Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa
File: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (raw, json)
Hash identifier: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=
Subject key identifier: EE:B1:99:EC:A9:FC:D5:96:7D:54:AA:1E:1F:47:8B:53:E9:17:B7:D3
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A0D97DA9D96647025171F9090FB5A
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60262
IP address blocks: 2a03:cc40::/29 maxlen: 29
2a0c:e500::/29 maxlen: 29
2a10:1d80::/29 maxlen: 29
2a11:1300::/29 maxlen: 29
2a11:1ac0::/29 maxlen: 29
2a11:3140::/29 maxlen: 29
2a11:3c80::/29 maxlen: 29
2a11:5340::/29 maxlen: 29
2a11:5500::/29 maxlen: 29
2a11:7a00::/29 maxlen: 29
2a11:7dc0::/29 maxlen: 29
2a11:8380::/29 maxlen: 29
2a11:ac00::/29 maxlen: 29
2a11:b040::/29 maxlen: 29
2a11:b300::/29 maxlen: 29
2a11:c000::/29 maxlen: 29
2a11:ec80::/29 maxlen: 29
2a12:600::/29 maxlen: 29
2a12:2580::/29 maxlen: 29
2a12:2900::/29 maxlen: 29
2a12:5000::/29 maxlen: 29
2a12:b880::/29 maxlen: 29
2a12:d300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0d:97:da:9d:96:64:70:25:17:1f:90:90:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb199eca9fcd5967d54aa1e1f478b53e917b7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:9a:33:06:1b:e6:9d:93:37:fb:f1:8d:c9:
bd:d1:18:ab:bc:5c:2e:59:1e:06:41:d6:da:f2:65:
74:9d:79:e7:cc:3a:c5:63:77:e4:29:f6:a5:ed:4a:
4b:f6:4b:d0:6d:72:89:91:8b:00:3a:c4:fb:26:0d:
78:b0:30:21:2d:6b:fe:44:6b:3f:db:95:5c:6f:62:
23:6c:48:86:45:64:9e:35:eb:15:58:92:50:8c:c1:
49:9e:97:2c:25:4e:28:08:fa:1b:d8:a3:85:7a:a0:
6f:1a:10:1c:81:97:a9:ab:8b:f8:83:3d:4d:a7:75:
c8:d4:1b:c1:51:0f:d5:53:80:b3:99:ca:ca:e4:a6:
28:15:76:41:0f:22:11:b2:25:65:df:91:2c:67:c5:
e7:3f:56:b5:c1:46:ef:1d:49:0d:50:d9:f8:d3:83:
46:11:79:72:b7:63:24:9a:71:c0:4e:ba:8a:9d:00:
05:d4:08:bb:b4:80:0d:a7:8a:a2:5b:ec:3f:6e:bf:
6b:c8:22:5b:ad:1b:00:5c:bf:ae:83:2d:34:ef:ce:
32:13:bb:c0:d6:80:26:7e:75:61:9c:91:bd:c0:6f:
4c:b0:5a:1f:2d:16:e0:3d:97:f9:d8:cb:d7:35:f9:
b6:eb:5e:ec:f9:aa:c9:8f:49:35:e3:14:c8:e6:27:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:99:EC:A9:FC:D5:96:7D:54:AA:1E:1F:47:8B:53:E9:17:B7:D3
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:cc40::/29
2a0c:e500::/29
2a10:1d80::/29
2a11:1300::/29
2a11:1ac0::/29
2a11:3140::/29
2a11:3c80::/29
2a11:5340::/29
2a11:5500::/29
2a11:7a00::/29
2a11:7dc0::/29
2a11:8380::/29
2a11:ac00::/29
2a11:b040::/29
2a11:b300::/29
2a11:c000::/29
2a11:ec80::/29
2a12:600::/29
