Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/87MujmzYjqiHmvGtUQfVum9xgYI.roa
File: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (raw, json)
Hash identifier: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=
Subject key identifier: F3:B3:2E:8E:6C:D8:8E:A8:87:9A:F1:AD:51:07:D5:BA:6F:71:81:82
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 0194244506C8B3DC024CDAD6E01177C01BEF
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/87MujmzYjqiHmvGtUQfVum9xgYI.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 185.96.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:06:c8:b3:dc:02:4c:da:d6:e0:11:77:c0:1b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3b32e8e6cd88ea8879af1ad5107d5ba6f718182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:b2:a8:9e:76:30:6b:08:d3:76:ad:37:88:
ea:86:a2:8d:a8:2e:e6:82:e1:7b:2c:51:3e:74:59:
15:07:df:99:41:0c:ec:32:e0:59:cf:d2:2b:95:6a:
d5:c1:e4:6c:34:11:22:4b:29:67:5a:db:f3:6e:66:
7d:b3:d1:2d:21:43:01:b8:cc:e3:6b:4c:15:a7:62:
cd:ae:28:98:c2:a3:03:c2:56:3f:21:0e:9b:7e:47:
d9:94:57:f7:5f:72:13:d7:08:9b:ab:f6:d5:82:d0:
fa:da:10:5b:cf:21:2a:e6:56:8f:fe:c8:93:99:76:
4f:2e:30:d6:87:13:fe:34:52:30:68:2f:2f:17:76:
71:6e:1e:f4:52:e3:ed:69:3c:f0:5d:d0:25:a0:25:
5a:d2:c1:aa:2b:12:6f:14:82:8f:c5:78:d8:63:d1:
08:78:69:27:b5:01:8b:35:0b:a4:86:0e:35:e7:42:
4f:ce:5f:e2:4a:de:cf:b9:53:9b:63:da:bf:aa:21:
cf:96:91:b5:0d:0b:b5:0d:1b:7d:b7:a6:69:44:76:
07:fe:12:2f:dc:81:df:70:3d:2c:f2:67:4a:46:c0:
d9:89:6e:5a:e2:4b:b9:69:4b:a8:7e:57:48:44:a8:
60:a3:b8:a5:56:5f:7b:6c:39:44:c9:8a:8a:d6:06:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:2E:8E:6C:D8:8E:A8:87:9A:F1:AD:51:07:D5:BA:6F:71:81:82
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/87MujmzYjqiHmvGtUQfVum9xgYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.236.0/22
Signature Algorithm: sha256WithRSAEncryption
85:c7:ef:b3:d0:db:bc:41:d1:f0:94:9f:ac:fa:19:c3:c5:34:
96:40:6f:9a:c0:85:f3:31:01:98:56:d4:96:58:4d:e5:49:f7:
4f:bc:6e:62:98:0f:b0:d7:cd:0f:b0:e0:c6:ee:2a:bb:b1:34:
0b:fc:96:39:35:af:b2:c5:d1:eb:eb:45:72:37:66:c3:b5:f6:
a5:66:92:ab:60:bb:78:fc:13:b0:d2:c9:62:36:d6:15:ab:f2:
77:76:ba:45:31:20:21:74:b6:16:9f:f9:24:c8:a6:59:58:c3:
9f:c6:23:1c:21:8c:69:d5:da:72:dd:37:b9:dd:ae:a5:53:d8:
8d:a7:05:98:e0:99:7a:b5:f2:8f:5b:49:48:64:d8:65:98:cc:
e8:06:ea:9e:0a:f0:b9:b8:6f:53:e6:2f:f5:79:04:e3:9b:f0:
3b:30:c5:70:3f:27:6e:fa:e6:fc:8c:9f:ac:d6:02:4e:6b:8a:
bf:b3:02:20:bc:d3:50:f4:10:4f:35:e4:17:ff:4e:a8:cb:60:
37:00:c9:8e:a6:ef:48:61:94:91:c8:10:d2:51:17:b8:0f:de:
f6:51:7f:cb:9e:23:78:70:60:d0:3d:59:21:cb:94:44:bd:15:
03:da:e0:64:90:c5:31:c9:4b:3e:b9:9d:5e:60:95:32:66:82:
3b:d0:59:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRQbIs9wCTNrW4BF3wBvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWFiY2ExMTZiNGU3M2E5OTQ0YWI5NzAyY2Y5ODY2NTc4
MDM1ODAwHhcNMjUwMTAxMjM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2IzMmU4ZTZjZDg4ZWE4ODc5YWYxYWQ1MTA3ZDViYTZmNzE4MTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGuyqJ52MGsI03atN4jqhqKNqC7m
guF7LFE+dFkVB9+ZQQzsMuBZz9IrlWrVweRsNBEiSylnWtvzbmZ9s9EtIUMBuMzj
a0wVp2LNriiYwqMDwlY/IQ6bfkfZlFf3X3IT1wibq/bVgtD62hBbzyEq5laP/siT
mXZPLjDWhxP+NFIwaC8vF3Zxbh70UuPtaTzwXdAloCVa0sGqKxJvFIKPxXjYY9EI
eGkntQGLNQukhg4150JPzl/iSt7PuVObY9q/qiHPlpG1DQu1DRt9t6ZpRHYH/hIv
3IHfcD0s8mdKRsDZiW5a4ku5aUuofldIRKhgo7ilVl97bDlEyYqK1gafZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOzLo5s2I6oh5rxrVEH1bpvcYGCMB8GA1UdIwQY
MBaAFO6qvKEWtOc6mUSrlwLPmGZXgDWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDct
ZGI0MTVhOWJlYmY1LzEvODdNdWptellqcWlIbXZHdFVRZlZ1bTl4Z1lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDctZGI0MTVhOWJlYmY1
LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWDsMA0G
CSqGSIb3DQEBCwUAA4IBAQCFx++z0Nu8QdHwlJ+s+hnDxTSWQG+awIXzMQGYVtSW
WE3lSfdPvG5imA+w180PsODG7iq7sTQL/JY5Na+yxdHr60VyN2bDtfalZpKrYLt4
/BOw0sliNtYVq/J3drpFMSAhdLYWn/kkyKZZWMOfxiMcIYxp1dpy3Te53a6lU9iN
pwWY4Jl6tfKPW0lIZNhlmMzoBuqeCvC5uG9T5i/1eQTjm/A7MMVwPydu+ub8jJ+s
1gJOa4q/swIgvNNQ9BBPNeQX/06oy2A3AMmOpu9IYZSRyBDSURe4D972UX/LniN4
cGDQPVkhy5REvRUD2uBkkMUxyUs+uZ1eYJUyZoI70FmP
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:41 2025 by rpki-client