Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa
File: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (raw, json)
Hash identifier: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=
Subject key identifier: 94:9E:A1:BB:A5:7B:3F:4E:69:7F:80:AD:F8:F9:30:B1:16:D3:9F:E6
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 019425FC08C6EEE5220C0EF43E58D2388100
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33806
IP address blocks: 178.212.255.0/24 maxlen: 24
188.191.128.0/24 maxlen: 24
188.191.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:08:c6:ee:e5:22:0c:0e:f4:3e:58:d2:38:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949ea1bba57b3f4e697f80adf8f930b116d39fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:68:1b:50:73:4e:88:fc:a9:7c:41:95:9e:
85:f0:ba:ff:b8:53:69:4b:6c:29:8c:5c:52:21:65:
29:4d:b0:96:89:fe:f0:df:2c:de:2c:90:9b:41:84:
7a:44:f9:ec:6e:80:61:36:6a:84:d4:8c:66:fd:08:
42:9a:a6:fc:ea:22:4f:c4:12:15:fb:26:da:f6:d7:
b5:ba:a4:eb:fc:ce:0e:57:0a:4d:c7:10:b3:2b:d0:
98:f2:4d:1b:13:7d:c3:6a:80:b2:3e:f4:07:51:3a:
41:70:91:2e:6d:fd:71:22:e1:26:a8:b9:11:4d:f9:
9f:35:2d:ff:84:99:0d:d5:09:1b:85:4b:00:ed:d0:
46:ba:24:64:c4:aa:14:54:d3:38:8f:51:41:c4:2d:
3d:f4:72:0d:0a:96:3d:08:ad:86:04:2d:ed:57:09:
c4:07:62:c2:82:9c:c7:a7:7b:83:95:49:14:e1:73:
3a:28:72:a7:f0:bc:c7:07:be:3b:62:eb:28:23:af:
54:33:c6:93:85:13:87:ac:e6:0f:65:55:3a:7a:34:
3d:86:ae:93:57:7b:71:b1:bd:d1:6f:35:47:7a:5b:
d7:80:c7:09:34:3d:cd:04:1b:0d:8d:9c:2d:25:34:
30:c1:15:d8:a8:2d:af:a0:68:9c:a1:26:3f:e4:a6:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:A1:BB:A5:7B:3F:4E:69:7F:80:AD:F8:F9:30:B1:16:D3:9F:E6
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.255.0/24
188.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b2:1d:74:13:38:40:95:c3:58:c4:fc:d6:7b:06:f6:0e:36:
ba:ed:97:1c:5e:d9:ee:c7:74:db:a6:68:37:ef:95:0e:3c:17:
a1:96:05:62:bc:05:79:27:aa:17:ec:56:c6:4b:6f:b4:86:0e:
dc:16:de:b5:63:84:c0:89:d2:63:32:f1:a8:a1:60:1c:2f:20:
78:7a:1f:f5:f5:66:85:2c:d7:bd:b7:a5:95:d8:e7:a0:f3:bb:
fb:d4:4b:20:a3:a3:a0:b0:06:89:7e:39:00:77:47:cc:6b:a5:
16:be:f7:87:f5:46:b3:93:36:01:a7:25:aa:f6:08:7c:f8:fc:
8c:0f:86:83:26:cb:9b:60:0a:29:5b:29:bf:4d:3d:42:fb:fe:
cc:3e:ca:6b:6a:6d:cb:55:59:91:fa:69:d3:dc:99:8c:1d:3a:
3f:f4:66:52:6d:b1:1e:f9:fd:e7:92:8b:fc:2c:30:22:2a:ea:
18:81:6f:ae:59:95:3c:0b:4f:79:7c:3b:33:0b:9e:fc:7a:74:
9d:23:46:db:7a:89:56:c1:12:0d:90:c0:0c:49:07:7e:3b:e3:
a5:e9:2d:aa:c3:7e:88:75:98:d0:04:33:b6:0e:25:e9:c3:f8:
f4:a7:3e:1c:7d:83:9f:b9:df:16:51:cc:c0:d5:fe:c3:5c:2b:
ec:63:74:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/AjG7uUiDA70PljSOIEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0
ZTZkMzAwHhcNMjUwMTAyMDc0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDllYTFiYmE1N2IzZjRlNjk3ZjgwYWRmOGY5MzBiMTE2ZDM5ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2xoG1BzToj8qXxBlZ6F8Lr/uFNp
S2wpjFxSIWUpTbCWif7w3yzeLJCbQYR6RPnsboBhNmqE1Ixm/QhCmqb86iJPxBIV
+yba9te1uqTr/M4OVwpNxxCzK9CY8k0bE33DaoCyPvQHUTpBcJEubf1xIuEmqLkR
TfmfNS3/hJkN1QkbhUsA7dBGuiRkxKoUVNM4j1FBxC099HINCpY9CK2GBC3tVwnE
B2LCgpzHp3uDlUkU4XM6KHKn8LzHB747YusoI69UM8aThROHrOYPZVU6ejQ9hq6T
V3txsb3RbzVHelvXgMcJND3NBBsNjZwtJTQwwRXYqC2voGicoSY/5KYAgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJSeobulez9OaX+Arfj5MLEW05/mMB8GA1UdIwQY
MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt
MjRjNjI2ZTdmNTIwLzEvbEo2aHU2VjdQMDVwZjRDdC1Qa3dzUmJUbi1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw
LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstT/AwQB
vL+AMA0GCSqGSIb3DQEBCwUAA4IBAQCXsh10EzhAlcNYxPzWewb2Dja67ZccXtnu
x3Tbpmg375UOPBehlgVivAV5J6oX7FbGS2+0hg7cFt61Y4TAidJjMvGooWAcLyB4
eh/19WaFLNe9t6WV2Oeg87v71Esgo6OgsAaJfjkAd0fMa6UWvveH9UazkzYBpyWq
9gh8+PyMD4aDJsubYAopWym/TT1C+/7MPspram3LVVmR+mnT3JmMHTo/9GZSbbEe
+f3nkov8LDAiKuoYgW+uWZU8C095fDszC578enSdI0bbeolWwRINkMAMSQd+O+Ol
6S2qw36IdZjQBDO2DiXpw/j0pz4cfYOfud8WUczA1f7DXCvsY3S3
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:45:48 2025 by rpki-client