2a12:2580::/29
2a12:2900::/29
2a12:5000::/29
2a12:b880::/29
2a12:d300::/29
Signature Algorithm: sha256WithRSAEncryption
b8:3f:f2:05:e8:dd:a7:82:78:41:31:44:66:f4:53:3c:5d:bc:
51:61:54:cd:a0:a3:9b:44:51:7b:72:f3:88:5a:85:71:62:d1:
cb:30:00:16:ed:99:b7:e8:76:03:7b:f9:45:d5:f3:14:cc:04:
02:a8:cf:e5:ea:da:f1:89:f7:d3:e1:33:82:32:4e:fb:b4:f6:
e1:e2:39:dc:b5:05:a1:5b:b1:5b:df:b0:10:4a:33:5c:36:ba:
e4:ba:fc:b6:77:1a:42:22:27:96:62:8e:50:30:7c:dc:d5:b3:
72:ae:c1:61:a2:3a:04:f2:8b:74:c7:50:2d:64:3a:d6:00:3e:
86:c8:19:3c:4a:2b:cd:1e:8a:e7:e9:9e:df:ae:6c:85:eb:56:
f5:19:d1:7a:13:39:13:17:18:3e:64:52:cc:8f:99:3f:c1:e6:
23:0a:fd:e3:c8:03:4e:95:0b:eb:00:9a:d4:75:42:53:93:8d:
5e:2f:fa:ae:ca:95:cb:6c:7c:8c:be:38:7a:cb:2d:94:86:7b:
31:45:8d:5f:c9:e2:73:5f:bb:6b:95:54:e0:ca:13:71:d6:8c:
31:29:1a:3c:fd:2d:dd:03:cc:57:52:45:f7:af:dc:13:5a:0f:
f1:8a:b8:47:a1:50:c5:cb:6d:e1:32:eb:a2:39:d9:18:1d:6a:
12:79:2f:a6
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAZQjag2X2p2WZHAlFx+QkPtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjUwMTAxMTk0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWIxOTllY2E5ZmNkNTk2N2Q1NGFhMWUxZjQ3OGI1M2U5MTdiN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbmaMwYb5p2TN/vxjcm90RirvFwu
WR4GQdba8mV0nXnnzDrFY3fkKfal7UpL9kvQbXKJkYsAOsT7Jg14sDAhLWv+RGs/
25Vcb2IjbEiGRWSeNesVWJJQjMFJnpcsJU4oCPob2KOFeqBvGhAcgZepq4v4gz1N
p3XI1BvBUQ/VU4CzmcrK5KYoFXZBDyIRsiVl35EsZ8XnP1a1wUbvHUkNUNn404NG
EXlyt2MkmnHATrqKnQAF1Ai7tIANp4qiW+w/br9ryCJbrRsAXL+ugy00784yE7vA
1oAmfnVhnJG9wG9MsFofLRbgPZf52MvXNfm2617s+arJj0k14xTI5idKnQIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFO6xmeyp/NWWfVSqHh9Hi1PpF7fTMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvN3JHWjdLbjgxWlo5VktvZUgwZUxVLWtYdDlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBqAQCAAIwgaEDBQMq
A8xAAwUDKgzlAAMFAyoQHYADBQMqERMAAwUDKhEawAMFAyoRMUADBQMqETyAAwUD
KhFTQAMFAyoRVQADBQMqEXoAAwUDKhF9wAMFAyoRg4ADBQMqEawAAwUDKhGwQAMF
AyoRswADBQMqEcAAAwUDKhHsgAMFAyoSBgADBQMqEiWAAwUDKhIpAAMFAyoSUAAD
BQMqEriAAwUDKhLTADANBgkqhkiG9w0BAQsFAAOCAQEAuD/yBejdp4J4QTFEZvRT
PF28UWFUzaCjm0RRe3LziFqFcWLRyzAAFu2Zt+h2A3v5RdXzFMwEAqjP5era8Yn3
0+EzgjJO+7T24eI53LUFoVuxW9+wEEozXDa65Lr8tncaQiInlmKOUDB83NWzcq7B
YaI6BPKLdMdQLWQ61gA+hsgZPEorzR6K5+me365shetW9RnRehM5ExcYPmRSzI+Z
P8HmIwr948gDTpUL6wCa1HVCU5ONXi/6rsqVy2x8jL44esstlIZ7MUWNX8nic1+7
a5VU4MoTcdaMMSkaPP0t3QPMV1JF96/cE1oP8Yq4R6FQxctt4TLrojnZGB1qEnkv
pg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:54:33 2025 by rpki-client