Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa
File: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (raw, json)
Hash identifier: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=
Subject key identifier: F3:58:4A:C4:4B:0C:F8:04:C8:85:9C:74:9D:5A:EB:6F:CC:55:D9:93
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 01942825DBF81E64535528EA0229DEE6B106
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa
Signing time: Thu 02 Jan 2025 17:52:37 +0000
ROA not before: Thu 02 Jan 2025 17:52:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 185.72.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:db:f8:1e:64:53:55:28:ea:02:29:de:e6:b1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jan 2 17:52:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3584ac44b0cf804c8859c749d5aeb6fcc55d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:d4:1d:e9:ec:9b:b7:e9:89:d8:ca:d5:2a:
c8:35:7b:d8:10:70:78:c7:64:c3:2a:7c:2d:ed:d0:
4a:0d:79:36:6f:6a:9b:8c:1f:c1:7e:fa:87:83:7a:
bf:78:e1:9a:f8:3c:0f:fc:0f:ab:d1:07:84:77:1d:
ed:bc:01:d0:fa:01:76:10:b1:ad:58:48:01:f1:8d:
51:44:44:40:9c:c7:40:70:ef:40:e6:c2:84:32:96:
ae:a7:e7:15:24:ee:19:69:d1:30:4f:78:2f:54:b1:
6b:74:7f:d0:7f:5f:40:a2:fa:e1:b3:56:5d:6d:5b:
67:fc:ea:c4:17:7e:50:1d:42:3b:52:93:b1:65:7e:
03:ce:e0:f5:26:a3:cc:34:e7:af:cc:7c:b3:2f:f9:
a0:d9:47:e8:73:0d:17:b6:87:38:20:0c:92:fa:48:
39:28:ab:35:2d:26:72:a1:3d:cb:cc:86:36:49:30:
9d:88:5e:03:20:1f:09:96:f2:1d:56:3a:63:39:40:
d5:18:52:39:b2:2b:eb:cf:86:f1:3d:14:ec:99:b6:
56:7e:a1:78:e8:40:78:0e:d5:ab:96:58:05:dc:59:
a6:5d:54:7c:5d:70:50:f5:4e:02:83:b3:58:48:ec:
1f:a6:07:98:ac:ef:63:e1:af:42:7e:7e:0e:66:9f:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:4A:C4:4B:0C:F8:04:C8:85:9C:74:9D:5A:EB:6F:CC:55:D9:93
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:84:eb:44:92:cf:9c:4a:58:87:ea:7f:fb:c6:0e:f5:f0:58:
c6:59:fa:91:40:fc:aa:8c:2d:c0:19:d4:80:89:d7:89:6f:41:
41:3a:f4:e7:59:7e:5a:4e:63:ef:fb:6e:c3:04:84:92:8c:bd:
0a:5e:82:a0:0b:88:7c:d7:c1:eb:9b:3c:68:d1:61:33:ac:93:
4e:91:10:ed:17:12:67:35:3b:3e:3f:6f:a5:91:7d:90:e2:af:
2a:99:dc:fe:09:19:57:3f:3d:c6:ed:5b:bd:ad:ef:8c:f7:8d:
c3:0c:79:e4:4f:c3:d6:1a:35:47:b6:83:79:16:c5:83:63:80:
dd:c8:30:93:e0:82:d0:b8:36:60:22:cd:84:e0:95:b7:32:4e:
69:bf:91:cc:1b:66:36:47:cc:ba:57:b0:ea:cf:6d:dc:2a:a2:
2d:6d:63:ef:42:0c:01:fe:26:6c:e9:94:d1:48:d7:99:25:b6:
64:a6:ca:f2:c8:f4:5d:29:43:30:3e:fe:08:00:a2:79:89:69:
ae:fa:94:cf:6d:13:9c:8e:27:cd:21:f4:30:be:13:ae:a4:25:
f5:93:02:be:78:4d:46:2b:55:c7:0e:8e:f5:ce:68:20:88:db:
f3:30:48:59:a9:64:59:78:e9:06:71:b8:eb:5d:11:d6:21:1e:
58:82:85:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJdv4HmRTVSjqAine5rEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex
NDI1ZDgwHhcNMjUwMTAyMTc1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzU4NGFjNDRiMGNmODA0Yzg4NTljNzQ5ZDVhZWI2ZmNjNTVkOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sLUHensm7fpidjK1SrINXvYEHB4
x2TDKnwt7dBKDXk2b2qbjB/BfvqHg3q/eOGa+DwP/A+r0QeEdx3tvAHQ+gF2ELGt
WEgB8Y1RRERAnMdAcO9A5sKEMpaup+cVJO4ZadEwT3gvVLFrdH/Qf19Aovrhs1Zd
bVtn/OrEF35QHUI7UpOxZX4DzuD1JqPMNOevzHyzL/mg2Ufocw0Xtoc4IAyS+kg5
KKs1LSZyoT3LzIY2STCdiF4DIB8JlvIdVjpjOUDVGFI5sivrz4bxPRTsmbZWfqF4
6EB4DtWrllgF3FmmXVR8XXBQ9U4Cg7NYSOwfpgeYrO9j4a9Cfn4OZp83pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNYSsRLDPgEyIWcdJ1a62/MVdmTMB8GA1UdIwQY
MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvODFoS3hFc00tQVRJaFp4MG5WcnJiOHhWMlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUiOMA0G
CSqGSIb3DQEBCwUAA4IBAQA7hOtEks+cSliH6n/7xg718FjGWfqRQPyqjC3AGdSA
ideJb0FBOvTnWX5aTmPv+27DBISSjL0KXoKgC4h818Hrmzxo0WEzrJNOkRDtFxJn
NTs+P2+lkX2Q4q8qmdz+CRlXPz3G7Vu9re+M943DDHnkT8PWGjVHtoN5FsWDY4Dd
yDCT4ILQuDZgIs2E4JW3Mk5pv5HMG2Y2R8y6V7Dqz23cKqItbWPvQgwB/iZs6ZTR
SNeZJbZkpsryyPRdKUMwPv4IAKJ5iWmu+pTPbROcjifNIfQwvhOupCX1kwK+eE1G
K1XHDo71zmggiNvzMEhZqWRZeOkGcbjrXRHWIR5YgoVD
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:55:51 2025 by rpki-client