Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/K7teX7JoBFh4y_5H6h0jWSRoFT8.roa
File: K7teX7JoBFh4y_5H6h0jWSRoFT8.roa (raw, json)
Hash identifier: cpnglAjL/IaKx5rfLjNSIVRVdfr+IKSB43GYnZGggq0=
Subject key identifier: 2B:BB:5E:5F:B2:68:04:58:78:CB:FE:47:EA:1D:23:59:24:68:15:3F
Certificate issuer: /CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Certificate serial: 0194221FFE24184C84E2A72A4F3FD9CE4351
Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/K7teX7JoBFh4y_5H6h0jWSRoFT8.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49321
IP address blocks: 164.138.192.0/21 maxlen: 21
2a00:bac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fe:24:18:4c:84:e2:a7:2a:4f:3f:d9:ce:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbb5e5fb268045878cbfe47ea1d23592468153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:13:15:07:91:99:9a:78:90:4b:84:a3:c0:
f3:d5:e1:cb:b1:35:6e:e6:b9:19:e4:73:19:22:fc:
5b:16:07:5b:95:ab:7e:e8:77:c5:3c:c2:09:a9:88:
9b:0a:56:fb:f6:dd:b6:58:18:3c:67:31:d4:85:db:
6d:73:52:cc:a3:dd:00:f1:37:22:5b:d8:60:78:40:
75:e4:f0:6e:e0:c5:12:b8:57:29:6a:3a:f1:17:71:
cf:b7:de:44:b0:86:88:ea:88:55:7b:47:88:b0:53:
9b:4f:8f:97:0f:6c:73:d1:34:aa:7b:86:f5:5e:7f:
72:90:cb:ac:af:7a:31:17:04:f6:3b:e2:b3:62:ff:
1c:b2:97:ec:a3:48:84:ec:32:3b:04:43:66:cc:bb:
ee:08:57:26:23:c1:47:19:b5:40:b6:bb:03:70:a8:
2b:9f:5c:04:d1:2a:95:12:64:9b:56:0f:04:06:ca:
95:30:e7:7a:2f:09:a8:df:6e:76:33:79:e3:26:7a:
e1:78:51:60:9b:40:70:b2:c9:5f:e0:34:c1:59:56:
fe:04:29:4c:30:00:4c:df:20:5f:c5:ef:8e:84:87:
84:8a:b7:31:7a:60:53:c6:f2:af:8e:7c:76:b4:68:
ac:53:b7:ee:f3:79:07:a7:8a:8c:6e:9a:5c:fb:b4:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:5E:5F:B2:68:04:58:78:CB:FE:47:EA:1D:23:59:24:68:15:3F
X509v3 Authority Key Identifier:
keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/K7teX7JoBFh4y_5H6h0jWSRoFT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.192.0/21
IPv6:
2a00:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
50:50:14:ad:42:c1:c5:ad:f2:75:bb:b1:d1:31:e4:ac:73:01:
53:5b:cc:de:4b:2a:d6:3d:c4:7e:0b:4c:b4:8a:97:ff:ac:34:
6f:f0:a1:9a:dc:57:10:3d:c4:95:10:17:43:97:87:32:aa:b1:
8a:92:b5:7f:07:ea:b6:01:c2:b5:1b:0e:19:9b:55:06:37:ab:
f9:56:cd:a1:48:bf:be:eb:22:44:9f:25:c7:77:7b:2b:1d:f8:
d6:e3:0d:cc:4b:26:df:b2:b2:4f:94:69:44:81:7b:2c:5b:d5:
b5:a6:62:17:84:ab:1b:79:23:db:ae:fd:15:6c:b8:ae:a4:06:
b3:a2:fb:b8:ab:5f:5e:29:aa:d3:ba:46:46:21:04:a7:55:69:
88:30:6a:71:9a:3d:1b:c1:a8:a7:bc:a1:ea:9f:d9:2a:fc:3d:
04:60:d9:1e:d6:07:42:b4:bd:45:6b:c7:4a:6a:3e:6e:eb:82:
55:61:18:23:8f:a9:13:6b:93:c7:60:49:87:b8:d5:25:e9:66:
e7:d3:11:73:df:4d:73:c7:52:97:df:13:87:f9:70:30:ee:c8:
d3:9e:b8:08:b2:86:c7:38:a6:f6:e8:b7:05:62:bc:fb:af:38:
18:42:6e:68:63:49:2e:fe:84:11:4d:54:8f:28:e0:11:0b:8a:
42:fa:77:54
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH/4kGEyE4qcqTz/ZzkNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDU3NDcwZmQ1NmYxYjc3M2IyZTQwYWJhZWU3OWY5OTY2
ZTQ0MzYwHhcNMjUwMTAxMTM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmJiNWU1ZmIyNjgwNDU4NzhjYmZlNDdlYTFkMjM1OTI0NjgxNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGUTFQeRmZp4kEuEo8Dz1eHLsTVu
5rkZ5HMZIvxbFgdblat+6HfFPMIJqYibClb79t22WBg8ZzHUhdttc1LMo90A8Tci
W9hgeEB15PBu4MUSuFcpajrxF3HPt95EsIaI6ohVe0eIsFObT4+XD2xz0TSqe4b1
Xn9ykMusr3oxFwT2O+KzYv8cspfso0iE7DI7BENmzLvuCFcmI8FHGbVAtrsDcKgr
n1wE0SqVEmSbVg8EBsqVMOd6Lwmo3252M3njJnrheFFgm0Bwsslf4DTBWVb+BClM
MABM3yBfxe+OhIeEircxemBTxvKvjnx2tGisU7fu83kHp4qMbppc+7SRlQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCu7Xl+yaARYeMv+R+odI1kkaBU/MB8GA1UdIwQY
MBaAFOkFdHD9VvG3c7LkCrruefmWbkQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGIt
OTIxOGY5MmYzMDM2LzEvSzd0ZVg3Sm9CRmg0eV81SDZoMGpXU1JvRlQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGItOTIxOGY5MmYzMDM2
LzEvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDpIrAMA0E
AgACMAcDBQAqALrAMA0GCSqGSIb3DQEBCwUAA4IBAQBQUBStQsHFrfJ1u7HRMeSs
cwFTW8zeSyrWPcR+C0y0ipf/rDRv8KGa3FcQPcSVEBdDl4cyqrGKkrV/B+q2AcK1
Gw4Zm1UGN6v5Vs2hSL++6yJEnyXHd3srHfjW4w3MSybfsrJPlGlEgXssW9W1pmIX
hKsbeSPbrv0VbLiupAazovu4q19eKarTukZGIQSnVWmIMGpxmj0bwainvKHqn9kq
/D0EYNke1gdCtL1Fa8dKaj5u64JVYRgjj6kTa5PHYEmHuNUl6Wbn0xFz301zx1KX
3xOH+XAw7sjTnrgIsobHOKb26LcFYrz7rzgYQm5oY0ku/oQRTVSPKOARC4pC+ndU
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:07:50 2025 by rpki-client