Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/tZxf0AXNp1MOwPIWrBm-nEvIW3s.roa
File: tZxf0AXNp1MOwPIWrBm-nEvIW3s.roa (raw, json)
Hash identifier: kf6k3BJJEi2qQD2FXQd4SstzEWc+t8CUSSKxNOzj5FQ=
Subject key identifier: B5:9C:5F:D0:05:CD:A7:53:0E:C0:F2:16:AC:19:BE:9C:4B:C8:5B:7B
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B259EE70F7523686A92BE9E01AB8FF
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/tZxf0AXNp1MOwPIWrBm-nEvIW3s.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28800
IP address blocks: 85.142.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:59:ee:70:f7:52:36:86:a9:2b:e9:e0:1a:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b59c5fd005cda7530ec0f216ac19be9c4bc85b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:85:c1:79:0c:cf:4f:28:09:da:44:d9:26:
10:ac:2b:3b:7b:78:86:3b:1d:8b:2a:c9:cb:db:ca:
cb:cd:00:c2:88:e8:46:dd:be:2e:45:2b:1a:5a:84:
f2:ab:d4:df:d3:19:4b:08:e7:c2:b6:98:7b:d3:cf:
a9:e2:65:ba:55:a8:7a:c1:58:7a:2f:1d:c0:5f:0a:
71:f6:6f:30:0b:63:76:41:f4:35:9f:fa:c3:59:45:
93:ee:39:92:70:fb:09:53:4a:79:83:e6:2a:83:15:
b5:a1:9c:0f:8e:8c:60:18:f7:46:53:e4:22:80:b4:
86:3d:4f:c1:58:1a:33:50:50:4c:59:ad:70:d5:7c:
9b:20:12:3a:ff:be:c6:fb:a5:8b:13:ff:76:fb:2a:
b8:ab:f7:03:f4:11:df:69:08:c5:b2:57:41:32:d2:
b9:ab:46:f7:34:73:d0:64:c1:27:38:bf:55:fe:5a:
e4:a1:ae:a4:7c:44:22:04:d4:8f:f5:1c:a4:6c:9a:
b5:78:8d:49:3c:a3:c8:6c:82:d0:a9:8d:09:c9:6e:
c7:32:8f:15:aa:b5:30:0e:f4:91:57:72:0f:51:69:
9e:dd:60:a7:06:8d:81:0c:b9:7c:71:5d:b0:a4:f8:
d1:bb:62:a9:04:b3:4f:d9:86:07:9f:6a:fe:94:51:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:5F:D0:05:CD:A7:53:0E:C0:F2:16:AC:19:BE:9C:4B:C8:5B:7B
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/tZxf0AXNp1MOwPIWrBm-nEvIW3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.160.0/23
Signature Algorithm: sha256WithRSAEncryption
85:31:5c:d6:91:a1:11:94:6b:88:9c:fb:23:69:77:b3:c0:fb:
66:53:d4:a3:13:f6:0a:06:5d:0c:e9:82:e7:6a:af:d8:a3:31:
f6:06:ae:ed:fa:e8:b7:44:99:03:b9:94:0c:7a:cd:24:29:ec:
de:2d:ef:e0:12:45:b0:d7:fe:3b:f6:f7:36:2c:30:ca:6e:f3:
7a:0f:7a:40:85:01:08:85:84:94:20:cb:de:23:56:81:c8:ac:
78:31:b5:12:6a:c0:b4:6f:99:6c:1f:b6:e2:29:e8:a8:7a:c8:
71:88:1c:9d:16:a0:5d:fc:81:2a:e4:fe:49:20:fb:a2:f4:39:
af:f8:11:0f:87:a8:94:ac:1c:0d:36:4f:6a:21:dc:ad:01:29:
23:52:22:aa:63:07:1f:8d:44:45:ab:f6:34:fd:c0:45:53:a3:
23:41:22:e2:dc:b0:75:11:51:5c:c1:8d:de:3e:69:2d:5d:d9:
19:28:7a:0d:6c:15:da:04:7a:89:1b:78:76:b0:20:c1:09:f4:
bf:79:c9:56:8c:94:cc:fd:d8:9e:38:31:dc:1a:9e:5f:bb:0d:
0d:24:f6:b7:12:62:83:e0:72:0a:59:f7:ed:09:f7:66:e0:06:
8c:26:e5:81:41:37:b5:d3:3a:6c:7f:75:fe:4d:87:2f:6e:a8:
56:e0:69:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhslnucPdSNoapK+ngGrj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjUwMTAxMTE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTljNWZkMDA1Y2RhNzUzMGVjMGYyMTZhYzE5YmU5YzRiYzg1YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45iFwXkMz08oCdpE2SYQrCs7e3iG
Ox2LKsnL28rLzQDCiOhG3b4uRSsaWoTyq9Tf0xlLCOfCtph708+p4mW6Vah6wVh6
Lx3AXwpx9m8wC2N2QfQ1n/rDWUWT7jmScPsJU0p5g+YqgxW1oZwPjoxgGPdGU+Qi
gLSGPU/BWBozUFBMWa1w1XybIBI6/77G+6WLE/92+yq4q/cD9BHfaQjFsldBMtK5
q0b3NHPQZMEnOL9V/lrkoa6kfEQiBNSP9RykbJq1eI1JPKPIbILQqY0JyW7HMo8V
qrUwDvSRV3IPUWme3WCnBo2BDLl8cV2wpPjRu2KpBLNP2YYHn2r+lFEPlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLWcX9AFzadTDsDyFqwZvpxLyFt7MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvdFp4ZjBBWE5wMU1Pd1BJV3JCbS1uRXZJVzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVY6gMA0G
CSqGSIb3DQEBCwUAA4IBAQCFMVzWkaERlGuInPsjaXezwPtmU9SjE/YKBl0M6YLn
aq/YozH2Bq7t+ui3RJkDuZQMes0kKezeLe/gEkWw1/479vc2LDDKbvN6D3pAhQEI
hYSUIMveI1aByKx4MbUSasC0b5lsH7biKeioeshxiBydFqBd/IEq5P5JIPui9Dmv
+BEPh6iUrBwNNk9qIdytASkjUiKqYwcfjURFq/Y0/cBFU6MjQSLi3LB1EVFcwY3e
PmktXdkZKHoNbBXaBHqJG3h2sCDBCfS/eclWjJTM/dieODHcGp5fuw0NJPa3EmKD
4HIKWfftCfdm4AaMJuWBQTe10zpsf3X+TYcvbqhW4GmO
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:42:50 2025 by rpki-client