrTR7Hm2dmpCC0DnkJtCljSr9vQvV71V8wXVoVgu9ilaxiHMIWKJb
aQIcZ/43zbaYCW51u+hWOwfEfIgK4TLBfQkfdTKUZPjL3sCe33baPUrlAqCW6ghl
9zf2tBLAIojQRy2ryGKcdBU7smTqyqW02ni0pxe5ZaYWXSFs1IpgW8YRdlaAfQJ8
SnjKZ4n9lBUIc2pn/B7p1D15qMU1zdgeZw2zLLYf5DVk
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:25:10 2025 by rpki-client