Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa
File: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (raw, json)
Hash identifier: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=
Subject key identifier: D4:B6:47:7B:C4:F2:D8:47:2B:7F:BE:83:A1:2C:64:C0:06:D5:D8:47
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01942747E1A476E938DB4D2E98B3B02D479D
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 85.28.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e1:a4:76:e9:38:db:4d:2e:98:b3:b0:2d:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b6477bc4f2d8472b7fbe83a12c64c006d5d847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:d3:98:5a:60:cb:1d:43:ed:fd:f0:e7:7c:
2a:13:aa:1e:1e:aa:5b:38:1d:9d:7f:26:04:c7:30:
db:47:11:38:df:39:8e:c1:9d:36:e4:2d:ae:c6:18:
28:73:48:7b:e2:51:f3:86:9f:42:47:82:b7:7e:15:
c2:2f:30:92:d7:87:5b:48:b4:55:48:98:f5:f1:c3:
06:31:43:91:ea:5a:d9:4e:f3:17:f9:eb:ae:57:de:
76:8d:c6:08:4a:ad:b5:62:7e:59:30:ac:3d:69:a2:
bc:65:bd:b5:dc:20:de:df:9a:9c:ed:4c:2a:b0:42:
23:1b:c1:8a:ec:aa:98:5f:28:b3:9f:38:96:48:db:
60:dc:88:6e:7a:17:1c:5c:59:64:e5:80:1c:17:f3:
d8:af:b7:9c:05:1c:0e:6e:be:f9:d4:89:45:e1:b0:
4b:cb:11:97:29:0a:2e:61:d0:c8:d1:33:1f:40:29:
19:09:0f:07:7a:c6:83:12:eb:6b:7b:a1:1f:e0:d1:
15:c0:3a:aa:c4:40:98:f1:4b:ce:88:33:df:16:2c:
ac:49:13:e6:f4:c6:42:b4:4c:83:98:9e:c9:09:43:
30:b9:45:65:d5:70:67:bb:be:01:5e:6d:de:46:56:
6d:ba:3e:fa:f9:a5:3f:c4:6b:87:3e:61:93:d7:da:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:47:7B:C4:F2:D8:47:2B:7F:BE:83:A1:2C:64:C0:06:D5:D8:47
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.47.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e7:4b:79:6f:e5:da:b0:f3:4e:0f:8b:62:16:39:7b:0f:48:
5c:19:bf:2f:4c:f5:61:79:6b:3e:b9:f8:5a:d2:16:0d:74:9e:
ac:30:25:fd:ba:6f:6a:b7:a1:4d:f9:d2:db:aa:5b:1e:9b:ef:
24:bd:69:95:31:ff:48:ef:9f:f9:69:df:82:90:a0:c3:8b:fd:
c4:96:0d:52:f9:60:40:57:bd:42:cf:55:81:03:76:5c:09:92:
b8:86:c4:06:76:94:28:bc:86:e3:58:40:fb:34:f1:5c:16:78:
4a:d3:8a:04:c0:50:49:50:56:af:e2:b9:a0:a9:22:8b:ae:c4:
16:32:33:3a:eb:30:7c:38:ab:11:ce:3c:ee:6d:75:9c:17:bd:
be:40:5b:6f:93:69:89:34:fb:fa:da:18:c1:bb:c3:5b:d2:5c:
f6:67:e0:95:27:f8:fc:23:0b:82:88:0e:71:da:71:65:ba:c1:
0f:72:81:b1:81:e2:75:91:34:f7:73:05:bb:b4:e4:c8:c9:e8:
a2:05:d6:39:af:90:31:d6:18:78:a9:be:5b:52:2a:5c:6c:cc:
6d:1a:05:1f:3c:5c:5e:ba:48:cc:93:57:6e:63:8b:3b:eb:a7:
6c:7b:82:63:57:03:5f:69:af:eb:ce:72:1c:d3:ef:b9:16:6e:
4d:46:b7:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR+Gkduk4200umLOwLUedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjUwMTAyMTM1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGI2NDc3YmM0ZjJkODQ3MmI3ZmJlODNhMTJjNjRjMDA2ZDVkODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5jTmFpgyx1D7f3w53wqE6oeHqpb
OB2dfyYExzDbRxE43zmOwZ025C2uxhgoc0h74lHzhp9CR4K3fhXCLzCS14dbSLRV
SJj18cMGMUOR6lrZTvMX+euuV952jcYISq21Yn5ZMKw9aaK8Zb213CDe35qc7Uwq
sEIjG8GK7KqYXyiznziWSNtg3IhuehccXFlk5YAcF/PYr7ecBRwObr751IlF4bBL
yxGXKQouYdDI0TMfQCkZCQ8HesaDEutre6Ef4NEVwDqqxECY8UvOiDPfFiysSRPm
9MZCtEyDmJ7JCUMwuUVl1XBnu74BXm3eRlZtuj76+aU/xGuHPmGT19oiyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNS2R3vE8thHK3++g6EsZMAG1dhHMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvMUxaSGU4VHkyRWNyZjc2RG9TeGt3QWJWMkVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVRwvMA0G
CSqGSIb3DQEBCwUAA4IBAQBA50t5b+XasPNOD4tiFjl7D0hcGb8vTPVheWs+ufha
0hYNdJ6sMCX9um9qt6FN+dLbqlsem+8kvWmVMf9I75/5ad+CkKDDi/3Elg1S+WBA
V71Cz1WBA3ZcCZK4hsQGdpQovIbjWED7NPFcFnhK04oEwFBJUFav4rmgqSKLrsQW
MjM66zB8OKsRzjzubXWcF72+QFtvk2mJNPv62hjBu8Nb0lz2Z+CVJ/j8IwuCiA5x
2nFlusEPcoGxgeJ1kTT3cwW7tOTIyeiiBdY5r5Ax1hh4qb5bUipcbMxtGgUfPFxe
ukjMk1duY4s766dse4JjVwNfaa/rznIc0++5Fm5NRrdA
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:57 2025 by rpki-client