Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9qZ8nXSAC2dzq3wsyMIvRzi3UfE.roa
File: 9qZ8nXSAC2dzq3wsyMIvRzi3UfE.roa (raw, json)
Hash identifier: u/z3Ezb/3nT08pawJHwBqw3hgVd5yhI+bDw2HNHNE4o=
Subject key identifier: F6:A6:7C:9D:74:80:0B:67:73:AB:7C:2C:C8:C2:2F:47:38:B7:51:F1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D35C5BE37F2344427ED234A67A772
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9qZ8nXSAC2dzq3wsyMIvRzi3UfE.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198762
IP address blocks: 5.8.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:35:c5:be:37:f2:34:44:27:ed:23:4a:67:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6a67c9d74800b6773ab7c2cc8c22f4738b751f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:7c:ee:73:97:3f:1b:e5:51:08:ef:cf:e7:
a3:4c:2e:08:d2:b7:a0:14:14:80:80:5d:0b:34:6f:
ad:cf:9f:ff:a1:68:61:e8:ab:de:84:fc:e4:d9:2c:
f5:4b:d5:fc:41:b7:2e:a4:19:37:ac:ea:3f:64:54:
68:8c:cc:87:e5:7a:34:4f:88:3c:e3:4f:9a:e8:f7:
61:01:2f:79:76:35:f6:dd:49:b8:2a:c4:cf:c2:c1:
25:13:a9:85:a8:13:24:35:a1:2c:0e:60:47:87:9e:
f1:02:4e:d2:d5:05:c6:bd:72:ad:46:98:07:c7:8a:
a2:aa:75:cb:f5:d5:a0:3e:22:d9:ab:14:e4:d1:db:
05:c3:24:0e:0a:86:f4:dc:7c:18:c7:ba:cd:3a:d3:
7e:35:2c:e1:e1:48:6b:f8:d8:9d:7e:61:d0:34:e0:
68:2e:20:57:57:70:44:02:09:a2:bd:6b:8f:6b:d1:
26:2c:04:e7:a2:79:a2:ec:f7:a4:62:1e:ff:93:ad:
3d:0f:4f:ae:af:aa:c7:b8:f9:af:6a:51:04:06:ef:
79:88:9d:52:1d:19:cf:90:03:ef:7c:a9:4d:98:75:
16:ea:a2:b3:1c:8e:09:6c:78:95:0b:9b:f7:60:0c:
f2:2a:3c:87:66:f2:c5:e1:b7:4f:6b:c9:d7:34:1b:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:7C:9D:74:80:0B:67:73:AB:7C:2C:C8:C2:2F:47:38:B7:51:F1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9qZ8nXSAC2dzq3wsyMIvRzi3UfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.176.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8f:ac:b2:ae:15:5d:50:3b:a5:0c:41:c6:d0:21:e8:1b:69:
90:0b:5e:cd:db:5a:34:e9:76:dc:8e:14:b4:3e:11:9e:f0:01:
32:2f:ee:c3:84:9e:34:aa:e0:88:4a:34:8a:bd:27:a4:98:3a:
ae:e7:e2:28:46:4e:8d:d0:d6:27:68:58:1d:6b:37:35:31:d3:
f7:92:1e:19:e2:67:c5:16:cc:0d:24:86:81:81:d1:97:79:b9:
77:8d:96:e7:e6:41:13:43:46:82:32:5f:ce:f1:a9:a9:1a:4e:
9c:96:c3:fd:2c:23:19:4c:8b:a1:3f:fa:7e:08:8a:53:6e:68:
7d:ac:96:2f:99:ac:fc:fc:b4:37:44:f0:a5:c1:79:ba:51:a3:
8c:d0:54:fc:c5:ad:87:72:0d:9a:f6:87:1e:8b:c1:ed:a5:a7:
67:fe:2f:c8:56:33:79:eb:7a:93:84:c7:96:72:48:dc:8e:7c:
73:d9:a8:bd:15:ec:08:06:1e:da:2e:33:50:a9:cd:5d:1b:64:
d8:54:b4:57:ed:77:e5:12:97:ad:89:fc:cb:25:e8:11:88:42:
32:87:63:1b:f6:d5:58:95:f3:b7:10:40:73:7d:5b:30:7e:39:
79:9b:30:11:86:80:93:a2:ed:ce:34:64:13:6a:3e:37:4e:42:
dc:78:68:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijTXFvjfyNEQn7SNKZ6dyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmE2N2M5ZDc0ODAwYjY3NzNhYjdjMmNjOGMyMmY0NzM4Yjc1MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Z87nOXPxvlUQjvz+ejTC4I0reg
FBSAgF0LNG+tz5//oWhh6KvehPzk2Sz1S9X8QbcupBk3rOo/ZFRojMyH5Xo0T4g8
40+a6PdhAS95djX23Um4KsTPwsElE6mFqBMkNaEsDmBHh57xAk7S1QXGvXKtRpgH
x4qiqnXL9dWgPiLZqxTk0dsFwyQOCob03HwYx7rNOtN+NSzh4Uhr+NidfmHQNOBo
LiBXV3BEAgmivWuPa9EmLATnonmi7PekYh7/k609D0+ur6rHuPmvalEEBu95iJ1S
HRnPkAPvfKlNmHUW6qKzHI4JbHiVC5v3YAzyKjyHZvLF4bdPa8nXNBs77QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPamfJ10gAtnc6t8LMjCL0c4t1HxMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOXFaOG5YU0FDMmR6cTN3c3lNSXZSemkzVWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQiwMA0G
CSqGSIb3DQEBCwUAA4IBAQAAj6yyrhVdUDulDEHG0CHoG2mQC17N21o06XbcjhS0
PhGe8AEyL+7DhJ40quCISjSKvSekmDqu5+IoRk6N0NYnaFgdazc1MdP3kh4Z4mfF
FswNJIaBgdGXebl3jZbn5kETQ0aCMl/O8ampGk6clsP9LCMZTIuhP/p+CIpTbmh9
rJYvmaz8/LQ3RPClwXm6UaOM0FT8xa2Hcg2a9ocei8Htpadn/i/IVjN563qThMeW
ckjcjnxz2ai9FewIBh7aLjNQqc1dG2TYVLRX7XflEpetifzLJegRiEIyh2Mb9tVY
lfO3EEBzfVswfjl5mzARhoCTou3ONGQTaj43TkLceGjF
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:37:52 2025 by rpki-client