Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa
File: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (raw, json)
Hash identifier: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=
Subject key identifier: B5:78:40:73:FE:65:43:DC:FC:B1:EF:BB:9A:33:3A:70:EA:60:E9:EE
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019420D631FE983E80A25ABA16566EDA99B3
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 194.150.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:31:fe:98:3e:80:a2:5a:ba:16:56:6e:da:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5784073fe6543dcfcb1efbb9a333a70ea60e9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:7b:0b:7c:dd:75:81:8d:7f:a2:c0:64:e3:
77:75:ae:0d:4f:26:71:3d:b9:cb:0e:02:fd:85:b8:
a1:ea:a4:7e:60:70:79:e3:11:59:00:f6:97:92:57:
06:55:e7:d8:f4:4c:e1:79:4b:83:52:ba:97:66:d0:
69:b0:2c:ab:16:91:84:26:0f:e2:93:2f:3b:42:44:
00:ba:34:70:81:e6:e3:7b:0c:71:fd:9c:f0:82:38:
52:c7:5e:b4:60:1f:06:0b:a5:57:b5:a7:d3:ea:2b:
14:8c:ee:7a:93:55:ca:36:18:e1:c2:75:ca:ae:e9:
fc:58:cd:9b:fd:88:ca:0c:1b:1d:9c:23:89:f2:74:
a1:8c:42:4b:27:27:87:04:bc:4c:12:e8:33:ab:75:
83:82:3d:0e:cd:51:4c:d3:dc:67:82:3b:cd:ea:1e:
17:c6:07:56:4c:eb:20:8f:4a:43:fe:b5:30:c2:5c:
f9:4d:17:97:a5:15:3a:98:0c:6a:46:59:69:0e:c9:
a5:00:30:7b:7a:49:36:28:6a:e9:c4:1c:c8:65:23:
1d:b1:c8:4b:ed:55:d9:c6:1e:6f:d7:d8:34:31:ff:
e1:91:8d:ab:46:8b:6e:68:e6:66:32:b3:91:bd:f0:
8e:d6:4f:51:ec:1e:f7:d2:2e:fc:3d:f7:d8:1a:d9:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:40:73:FE:65:43:DC:FC:B1:EF:BB:9A:33:3A:70:EA:60:E9:EE
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.192.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a6:47:42:c3:48:b0:53:3e:7e:1b:30:dd:89:e2:0d:53:a6:
c9:12:ea:6b:1b:b9:9d:e9:2d:ff:29:71:9a:30:a9:0d:ac:39:
20:3d:61:b9:0f:5c:fe:58:e2:2f:30:fb:6d:ba:cc:e3:2b:f7:
0b:cd:54:7a:8d:20:49:0c:d5:dc:48:cb:cb:5d:78:10:18:b6:
6f:e1:92:dc:bc:00:a2:aa:e1:bd:95:81:c1:ae:c0:3b:ad:2e:
ac:bd:cc:8c:e0:10:62:6c:b0:66:43:6b:9b:18:77:5b:68:f5:
ef:60:94:2e:2b:3f:c6:6e:81:e5:72:3b:26:8e:a1:1d:83:6e:
e0:3d:93:3d:a8:df:95:18:48:fc:6a:ba:42:e0:5b:d1:b3:68:
63:cb:2d:b7:fc:ec:20:55:15:23:54:92:20:05:58:99:0a:52:
74:a3:15:e0:bf:fc:f1:77:a8:9b:ec:94:be:a8:4b:52:7d:7a:
00:64:2b:3c:dd:d4:8c:b6:ce:26:13:10:d2:c4:e4:a3:ce:c6:
4d:97:1a:39:e7:8e:76:bf:9b:c1:bc:e3:cd:e9:c5:9d:b5:84:
b4:9c:b6:36:0b:4f:63:c0:fb:44:f9:d3:99:b5:ea:02:75:a2:
4d:d8:88:46:f8:ce:6b:f4:da:20:43:36:81:3e:77:9a:e5:c6:
35:4c:56:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jH+mD6Aolq6FlZu2pmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUwMTAxMDc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTc4NDA3M2ZlNjU0M2RjZmNiMWVmYmI5YTMzM2E3MGVhNjBlOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU17C3zddYGNf6LAZON3da4NTyZx
PbnLDgL9hbih6qR+YHB54xFZAPaXklcGVefY9EzheUuDUrqXZtBpsCyrFpGEJg/i
ky87QkQAujRwgebjewxx/ZzwgjhSx160YB8GC6VXtafT6isUjO56k1XKNhjhwnXK
run8WM2b/YjKDBsdnCOJ8nShjEJLJyeHBLxMEugzq3WDgj0OzVFM09xngjvN6h4X
xgdWTOsgj0pD/rUwwlz5TReXpRU6mAxqRllpDsmlADB7ekk2KGrpxBzIZSMdschL
7VXZxh5v19g0Mf/hkY2rRotuaOZmMrORvfCO1k9R7B730i78PffYGtk18wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLV4QHP+ZUPc/LHvu5ozOnDqYOnuMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvdFhoQWNfNWxROXo4c2UtN21qTTZjT3BnNmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpbAMA0G
CSqGSIb3DQEBCwUAA4IBAQBupkdCw0iwUz5+GzDdieINU6bJEuprG7md6S3/KXGa
MKkNrDkgPWG5D1z+WOIvMPttuszjK/cLzVR6jSBJDNXcSMvLXXgQGLZv4ZLcvACi
quG9lYHBrsA7rS6svcyM4BBibLBmQ2ubGHdbaPXvYJQuKz/GboHlcjsmjqEdg27g
PZM9qN+VGEj8arpC4FvRs2hjyy23/OwgVRUjVJIgBViZClJ0oxXgv/zxd6ib7JS+
qEtSfXoAZCs83dSMts4mExDSxOSjzsZNlxo55452v5vBvOPN6cWdtYS0nLY2C09j
wPtE+dOZteoCdaJN2IhG+M5r9NogQzaBPnea5cY1TFbq
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:25 2025 by rpki-client