Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/orR6QmUobPq58IiNnqewDNf0I7s.roa
File: orR6QmUobPq58IiNnqewDNf0I7s.roa (raw, json)
Hash identifier: cEMGLelbH1U4lpzSE43pcUZRdK2/HRG/uJ16sgFxOVU=
Subject key identifier: A2:B4:7A:42:65:28:6C:FA:B9:F0:88:8D:9E:A7:B0:0C:D7:F4:23:BB
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 0194A6E92CDAB555F71E4717B99DA32D0E62
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/orR6QmUobPq58IiNnqewDNf0I7s.roa
Signing time: Mon 27 Jan 2025 08:38:06 +0000
ROA not before: Mon 27 Jan 2025 08:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207732
IP address blocks: 195.88.221.0/24 maxlen: 32
2a12:3480:1337::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:e9:2c:da:b5:55:f7:1e:47:17:b9:9d:a3:2d:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Jan 27 08:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b47a4265286cfab9f0888d9ea7b00cd7f423bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:0b:06:ac:88:30:9a:c4:b7:d0:fb:9a:8d:
01:85:db:0a:31:ad:87:6d:4e:84:68:9c:14:50:2b:
e6:01:48:3c:a5:26:04:51:5a:7d:8f:76:ce:8b:e9:
81:60:dd:40:0b:b9:e7:7c:0a:34:1b:df:bb:01:a9:
59:79:68:f7:44:73:36:ac:fe:f5:3e:2a:d4:36:29:
fa:c7:02:3b:0a:c7:81:5e:ce:ab:f6:bf:54:f5:27:
95:de:5c:5a:9a:ae:2d:8a:84:f0:37:b7:a6:8b:93:
a5:ad:32:e3:7b:c7:07:69:71:4d:4a:7e:9f:5e:45:
5d:f1:d5:2d:0b:c3:78:3c:92:38:87:ff:3a:53:d4:
3f:2f:d8:06:3f:aa:53:14:f1:73:98:6b:31:12:0b:
fd:3e:1c:e9:b1:b2:bb:08:5c:a2:cc:65:fc:0f:75:
dc:64:bd:26:46:41:54:16:9e:cc:28:5a:ab:a6:7f:
cc:17:39:da:9b:a8:ce:b3:c6:d8:23:d7:16:38:31:
88:7d:b7:9a:3d:d9:2f:8f:19:ec:12:9e:0e:74:81:
9f:2f:51:b9:45:47:21:30:73:cd:47:9d:56:d8:e6:
05:7a:58:8b:c7:9a:1d:78:30:00:ba:e4:30:ab:7d:
37:8c:8a:44:4f:77:b7:89:71:d6:26:c3:48:ce:ff:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:7A:42:65:28:6C:FA:B9:F0:88:8D:9E:A7:B0:0C:D7:F4:23:BB
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/orR6QmUobPq58IiNnqewDNf0I7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.221.0/24
IPv6:
2a12:3480:1337::/48
Signature Algorithm: sha256WithRSAEncryption
7c:22:e9:81:8e:0f:22:fb:69:17:54:9f:a6:43:ab:ad:8f:25:
c2:39:60:91:ee:53:ed:9d:90:3e:4c:90:98:4b:f8:23:29:11:
36:97:29:00:6b:fa:ce:e2:35:9e:1f:8d:70:2b:1c:74:8d:c4:
15:23:e5:50:52:05:cb:4b:53:31:3d:93:3a:ab:f8:3b:7f:5b:
7d:dd:d7:89:1d:c6:6c:d5:d5:b5:2c:d2:24:2c:5d:b5:81:07:
7e:39:17:cd:18:5a:c2:2e:3a:ff:b8:cb:c5:e2:91:83:3f:f5:
32:cb:12:f2:c3:09:aa:fe:50:33:5d:ac:49:a7:4d:de:4f:18:
ef:1c:45:89:bd:11:bb:b3:d0:86:df:d1:37:7e:6b:59:51:fe:
2f:d6:e8:a9:54:16:d0:36:bf:12:4e:58:45:09:bf:d1:10:88:
9b:92:16:4b:f3:a1:d2:a2:29:f3:62:3b:21:46:43:0a:96:c0:
c0:d6:73:bb:6c:fe:27:27:50:9f:ab:4f:47:2a:d3:d8:df:c8:
3a:27:a2:25:0e:39:1f:84:a3:3f:1b:9d:db:f0:b1:8b:d4:76:
3a:7c:a4:a2:a9:c4:e8:a7:1e:d0:ef:90:8f:ca:68:88:34:2a:
dc:52:f9:6f:60:a7:55:2b:76:ea:13:53:7d:2d:a1:20:d9:a4:
79:01:d0:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZSm6SzatVX3HkcXuZ2jLQ5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjg0MTczNjFjMWM0MDZhZTlhNzI1N2RhYTlmYjA2MjA3
ODJkMzUwHhcNMjUwMTI3MDgzODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmI0N2E0MjY1Mjg2Y2ZhYjlmMDg4OGQ5ZWE3YjAwY2Q3ZjQyM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz70LBqyIMJrEt9D7mo0BhdsKMa2H
bU6EaJwUUCvmAUg8pSYEUVp9j3bOi+mBYN1AC7nnfAo0G9+7AalZeWj3RHM2rP71
PirUNin6xwI7CseBXs6r9r9U9SeV3lxamq4tioTwN7emi5OlrTLje8cHaXFNSn6f
XkVd8dUtC8N4PJI4h/86U9Q/L9gGP6pTFPFzmGsxEgv9PhzpsbK7CFyizGX8D3Xc
ZL0mRkFUFp7MKFqrpn/MFznam6jOs8bYI9cWODGIfbeaPdkvjxnsEp4OdIGfL1G5
RUchMHPNR51W2OYFeliLx5odeDAAuuQwq303jIpET3e3iXHWJsNIzv8xnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKK0ekJlKGz6ufCIjZ6nsAzX9CO7MB8GA1UdIwQY
MBaAFGIoQXNhwcQGrppyV9qp+wYgeC01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEt
NGQzYTU5Y2I5NDM5LzEvb3JSNlFtVW9iUHE1OElpTm5xZXdETmYwSTdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEtNGQzYTU5Y2I5NDM5
LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw1jdMA8E
AgACMAkDBwAqEjSAEzcwDQYJKoZIhvcNAQELBQADggEBAHwi6YGODyL7aRdUn6ZD
q62PJcI5YJHuU+2dkD5MkJhL+CMpETaXKQBr+s7iNZ4fjXArHHSNxBUj5VBSBctL
UzE9kzqr+Dt/W33d14kdxmzV1bUs0iQsXbWBB345F80YWsIuOv+4y8XikYM/9TLL
EvLDCar+UDNdrEmnTd5PGO8cRYm9Ebuz0Ibf0Td+a1lR/i/W6KlUFtA2vxJOWEUJ
v9EQiJuSFkvzodKiKfNiOyFGQwqWwMDWc7ts/icnUJ+rT0cq09jfyDonoiUOOR+E
oz8bndvwsYvUdjp8pKKpxOinHtDvkI/KaIg0KtxS+W9gp1UrduoTU30toSDZpHkB
0No=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:28 2025 by rpki-client