Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa
File: 9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa (raw, json)
Hash identifier: r9B2NrNcCL1IbHEMQ2e6VWbR42EMOv3qQYj9s2HeM6o=
Subject key identifier: F5:53:50:C4:C1:A8:DB:0E:7E:7E:A5:41:2C:26:7A:3D:48:8C:4A:BF
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6C5D8C75570BDF6509865F96DE65
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210609
IP address blocks: 185.124.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:5d:8c:75:57:0b:df:65:09:86:5f:96:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55350c4c1a8db0e7e7ea5412c267a3d488c4abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:44:71:d3:69:95:f7:d2:d9:12:1b:a6:1a:
61:ba:2e:f1:4d:cf:24:51:94:fc:30:c7:ba:d3:8e:
a5:f6:2d:69:22:e9:4b:ec:54:1e:5e:21:14:77:83:
0a:e9:74:05:de:7f:c3:b6:43:15:4c:15:ea:03:64:
6d:69:45:c4:9f:1b:73:cf:0b:72:11:a8:0d:c7:84:
17:9c:d0:ca:4f:bb:3e:60:a6:53:13:28:c0:df:7a:
aa:23:a1:43:f0:5a:5d:ec:9d:c7:11:84:7b:9c:12:
04:f8:ff:c8:a6:cb:a4:23:59:9f:5f:d6:8e:b6:c4:
a9:0d:b1:88:9e:f0:7a:6f:c5:fb:90:9e:1c:60:a3:
d2:8f:5a:14:d0:c4:0e:90:7f:34:50:25:37:a2:cb:
b1:c2:bd:b2:bf:b0:91:3a:17:c4:bf:68:9d:bc:9e:
f3:93:a8:21:96:86:e5:ca:03:19:d8:a4:cc:0d:cb:
e4:29:cb:c2:1b:2d:77:14:f4:50:6b:36:ff:ed:a0:
a9:86:60:81:96:ce:67:f0:c4:11:4c:bb:5e:61:5f:
79:cb:08:ef:00:0b:d0:35:4c:99:06:23:68:ce:90:
8e:26:d6:e3:e3:fd:fe:8f:15:7c:55:8f:a5:38:45:
87:b2:7e:f4:38:67:5a:78:6f:56:ea:c7:1b:c2:d0:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:50:C4:C1:A8:DB:0E:7E:7E:A5:41:2C:26:7A:3D:48:8C:4A:BF
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.172.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:8b:8c:2d:29:05:c6:05:0c:c5:5f:34:45:f6:a7:1b:3e:97:
68:3d:37:44:fc:af:c7:64:6f:9b:aa:54:f8:71:8a:87:f3:7f:
61:72:f4:31:9b:98:38:12:61:f2:49:66:14:4a:74:e6:97:2f:
c4:ae:28:9e:df:ee:91:ad:52:39:e4:76:34:12:c4:11:c1:c5:
dd:55:99:8b:02:5e:21:21:69:c9:dd:5b:81:f6:16:79:2d:3e:
10:60:27:f9:06:93:09:0c:34:62:16:7b:d9:91:8c:be:02:ef:
6b:41:58:ff:c8:ae:e8:65:46:f0:86:0c:96:83:ec:d9:56:fe:
bb:98:22:78:2f:eb:71:aa:bd:d5:f5:9b:4b:96:e7:33:f9:be:
bb:24:0f:61:a0:e4:71:93:1a:66:5e:68:d1:3d:5d:74:f4:b0:
75:a6:59:b4:37:6b:b1:bf:62:82:e0:0d:41:c7:cd:ef:25:f5:
49:11:55:51:9d:e3:50:5a:55:e8:50:5d:18:f8:34:f4:eb:0e:
55:da:8b:84:d3:f8:24:a3:2b:e6:eb:05:3f:e2:58:df:d1:f9:
0c:96:b9:47:c4:54:c4:ec:5d:8e:aa:a4:95:af:c0:44:87:f9:
d0:39:9e:8f:0a:6a:f6:54:a4:51:3e:8e:3e:e7:5a:49:11:af:
50:5e:7c:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mxdjHVXC99lCYZflt5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMTAxMDM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTUzNTBjNGMxYThkYjBlN2U3ZWE1NDEyYzI2N2EzZDQ4OGM0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxEcdNplffS2RIbphphui7xTc8k
UZT8MMe6046l9i1pIulL7FQeXiEUd4MK6XQF3n/DtkMVTBXqA2RtaUXEnxtzzwty
EagNx4QXnNDKT7s+YKZTEyjA33qqI6FD8Fpd7J3HEYR7nBIE+P/IpsukI1mfX9aO
tsSpDbGInvB6b8X7kJ4cYKPSj1oU0MQOkH80UCU3osuxwr2yv7CROhfEv2idvJ7z
k6ghloblygMZ2KTMDcvkKcvCGy13FPRQazb/7aCphmCBls5n8MQRTLteYV95ywjv
AAvQNUyZBiNozpCOJtbj4/3+jxV8VY+lOEWHsn70OGdaeG9W6scbwtArkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPVTUMTBqNsOfn6lQSwmej1IjEq/MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvOVZOUXhNR28ydzUtZnFWQkxDWjZQVWlNU3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXysMA0G
CSqGSIb3DQEBCwUAA4IBAQDFi4wtKQXGBQzFXzRF9qcbPpdoPTdE/K/HZG+bqlT4
cYqH839hcvQxm5g4EmHySWYUSnTmly/Eriie3+6RrVI55HY0EsQRwcXdVZmLAl4h
IWnJ3VuB9hZ5LT4QYCf5BpMJDDRiFnvZkYy+Au9rQVj/yK7oZUbwhgyWg+zZVv67
mCJ4L+txqr3V9ZtLlucz+b67JA9hoORxkxpmXmjRPV109LB1plm0N2uxv2KC4A1B
x83vJfVJEVVRneNQWlXoUF0Y+DT06w5V2ouE0/gkoyvm6wU/4ljf0fkMlrlHxFTE
7F2OqqSVr8BEh/nQOZ6PCmr2VKRRPo4+51pJEa9QXnw5
-----END CERTIFICATE-----
Generated at Thu Mar 13 10:21:32 2025 by rpki-client