Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/KEB7URRNcLIkdHFl8_NaQFzoCUc.roa
File: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (raw, json)
Hash identifier: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=
Subject key identifier: 28:40:7B:51:14:4D:70:B2:24:74:71:65:F3:F3:5A:40:5C:E8:09:47
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C9918BFE716990518A94261B5805D
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/KEB7URRNcLIkdHFl8_NaQFzoCUc.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202636
IP address blocks: 158.255.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:18:bf:e7:16:99:05:18:a9:42:61:b5:80:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28407b51144d70b224747165f3f35a405ce80947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:3c:8e:e5:09:c6:63:19:a0:6b:56:d1:7e:
90:d9:e2:06:89:b8:ec:bd:d6:9e:68:76:ea:43:fd:
e7:fa:81:87:84:34:ca:d2:8f:4d:1e:1c:97:2f:42:
c4:02:ef:26:c7:f5:ec:dc:d6:43:63:e7:4c:97:a0:
a0:ee:6c:44:2f:c8:b4:97:91:a8:e9:a3:51:61:0f:
65:55:e5:5e:d9:51:9b:81:7d:5b:f1:95:aa:cb:df:
d7:77:3f:6d:f8:15:28:b0:20:d4:a5:ff:cd:f3:9d:
10:47:c1:f8:25:f5:3c:ef:1a:dd:ef:93:49:30:3d:
0b:6e:e6:16:d9:18:c8:66:b8:74:f0:ed:2d:c0:be:
25:cb:54:f2:f0:fb:5b:04:6f:2c:3c:6e:14:91:67:
51:82:2e:59:3b:93:da:17:bb:14:1f:cf:ed:01:ac:
52:96:31:23:10:b5:79:31:d8:96:b1:ee:d0:28:e6:
35:9a:4d:1e:73:82:00:74:85:80:8b:d0:72:8d:ae:
e7:21:f4:76:c6:6b:e9:b6:81:f5:d6:b1:01:2c:b9:
65:aa:9e:c0:6d:e2:5b:96:ec:a1:09:57:15:cd:09:
08:25:a5:68:56:d5:ff:3b:bf:15:91:d2:3a:d9:21:
e8:3c:61:30:bf:21:b0:2b:57:63:04:0f:9c:0e:c0:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:7B:51:14:4D:70:B2:24:74:71:65:F3:F3:5A:40:5C:E8:09:47
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/KEB7URRNcLIkdHFl8_NaQFzoCUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.232.0/24
Signature Algorithm: sha256WithRSAEncryption
61:65:0e:21:83:04:55:54:60:6f:fc:ec:58:01:db:d7:16:39:
48:ae:4a:7e:27:99:90:03:8c:01:fe:d6:ba:c1:c7:98:1f:2e:
f6:fe:fc:a3:28:35:84:d4:aa:38:10:79:ab:d2:e2:e1:66:38:
5c:62:67:00:97:cb:0f:ce:25:10:6b:d6:82:e3:92:02:75:77:
c7:90:ad:ff:78:3d:af:9a:b2:0f:e7:5b:08:1d:63:18:be:02:
a9:78:c5:23:c2:20:19:c2:cb:e9:c5:7e:73:7f:6e:fc:77:5c:
84:59:83:8a:9d:98:f9:e9:d3:be:63:2b:d0:4c:87:69:d6:9a:
34:ac:ba:51:0a:65:42:ae:6d:fe:2d:e1:28:03:40:17:00:7b:
0d:d5:0f:8c:02:57:a2:34:ce:58:3c:75:57:fa:cf:03:51:b5:
74:73:9c:d3:df:29:e7:8d:64:0d:9a:d1:8f:93:52:74:eb:61:
41:1e:a0:40:ef:87:4a:24:b5:c9:7f:6f:5a:0a:f2:f6:30:3f:
83:fc:fb:12:28:07:f9:d5:0b:89:dd:b1:fe:60:de:67:89:94:
59:a4:25:87:dd:60:21:1c:4f:43:7f:32:41:d4:ca:bf:fd:f1:
d3:50:5c:1e:08:c5:d0:d9:2b:84:62:ba:11:16:ed:50:3e:ba:
e4:58:ae:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJkYv+cWmQUYqUJhtYBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODQwN2I1MTE0NGQ3MGIyMjQ3NDcxNjVmM2YzNWE0MDVjZTgwOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sg8juUJxmMZoGtW0X6Q2eIGibjs
vdaeaHbqQ/3n+oGHhDTK0o9NHhyXL0LEAu8mx/Xs3NZDY+dMl6Cg7mxEL8i0l5Go
6aNRYQ9lVeVe2VGbgX1b8ZWqy9/Xdz9t+BUosCDUpf/N850QR8H4JfU87xrd75NJ
MD0LbuYW2RjIZrh08O0twL4ly1Ty8PtbBG8sPG4UkWdRgi5ZO5PaF7sUH8/tAaxS
ljEjELV5MdiWse7QKOY1mk0ec4IAdIWAi9Byja7nIfR2xmvptoH11rEBLLllqp7A
beJbluyhCVcVzQkIJaVoVtX/O78VkdI62SHoPGEwvyGwK1djBA+cDsAwKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChAe1EUTXCyJHRxZfPzWkBc6AlHMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvS0VCN1VSUk5jTElrZEhGbDhfTmFRRnpvQ1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnv/oMA0G
CSqGSIb3DQEBCwUAA4IBAQBhZQ4hgwRVVGBv/OxYAdvXFjlIrkp+J5mQA4wB/ta6
wceYHy72/vyjKDWE1Ko4EHmr0uLhZjhcYmcAl8sPziUQa9aC45ICdXfHkK3/eD2v
mrIP51sIHWMYvgKpeMUjwiAZwsvpxX5zf278d1yEWYOKnZj56dO+YyvQTIdp1po0
rLpRCmVCrm3+LeEoA0AXAHsN1Q+MAleiNM5YPHVX+s8DUbV0c5zT3ynnjWQNmtGP
k1J062FBHqBA74dKJLXJf29aCvL2MD+D/PsSKAf51QuJ3bH+YN5niZRZpCWH3WAh
HE9DfzJB1Mq//fHTUFweCMXQ2SuEYroRFu1QPrrkWK7q
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:20 2025 by rpki-client