Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/Fj752bkxuJMKiLz6DxiNHNPGnCc.roa
File: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (raw, json)
Hash identifier: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=
Subject key identifier: 16:3E:F9:D9:B9:31:B8:93:0A:88:BC:FA:0F:18:8D:1C:D3:C6:9C:27
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 019427B60E7C8CE65BA564FB062FCAF6ABE5
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/Fj752bkxuJMKiLz6DxiNHNPGnCc.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 185.237.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0e:7c:8c:e6:5b:a5:64:fb:06:2f:ca:f6:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=163ef9d9b931b8930a88bcfa0f188d1cd3c69c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:a7:38:90:28:f0:76:e3:69:8c:94:6a:dd:
44:a8:11:00:4f:7a:48:95:17:bf:66:7f:eb:cf:4a:
76:97:08:75:81:d5:49:f0:d2:ff:a8:e4:60:3a:9a:
81:ba:d2:e9:e8:bc:10:bc:96:2b:28:43:d8:cb:96:
b4:29:77:55:4c:25:c9:de:64:d1:7c:ac:0a:32:e5:
0b:cd:c7:6b:5b:e9:b8:3e:08:42:84:54:00:c1:ed:
0a:ff:56:af:da:cf:44:2f:d4:fa:2a:2c:83:36:d4:
fa:1b:5a:d4:7f:fa:5e:c1:91:61:80:3e:1c:aa:4c:
f7:65:30:02:04:dd:da:28:61:f5:53:11:02:cc:4c:
34:b7:4f:79:1d:f4:95:92:30:54:16:64:64:25:ee:
03:67:62:27:9b:46:bb:c6:68:83:62:b7:be:0a:af:
e2:2f:b6:5b:52:63:4d:cb:2c:6d:f3:8e:68:58:62:
35:51:c4:a8:a3:2c:7e:3d:43:ce:48:61:b3:3e:a1:
34:94:c0:9d:b8:66:8f:73:9b:d3:d3:45:3f:08:87:
3c:16:c0:4d:fa:fa:8b:00:21:46:00:32:a0:cf:e5:
df:fe:e7:c6:4e:06:97:99:b9:dd:19:2f:4b:20:e6:
9a:4b:0c:db:f7:29:44:13:9a:69:32:f3:7f:35:e9:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:F9:D9:B9:31:B8:93:0A:88:BC:FA:0F:18:8D:1C:D3:C6:9C:27
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/Fj752bkxuJMKiLz6DxiNHNPGnCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.179.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:7b:6c:ba:ff:40:3e:94:d8:8c:30:83:b0:ca:96:04:02:
31:42:f1:c9:a4:81:cb:9f:d6:db:dd:d6:cc:bf:de:ac:b4:cd:
26:89:f1:fa:38:eb:6e:8f:2d:51:de:4f:7b:7b:f7:0f:76:ef:
22:07:93:59:7e:5d:30:25:2a:80:65:51:28:05:49:65:95:93:
2c:d2:28:9f:95:0c:e2:c6:3e:4a:e1:9f:ec:73:b2:0e:f5:1b:
9c:d6:7d:cb:a6:2f:e4:2e:36:a6:fe:4a:5f:87:06:a7:38:8a:
92:35:67:87:db:84:81:4b:e7:22:38:22:28:30:0e:5d:a9:72:
9c:0b:f1:a3:2a:e0:d1:a4:97:d9:65:ee:da:72:53:83:c3:b2:
9a:88:70:7e:ca:d3:72:29:b5:39:98:aa:fa:76:2c:f5:8a:15:
ac:57:e5:ed:2f:e6:7c:e8:a1:7e:99:e5:1b:c8:5e:7d:ef:20:
2d:5e:50:7a:31:76:72:ef:35:5f:82:f0:a4:1f:f3:d1:2b:77:
82:1f:f0:c5:dc:b6:3d:5d:13:19:7a:47:96:78:af:95:87:28:
01:4f:fe:b9:a4:e6:f8:13:da:2a:47:48:d1:1a:30:44:3a:a4:
ae:c7:4d:84:65:57:f9:16:30:b9:34:d8:89:fb:be:ee:e2:4b:
61:11:b4:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntg58jOZbpWT7Bi/K9qvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWIwMTYzZWVlOWU3OTJhYWExNmI3ZDUxMDVkMzQ3MjEx
ZjMxMjMwHhcNMjUwMTAyMTU1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjNlZjlkOWI5MzFiODkzMGE4OGJjZmEwZjE4OGQxY2QzYzY5YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4renOJAo8HbjaYyUat1EqBEAT3pI
lRe/Zn/rz0p2lwh1gdVJ8NL/qORgOpqButLp6LwQvJYrKEPYy5a0KXdVTCXJ3mTR
fKwKMuULzcdrW+m4PghChFQAwe0K/1av2s9EL9T6KiyDNtT6G1rUf/pewZFhgD4c
qkz3ZTACBN3aKGH1UxECzEw0t095HfSVkjBUFmRkJe4DZ2Inm0a7xmiDYre+Cq/i
L7ZbUmNNyyxt845oWGI1UcSooyx+PUPOSGGzPqE0lMCduGaPc5vT00U/CIc8FsBN
+vqLACFGADKgz+Xf/ufGTgaXmbndGS9LIOaaSwzb9ylEE5ppMvN/NelqsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBY++dm5MbiTCoi8+g8YjRzTxpwnMB8GA1UdIwQY
MBaAFIubAWPu6eeSqqFrfVEF00chHzEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUt
NDFiMjY2MDdiZjM2LzEvRmo3NTJia3h1Sk1LaUx6NkR4aU5ITlBHbkNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUtNDFiMjY2MDdiZjM2
LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue2zMA0G
CSqGSIb3DQEBCwUAA4IBAQBIontsuv9APpTYjDCDsMqWBAIxQvHJpIHLn9bb3dbM
v96stM0mifH6OOtujy1R3k97e/cPdu8iB5NZfl0wJSqAZVEoBUlllZMs0iiflQzi
xj5K4Z/sc7IO9Ruc1n3Lpi/kLjam/kpfhwanOIqSNWeH24SBS+ciOCIoMA5dqXKc
C/GjKuDRpJfZZe7aclODw7KaiHB+ytNyKbU5mKr6diz1ihWsV+XtL+Z86KF+meUb
yF597yAtXlB6MXZy7zVfgvCkH/PRK3eCH/DF3LY9XRMZekeWeK+VhygBT/65pOb4
E9oqR0jRGjBEOqSux02EZVf5FjC5NNiJ+77u4kthEbTV
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:41 2025 by rpki-client