Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/hfgMfu7Qw2lbku2K_C9F0yTwrqI.roa
File: hfgMfu7Qw2lbku2K_C9F0yTwrqI.roa (raw, json)
Hash identifier: JOD6ZCURFAVdH/OeoFjWQJVX1Tzp95DuAEf8o/zioHU=
Subject key identifier: 85:F8:0C:7E:EE:D0:C3:69:5B:92:ED:8A:FC:2F:45:D3:24:F0:AE:A2
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01955DE629E5F8F02C6A0FE34553D08BE7EE
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/hfgMfu7Qw2lbku2K_C9F0yTwrqI.roa
Signing time: Mon 03 Mar 2025 21:25:19 +0000
ROA not before: Mon 03 Mar 2025 21:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 95.128.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:e6:29:e5:f8:f0:2c:6a:0f:e3:45:53:d0:8b:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Mar 3 21:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f80c7eeed0c3695b92ed8afc2f45d324f0aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:c3:18:de:1c:50:50:59:08:90:7c:7b:45:
2d:c3:13:d8:51:d2:e8:b9:6e:a2:e5:01:d5:5d:26:
5e:75:fd:22:ef:40:d5:63:1b:da:de:fd:45:e3:a6:
24:8a:a1:ee:6c:d4:fa:58:7e:17:17:bd:83:82:dc:
91:32:41:fe:76:1a:b6:7f:22:d8:42:52:ce:ea:58:
c0:50:e2:57:a1:ff:9e:49:76:2f:92:30:9d:1e:1c:
58:9e:ab:3f:44:8d:20:4a:77:d6:e7:b9:53:6a:06:
30:27:28:49:29:d4:66:47:69:3c:05:2d:71:58:91:
84:11:5e:fb:89:7b:b0:62:1b:8e:e6:bb:46:23:71:
cd:2f:3d:cd:54:5b:74:77:a5:9d:2c:d9:4f:6b:99:
c6:5a:a3:a0:8f:82:e6:71:bf:3e:66:23:55:e0:36:
b5:e7:cc:46:d3:57:36:e9:98:09:45:fa:48:ca:a3:
78:f6:ce:57:db:6b:39:19:bf:6a:2d:7b:10:42:9d:
2d:10:44:5c:b8:b7:b6:36:27:e1:ca:fb:d7:11:dd:
ec:75:66:5a:24:65:5a:3c:30:f3:de:79:40:e1:69:
44:52:27:ab:bf:53:70:c2:22:0b:59:df:aa:c6:4d:
b2:95:e2:82:12:a9:32:ee:c4:46:40:4b:bc:e6:ac:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:0C:7E:EE:D0:C3:69:5B:92:ED:8A:FC:2F:45:D3:24:F0:AE:A2
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/hfgMfu7Qw2lbku2K_C9F0yTwrqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b2:cc:75:93:50:a5:ed:57:45:e0:77:e6:70:85:16:0d:89:
ee:7f:b4:a2:44:bd:7d:1c:44:29:e7:71:f7:31:1e:86:f1:03:
63:5d:9f:f2:f7:a2:f3:a9:bb:83:f4:13:4e:af:51:80:2d:17:
31:f7:cb:3e:54:f5:18:00:8e:99:04:b4:d5:d1:04:3c:95:3f:
a3:84:dd:dd:6c:20:9c:45:6a:df:60:fd:21:6a:96:42:84:90:
15:dd:84:22:01:cb:5c:1c:b9:48:50:9a:be:49:3e:a9:08:3c:
b2:60:d9:e0:7c:0a:7e:cc:67:79:90:71:45:6a:88:6a:43:85:
e0:eb:d9:b8:23:26:6b:d5:e2:61:88:6d:a4:97:26:21:e8:12:
62:dd:15:fc:62:6d:93:ac:24:2d:11:6c:1e:d1:3d:e0:8a:67:
f2:08:05:85:4e:eb:a5:99:e1:46:ca:e6:ed:c2:70:53:7c:1e:
47:87:e3:7e:af:89:0e:78:23:ec:05:af:8e:ca:96:a6:f1:35:
08:30:4c:e8:bc:e5:c5:f8:41:ab:1d:f7:7e:96:09:89:be:2f:
b9:f2:85:60:ba:3c:19:79:9c:df:fc:10:58:f2:b5:9d:26:0c:
23:4d:28:b6:a6:54:fc:e2:f4:f5:d8:0f:c8:73:ed:21:0e:37:
f0:53:85:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVd5inl+PAsag/jRVPQi+fuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjUwMzAzMjEyNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWY4MGM3ZWVlZDBjMzY5NWI5MmVkOGFmYzJmNDVkMzI0ZjBhZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzrDGN4cUFBZCJB8e0UtwxPYUdLo
uW6i5QHVXSZedf0i70DVYxva3v1F46YkiqHubNT6WH4XF72DgtyRMkH+dhq2fyLY
QlLO6ljAUOJXof+eSXYvkjCdHhxYnqs/RI0gSnfW57lTagYwJyhJKdRmR2k8BS1x
WJGEEV77iXuwYhuO5rtGI3HNLz3NVFt0d6WdLNlPa5nGWqOgj4Lmcb8+ZiNV4Da1
58xG01c26ZgJRfpIyqN49s5X22s5Gb9qLXsQQp0tEERcuLe2NifhyvvXEd3sdWZa
JGVaPDDz3nlA4WlEUierv1NwwiILWd+qxk2yleKCEqky7sRGQEu85qyKXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIX4DH7u0MNpW5LtivwvRdMk8K6iMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvaGZnTWZ1N1F3Mmxia3UyS19DOUYweVR3cnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DDMA0G
CSqGSIb3DQEBCwUAA4IBAQAVssx1k1Cl7VdF4HfmcIUWDYnuf7SiRL19HEQp53H3
MR6G8QNjXZ/y96LzqbuD9BNOr1GALRcx98s+VPUYAI6ZBLTV0QQ8lT+jhN3dbCCc
RWrfYP0hapZChJAV3YQiActcHLlIUJq+ST6pCDyyYNngfAp+zGd5kHFFaohqQ4Xg
69m4IyZr1eJhiG2klyYh6BJi3RX8Ym2TrCQtEWwe0T3gimfyCAWFTuulmeFGyubt
wnBTfB5Hh+N+r4kOeCPsBa+Oypam8TUIMEzovOXF+EGrHfd+lgmJvi+58oVgujwZ
eZzf/BBY8rWdJgwjTSi2plT84vT12A/Ic+0hDjfwU4V9
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:03 2025 by rpki-client