Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/kF7mXs8Y_UB13udEpA0xGHCjAro.roa
File: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (raw, json)
Hash identifier: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=
Subject key identifier: 90:5E:E6:5E:CF:18:FD:40:75:DE:E7:44:A4:0D:31:18:70:A3:02:BA
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019422FB1C034B5C7074787D2BE10C279B48
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/kF7mXs8Y_UB13udEpA0xGHCjAro.roa
Signing time: Wed 01 Jan 2025 17:47:49 +0000
ROA not before: Wed 01 Jan 2025 17:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49121
IP address blocks: 37.77.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:1c:03:4b:5c:70:74:78:7d:2b:e1:0c:27:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jan 1 17:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=905ee65ecf18fd4075dee744a40d311870a302ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:f9:2c:ad:9c:cf:f0:47:a5:a7:c4:da:a1:
15:9f:93:0e:c4:8b:16:d8:e9:31:61:15:2f:b1:0e:
2b:ec:29:1f:67:9d:db:d6:f4:e3:32:95:b2:47:5f:
9f:15:98:67:3e:fa:41:a4:42:e5:7c:ce:f4:16:5a:
b4:6c:c1:59:1f:43:4c:b8:1e:82:a2:22:e6:f4:a1:
46:5f:33:18:f9:70:d5:ac:ca:3d:63:37:53:79:16:
7e:bd:6e:83:ab:2f:57:c2:d6:b3:0f:ec:3e:97:50:
a5:6f:ff:f5:d5:86:b7:25:2f:ef:44:8f:00:9f:b1:
40:c9:4e:7b:5a:1d:46:4d:2d:ec:e8:57:24:f5:19:
02:32:af:91:54:b7:9e:3c:28:ab:ba:7a:7f:e2:c7:
0c:fa:e6:84:8f:82:a1:50:1d:a1:d4:eb:8f:da:d7:
78:ff:88:d0:64:36:55:30:62:02:3d:23:fb:73:64:
75:fd:9d:6f:78:0e:26:6b:be:7d:95:d3:6f:28:1c:
fd:1c:12:71:61:ee:c1:fa:02:16:96:1a:97:6c:d8:
ef:1b:08:3f:32:a7:3c:f7:49:6f:ec:b5:ce:a9:26:
e9:66:d4:ca:59:87:37:67:3c:e5:2d:ba:2c:bf:4f:
c8:01:8f:3c:f5:fc:51:46:31:f1:5f:2d:2a:49:db:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:E6:5E:CF:18:FD:40:75:DE:E7:44:A4:0D:31:18:70:A3:02:BA
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/kF7mXs8Y_UB13udEpA0xGHCjAro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.145.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a9:56:36:36:16:7a:62:fa:2f:be:d9:4a:27:2a:06:76:60:
55:7b:8f:ed:71:8c:75:3c:e8:b1:3f:95:eb:d0:de:bf:a0:24:
b2:e6:9c:bd:11:f5:cd:f7:47:17:dc:44:ae:2e:9c:ed:eb:f1:
9b:70:66:b7:20:5c:09:2e:27:9b:9c:f6:e1:ae:75:54:73:5f:
2e:df:5f:0c:07:3b:da:09:1e:77:b5:04:7d:a8:05:3b:e3:ac:
13:42:10:e1:ef:60:86:63:bc:1d:17:8d:bb:9b:2e:4d:91:15:
39:83:56:48:b0:74:fb:8f:29:d1:52:55:63:7a:fa:7f:14:cc:
db:b3:9c:0f:e7:8d:32:fa:82:fb:16:0e:21:45:ce:9f:86:91:
91:ec:e3:ed:28:e1:52:23:d2:a7:68:df:3e:5b:1b:d1:db:40:
5d:db:bc:25:06:cb:6c:f2:66:5f:69:70:48:e4:fc:7e:d1:7f:
4d:58:79:38:89:22:20:49:f0:ab:c9:85:12:88:4a:ee:5e:84:
d0:52:47:af:8d:a0:70:d3:74:7a:fc:14:22:a7:72:2b:3b:16:
34:7f:88:d2:26:48:f5:3a:49:78:33:98:6e:a4:ba:44:8b:d7:
4f:79:54:64:5b:07:ec:5f:92:71:fe:ee:50:12:64:4c:b1:52:
27:0e:73:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+xwDS1xwdHh9K+EMJ5tIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3
MDZmODQwHhcNMjUwMTAxMTc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDVlZTY1ZWNmMThmZDQwNzVkZWU3NDRhNDBkMzExODcwYTMwMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcj5LK2cz/BHpafE2qEVn5MOxIsW
2OkxYRUvsQ4r7CkfZ53b1vTjMpWyR1+fFZhnPvpBpELlfM70Flq0bMFZH0NMuB6C
oiLm9KFGXzMY+XDVrMo9YzdTeRZ+vW6Dqy9XwtazD+w+l1Clb//11Ya3JS/vRI8A
n7FAyU57Wh1GTS3s6Fck9RkCMq+RVLeePCirunp/4scM+uaEj4KhUB2h1OuP2td4
/4jQZDZVMGICPSP7c2R1/Z1veA4ma759ldNvKBz9HBJxYe7B+gIWlhqXbNjvGwg/
Mqc890lv7LXOqSbpZtTKWYc3ZzzlLbosv0/IAY889fxRRjHxXy0qSdu+zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBe5l7PGP1Add7nRKQNMRhwowK6MB8GA1UdIwQY
MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt
ZjdlN2JiMDE0ZGI4LzEva0Y3bVhzOFlfVUIxM3VkRXBBMHhHSENqQXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4
LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJU2RMA0G
CSqGSIb3DQEBCwUAA4IBAQCBqVY2NhZ6YvovvtlKJyoGdmBVe4/tcYx1POixP5Xr
0N6/oCSy5py9EfXN90cX3ESuLpzt6/GbcGa3IFwJLiebnPbhrnVUc18u318MBzva
CR53tQR9qAU746wTQhDh72CGY7wdF427my5NkRU5g1ZIsHT7jynRUlVjevp/FMzb
s5wP540y+oL7Fg4hRc6fhpGR7OPtKOFSI9KnaN8+WxvR20Bd27wlBsts8mZfaXBI
5Px+0X9NWHk4iSIgSfCryYUSiEruXoTQUkevjaBw03R6/BQip3IrOxY0f4jSJkj1
Okl4M5hupLpEi9dPeVRkWwfsX5Jx/u5QEmRMsVInDnOu
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:23 2025 by rpki-client