Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/lXFx9ALxZQorihL48BvDF3NJkOc.roa
File: lXFx9ALxZQorihL48BvDF3NJkOc.roa (raw, json)
Hash identifier: XO0/325FUJcPPA5WPlVW2WrXVo9UePYr9iPMeGFfH+o=
Subject key identifier: 95:71:71:F4:02:F1:65:0A:2B:8A:12:F8:F0:1B:C3:17:73:49:90:E7
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01942E05CBE1FEBF56A354ADA611C91D0D8C
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/lXFx9ALxZQorihL48BvDF3NJkOc.roa
Signing time: Fri 03 Jan 2025 21:15:19 +0000
ROA not before: Fri 03 Jan 2025 21:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25288
IP address blocks: 185.163.207.0/24 maxlen: 24
195.140.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2e:05:cb:e1:fe:bf:56:a3:54:ad:a6:11:c9:1d:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 3 21:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=957171f402f1650a2b8a12f8f01bc317734990e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:4c:73:32:9f:7a:76:c7:1e:81:f4:25:a5:
38:a3:7a:2c:35:ca:57:26:06:0b:3a:4f:4a:40:7e:
c3:1a:57:e9:2d:eb:42:2b:23:24:a1:1d:2f:3d:7d:
65:47:7c:80:11:79:80:68:48:6f:70:b1:27:65:16:
22:3c:4b:42:2f:42:a0:69:9a:c2:77:7e:05:e5:0e:
11:19:b0:68:6c:55:46:23:bb:7f:7a:d6:1b:b0:28:
6f:6d:e2:74:bd:97:8f:7c:cf:32:ad:50:c3:c1:0f:
ce:64:9b:d5:b8:51:8a:9d:96:f6:e7:94:fb:e5:89:
c7:30:1c:65:f9:b5:1d:ce:58:6c:8f:b2:f7:06:17:
5a:38:9f:f4:6d:a6:82:c0:0a:d5:59:06:94:df:bc:
3f:85:43:c3:ae:82:25:51:4b:8d:2b:ec:35:b8:92:
d2:f7:45:ee:c2:72:0b:0e:a1:ae:fa:e3:20:6d:90:
4b:41:bd:28:1a:f5:ff:86:d8:98:46:ad:dc:7b:ca:
97:3e:3d:20:e5:c0:fb:37:b4:b0:b2:2d:04:0f:04:
c6:53:f2:81:d4:82:6f:f5:a3:4c:34:a8:8b:b1:2f:
ed:5f:b3:98:4a:b2:6f:14:e2:94:37:29:cb:4a:b6:
b0:12:3b:89:34:7a:e8:40:a3:5e:5f:7a:e0:c4:58:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:71:71:F4:02:F1:65:0A:2B:8A:12:F8:F0:1B:C3:17:73:49:90:E7
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/lXFx9ALxZQorihL48BvDF3NJkOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.207.0/24
195.140.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e3:72:12:d2:1b:ed:32:e9:2f:eb:0d:ab:59:f6:61:30:47:
67:e0:22:56:7b:92:b7:97:e2:86:24:67:a0:c5:be:7a:60:d9:
d6:95:1e:0d:4e:77:3b:84:21:57:75:c2:67:df:ca:2c:ff:86:
bf:5f:ec:4f:ed:e9:95:3f:d2:dc:d5:4a:d5:ac:de:ce:e3:b6:
07:a5:a4:f1:76:21:85:ed:0a:59:c7:e5:a3:e4:ef:15:66:ae:
58:60:b9:b7:c1:f8:dc:ab:d7:dc:ac:3d:1e:f1:14:43:15:3d:
75:4a:b2:fe:52:b0:68:0d:db:e1:31:45:21:a5:a4:41:02:39:
87:b1:77:28:10:39:cf:cc:83:00:ce:2d:cc:0c:46:8b:2a:cb:
52:06:de:50:41:0b:c1:31:83:24:6f:3b:0d:3c:75:3d:36:66:
2e:8e:28:09:23:e2:d0:05:44:7e:aa:83:e2:e5:42:17:34:c8:
54:ac:1a:5b:4d:bd:b2:df:2a:9f:8a:b5:80:2d:bc:4d:04:04:
c1:fd:03:d3:ee:b4:54:ef:90:dd:1b:a0:e6:e9:b1:74:35:9e:
61:a7:7c:19:7c:e7:e6:a1:3b:73:59:0d:36:ac:f0:a3:ee:1d:
4e:0b:ae:7a:88:75:6c:62:57:0a:f6:7d:91:93:41:7c:39:d2:
25:ba:4b:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQuBcvh/r9Wo1StphHJHQ2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwMTAzMjExNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTcxNzFmNDAyZjE2NTBhMmI4YTEyZjhmMDFiYzMxNzczNDk5MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/1MczKfenbHHoH0JaU4o3osNcpX
JgYLOk9KQH7DGlfpLetCKyMkoR0vPX1lR3yAEXmAaEhvcLEnZRYiPEtCL0KgaZrC
d34F5Q4RGbBobFVGI7t/etYbsChvbeJ0vZePfM8yrVDDwQ/OZJvVuFGKnZb255T7
5YnHMBxl+bUdzlhsj7L3BhdaOJ/0baaCwArVWQaU37w/hUPDroIlUUuNK+w1uJLS
90XuwnILDqGu+uMgbZBLQb0oGvX/htiYRq3ce8qXPj0g5cD7N7Swsi0EDwTGU/KB
1IJv9aNMNKiLsS/tX7OYSrJvFOKUNynLSrawEjuJNHroQKNeX3rgxFhsvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJVxcfQC8WUKK4oS+PAbwxdzSZDnMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvbFhGeDlBTHhaUW9yaWhMNDhCdkRGM05Ka09jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaPPAwQC
w4ywMA0GCSqGSIb3DQEBCwUAA4IBAQAa43IS0hvtMukv6w2rWfZhMEdn4CJWe5K3
l+KGJGegxb56YNnWlR4NTnc7hCFXdcJn38os/4a/X+xP7emVP9Lc1UrVrN7O47YH
paTxdiGF7QpZx+Wj5O8VZq5YYLm3wfjcq9fcrD0e8RRDFT11SrL+UrBoDdvhMUUh
paRBAjmHsXcoEDnPzIMAzi3MDEaLKstSBt5QQQvBMYMkbzsNPHU9NmYujigJI+LQ
BUR+qoPi5UIXNMhUrBpbTb2y3yqfirWALbxNBATB/QPT7rRU75DdG6Dm6bF0NZ5h
p3wZfOfmoTtzWQ02rPCj7h1OC656iHVsYlcK9n2Rk0F8OdIlukuX
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:49 2025 by rpki-client