Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa
File: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (raw, json)
Hash identifier: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=
Subject key identifier: 7E:17:B3:B0:31:52:3B:81:A0:DE:FF:B6:13:33:CE:D5:52:4D:E6:4E
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 019425216D6E05D4633F4DC842F0B8879457
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44302
IP address blocks: 92.61.112.0/20 maxlen: 20
92.61.118.0/24 maxlen: 24
217.27.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:6e:05:d4:63:3f:4d:c8:42:f0:b8:87:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e17b3b031523b81a0deffb61333ced5524de64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:0d:e0:ca:fd:4d:66:01:c3:b4:39:fe:5f:
bb:fb:9e:ac:a8:bf:4d:bd:c2:d0:bd:60:86:e4:e6:
09:f9:b7:3d:9d:2e:89:3e:a5:ef:86:a0:6c:28:2a:
7e:0b:47:f4:cc:3c:7d:fd:c9:79:e4:59:bf:30:e1:
a5:c9:44:25:a9:19:aa:64:f1:71:e1:14:56:8a:5a:
b2:2f:5c:af:6b:b5:57:ee:97:b6:d5:63:2a:16:19:
c3:31:c4:fb:97:4b:98:dc:1d:cb:d7:69:fe:7e:bf:
80:83:a0:8e:bf:fa:57:a7:4a:a9:64:5d:86:f2:0f:
3e:bd:ed:fa:29:b6:06:2e:b0:fe:52:87:31:69:04:
5b:c6:b5:ef:1b:6f:f9:ce:04:3c:a3:6f:63:1e:01:
e8:9a:d5:64:14:63:54:69:98:0c:89:f0:50:5d:60:
6d:b5:00:04:86:34:76:ea:9f:1c:0f:d3:64:ae:98:
d8:08:07:7f:49:03:a1:85:eb:3f:d1:e6:a4:dd:e3:
97:b7:5b:1f:25:39:ae:b9:13:2f:aa:a5:61:38:7e:
06:01:fb:0b:d7:fd:72:27:05:d0:10:7e:3a:8a:31:
9b:de:7e:48:3b:bb:4c:b3:62:71:f5:c2:84:c4:18:
c3:d5:dd:3b:75:e5:00:1b:b3:fe:f3:b1:aa:54:e3:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:B3:B0:31:52:3B:81:A0:DE:FF:B6:13:33:CE:D5:52:4D:E6:4E
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.112.0/20
217.27.208.0/20
Signature Algorithm: sha256WithRSAEncryption
06:bf:f6:13:6b:95:47:ad:af:d2:d8:9e:56:d7:59:3b:b0:62:
53:5a:1d:79:df:7a:d5:8f:a9:da:31:03:13:3a:37:c3:39:e8:
4b:22:e3:b3:61:7c:6c:70:4a:9c:2a:92:3b:8b:38:30:04:e2:
ea:3f:88:fc:50:fe:10:7d:05:47:d6:5d:81:1a:21:43:78:5e:
25:62:be:ea:7d:38:15:bb:f4:ac:40:87:24:51:00:76:56:d3:
e9:35:41:ec:36:bd:92:0f:0b:ae:29:78:ab:d4:57:89:9b:23:
93:26:e3:de:11:bf:5e:c0:ea:00:25:ce:db:26:e5:03:d0:46:
78:a9:b1:a9:09:61:3a:11:15:0f:e5:3b:8d:0d:19:9b:d9:1f:
ed:84:a6:43:82:1c:fd:26:bb:ce:70:53:65:e3:25:16:ab:d3:
33:8b:dd:d0:76:92:bb:cc:28:f6:bf:6d:d1:8d:74:c1:92:28:
12:8e:d6:f0:78:a2:00:6a:65:02:a6:8e:93:a4:8d:b7:a1:27:
24:64:14:49:6f:01:d6:00:83:9c:8e:b6:9b:fd:e9:a4:42:50:
6d:2d:58:bd:ef:61:7a:d3:2e:72:20:1c:77:8e:24:d9:cf:b2:
4c:d7:91:d1:08:8f:b6:fc:a8:e1:0a:37:99:c9:27:03:5c:3d:
b8:91:ac:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIW1uBdRjP03IQvC4h5RXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTBjODVjZmEwY2VkNTI4MzYzNDk5N2U3YTRhYThjZTc4
MzZkYjYwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTE3YjNiMDMxNTIzYjgxYTBkZWZmYjYxMzMzY2VkNTUyNGRlNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqawN4Mr9TWYBw7Q5/l+7+56sqL9N
vcLQvWCG5OYJ+bc9nS6JPqXvhqBsKCp+C0f0zDx9/cl55Fm/MOGlyUQlqRmqZPFx
4RRWilqyL1yva7VX7pe21WMqFhnDMcT7l0uY3B3L12n+fr+Ag6COv/pXp0qpZF2G
8g8+ve36KbYGLrD+UocxaQRbxrXvG2/5zgQ8o29jHgHomtVkFGNUaZgMifBQXWBt
tQAEhjR26p8cD9NkrpjYCAd/SQOhhes/0eak3eOXt1sfJTmuuRMvqqVhOH4GAfsL
1/1yJwXQEH46ijGb3n5IO7tMs2Jx9cKExBjD1d07deUAG7P+87GqVONobwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH4Xs7AxUjuBoN7/thMzztVSTeZOMB8GA1UdIwQY
MBaAFLmQyFz6DO1Sg2NJl+ekqozng222MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgt
NDczZjE1ZWMwZDUyLzEvZmhlenNERlNPNEdnM3YtMkV6UE8xVkpONWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgtNDczZjE1ZWMwZDUy
LzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXD1wAwQE
2RvQMA0GCSqGSIb3DQEBCwUAA4IBAQAGv/YTa5VHra/S2J5W11k7sGJTWh1533rV
j6naMQMTOjfDOehLIuOzYXxscEqcKpI7izgwBOLqP4j8UP4QfQVH1l2BGiFDeF4l
Yr7qfTgVu/SsQIckUQB2VtPpNUHsNr2SDwuuKXir1FeJmyOTJuPeEb9ewOoAJc7b
JuUD0EZ4qbGpCWE6ERUP5TuNDRmb2R/thKZDghz9JrvOcFNl4yUWq9Mzi93QdpK7
zCj2v23RjXTBkigSjtbweKIAamUCpo6TpI23oSckZBRJbwHWAIOcjrab/emkQlBt
LVi972F60y5yIBx3jiTZz7JM15HRCI+2/KjhCjeZyScDXD24kaw/
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:52:55 2025 by rpki-client