Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa
File: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (raw, json)
Hash identifier: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=
Subject key identifier: FB:B6:34:BF:18:06:8C:50:EB:02:B2:71:6D:26:62:28:F1:E3:A4:B2
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 019420D59B29BFF1DE55988FC7404E0465AC
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.93.64.0/24 maxlen: 24
193.93.65.0/24 maxlen: 24
193.93.66.0/24 maxlen: 24
193.93.67.0/24 maxlen: 24
2001:678:890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9b:29:bf:f1:de:55:98:8f:c7:40:4e:04:65:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb634bf18068c50eb02b2716d266228f1e3a4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:7b:7f:f4:eb:27:22:d7:c3:14:09:1b:f3:
27:8a:27:e9:24:8a:d5:4e:a0:0d:1b:d0:90:32:a8:
f1:69:e9:2b:4b:6b:1a:7a:b1:c6:2b:27:23:af:d4:
8a:ce:60:a7:c9:ba:e8:0e:8c:94:6e:2a:0b:c6:b1:
0f:eb:10:a2:0f:e9:f7:7e:cc:7c:f4:f4:7b:11:ed:
d6:96:6f:60:0b:ca:d7:7e:09:a8:ee:69:b0:76:1d:
8f:1e:ef:1b:b9:23:ad:dc:9f:de:60:43:1a:c6:09:
1a:2d:2c:b1:b6:46:0c:04:fc:58:80:9f:1f:83:d4:
ad:af:7f:22:fe:2d:d2:3b:74:13:e5:bb:9f:cd:71:
f7:af:4b:a6:bd:ec:30:5b:31:22:c5:dc:08:54:f0:
43:68:f8:3c:5c:c0:23:71:60:40:45:b6:1b:cb:93:
34:38:8f:c1:93:d3:61:54:ae:f1:67:25:92:1a:81:
91:22:36:d2:c8:b4:01:9d:44:c6:b7:94:cc:9f:6c:
e8:31:81:c0:0a:5b:49:e2:c6:bd:ac:95:4e:f4:92:
8b:77:12:a3:2e:4d:a2:d0:d1:7b:fa:ad:c8:9b:7f:
fc:8b:f0:4c:25:83:c7:ee:4d:21:cc:7a:c1:2a:68:
15:d7:74:fb:28:2d:bc:07:80:ae:c9:79:5c:f0:20:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B6:34:BF:18:06:8C:50:EB:02:B2:71:6D:26:62:28:F1:E3:A4:B2
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
IPv6:
2001:678:890::/48
Signature Algorithm: sha256WithRSAEncryption
68:b0:5f:2c:b2:7a:77:2c:dc:cb:d9:a8:29:28:9e:32:26:26:
41:4f:22:a4:73:65:6f:5a:bc:ad:d1:c1:be:1b:c4:e4:db:6f:
89:97:23:8f:84:94:45:12:d7:27:57:6f:73:76:09:b3:67:40:
8d:2a:57:68:71:50:48:c2:90:2a:56:87:ac:25:16:fa:a7:b4:
e8:c0:99:41:ff:5e:bc:0f:09:13:af:8c:fe:30:cb:79:0f:ac:
de:57:f6:04:86:fe:f3:1a:f7:73:42:bb:c1:ed:59:2a:28:12:
43:94:4c:27:d3:af:c2:31:6e:6a:70:54:77:a8:82:4e:4f:89:
0e:f3:f8:ab:7c:35:24:27:50:3b:bd:66:ac:10:9a:3c:98:3e:
85:10:f3:81:e6:43:1a:34:8b:c6:38:7e:3d:ec:bf:eb:92:e9:
d8:d8:9f:98:b8:d5:b9:af:c7:c8:bc:82:33:56:a6:5f:f3:68:
7a:4f:94:9a:5a:ac:03:44:f0:1f:03:b7:d9:3c:09:b1:83:86:
55:22:94:77:d8:ed:ee:dc:39:f5:69:4f:21:91:a4:ba:cf:85:
ab:c6:58:7e:a6:0f:6f:77:c0:44:cb:4f:69:24:4f:9c:59:f9:
5f:78:92:65:a0:8d:90:32:ca:1a:1f:d2:3b:e6:a1:55:ec:f4:
40:04:08:ca
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQg1Zspv/HeVZiPx0BOBGWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3
OTAwYTgwHhcNMjUwMTAxMDc0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmI2MzRiZjE4MDY4YzUwZWIwMmIyNzE2ZDI2NjIyOGYxZTNhNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufl7f/TrJyLXwxQJG/MniifpJIrV
TqANG9CQMqjxaekrS2saerHGKycjr9SKzmCnybroDoyUbioLxrEP6xCiD+n3fsx8
9PR7Ee3Wlm9gC8rXfgmo7mmwdh2PHu8buSOt3J/eYEMaxgkaLSyxtkYMBPxYgJ8f
g9Str38i/i3SO3QT5bufzXH3r0umvewwWzEixdwIVPBDaPg8XMAjcWBARbYby5M0
OI/Bk9NhVK7xZyWSGoGRIjbSyLQBnUTGt5TMn2zoMYHACltJ4sa9rJVO9JKLdxKj
Lk2i0NF7+q3Im3/8i/BMJYPH7k0hzHrBKmgV13T7KC28B4CuyXlc8CCZ0QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPu2NL8YBoxQ6wKycW0mYijx46SyMB8GA1UdIwQY
MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt
NTY2M2RlMTZkNjZmLzEvMS03WTB2eGdHakZEckFySnhiU1ppS1BIanBMSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODkvM2M2MzRhLTBjZDktNDc2NS1iZDA5LTU2NjNkZTE2ZDY2
Zi8xL2FXeG5zbDB2SWwyWExQM3p0T3JfSXVONUFLZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAsFdQDAP
BAIAAjAJAwcAIAEGeAiQMA0GCSqGSIb3DQEBCwUAA4IBAQBosF8ssnp3LNzL2agp
KJ4yJiZBTyKkc2VvWryt0cG+G8Tk22+JlyOPhJRFEtcnV29zdgmzZ0CNKldocVBI
wpAqVoesJRb6p7TowJlB/168DwkTr4z+MMt5D6zeV/YEhv7zGvdzQrvB7VkqKBJD
lEwn06/CMW5qcFR3qIJOT4kO8/irfDUkJ1A7vWasEJo8mD6FEPOB5kMaNIvGOH49
7L/rkunY2J+YuNW5r8fIvIIzVqZf82h6T5SaWqwDRPAfA7fZPAmxg4ZVIpR32O3u
3Dn1aU8hkaS6z4Wrxlh+pg9vd8BEy09pJE+cWflfeJJloI2QMsoaH9I75qFV7PRA
BAjK
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:44 2025 by rpki-client