Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa
File: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (raw, json)
Hash identifier: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=
Subject key identifier: 0A:4F:0A:58:03:A9:D0:E8:80:A6:2F:2C:33:C0:E5:C0:D8:B6:88:DC
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 019422FB93E27C6DE4D763A2275ADFDA654A
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60762
IP address blocks: 176.62.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:93:e2:7c:6d:e4:d7:63:a2:27:5a:df:da:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4f0a5803a9d0e880a62f2c33c0e5c0d8b688dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:28:c7:dd:0b:fa:23:ca:03:6d:21:73:69:
3a:17:b2:b0:30:ce:a5:13:0e:32:f2:ab:b4:3b:b4:
59:be:35:a0:d9:ca:ae:72:ef:48:e9:72:2a:39:52:
12:22:7b:0c:b5:ab:e5:1e:63:72:bb:00:98:f3:e1:
4f:b8:d0:73:49:e0:e3:d6:3c:ba:0e:db:6a:71:9e:
13:6d:59:a6:fc:2c:94:39:a9:25:50:c0:13:4e:9a:
ca:e2:38:2e:dd:27:97:db:44:5d:fe:cc:a1:a7:c5:
4e:f1:fc:7e:c4:d8:e7:03:a1:c7:62:cc:30:74:55:
ff:9f:90:4f:d0:aa:68:ae:f4:6f:78:9b:58:a7:9a:
26:41:52:7d:85:af:f9:f9:e6:72:3a:e1:ed:91:16:
6e:ff:53:f3:b5:d0:6d:c3:6e:e3:0c:6e:96:59:fc:
87:5b:37:65:dc:a1:de:a8:4f:b1:b8:00:bf:f2:46:
04:41:84:49:f5:5f:20:d1:28:f9:ba:c1:04:c4:b3:
7c:b9:b5:bb:ea:a1:1c:95:08:08:70:05:84:f2:7e:
c8:7a:b3:bf:ae:93:25:28:22:b2:5b:ec:74:0c:51:
0d:5e:70:b5:23:93:be:30:2e:4e:b1:d7:22:a1:cd:
d7:7d:20:7a:75:86:aa:0a:bc:97:f6:90:13:db:35:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:0A:58:03:A9:D0:E8:80:A6:2F:2C:33:C0:E5:C0:D8:B6:88:DC
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.31.0/24
Signature Algorithm: sha256WithRSAEncryption
89:03:25:79:c2:27:7d:34:9c:a7:3c:fb:24:ae:2e:17:eb:11:
ab:9d:61:bf:28:2c:3d:8c:fb:f7:1a:ba:21:83:ac:02:21:4e:
cf:67:a4:43:10:7e:92:61:95:9e:ce:29:72:be:aa:13:26:73:
1f:bb:ae:9b:96:b9:dd:5f:50:d5:29:fd:9f:75:2a:d2:7c:c3:
36:f5:b7:d2:b0:dd:32:a7:bf:ef:24:a9:5f:a6:4f:3f:1a:d8:
8a:d0:13:c3:7b:8b:e9:01:ff:9c:1b:6d:11:58:e2:e8:c9:88:
b4:71:f2:93:4f:12:ec:d4:90:d2:35:a2:e8:97:95:2b:33:96:
ed:a7:2f:6a:f7:9e:03:b4:ec:9b:46:50:f3:fb:0f:76:54:7d:
99:de:62:de:be:a5:3e:4b:e7:06:fa:8c:b8:8b:a7:b1:d5:3d:
fb:cb:e4:1b:17:7c:4d:b3:0b:b2:66:4c:0b:20:83:a0:78:ad:
f3:dc:b7:f2:05:3d:89:50:cc:f8:13:a6:09:ba:0d:a2:7f:92:
15:99:5a:c9:51:7b:4b:92:7b:53:6a:5c:b5:a4:8b:6e:ac:41:
2c:03:36:c7:ee:98:19:44:17:b2:85:35:b5:fe:69:76:13:b3:
a1:f9:54:ba:70:fc:e6:45:e3:4d:ed:ef:61:b7:ed:f6:cb:01:
a6:bc:d7:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5PifG3k12OiJ1rf2mVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ODYwMjhjOWZlYjZmMTQyYjNmZWNiNjQ2NjdmNDg4NzRi
YTljMzcwHhcNMjUwMTAxMTc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTRmMGE1ODAzYTlkMGU4ODBhNjJmMmMzM2MwZTVjMGQ4YjY4OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx14ox90L+iPKA20hc2k6F7KwMM6l
Ew4y8qu0O7RZvjWg2cqucu9I6XIqOVISInsMtavlHmNyuwCY8+FPuNBzSeDj1jy6
DttqcZ4TbVmm/CyUOaklUMATTprK4jgu3SeX20Rd/syhp8VO8fx+xNjnA6HHYsww
dFX/n5BP0KporvRveJtYp5omQVJ9ha/5+eZyOuHtkRZu/1PztdBtw27jDG6WWfyH
Wzdl3KHeqE+xuAC/8kYEQYRJ9V8g0Sj5usEExLN8ubW76qEclQgIcAWE8n7IerO/
rpMlKCKyW+x0DFENXnC1I5O+MC5Osdcioc3XfSB6dYaqCryX9pAT2zUTJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApPClgDqdDogKYvLDPA5cDYtojcMB8GA1UdIwQY
MBaAFLmGAoyf628UKz/stkZn9Ih0upw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYt
M2E0NDY4YzRkZmRmLzEvQ2s4S1dBT3AwT2lBcGk4c004RGx3TmkyaU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYtM2E0NDY4YzRkZmRm
LzEvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsD4fMA0G
CSqGSIb3DQEBCwUAA4IBAQCJAyV5wid9NJynPPskri4X6xGrnWG/KCw9jPv3Groh
g6wCIU7PZ6RDEH6SYZWezilyvqoTJnMfu66blrndX1DVKf2fdSrSfMM29bfSsN0y
p7/vJKlfpk8/GtiK0BPDe4vpAf+cG20RWOLoyYi0cfKTTxLs1JDSNaLol5UrM5bt
py9q954DtOybRlDz+w92VH2Z3mLevqU+S+cG+oy4i6ex1T37y+QbF3xNswuyZkwL
IIOgeK3z3LfyBT2JUMz4E6YJug2if5IVmVrJUXtLkntTaly1pIturEEsAzbH7pgZ
RBeyhTW1/ml2E7Oh+VS6cPzmReNN7e9ht+32ywGmvNcu
-----END CERTIFICATE-----
Generated at Thu Mar 13 11:00:02 2025 by rpki-client