Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/fY72RfJewKqE4BHfcDuBb7MuOUw.roa
File: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (raw, json)
Hash identifier: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=
Subject key identifier: 7D:8E:F6:45:F2:5E:C0:AA:84:E0:11:DF:70:3B:81:6F:B3:2E:39:4C
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A54181F6DC8BCD8307B9FC4CC9E5
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/fY72RfJewKqE4BHfcDuBb7MuOUw.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 185.255.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a5:41:81:f6:dc:8b:cd:83:07:b9:fc:4c:c9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d8ef645f25ec0aa84e011df703b816fb32e394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:d6:20:a4:10:b8:e2:32:96:4f:b9:af:c9:
8d:03:34:1e:ae:2d:a2:c3:1d:23:a2:19:03:ce:a1:
d4:dc:d6:b6:4b:19:a2:af:ab:ea:c0:2a:be:75:35:
bf:55:a4:53:49:5a:d5:d6:58:70:9c:16:22:89:2b:
57:5c:d2:67:d5:58:37:66:87:27:01:8a:12:ed:74:
c4:64:05:18:0e:7c:7b:4a:94:55:b0:1b:74:f3:30:
f0:47:cb:a8:cf:32:b4:ba:3e:50:a5:ae:f7:ce:fe:
10:a3:5c:7f:ea:cf:32:14:7b:39:7c:74:dd:37:56:
8c:25:ce:87:df:1c:84:f0:d1:81:47:32:06:04:7c:
ac:d8:b7:d6:f1:76:98:fe:99:5a:b7:dd:33:c6:c4:
a8:8c:a5:ee:91:98:68:55:0c:14:bb:5a:e0:f7:ad:
19:ac:8d:cd:ab:19:ef:8d:97:00:25:a6:a1:5f:b4:
90:a8:ba:e6:03:ea:3b:ca:d8:a0:1c:7e:13:ef:77:
8e:94:c7:42:90:78:78:fe:61:31:fd:cf:66:51:73:
ab:aa:91:43:ac:21:02:4b:fd:0a:23:de:a4:27:b5:
65:3d:22:fc:c9:fe:62:b1:99:48:e8:e1:77:32:9d:
c8:18:de:73:7e:1e:1c:38:ac:2a:1d:39:9e:16:b5:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:F6:45:F2:5E:C0:AA:84:E0:11:DF:70:3B:81:6F:B3:2E:39:4C
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/fY72RfJewKqE4BHfcDuBb7MuOUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
83:08:50:3d:28:1b:49:09:5d:f2:b4:39:93:f3:c6:68:7b:1a:
85:0b:46:e6:95:49:89:18:70:d2:34:b1:7b:0d:f8:f5:c7:9f:
0b:6e:1f:a9:1f:cf:c5:45:b1:a4:67:f5:42:8c:09:e1:41:4b:
47:59:2d:3d:e9:11:93:68:cf:3d:43:12:10:5a:37:6a:70:cd:
43:07:11:e8:62:a6:f3:bf:d2:0f:f8:7b:45:7a:a9:42:8b:b7:
01:7a:cc:bf:f2:f0:e7:5b:85:26:8b:af:85:3b:bd:0a:c9:5d:
26:91:c0:f4:fd:0b:56:d3:d8:35:b5:ff:e0:26:86:fd:0e:52:
ea:00:3f:f2:d1:d3:39:ec:6a:4c:d7:a3:f3:27:d7:60:06:1c:
be:7b:8c:61:89:ef:b8:91:f6:34:80:aa:67:42:8b:ee:6d:0d:
d1:1f:f0:b8:3e:d4:86:23:ba:c9:82:ef:5e:f7:46:01:48:4b:
d4:40:9d:22:f4:ad:1d:81:42:ad:b4:7f:36:b3:1b:9e:eb:5a:
9f:8d:0e:2d:3d:96:e5:1d:12:5b:39:1b:10:48:20:32:dc:d2:
39:0b:c6:f8:ff:9a:fd:cc:3f:e6:d2:34:cf:9b:2e:1c:e0:fe:
25:e3:ef:e1:7f:73:71:3f:f5:26:9c:a2:15:d5:f7:49:bf:bb:
e9:08:ce:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRaVBgfbci82DB7n8TMnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjUwMTAxMjM0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDhlZjY0NWYyNWVjMGFhODRlMDExZGY3MDNiODE2ZmIzMmUzOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIfWIKQQuOIylk+5r8mNAzQeri2i
wx0johkDzqHU3Na2Sxmir6vqwCq+dTW/VaRTSVrV1lhwnBYiiStXXNJn1Vg3Zocn
AYoS7XTEZAUYDnx7SpRVsBt08zDwR8uozzK0uj5Qpa73zv4Qo1x/6s8yFHs5fHTd
N1aMJc6H3xyE8NGBRzIGBHys2LfW8XaY/plat90zxsSojKXukZhoVQwUu1rg960Z
rI3NqxnvjZcAJaahX7SQqLrmA+o7ytigHH4T73eOlMdCkHh4/mEx/c9mUXOrqpFD
rCECS/0KI96kJ7VlPSL8yf5isZlI6OF3Mp3IGN5zfh4cOKwqHTmeFrWPHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2O9kXyXsCqhOAR33A7gW+zLjlMMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvZlk3MlJmSmV3S3FFNEJIZmNEdUJiN011T1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf/FMA0G
CSqGSIb3DQEBCwUAA4IBAQCDCFA9KBtJCV3ytDmT88ZoexqFC0bmlUmJGHDSNLF7
Dfj1x58Lbh+pH8/FRbGkZ/VCjAnhQUtHWS096RGTaM89QxIQWjdqcM1DBxHoYqbz
v9IP+HtFeqlCi7cBesy/8vDnW4Umi6+FO70KyV0mkcD0/QtW09g1tf/gJob9DlLq
AD/y0dM57GpM16PzJ9dgBhy+e4xhie+4kfY0gKpnQovubQ3RH/C4PtSGI7rJgu9e
90YBSEvUQJ0i9K0dgUKttH82sxue61qfjQ4tPZblHRJbORsQSCAy3NI5C8b4/5r9
zD/m0jTPmy4c4P4l4+/hf3NxP/UmnKIV1fdJv7vpCM5a
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:08 2025 by rpki-client