Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/97b_DOZexsMsbNq0jd1_KnrCkGw.roa
File: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (raw, json)
Hash identifier: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=
Subject key identifier: F7:B6:FF:0C:E6:5E:C6:C3:2C:6C:DA:B4:8D:DD:7F:2A:7A:C2:90:6C
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019423699989D394EEAE7D5BE24F316AF9B1
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/97b_DOZexsMsbNq0jd1_KnrCkGw.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212754
IP address blocks: 193.19.248.0/22 maxlen: 24
2a0a:2300::/31 maxlen: 32
2a0a:2302::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:99:89:d3:94:ee:ae:7d:5b:e2:4f:31:6a:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b6ff0ce65ec6c32c6cdab48ddd7f2a7ac2906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:be:58:6f:81:43:30:c9:7e:f1:d1:e3:70:
e8:60:fd:b7:91:d3:29:46:0f:1a:bf:93:80:81:41:
f2:51:15:4f:aa:d2:32:b9:cd:ff:c9:94:e3:62:f8:
f3:80:76:04:3e:1d:bf:a2:0d:10:f5:21:52:f2:1e:
b7:d8:5a:09:3d:c9:c2:44:5c:90:bc:74:48:de:0e:
6f:1f:fc:01:e6:a3:8c:79:a2:1b:1f:39:99:68:3a:
6f:67:fe:73:cd:a4:42:e5:e0:db:ee:f9:c6:8a:ee:
42:69:00:5a:5f:22:bf:d5:2d:f8:f9:4a:72:71:27:
5a:12:5a:00:f7:84:69:f3:04:4f:35:d3:e7:7f:c2:
8b:ea:d3:b0:d7:be:f1:78:9a:2b:50:eb:23:30:8e:
01:17:03:6a:69:58:33:aa:1c:ba:ed:74:7e:24:af:
50:44:f6:b8:d2:30:5a:22:c1:21:7b:30:10:79:b2:
d4:6f:6f:b9:3c:74:ee:7a:bb:12:18:32:57:d3:c5:
d3:a6:c7:a9:83:7b:a2:ca:5a:a5:56:ea:55:c0:4c:
7c:01:7e:47:d8:61:e2:c1:1e:36:6e:90:b0:48:00:
4f:93:b6:ba:5a:50:aa:68:86:a5:7d:de:49:50:da:
ac:40:fa:99:dd:be:fd:c2:67:7f:86:b4:d5:e3:81:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:FF:0C:E6:5E:C6:C3:2C:6C:DA:B4:8D:DD:7F:2A:7A:C2:90:6C
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/97b_DOZexsMsbNq0jd1_KnrCkGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.248.0/22
IPv6:
2a0a:2300::-2a0a:2302:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:62:45:a9:d4:f2:05:e0:22:77:c8:9b:b1:65:a2:29:4b:37:
30:ce:15:76:6e:cd:1c:17:19:86:a3:cc:3e:0b:01:a4:79:88:
1c:69:1a:7b:5c:4d:29:12:74:c5:d1:88:2b:56:22:c8:4b:52:
bb:f8:fe:fa:1e:c5:b4:94:2f:fd:f2:3b:6f:6d:71:42:56:e5:
5f:14:e7:27:c2:6f:72:be:e9:c6:5d:3f:98:a9:9b:8d:eb:69:
69:9c:d6:36:89:fa:9d:99:89:d4:bc:d1:51:33:11:26:75:a6:
aa:fb:b6:df:c8:e7:84:ad:f3:33:1d:0c:13:12:51:e6:59:1d:
ac:f0:41:28:e4:9e:c0:8e:fd:5e:73:d6:b5:d1:ae:4d:d7:02:
9d:cc:96:b5:ee:0c:dc:61:ac:c3:77:47:47:2f:ac:fd:5b:05:
47:43:63:91:e4:b4:4e:54:e3:94:6b:e3:ff:6f:fc:5c:f8:ab:
0e:dc:3b:dc:78:06:70:34:d1:17:2f:9b:b8:87:ec:11:b2:60:
d2:d5:57:47:53:33:a0:d8:98:46:d8:b1:43:50:45:97:62:d1:
36:09:85:aa:c8:95:cd:05:7f:4b:bd:c8:36:08:e8:53:58:66:
1d:19:d9:09:7c:ef:43:af:fc:fb:4e:fe:64:80:5f:b8:2a:8e:
75:fa:31:19
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQjaZmJ05Turn1b4k8xavmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTc3YjUyODA0M2E4NTk1M2ZjMjUwZjk5MWQ5ZDgwMjBl
MjgxMGQwHhcNMjUwMTAxMTk0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2I2ZmYwY2U2NWVjNmMzMmM2Y2RhYjQ4ZGRkN2YyYTdhYzI5MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfS+WG+BQzDJfvHR43DoYP23kdMp
Rg8av5OAgUHyURVPqtIyuc3/yZTjYvjzgHYEPh2/og0Q9SFS8h632FoJPcnCRFyQ
vHRI3g5vH/wB5qOMeaIbHzmZaDpvZ/5zzaRC5eDb7vnGiu5CaQBaXyK/1S34+Upy
cSdaEloA94Rp8wRPNdPnf8KL6tOw177xeJorUOsjMI4BFwNqaVgzqhy67XR+JK9Q
RPa40jBaIsEhezAQebLUb2+5PHTuersSGDJX08XTpsepg3uiylqlVupVwEx8AX5H
2GHiwR42bpCwSABPk7a6WlCqaIalfd5JUNqsQPqZ3b79wmd/hrTV44GWlwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFPe2/wzmXsbDLGzatI3dfyp6wpBsMB8GA1UdIwQY
MBaAFDwXe1KAQ6hZU/wlD5kdnYAg4oENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMt
YTQxNTFiNWUyZmNmLzEvOTdiX0RPWmV4c01zYk5xMGpkMV9LbnJDa0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMtYTQxNTFiNWUyZmNm
LzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQCwRP4MBUE
AgACMA8wDQMEACoKIwMFACoKIwIwDQYJKoZIhvcNAQELBQADggEBAJNiRanU8gXg
InfIm7FloilLNzDOFXZuzRwXGYajzD4LAaR5iBxpGntcTSkSdMXRiCtWIshLUrv4
/voexbSUL/3yO29tcUJW5V8U5yfCb3K+6cZdP5ipm43raWmc1jaJ+p2ZidS80VEz
ESZ1pqr7tt/I54St8zMdDBMSUeZZHazwQSjknsCO/V5z1rXRrk3XAp3MlrXuDNxh
rMN3R0cvrP1bBUdDY5HktE5U45Rr4/9v/Fz4qw7cO9x4BnA00Rcvm7iH7BGyYNLV
V0dTM6DYmEbYsUNQRZdi0TYJharIlc0Ff0u9yDYI6FNYZh0Z2Ql870Ov/PtO/mSA
X7gqjnX6MRk=
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:09 2025 by rpki-client