Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/T7iXt4sJUoDnHP-qWowXfwJDp5I.roa
File: T7iXt4sJUoDnHP-qWowXfwJDp5I.roa (raw, json)
Hash identifier: KTxUHbHDaHdkVbRY7Vka++NBqUDid63y2hSOJuy207k=
Subject key identifier: 4F:B8:97:B7:8B:09:52:80:E7:1C:FF:AA:5A:8C:17:7F:02:43:A7:92
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 0194221F8D83A295F0119E2AA8549725CF85
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/T7iXt4sJUoDnHP-qWowXfwJDp5I.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49348
IP address blocks: 185.86.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8d:83:a2:95:f0:11:9e:2a:a8:54:97:25:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fb897b78b095280e71cffaa5a8c177f0243a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:69:9e:5a:53:6b:db:f8:fc:e2:1e:ac:d4:
95:20:d0:c4:8b:4b:18:bc:5f:5c:6d:ef:f4:7b:34:
76:54:ab:47:a3:c4:8d:f2:76:6b:de:6b:8b:ef:0b:
dd:f8:37:86:f0:e8:06:c3:14:bb:8a:d4:e7:ba:2c:
33:50:6a:65:62:ef:9b:2c:3f:b0:0d:5d:6e:0f:7a:
3b:85:75:4f:76:10:c1:7a:4b:21:be:28:ba:50:e5:
fd:54:61:3b:8f:bc:c8:c3:05:c2:17:38:54:77:da:
5b:01:73:bd:0e:d4:40:fa:9b:6f:92:cc:6e:82:e2:
ea:56:c7:17:25:18:41:ab:8b:4b:05:59:17:51:83:
5b:ab:6c:59:69:9b:21:f0:3b:13:8f:9d:7b:ad:0b:
80:d8:ae:18:d8:e1:b2:14:84:57:4d:07:35:ff:e6:
bf:55:ab:46:6c:bd:87:40:60:1f:1e:7f:62:4a:58:
24:9d:51:64:fe:41:97:c5:5f:ba:c0:34:ac:72:95:
06:3c:1d:18:bc:fb:cb:38:b1:ea:fe:5f:ed:df:84:
92:81:c7:3d:b6:38:9e:4b:e9:40:75:88:d8:e3:34:
65:cc:eb:e9:0e:b3:3a:79:2d:fe:c8:69:77:fc:26:
24:4c:7c:d3:f9:ce:d9:32:8e:ae:c2:1e:0f:b3:41:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:97:B7:8B:09:52:80:E7:1C:FF:AA:5A:8C:17:7F:02:43:A7:92
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/T7iXt4sJUoDnHP-qWowXfwJDp5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.228.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:a5:c0:47:b1:02:e6:2f:68:c8:f4:ef:52:8a:50:8d:bd:ab:
c0:9c:e7:26:7f:0d:74:cd:34:86:9a:31:93:91:99:b3:33:cc:
d4:d8:eb:7e:76:f9:00:9c:92:6b:9f:98:2e:7e:70:cb:d5:ea:
f9:cd:97:1c:97:53:db:94:db:e5:8d:25:46:ca:f3:cb:df:31:
2e:39:39:e8:cd:f4:2f:3f:be:b1:c0:88:06:17:a1:ef:2e:c2:
60:90:dc:60:dc:bf:74:57:29:d5:cb:db:a3:bb:58:e5:da:58:
6f:ae:51:55:af:84:41:49:4f:a0:8f:27:b3:b3:65:56:53:d1:
92:7f:f4:2d:73:8d:d3:31:d5:90:59:3f:fb:ab:1b:fc:e0:59:
81:4d:3d:9a:43:23:4f:1e:e7:a4:c8:34:6e:ce:03:0f:23:e5:
c2:3f:2a:4c:08:17:6f:28:54:63:ee:35:de:47:77:8a:e5:4b:
3a:b2:4b:25:2a:f7:fd:b2:42:64:9d:46:ba:66:1d:a8:14:cf:
cc:95:2c:76:49:6a:08:9f:44:62:05:e9:5b:84:64:62:7e:d1:
3f:19:3a:a6:21:bd:3e:25:a7:a7:21:74:c7:97:67:99:95:63:
9d:dc:8b:28:fb:b2:d0:7d:1d:d3:60:21:9b:5e:73:89:e8:a0:
e8:60:1b:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH42DopXwEZ4qqFSXJc+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOTc1ZDVkYTlkYThhMDc0YjMzZmJjYjVjMDlkNTAzYTNi
NDQzYTEwHhcNMjUwMTAxMTM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmI4OTdiNzhiMDk1MjgwZTcxY2ZmYWE1YThjMTc3ZjAyNDNhNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj1pnlpTa9v4/OIerNSVINDEi0sY
vF9cbe/0ezR2VKtHo8SN8nZr3muL7wvd+DeG8OgGwxS7itTnuiwzUGplYu+bLD+w
DV1uD3o7hXVPdhDBekshvii6UOX9VGE7j7zIwwXCFzhUd9pbAXO9DtRA+ptvksxu
guLqVscXJRhBq4tLBVkXUYNbq2xZaZsh8DsTj517rQuA2K4Y2OGyFIRXTQc1/+a/
VatGbL2HQGAfHn9iSlgknVFk/kGXxV+6wDSscpUGPB0YvPvLOLHq/l/t34SSgcc9
tjieS+lAdYjY4zRlzOvpDrM6eS3+yGl3/CYkTHzT+c7ZMo6uwh4Ps0Hx8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE+4l7eLCVKA5xz/qlqMF38CQ6eSMB8GA1UdIwQY
MBaAFHOXXV2p2ooHSzP7y1wJ1QOjtEOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMDE3MmUtNjljMi00MjJmLTgyOTYt
OWU4MGQwZDg3YzJkLzEvVDdpWHQ0c0pVb0RuSFAtcVdvd1hmd0pEcDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mMDE3MmUtNjljMi00MjJmLTgyOTYtOWU4MGQwZDg3YzJk
LzEvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVbkMA0G
CSqGSIb3DQEBCwUAA4IBAQDBpcBHsQLmL2jI9O9SilCNvavAnOcmfw10zTSGmjGT
kZmzM8zU2Ot+dvkAnJJrn5gufnDL1er5zZccl1PblNvljSVGyvPL3zEuOTnozfQv
P76xwIgGF6HvLsJgkNxg3L90VynVy9uju1jl2lhvrlFVr4RBSU+gjyezs2VWU9GS
f/Qtc43TMdWQWT/7qxv84FmBTT2aQyNPHuekyDRuzgMPI+XCPypMCBdvKFRj7jXe
R3eK5Us6skslKvf9skJknUa6Zh2oFM/MlSx2SWoIn0RiBelbhGRiftE/GTqmIb0+
JaenIXTHl2eZlWOd3Iso+7LQfR3TYCGbXnOJ6KDoYBvO
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:22 2025 by rpki-client