Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa
File: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (raw, json)
Hash identifier: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=
Subject key identifier: ED:0F:3F:BE:6E:4F:90:E7:62:93:22:7C:B1:25:3A:5E:96:B1:E9:D9
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01941F8C9A8510DE45B42835FDD2F2A7125D
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 178.248.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9a:85:10:de:45:b4:28:35:fd:d2:f2:a7:12:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed0f3fbe6e4f90e76293227cb1253a5e96b1e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:ad:f6:af:17:56:47:f8:09:46:07:9a:28:
d4:93:46:d0:54:99:72:33:d4:1e:a7:8d:09:ab:71:
4f:08:04:a1:50:35:22:b4:8d:12:a2:b6:a4:e3:9b:
a7:fb:6a:14:dc:7f:6b:d7:10:7e:83:a5:30:70:7f:
31:16:4b:92:85:10:97:be:09:1f:ec:91:e7:d5:95:
25:10:bf:3d:7f:89:2c:35:f6:8a:14:b9:1b:b5:a5:
21:ed:e7:63:13:dc:f6:18:24:a9:91:5d:5f:80:50:
2f:6e:ba:d7:b0:75:a4:2a:42:8a:73:82:2e:4f:2f:
1e:5b:82:aa:c8:2a:30:c9:16:63:62:71:a4:71:98:
d5:e2:1d:9b:a3:23:b9:02:79:7a:23:f6:2e:2d:55:
5e:af:e7:90:ba:ab:ba:44:8f:8d:79:d2:89:84:38:
b4:e2:29:28:32:4c:61:46:40:c3:17:f7:b0:a2:bb:
75:96:3d:b7:23:50:88:9d:57:37:e5:c3:cf:1f:bb:
4e:5b:d2:63:e2:c2:6a:e2:57:eb:59:11:fb:77:45:
c3:63:80:48:f7:74:d5:9d:ad:19:df:7c:c6:d4:af:
a5:f9:a7:e3:76:d3:b1:8a:cb:7c:21:27:6d:e1:1d:
a2:12:83:03:e5:dd:95:ec:9a:49:e3:6a:5f:e9:d8:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:3F:BE:6E:4F:90:E7:62:93:22:7C:B1:25:3A:5E:96:B1:E9:D9
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.184.0/21
Signature Algorithm: sha256WithRSAEncryption
42:66:53:d2:10:34:dc:22:2a:1b:61:f9:69:b8:aa:2d:16:2d:
19:4b:0c:50:40:eb:ce:09:c6:b5:c5:80:1e:21:91:25:6e:01:
1b:84:ab:62:70:c7:80:a0:23:a4:ad:16:f5:e5:43:46:83:a9:
00:ce:6c:77:54:7f:7e:ba:9f:ad:c8:14:b9:7f:6c:b7:04:94:
03:88:20:33:98:fd:02:84:91:e6:74:18:2c:04:69:83:de:1f:
59:ea:67:e1:9e:e9:98:57:e9:f7:25:eb:5a:58:c0:bf:45:3c:
bd:0f:84:a1:be:4e:4d:35:2b:76:26:f3:d5:18:50:49:ea:c1:
ee:9e:ae:f3:33:9e:f4:6b:41:24:e9:35:ef:a1:4d:7a:2d:09:
b6:56:e3:8d:66:f7:51:c1:dd:89:40:1d:1a:a3:71:c8:22:f9:
47:14:a3:29:7d:ba:b1:a9:48:a0:28:9f:1e:32:d8:0f:fe:b5:
87:9f:49:1e:a1:3d:21:e7:ef:4e:7f:f4:88:52:de:2b:c6:d4:
77:31:40:57:ed:63:c4:af:6a:3a:be:5a:08:0c:5c:ae:a5:10:
e4:5c:7b:47:96:6b:1c:a3:49:97:1e:b0:71:13:a9:f6:e8:70:
90:56:7d:7b:f2:94:51:a2:af:bb:ba:9d:08:4c:04:6f:80:f7:
5d:35:30:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJqFEN5FtCg1/dLypxJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDBmM2ZiZTZlNGY5MGU3NjI5MzIyN2NiMTI1M2E1ZTk2YjFlOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFmt9q8XVkf4CUYHmijUk0bQVJly
M9Qep40Jq3FPCAShUDUitI0Sorak45un+2oU3H9r1xB+g6UwcH8xFkuShRCXvgkf
7JHn1ZUlEL89f4ksNfaKFLkbtaUh7edjE9z2GCSpkV1fgFAvbrrXsHWkKkKKc4Iu
Ty8eW4KqyCowyRZjYnGkcZjV4h2boyO5Anl6I/YuLVVer+eQuqu6RI+NedKJhDi0
4ikoMkxhRkDDF/ewort1lj23I1CInVc35cPPH7tOW9Jj4sJq4lfrWRH7d0XDY4BI
93TVna0Z33zG1K+l+afjdtOxist8ISdt4R2iEoMD5d2V7JpJ42pf6di9dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0PP75uT5DnYpMifLElOl6WsenZMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvN1E4X3ZtNVBrT2Rpa3lKOHNTVTZYcGF4NmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvi4MA0G
CSqGSIb3DQEBCwUAA4IBAQBCZlPSEDTcIiobYflpuKotFi0ZSwxQQOvOCca1xYAe
IZElbgEbhKticMeAoCOkrRb15UNGg6kAzmx3VH9+up+tyBS5f2y3BJQDiCAzmP0C
hJHmdBgsBGmD3h9Z6mfhnumYV+n3JetaWMC/RTy9D4Shvk5NNSt2JvPVGFBJ6sHu
nq7zM570a0Ek6TXvoU16LQm2VuONZvdRwd2JQB0ao3HIIvlHFKMpfbqxqUigKJ8e
MtgP/rWHn0keoT0h5+9Of/SIUt4rxtR3MUBX7WPEr2o6vloIDFyupRDkXHtHlmsc
o0mXHrBxE6n26HCQVn178pRRoq+7up0ITARvgPddNTBo
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:07:36 2025 by rpki-client