Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/scYwC-e6lFDetGsqMlwn-CerbGM.roa
File: scYwC-e6lFDetGsqMlwn-CerbGM.roa (raw, json)
Hash identifier: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=
Subject key identifier: B1:C6:30:0B:E7:BA:94:50:DE:B4:6B:2A:32:5C:27:F8:27:AB:6C:63
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 01942823E9BB6E56E3B5C0F84256501205D7
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/scYwC-e6lFDetGsqMlwn-CerbGM.roa
Signing time: Thu 02 Jan 2025 17:50:29 +0000
ROA not before: Thu 02 Jan 2025 17:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196773
IP address blocks: 217.168.96.0/24 maxlen: 24
217.168.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:e9:bb:6e:56:e3:b5:c0:f8:42:56:50:12:05:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jan 2 17:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c6300be7ba9450deb46b2a325c27f827ab6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:43:4e:7b:12:28:c4:c0:2f:f3:34:fd:dd:
32:a1:a0:2f:ce:56:7b:dd:fd:4c:99:0d:68:a3:97:
7e:bb:e7:0c:26:db:44:18:51:8d:a7:bb:c3:51:09:
6e:a5:6f:12:8e:fb:95:a3:51:1e:0e:84:28:c6:9e:
a0:d5:14:1a:b6:7a:18:57:27:7d:31:5e:65:53:d7:
e6:85:81:2e:e2:b4:90:46:bd:ce:12:0f:ac:d4:12:
2d:12:4b:f2:77:ac:b7:7c:cf:c8:37:81:68:a7:02:
28:f8:76:35:bd:f8:28:88:e7:9a:98:35:99:a2:25:
35:41:7b:b4:ff:a7:f1:e5:0c:d4:c7:2d:ea:8b:54:
5a:e8:16:18:d0:95:51:2e:9a:fe:5b:3e:a2:b5:36:
8e:1b:6b:d8:16:ef:92:93:02:c7:e1:f6:60:ba:ce:
38:65:96:4d:57:ab:14:04:38:20:8e:01:4c:03:58:
c2:f1:4b:03:3d:33:67:96:c7:a1:4a:a1:3b:aa:6a:
f6:10:5e:17:6b:25:0d:53:b5:e0:20:2d:f9:b7:d8:
36:b7:c5:42:c2:32:12:3b:ff:bd:da:f7:41:d4:eb:
40:ca:70:71:88:c1:ad:fa:21:af:7f:4f:33:32:40:
f5:36:44:52:d5:da:7d:39:3a:c7:5a:a6:b1:0e:05:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:30:0B:E7:BA:94:50:DE:B4:6B:2A:32:5C:27:F8:27:AB:6C:63
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/scYwC-e6lFDetGsqMlwn-CerbGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.168.96.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:a9:2c:f5:15:3a:cf:81:90:2c:90:75:93:2d:bd:5b:a3:32:
6e:5d:38:19:3a:13:1c:69:8b:34:a8:d9:1a:05:5f:3e:d6:6e:
c1:f3:b4:be:8f:b6:e2:c0:18:c6:26:da:2f:91:fc:04:7e:70:
d7:7d:be:ec:b6:28:cd:dd:57:fa:23:c6:45:5d:51:33:f8:dd:
65:76:a5:85:ea:19:47:69:07:42:ce:e4:9e:b9:db:d7:3d:ed:
98:a3:11:72:fe:d0:e6:0b:a1:cb:1f:e1:14:46:7b:46:27:2b:
d8:2e:45:87:65:67:b3:30:bf:89:63:10:b6:a6:7a:69:47:79:
94:a5:cc:f2:6f:74:2d:31:0d:57:bb:66:c2:57:28:1a:9d:d4:
49:5c:9c:5f:bb:40:5c:e6:72:43:cb:a4:1b:0f:b2:3a:01:2f:
f2:b2:0a:07:48:4c:e8:47:ed:60:a7:4e:b2:2a:89:5f:e8:80:
34:41:52:49:1e:1d:6b:d9:3d:00:82:eb:fb:74:da:37:ec:94:
be:a7:e4:36:7c:46:f8:05:f6:2d:b9:9d:da:8f:ae:36:fb:02:
1c:54:f9:4c:c0:f1:e6:ba:d7:e6:ea:02:27:ef:7f:e0:81:1a:
38:d3:02:6b:8d:cd:02:8f:35:82:49:f3:0e:fe:8e:b6:fd:05:
24:24:6b:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI+m7blbjtcD4QlZQEgXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy
MTVjMGQwHhcNMjUwMTAyMTc1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM2MzAwYmU3YmE5NDUwZGViNDZiMmEzMjVjMjdmODI3YWI2YzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv55DTnsSKMTAL/M0/d0yoaAvzlZ7
3f1MmQ1oo5d+u+cMJttEGFGNp7vDUQlupW8SjvuVo1EeDoQoxp6g1RQatnoYVyd9
MV5lU9fmhYEu4rSQRr3OEg+s1BItEkvyd6y3fM/IN4FopwIo+HY1vfgoiOeamDWZ
oiU1QXu0/6fx5QzUxy3qi1Ra6BYY0JVRLpr+Wz6itTaOG2vYFu+SkwLH4fZgus44
ZZZNV6sUBDggjgFMA1jC8UsDPTNnlsehSqE7qmr2EF4XayUNU7XgIC35t9g2t8VC
wjISO/+92vdB1OtAynBxiMGt+iGvf08zMkD1NkRS1dp9OTrHWqaxDgVSTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHGMAvnupRQ3rRrKjJcJ/gnq2xjMB8GA1UdIwQY
MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt
YTkxNGUzY2UzOTQxLzEvc2NZd0MtZTZsRkRldEdzcU1sd24tQ2VyYkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx
LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ahgMA0G
CSqGSIb3DQEBCwUAA4IBAQCNqSz1FTrPgZAskHWTLb1bozJuXTgZOhMcaYs0qNka
BV8+1m7B87S+j7biwBjGJtovkfwEfnDXfb7stijN3Vf6I8ZFXVEz+N1ldqWF6hlH
aQdCzuSeudvXPe2YoxFy/tDmC6HLH+EURntGJyvYLkWHZWezML+JYxC2pnppR3mU
pczyb3QtMQ1Xu2bCVygandRJXJxfu0Bc5nJDy6QbD7I6AS/ysgoHSEzoR+1gp06y
Kolf6IA0QVJJHh1r2T0Aguv7dNo37JS+p+Q2fEb4BfYtuZ3aj642+wIcVPlMwPHm
utfm6gIn73/ggRo40wJrjc0CjzWCSfMO/o62/QUkJGu0
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:12 2025 by rpki-client