Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9-Y0aWZrtpwstXXpKAi4n__bel4.roa
File: 9-Y0aWZrtpwstXXpKAi4n__bel4.roa (raw, json)
Hash identifier: GAFuW8iAmDtblZCnA4ow69qvWKaKSY18TY/SvaQs/uE=
Subject key identifier: F7:E6:34:69:66:6B:B6:9C:2C:B5:75:E9:28:08:B8:9F:FF:DB:7A:5E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6CFE413B3A267DB9F66848F78040
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9-Y0aWZrtpwstXXpKAi4n__bel4.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 185.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:fe:41:3b:3a:26:7d:b9:f6:68:48:f7:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e63469666bb69c2cb575e92808b89fffdb7a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:ba:9b:12:1b:34:e1:94:ad:ee:95:31:5e:
7c:ae:84:03:43:2e:cd:83:09:19:c3:ab:5f:e6:77:
fe:5b:ed:63:f7:eb:70:aa:fb:2d:c5:52:aa:7c:49:
0f:85:2b:e9:e5:10:1b:13:58:87:4a:ac:54:8a:51:
01:f5:1a:6a:a0:e2:57:f6:bb:91:7d:d5:8c:34:c1:
02:84:cf:a1:eb:87:dd:12:09:c5:1d:0d:2a:f9:85:
94:01:83:69:5d:fb:54:43:29:e1:6b:3d:ea:9d:a3:
b8:cc:ed:44:dd:8b:99:fc:d4:ce:60:d4:a0:1c:e4:
40:18:00:2c:45:9e:48:65:a2:08:c8:9a:3e:21:99:
1e:b6:8b:e2:8a:35:d6:65:e8:80:65:06:54:48:74:
43:f6:5b:f1:a6:ff:eb:d7:fe:5b:95:19:87:90:5a:
f7:39:93:9f:26:e5:48:52:2c:ab:90:13:98:48:d3:
04:19:df:a0:5b:ba:8c:3a:82:1e:40:f0:b4:ee:95:
09:f9:c6:6c:25:ed:6d:32:a8:d7:d9:fe:b0:6a:77:
52:72:ae:b6:cf:9e:e2:3f:ef:d8:f7:f9:58:6c:07:
46:a8:10:35:b5:0d:ce:fd:ef:e1:9d:c3:27:b7:a5:
b5:0f:68:b5:87:2d:79:7c:44:84:c4:eb:fd:c8:47:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:34:69:66:6B:B6:9C:2C:B5:75:E9:28:08:B8:9F:FF:DB:7A:5E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9-Y0aWZrtpwstXXpKAi4n__bel4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
78:08:28:2a:55:79:e7:5d:ec:32:eb:86:c9:75:60:32:ca:9a:
21:28:34:56:67:75:72:e1:74:ce:7c:43:c4:7b:aa:51:d7:31:
fb:90:d6:5e:c3:78:0f:bc:97:6a:74:fb:ff:fc:82:78:5d:fe:
3d:a6:5d:7b:e4:41:0a:f3:ef:94:c3:12:cd:7d:25:67:e5:f7:
95:be:95:a5:b1:19:59:d5:2e:7e:f1:91:18:21:51:c7:84:58:
70:9c:42:c0:68:0c:7f:7e:d4:c5:78:4f:47:f6:9e:00:70:f9:
fa:54:9a:93:d2:7c:35:c1:64:9c:d9:0d:1a:5f:28:be:f8:40:
68:12:0a:7b:56:9c:cb:65:7c:5f:89:d3:fc:47:7c:79:a1:b6:
4b:8a:1b:19:1f:96:28:9e:4d:c5:d0:d0:ea:3f:97:c2:9d:9d:
86:2c:33:c6:c7:69:ef:cd:7e:93:0d:2c:2c:8e:9f:33:24:e7:
50:b4:44:1b:58:6a:30:63:19:40:3a:15:bd:5a:a2:54:51:68:
8e:ef:55:63:47:59:7a:f6:70:aa:6d:0c:c9:c7:c1:e9:ce:36:
53:56:31:b1:3e:52:d4:a3:9a:91:7b:50:cd:c0:ad:1f:e3:a3:
48:d8:c0:a4:1b:5e:9d:7f:33:e9:0a:37:36:40:d3:c8:e9:f9:
9e:3a:06:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mz+QTs6Jn259mhI94BAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMTAxMDM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2U2MzQ2OTY2NmJiNjljMmNiNTc1ZTkyODA4Yjg5ZmZmZGI3YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLa6mxIbNOGUre6VMV58roQDQy7N
gwkZw6tf5nf+W+1j9+twqvstxVKqfEkPhSvp5RAbE1iHSqxUilEB9RpqoOJX9ruR
fdWMNMEChM+h64fdEgnFHQ0q+YWUAYNpXftUQynhaz3qnaO4zO1E3YuZ/NTOYNSg
HORAGAAsRZ5IZaIIyJo+IZketoviijXWZeiAZQZUSHRD9lvxpv/r1/5blRmHkFr3
OZOfJuVIUiyrkBOYSNMEGd+gW7qMOoIeQPC07pUJ+cZsJe1tMqjX2f6wandScq62
z57iP+/Y9/lYbAdGqBA1tQ3O/e/hncMnt6W1D2i1hy15fESExOv9yEc36QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfmNGlma7acLLV16SgIuJ//23peMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvOS1ZMGFXWnJ0cHdzdFhYcEtBaTRuX19iZWw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudfmMA0G
CSqGSIb3DQEBCwUAA4IBAQB4CCgqVXnnXewy64bJdWAyypohKDRWZ3Vy4XTOfEPE
e6pR1zH7kNZew3gPvJdqdPv//IJ4Xf49pl175EEK8++UwxLNfSVn5feVvpWlsRlZ
1S5+8ZEYIVHHhFhwnELAaAx/ftTFeE9H9p4AcPn6VJqT0nw1wWSc2Q0aXyi++EBo
Egp7VpzLZXxfidP8R3x5obZLihsZH5Yonk3F0NDqP5fCnZ2GLDPGx2nvzX6TDSws
jp8zJOdQtEQbWGowYxlAOhW9WqJUUWiO71VjR1l69nCqbQzJx8HpzjZTVjGxPlLU
o5qRe1DNwK0f46NI2MCkG16dfzPpCjc2QNPI6fmeOgap
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:56:48 2025 by rpki-client