Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa
File: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (raw, json)
Hash identifier: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=
Subject key identifier: 79:11:C8:CB:79:AF:DC:15:F0:A0:B6:AF:57:70:6D:66:30:E2:F8:77
Certificate issuer: /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial: 019422FC1F954F2C21975A2D245CF5BE8C8D
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39296
IP address blocks: 195.250.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1f:95:4f:2c:21:97:5a:2d:24:5c:f5:be:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7911c8cb79afdc15f0a0b6af57706d6630e2f877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:f0:a0:95:c2:01:62:94:1e:3f:69:4c:1d:
9b:f1:2e:91:f0:d8:81:02:81:1c:7a:bc:92:d7:19:
3a:48:3c:53:ae:bb:6b:2e:72:27:ec:36:ac:82:67:
b4:b2:7c:5b:38:7d:b8:a4:7d:99:78:97:d6:8b:f1:
da:e0:cc:ad:a1:de:d2:8e:a2:79:48:4f:e8:67:4f:
40:48:05:4f:a0:ac:24:f6:a9:66:78:84:4f:40:f0:
19:6b:e6:93:5a:4a:75:bb:c6:a5:34:1f:28:3f:0b:
c0:80:22:02:b2:59:7a:24:b9:31:e6:7d:f1:b8:47:
ba:f1:56:88:bd:28:b7:8e:ac:84:23:e8:0b:c9:69:
8a:4b:19:e1:2e:90:f4:a0:b6:29:99:be:dc:5b:d7:
34:cc:c7:4e:bc:15:1f:74:89:7b:bc:b5:f9:7a:fd:
bf:6e:58:a0:18:f4:5b:c7:25:ce:96:f1:6d:a6:90:
21:b0:08:a2:9e:53:0e:f1:0d:8e:a2:59:da:34:ad:
f3:12:43:37:7f:cf:02:9e:07:f8:d2:3f:ea:00:ab:
2d:e6:51:b9:5f:0b:1d:e1:93:66:0a:0f:3e:0a:1b:
85:2e:4f:98:ef:39:6a:76:4e:c2:0c:fe:df:2c:2b:
b3:15:e5:83:c6:ad:62:2e:02:d1:b9:cd:ff:43:94:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:C8:CB:79:AF:DC:15:F0:A0:B6:AF:57:70:6D:66:30:E2:F8:77
X509v3 Authority Key Identifier:
keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8b:f8:62:5a:f9:b2:7a:65:90:68:7e:f2:d0:0d:c0:c9:48:
e5:a3:86:1c:84:92:34:5b:4b:59:1c:c4:dd:a7:49:80:39:12:
92:7c:22:88:17:89:dd:b2:7d:4c:f3:0e:76:1f:ab:39:8a:6f:
c8:33:37:08:93:4d:66:95:b6:bc:e5:f6:2a:91:5c:75:36:1c:
8f:d6:fa:99:03:bc:ca:40:c6:dd:ae:f8:6e:60:2a:5a:8b:1c:
37:97:4d:79:d7:eb:af:90:d6:59:74:c3:96:e1:ff:20:90:a4:
69:a6:85:86:48:99:a5:33:bd:dd:32:a4:80:ab:d1:b6:d8:32:
2b:5d:1d:3c:28:1c:15:0f:21:92:98:fe:34:31:e0:80:58:60:
87:1f:f3:71:48:8f:46:af:da:8f:fe:35:8c:26:77:31:7f:79:
a7:d5:58:30:99:86:c8:50:d5:78:11:d1:f8:ad:2f:6f:6f:6c:
fc:c6:7e:56:47:3f:0c:ef:28:24:67:8c:a8:8b:88:74:c9:11:
5f:92:be:c9:39:6f:05:38:40:10:53:e9:a0:df:74:fe:59:b5:
a8:1a:fa:94:e4:b9:cd:15:c8:c8:61:a0:be:db:ff:3f:df:f7:
b7:51:f3:48:b2:98:a1:a5:3b:07:33:80:d9:44:b5:5c:e0:21:
56:03:0b:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/B+VTywhl1otJFz1voyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTJmMzhiNTViZmMxMzdiYjllZDAyNmZhMDAzM2VlZjhm
YTdkNTAwHhcNMjUwMTAxMTc0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTExYzhjYjc5YWZkYzE1ZjBhMGI2YWY1NzcwNmQ2NjMwZTJmODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtybwoJXCAWKUHj9pTB2b8S6R8NiB
AoEceryS1xk6SDxTrrtrLnIn7Dasgme0snxbOH24pH2ZeJfWi/Ha4Mytod7SjqJ5
SE/oZ09ASAVPoKwk9qlmeIRPQPAZa+aTWkp1u8alNB8oPwvAgCICsll6JLkx5n3x
uEe68VaIvSi3jqyEI+gLyWmKSxnhLpD0oLYpmb7cW9c0zMdOvBUfdIl7vLX5ev2/
bligGPRbxyXOlvFtppAhsAiinlMO8Q2OolnaNK3zEkM3f88Cngf40j/qAKst5lG5
Xwsd4ZNmCg8+ChuFLk+Y7zlqdk7CDP7fLCuzFeWDxq1iLgLRuc3/Q5QS9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHkRyMt5r9wV8KC2r1dwbWYw4vh3MB8GA1UdIwQY
MBaAFLmS84tVv8E3u57QJvoAM+74+n1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQt
OWJjM2U1NmY3YWY3LzEvZVJISXkzbXYzQlh3b0xhdlYzQnRaakRpLUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQtOWJjM2U1NmY3YWY3
LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/o0MA0G
CSqGSIb3DQEBCwUAA4IBAQC6i/hiWvmyemWQaH7y0A3AyUjlo4YchJI0W0tZHMTd
p0mAORKSfCKIF4ndsn1M8w52H6s5im/IMzcIk01mlba85fYqkVx1NhyP1vqZA7zK
QMbdrvhuYCpaixw3l0151+uvkNZZdMOW4f8gkKRppoWGSJmlM73dMqSAq9G22DIr
XR08KBwVDyGSmP40MeCAWGCHH/NxSI9Gr9qP/jWMJncxf3mn1VgwmYbIUNV4EdH4
rS9vb2z8xn5WRz8M7ygkZ4yoi4h0yRFfkr7JOW8FOEAQU+mg33T+WbWoGvqU5LnN
FcjIYaC+2/8/3/e3UfNIspihpTsHM4DZRLVc4CFWAwud
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:34 2025 by rpki-client