Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa
File: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (raw, json)
Hash identifier: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=
Subject key identifier: 1F:F7:79:2C:25:38:2F:75:F0:1A:A2:CD:90:50:D7:14:DD:73:CB:62
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0194258E6EAD4776E81D02BA21AA95467D7F
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa
Signing time: Thu 02 Jan 2025 05:47:58 +0000
ROA not before: Thu 02 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4809
IP address blocks: 147.78.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:6e:ad:47:76:e8:1d:02:ba:21:aa:95:46:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jan 2 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ff7792c25382f75f01aa2cd9050d714dd73cb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:3a:80:2b:54:8a:ac:80:c8:3c:a0:19:be:
2d:05:61:c1:b7:7d:3f:c9:10:6c:31:85:4e:f2:eb:
ad:8b:07:5a:80:54:57:be:7d:b4:1d:a2:71:dd:dc:
34:ee:af:f1:3d:f7:6f:3a:d9:a3:bc:1b:13:2c:e8:
3b:fc:d2:c2:e4:38:46:c6:16:bc:9b:b4:f2:06:ad:
54:19:af:c6:c3:67:e6:a3:84:52:32:c4:16:39:15:
a7:e0:e7:4f:d2:ae:c1:5e:e2:cf:3b:a3:91:34:26:
54:4b:b0:b8:70:4f:b1:6b:7a:5a:27:97:b1:cd:d9:
24:3e:6a:60:e2:b1:18:a0:88:db:1e:86:be:15:ea:
af:94:6a:5e:f3:96:a6:ab:21:de:bd:8d:32:0b:c4:
9e:7c:3a:69:07:e4:87:66:44:44:cb:24:b2:59:e5:
71:ed:70:f5:e9:4e:2d:7c:44:72:1a:29:05:55:de:
2a:da:0d:d1:0b:e8:17:b4:67:75:99:f7:06:eb:24:
40:70:55:d6:79:23:01:85:a4:1c:6a:de:f5:bb:e1:
87:c2:32:77:39:94:a4:1f:07:e7:54:1b:07:9b:3e:
18:cf:8b:60:83:9c:a7:99:0f:b1:0a:44:12:59:ec:
24:95:6a:7f:9f:d8:48:7d:35:8b:5b:37:4d:20:bf:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:79:2C:25:38:2F:75:F0:1A:A2:CD:90:50:D7:14:DD:73:CB:62
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.132.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:5b:55:8d:64:43:89:63:24:aa:63:89:9b:be:83:16:3a:43:
4d:2d:91:7c:13:d7:e2:6e:76:34:eb:fd:2c:e9:56:a2:08:17:
2c:a7:49:48:e1:67:88:d9:8a:f7:a8:0e:bb:a8:1d:e3:5d:99:
32:9b:0d:0a:a5:ac:e6:ca:a2:2e:61:3f:8a:b7:94:99:13:c8:
f1:47:c6:a6:75:21:cd:1c:2a:d7:31:6c:40:52:de:c6:0d:8f:
3d:42:0a:d7:a2:6a:5c:95:bf:00:f4:4d:58:91:0c:c9:9d:15:
82:50:a1:7d:12:87:b6:19:80:2c:1d:2f:91:e2:1c:6d:a3:7e:
fc:bd:fd:f3:29:45:b2:54:f1:9e:3e:88:ab:bf:5a:1d:3c:2b:
d6:1a:48:e4:f0:b4:3e:99:49:1c:4e:77:be:53:f8:34:27:c2:
e5:8b:98:cd:7b:a5:ae:40:0e:64:8e:b0:75:5d:fe:d9:e6:50:
88:95:dd:03:4f:b4:1e:d3:ab:ae:d5:d4:4f:fd:13:f3:37:a1:
1d:d4:59:ef:93:d4:b5:c4:a1:42:88:5b:54:64:fc:df:94:de:
6a:4c:73:ef:f5:40:c9:c1:0e:5f:83:6e:73:9a:c3:93:f5:66:
51:2b:85:07:6b:12:6d:cc:9f:ff:7c:73:05:e7:4d:2a:ab:15:
82:de:b4:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljm6tR3boHQK6IaqVRn1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj
MzlmMzQwHhcNMjUwMTAyMDU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmY3NzkyYzI1MzgyZjc1ZjAxYWEyY2Q5MDUwZDcxNGRkNzNjYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMU6gCtUiqyAyDygGb4tBWHBt30/
yRBsMYVO8uutiwdagFRXvn20HaJx3dw07q/xPfdvOtmjvBsTLOg7/NLC5DhGxha8
m7TyBq1UGa/Gw2fmo4RSMsQWORWn4OdP0q7BXuLPO6ORNCZUS7C4cE+xa3paJ5ex
zdkkPmpg4rEYoIjbHoa+FeqvlGpe85amqyHevY0yC8SefDppB+SHZkREyySyWeVx
7XD16U4tfERyGikFVd4q2g3RC+gXtGd1mfcG6yRAcFXWeSMBhaQcat71u+GHwjJ3
OZSkHwfnVBsHmz4Yz4tgg5ynmQ+xCkQSWewklWp/n9hIfTWLWzdNIL/v5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/3eSwlOC918BqizZBQ1xTdc8tiMB8GA1UdIwQY
MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt
MjU2MzM5NzM2YzJiLzEvSF9kNUxDVTRMM1h3R3FMTmtGRFhGTjF6eTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi
LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk06EMA0G
CSqGSIb3DQEBCwUAA4IBAQAdW1WNZEOJYySqY4mbvoMWOkNNLZF8E9fibnY06/0s
6VaiCBcsp0lI4WeI2Yr3qA67qB3jXZkymw0KpazmyqIuYT+Kt5SZE8jxR8amdSHN
HCrXMWxAUt7GDY89QgrXompclb8A9E1YkQzJnRWCUKF9Eoe2GYAsHS+R4hxto378
vf3zKUWyVPGePoirv1odPCvWGkjk8LQ+mUkcTne+U/g0J8Lli5jNe6WuQA5kjrB1
Xf7Z5lCIld0DT7Qe06uu1dRP/RPzN6Ed1Fnvk9S1xKFCiFtUZPzflN5qTHPv9UDJ
wQ5fg25zmsOT9WZRK4UHaxJtzJ//fHMF500qqxWC3rR6
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:28 2025 by rpki-client