Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/cBeaN8r92MWoqfdvhQH_ewA_rkk.roa
File: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (raw, json)
Hash identifier: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=
Subject key identifier: 70:17:9A:37:CA:FD:D8:C5:A8:A9:F7:6F:85:01:FF:7B:00:3F:AE:49
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 019424B3781AB74FA68B8DB1FF4519158FE9
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/cBeaN8r92MWoqfdvhQH_ewA_rkk.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59545
IP address blocks: 195.177.214.0/23 maxlen: 23
195.177.214.0/24 maxlen: 24
195.177.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:78:1a:b7:4f:a6:8b:8d:b1:ff:45:19:15:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70179a37cafdd8c5a8a9f76f8501ff7b003fae49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:f0:b5:39:4a:54:e3:6f:c5:c4:96:ac:c2:
5c:84:aa:c5:7b:54:44:98:d9:f7:4c:d0:37:b9:1c:
56:ce:1e:52:bd:71:29:63:90:75:3e:87:2f:27:21:
0e:2a:d0:ef:94:3a:5b:6a:65:f3:88:5f:ae:0c:a3:
68:e8:f9:48:08:ea:27:f1:5e:0a:0a:f7:b9:52:ab:
b6:21:46:03:fe:6f:02:49:e4:50:34:a1:98:a8:a7:
f1:45:0c:35:fd:a2:83:df:e0:39:b5:fc:48:65:de:
5e:92:10:45:a1:c4:a2:4a:05:db:58:2f:c7:59:72:
d2:8e:94:41:3a:b4:06:07:42:e4:dc:2f:e9:ac:86:
5b:90:28:c4:22:28:7f:a2:c7:85:f0:86:07:cf:f6:
97:f8:b0:10:51:f1:7e:55:33:ba:27:9e:f3:eb:1c:
b7:b0:ca:de:e5:4a:ed:2a:2f:7b:39:24:4a:15:87:
21:c2:3f:87:d6:09:97:45:01:d8:80:15:b5:08:33:
51:b3:91:5b:5c:7e:7f:e3:b9:b1:94:ea:7b:ae:21:
e7:c0:1b:80:17:5e:0e:d7:6f:77:40:28:f5:d2:9a:
fb:0f:3c:de:94:36:d2:6a:2f:bc:9c:cd:b0:69:52:
ba:33:95:68:90:eb:53:72:13:54:fe:eb:d0:84:0f:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:9A:37:CA:FD:D8:C5:A8:A9:F7:6F:85:01:FF:7B:00:3F:AE:49
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/cBeaN8r92MWoqfdvhQH_ewA_rkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.214.0/23
Signature Algorithm: sha256WithRSAEncryption
25:32:ce:da:5c:d9:51:98:5b:9f:04:9d:97:da:83:d6:04:9a:
e1:10:50:d6:53:86:51:f1:00:2c:c8:b3:92:a3:52:6d:0a:93:
ef:0c:9c:c8:a3:91:fe:fd:97:6a:2b:af:ac:b3:f4:d6:ea:b0:
28:ba:fd:0c:ff:14:5f:c0:52:a2:6c:d6:6c:26:3d:b0:d8:14:
be:d4:b1:3a:a7:05:b1:6a:76:6b:ec:d0:3c:37:77:7a:ed:24:
2e:85:16:6c:3c:56:1d:71:b2:f0:e8:2a:d9:40:75:e2:37:98:
a6:e6:5b:59:3a:3a:ee:45:89:3b:b4:7a:58:19:15:b2:14:39:
9d:de:a2:bb:58:c6:e5:95:21:a2:9c:a1:2b:26:6b:0e:d3:d7:
26:b4:4e:e4:ab:26:01:99:c7:93:65:fa:d2:55:88:f8:35:0d:
d5:43:1c:14:12:89:a6:a0:52:f5:b7:34:e7:bd:8d:20:88:75:
71:a6:74:ab:80:26:4a:a0:6a:d9:72:23:bb:f5:1b:a2:1f:67:
67:1b:14:49:7f:97:a6:40:b3:a7:00:c1:67:4c:50:ff:23:10:
67:12:fa:c7:30:17:5d:8f:38:f8:7b:53:a3:2d:17:27:14:4b:
83:a7:3d:0b:50:03:5a:c3:3e:95:3c:e6:c3:f5:10:3a:00:ff:
b9:c0:24:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks3gat0+mi42x/0UZFY/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTQ3MTRhNjk1YzYzY2YyZTljNGFkZWE2MTcxODI3ZDg2
NmUyOTgwHhcNMjUwMTAyMDE0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDE3OWEzN2NhZmRkOGM1YThhOWY3NmY4NTAxZmY3YjAwM2ZhZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRbwtTlKVONvxcSWrMJchKrFe1RE
mNn3TNA3uRxWzh5SvXEpY5B1PocvJyEOKtDvlDpbamXziF+uDKNo6PlICOon8V4K
Cve5Uqu2IUYD/m8CSeRQNKGYqKfxRQw1/aKD3+A5tfxIZd5ekhBFocSiSgXbWC/H
WXLSjpRBOrQGB0Lk3C/prIZbkCjEIih/oseF8IYHz/aX+LAQUfF+VTO6J57z6xy3
sMre5UrtKi97OSRKFYchwj+H1gmXRQHYgBW1CDNRs5FbXH5/47mxlOp7riHnwBuA
F14O1293QCj10pr7DzzelDbSai+8nM2waVK6M5VokOtTchNU/uvQhA85CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAXmjfK/djFqKn3b4UB/3sAP65JMB8GA1UdIwQY
MBaAFLOkcUppXGPPLpxK3qYXGCfYZuKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQt
ZGM0OGNlY2QxNTQ1LzEvY0JlYU44cjkyTVdvcWZkdmhRSF9ld0FfcmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQtZGM0OGNlY2QxNTQ1
LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7HWMA0G
CSqGSIb3DQEBCwUAA4IBAQAlMs7aXNlRmFufBJ2X2oPWBJrhEFDWU4ZR8QAsyLOS
o1JtCpPvDJzIo5H+/ZdqK6+ss/TW6rAouv0M/xRfwFKibNZsJj2w2BS+1LE6pwWx
anZr7NA8N3d67SQuhRZsPFYdcbLw6CrZQHXiN5im5ltZOjruRYk7tHpYGRWyFDmd
3qK7WMbllSGinKErJmsO09cmtE7kqyYBmceTZfrSVYj4NQ3VQxwUEommoFL1tzTn
vY0giHVxpnSrgCZKoGrZciO79RuiH2dnGxRJf5emQLOnAMFnTFD/IxBnEvrHMBdd
jzj4e1OjLRcnFEuDpz0LUANawz6VPObD9RA6AP+5wCSG
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:05 2025 by rpki-client