Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/mCKGYv7Hn8VpwzSrofG5k1K1u28.roa
File: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (raw, json)
Hash identifier: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=
Subject key identifier: 98:22:86:62:FE:C7:9F:C5:69:C3:34:AB:A1:F1:B9:93:52:B5:BB:6F
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 0194266B95FE9EAE70C15E1CFB8A1E120ABC
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/mCKGYv7Hn8VpwzSrofG5k1K1u28.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21355
IP address blocks: 194.31.14.0/23 maxlen: 24
194.99.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:95:fe:9e:ae:70:c1:5e:1c:fb:8a:1e:12:0a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98228662fec79fc569c334aba1f1b99352b5bb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:2d:25:2c:b5:dd:ff:26:f1:16:9c:3c:89:
ee:af:cc:f0:d4:de:08:b0:43:ea:00:45:bf:29:52:
92:14:a0:76:ea:5c:ef:c3:73:48:70:fd:f6:e1:ec:
e3:4d:79:1d:60:0c:42:1b:81:c1:0b:0b:cf:ba:dd:
e3:8f:5f:53:21:00:fb:4c:9f:95:5e:1b:68:4b:43:
4e:e2:0f:12:78:ad:b9:01:68:0b:4f:70:52:c3:0c:
5f:9b:27:2f:a0:f2:46:16:90:8e:57:36:dd:23:36:
a1:d6:c5:27:78:4e:e9:a1:c3:9a:54:da:71:8e:c6:
79:9d:01:6f:60:b0:f7:cc:ac:ee:65:be:73:86:5f:
a1:aa:23:91:18:c5:46:83:35:ad:e9:82:94:06:a1:
80:16:07:0b:30:f4:2e:9e:56:b0:91:16:63:fa:8b:
a9:7b:93:ae:03:ab:2e:37:22:8d:52:c6:b9:b1:4a:
d8:c2:08:4c:a2:59:7d:eb:7c:fd:5f:48:f0:29:ae:
bf:25:2c:54:03:ed:e7:c1:1d:b6:67:6d:ba:4a:e9:
d4:a4:00:e2:a7:05:f2:b7:c3:51:ad:32:aa:89:79:
0e:59:9a:72:af:f8:0b:09:98:59:ff:e5:76:a1:3a:
21:c6:09:c3:9e:05:a6:40:3e:80:3a:99:2f:ab:7a:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:22:86:62:FE:C7:9F:C5:69:C3:34:AB:A1:F1:B9:93:52:B5:BB:6F
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/mCKGYv7Hn8VpwzSrofG5k1K1u28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.14.0/23
194.99.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:8c:ff:5c:f4:e1:68:9b:b6:8d:57:d8:0f:3c:f1:0e:aa:f7:
8f:88:c6:18:f4:58:b2:de:39:38:88:02:86:41:25:5b:9e:2e:
46:e6:f6:14:33:2c:59:ed:7d:43:62:32:63:32:bc:01:f9:46:
b1:d0:39:2d:6d:b2:df:f7:72:eb:08:11:86:42:b2:f8:25:b7:
2c:d9:fb:96:4c:95:11:a6:a5:7e:9c:f8:f3:dc:7e:ba:d6:0e:
4f:76:c9:2f:b0:e6:ca:04:dc:57:e2:be:83:b3:bd:b7:5a:9e:
ba:24:c0:d8:fe:e4:6d:eb:69:85:fb:d3:5f:1d:6b:92:23:af:
ea:b6:8a:29:4a:06:34:ae:18:71:2e:83:24:57:08:65:9c:8e:
16:f9:6a:8f:d6:ef:89:6b:af:e5:e5:6e:6d:34:48:b3:39:fe:
46:7b:64:c9:e3:2c:3f:cc:2b:3a:af:ca:00:5f:b5:b4:e4:fa:
b2:0e:58:cb:59:ee:4d:0c:1f:0e:2a:3d:a5:04:07:84:3e:32:
62:3a:99:1f:5f:6f:b3:dc:c1:e1:58:08:71:58:dd:e0:0c:18:
dc:13:8e:18:a6:cd:65:34:19:0d:8e:b1:0f:82:13:54:47:93:
42:92:d1:51:03:b6:d0:97:ec:aa:cf:29:c8:a7:fa:c7:08:53:
1c:29:0a:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma5X+nq5wwV4c+4oeEgq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNWFhMGFmZThlNmYwYmI4NWU1Yzc1ZjJmNmMxNDEyMTgz
MGVjODUwHhcNMjUwMTAyMDk0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODIyODY2MmZlYzc5ZmM1NjljMzM0YWJhMWYxYjk5MzUyYjViYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyEtJSy13f8m8RacPInur8zw1N4I
sEPqAEW/KVKSFKB26lzvw3NIcP324ezjTXkdYAxCG4HBCwvPut3jj19TIQD7TJ+V
XhtoS0NO4g8SeK25AWgLT3BSwwxfmycvoPJGFpCOVzbdIzah1sUneE7pocOaVNpx
jsZ5nQFvYLD3zKzuZb5zhl+hqiORGMVGgzWt6YKUBqGAFgcLMPQunlawkRZj+oup
e5OuA6suNyKNUsa5sUrYwghMoll963z9X0jwKa6/JSxUA+3nwR22Z226SunUpADi
pwXyt8NRrTKqiXkOWZpyr/gLCZhZ/+V2oTohxgnDngWmQD6AOpkvq3o+BQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJgihmL+x5/FacM0q6HxuZNStbtvMB8GA1UdIwQY
MBaAFH1aoK/o5vC7heXHXy9sFBIYMOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2Yt
OGZmYjEyN2IzMjRlLzEvbUNLR1l2N0huOFZwd3pTcm9mRzVrMUsxdTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2YtOGZmYjEyN2IzMjRl
LzEvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwh8OAwQB
wmNYMA0GCSqGSIb3DQEBCwUAA4IBAQANjP9c9OFom7aNV9gPPPEOqvePiMYY9Fiy
3jk4iAKGQSVbni5G5vYUMyxZ7X1DYjJjMrwB+Uax0DktbbLf93LrCBGGQrL4Jbcs
2fuWTJURpqV+nPjz3H661g5PdskvsObKBNxX4r6Ds723Wp66JMDY/uRt62mF+9Nf
HWuSI6/qtoopSgY0rhhxLoMkVwhlnI4W+WqP1u+Ja6/l5W5tNEizOf5Ge2TJ4yw/
zCs6r8oAX7W05PqyDljLWe5NDB8OKj2lBAeEPjJiOpkfX2+z3MHhWAhxWN3gDBjc
E44Yps1lNBkNjrEPghNUR5NCktFRA7bQl+yqzynIp/rHCFMcKQpf
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:42:08 2025 by rpki-client