Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa
File: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (raw, json)
Hash identifier: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=
Subject key identifier: 87:EB:6F:93:B0:BB:1D:80:4E:2D:8B:FF:00:1C:76:7C:D8:07:47:DC
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA696285D9FA3A46285CA2CEDC3234
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211947
IP address blocks: 195.64.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:62:85:d9:fa:3a:46:28:5c:a2:ce:dc:32:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87eb6f93b0bb1d804e2d8bff001c767cd80747dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:3c:10:5a:14:06:9d:e7:56:da:23:9a:35:
a8:61:d2:3c:23:20:bb:63:8d:48:93:d5:7a:79:67:
e8:8e:f0:ee:c2:a3:74:22:91:d0:2b:7b:2d:7c:df:
fc:1b:97:2e:02:4b:ad:f3:fd:51:75:98:06:c1:ff:
91:e3:7c:68:5a:f8:5e:f0:f6:8a:2a:90:3e:56:2c:
3b:7b:c3:e5:72:f1:8b:45:da:ba:1b:57:14:1c:04:
35:49:21:f1:b2:4b:d7:84:d0:a6:5d:ee:71:c2:a9:
a4:eb:e1:53:a6:b3:f6:d3:8b:4f:74:32:c9:46:b2:
1b:4c:69:7f:fa:55:22:2f:0a:8a:58:8e:dd:ae:11:
34:0e:c4:b2:1d:cb:4c:a2:13:c6:03:76:97:c4:6e:
75:0f:9f:ef:7f:cf:14:05:6b:63:01:a0:ca:2d:aa:
f8:b3:c0:4b:83:08:29:57:24:ec:4f:40:f9:c0:ec:
36:f8:95:13:e0:09:e4:18:23:be:98:43:da:86:23:
d6:09:54:31:e1:8d:9f:e6:af:5c:50:42:01:6e:cd:
39:c5:47:a2:b8:3f:7b:9e:a4:97:a9:3a:e1:f1:99:
8b:12:a9:6c:44:27:f6:79:d2:c4:f3:a7:19:af:ac:
cd:62:9b:9a:83:65:95:9d:b2:38:a5:64:b4:19:fb:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EB:6F:93:B0:BB:1D:80:4E:2D:8B:FF:00:1C:76:7C:D8:07:47:DC
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:97:f5:aa:69:9a:10:6c:f5:30:c5:1d:94:f3:16:85:eb:d2:
10:2c:0b:cf:d1:f5:45:a7:b0:b5:9b:c8:49:56:ee:df:bd:5b:
a0:c6:a6:30:1c:0d:e0:61:b6:ff:aa:c8:c2:89:87:af:87:0a:
5a:f6:f7:db:d3:a5:1e:61:c4:e6:67:bf:a7:01:da:35:47:e8:
91:9d:0e:75:79:5d:a7:81:ca:9e:c6:5c:28:52:a2:e2:52:c7:
36:6f:78:7e:9e:d7:c2:d1:49:81:8c:eb:f3:93:ad:cb:42:fa:
0e:be:da:c6:cd:b4:e7:a1:a3:fc:bf:65:7b:b5:c2:79:4b:7c:
d5:f8:25:34:b3:27:43:2c:ae:76:46:24:61:ac:ce:83:f1:45:
9e:09:e4:74:f7:22:95:f2:e1:11:91:31:7a:82:68:01:0f:bc:
2b:04:b6:04:06:6e:de:2c:c0:5d:de:72:2a:8f:d4:49:05:8c:
12:9f:55:53:0f:7d:07:88:46:41:31:3c:54:04:c2:52:15:c8:
04:e1:2d:2d:15:71:8d:a4:fd:c9:fd:48:a2:03:a1:d7:4f:7b:
51:f9:b7:83:61:66:4b:69:71:f2:ec:28:6f:c4:1d:bc:e8:76:
27:54:bd:c4:dd:95:f5:f0:e1:5d:62:b9:ef:c1:e9:bf:66:f2:
37:c0:44:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mlihdn6OkYoXKLO3DI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx
ODRmNGQwHhcNMjUwMTAxMDM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2ViNmY5M2IwYmIxZDgwNGUyZDhiZmYwMDFjNzY3Y2Q4MDc0N2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rE8EFoUBp3nVtojmjWoYdI8IyC7
Y41Ik9V6eWfojvDuwqN0IpHQK3stfN/8G5cuAkut8/1RdZgGwf+R43xoWvhe8PaK
KpA+Viw7e8PlcvGLRdq6G1cUHAQ1SSHxskvXhNCmXe5xwqmk6+FTprP204tPdDLJ
RrIbTGl/+lUiLwqKWI7drhE0DsSyHctMohPGA3aXxG51D5/vf88UBWtjAaDKLar4
s8BLgwgpVyTsT0D5wOw2+JUT4AnkGCO+mEPahiPWCVQx4Y2f5q9cUEIBbs05xUei
uD97nqSXqTrh8ZmLEqlsRCf2edLE86cZr6zNYpuag2WVnbI4pWS0Gfs37wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfrb5Owux2ATi2L/wAcdnzYB0fcMB8GA1UdIwQY
MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt
OGU5M2NiNWM1MzU1LzEvaC10dms3QzdIWUJPTFl2X0FCeDJmTmdIUjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1
LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0DnMA0G
CSqGSIb3DQEBCwUAA4IBAQB6l/WqaZoQbPUwxR2U8xaF69IQLAvP0fVFp7C1m8hJ
Vu7fvVugxqYwHA3gYbb/qsjCiYevhwpa9vfb06UeYcTmZ7+nAdo1R+iRnQ51eV2n
gcqexlwoUqLiUsc2b3h+ntfC0UmBjOvzk63LQvoOvtrGzbTnoaP8v2V7tcJ5S3zV
+CU0sydDLK52RiRhrM6D8UWeCeR09yKV8uERkTF6gmgBD7wrBLYEBm7eLMBd3nIq
j9RJBYwSn1VTD30HiEZBMTxUBMJSFcgE4S0tFXGNpP3J/UiiA6HXT3tR+beDYWZL
aXHy7ChvxB286HYnVL3E3ZX18OFdYrnvwem/ZvI3wESp
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:16 2025 by rpki-client