Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa
File: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (raw, json)
Hash identifier: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=
Subject key identifier: F6:2F:B1:1C:5D:D3:A6:4F:8B:BD:22:F6:95:25:DB:59:7D:D3:00:F1
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01942826448CDACE26E6AC0EFBB4BC47C48C
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa
Signing time: Thu 02 Jan 2025 17:53:04 +0000
ROA not before: Thu 02 Jan 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:44:8c:da:ce:26:e6:ac:0e:fb:b4:bc:47:c4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f62fb11c5dd3a64f8bbd22f69525db597dd300f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:48:89:cd:5a:55:8d:7a:c4:23:3b:ed:4f:
2c:ad:44:3a:89:32:c4:75:f1:11:0f:db:48:88:3b:
5d:a1:77:cb:d5:32:59:e4:cc:53:38:bd:df:b6:67:
5d:8c:6f:1e:87:b5:3e:44:15:23:e9:8a:a4:93:89:
62:75:c1:4a:aa:9a:4a:5d:bf:c9:4a:f1:34:03:8a:
36:e3:d7:36:1d:f7:6c:d3:4c:a5:c4:32:c9:58:04:
f1:3b:1c:8b:e8:5d:05:bc:2e:b5:ea:0a:56:fb:47:
59:4c:eb:ae:b3:f4:21:e8:7a:be:a5:2c:61:27:00:
4a:4b:05:a3:cc:ff:8f:01:03:aa:f2:12:fd:2c:f3:
69:7a:20:1c:9d:9a:7a:f6:7e:96:a8:37:78:f9:c3:
ab:91:38:3e:f6:61:29:b7:ca:95:c1:f8:cb:cf:c2:
8e:5c:8c:45:e6:24:22:30:46:d3:44:19:ec:db:61:
63:9a:07:40:4d:1b:74:da:6f:f0:43:09:4e:d7:d2:
17:81:5f:92:59:56:43:2c:f9:b4:3a:a6:83:2d:28:
bb:b2:a6:fe:20:d0:66:de:ae:4f:71:a4:10:48:94:
63:3a:66:11:d0:fa:ec:ed:88:f0:23:40:02:84:ce:
9a:9a:c9:f1:e0:ef:f4:1a:96:77:74:4c:96:65:a8:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:B1:1C:5D:D3:A6:4F:8B:BD:22:F6:95:25:DB:59:7D:D3:00:F1
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5c:57:ad:50:a1:7a:b0:2f:1c:4b:48:eb:15:65:eb:53:fd:
08:e5:06:b7:ed:7c:9c:80:b8:33:4f:7b:03:48:73:f1:3e:ff:
c6:6b:89:da:b2:27:fc:24:bd:40:7e:78:9c:b0:25:fe:90:4e:
54:bf:c8:b9:8a:aa:a0:35:9d:1d:99:00:5c:0d:5d:e9:3e:89:
4c:df:9f:2c:b2:6b:f6:fe:f3:d4:ff:6b:ec:22:b6:2a:8e:54:
65:6d:ba:ea:cd:6e:52:ad:ae:b5:69:aa:12:59:78:6d:e7:68:
12:da:c2:91:1f:7c:fc:ce:0b:b4:4c:17:5c:c1:c9:0e:ca:ef:
a5:6e:17:1e:90:ec:09:1e:77:6e:c2:5f:49:b5:e6:76:67:84:
78:be:ca:a8:a6:da:a3:7a:98:b7:87:fa:9b:9a:0a:26:92:15:
52:e7:37:bd:56:6b:80:b3:27:5a:f6:2e:f0:fb:94:2c:a8:25:
b7:87:f0:5f:48:ff:cb:d1:fd:60:f8:6e:ea:e7:9f:66:a7:16:
36:a1:ae:12:79:50:18:2c:ea:e6:e9:8a:19:30:97:3a:54:b9:
4b:67:9d:6f:e9:c8:58:b2:d1:7f:5d:27:87:ed:6f:1d:4f:2b:
a9:57:a2:bb:ff:fb:c7:f1:b2:b8:ac:9b:a2:d2:29:8d:d0:22:
3d:1b:2b:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJkSM2s4m5qwO+7S8R8SMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMTAyMTc1MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJmYjExYzVkZDNhNjRmOGJiZDIyZjY5NTI1ZGI1OTdkZDMwMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V9Iic1aVY16xCM77U8srUQ6iTLE
dfERD9tIiDtdoXfL1TJZ5MxTOL3ftmddjG8eh7U+RBUj6Yqkk4lidcFKqppKXb/J
SvE0A4o249c2Hfds00ylxDLJWATxOxyL6F0FvC616gpW+0dZTOuus/Qh6Hq+pSxh
JwBKSwWjzP+PAQOq8hL9LPNpeiAcnZp69n6WqDd4+cOrkTg+9mEpt8qVwfjLz8KO
XIxF5iQiMEbTRBns22FjmgdATRt02m/wQwlO19IXgV+SWVZDLPm0OqaDLSi7sqb+
INBm3q5PcaQQSJRjOmYR0Prs7YjwI0AChM6amsnx4O/0GpZ3dEyWZai4pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYvsRxd06ZPi70i9pUl21l90wDxMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvOWkteEhGM1Rway1MdlNMMmxTWGJXWDNUQVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV5AMA0G
CSqGSIb3DQEBCwUAA4IBAQBWXFetUKF6sC8cS0jrFWXrU/0I5Qa37XycgLgzT3sD
SHPxPv/Ga4nasif8JL1AfnicsCX+kE5Uv8i5iqqgNZ0dmQBcDV3pPolM358ssmv2
/vPU/2vsIrYqjlRlbbrqzW5Sra61aaoSWXht52gS2sKRH3z8zgu0TBdcwckOyu+l
bhcekOwJHnduwl9JteZ2Z4R4vsqoptqjepi3h/qbmgomkhVS5ze9VmuAsyda9i7w
+5QsqCW3h/BfSP/L0f1g+G7q559mpxY2oa4SeVAYLOrm6YoZMJc6VLlLZ51v6chY
stF/XSeH7W8dTyupV6K7//vH8bK4rJui0imN0CI9Gyva
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:40:51 2025 by rpki-client