Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_D1H16-evyrOrJpTeSYiITwwfdw.roa
File: _D1H16-evyrOrJpTeSYiITwwfdw.roa (raw, json)
Hash identifier: 3u6BQFEOyIPuF+sCodRPYlLslotEdoi3wanxI646qL0=
Subject key identifier: FC:3D:47:D7:AF:9E:BF:2A:CE:AC:9A:53:79:26:22:21:3C:30:7D:DC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D23692581D333B3C6568888538715
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_D1H16-evyrOrJpTeSYiITwwfdw.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24913
IP address blocks: 213.172.3.0/24 maxlen: 24
217.195.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:23:69:25:81:d3:33:b3:c6:56:88:88:53:87:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc3d47d7af9ebf2aceac9a53792622213c307ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:82:a3:56:fc:c0:1d:ab:de:2a:f5:85:ed:f4:
83:48:6f:bf:4b:43:a4:10:fc:03:1d:f6:75:cb:f7:
f7:e4:69:a6:fa:20:4c:7f:cc:cb:4d:3c:a8:cd:2b:
2b:33:67:f9:90:bd:68:bb:11:67:34:e7:9f:9f:50:
29:a8:ef:9c:d5:25:b3:a6:f6:f0:70:7b:8c:d2:9c:
80:f4:e4:e1:f3:c2:2d:b0:aa:3c:5c:cd:f6:0a:8d:
97:79:1b:22:a4:81:19:3a:69:dd:08:49:b0:85:4d:
16:1b:b6:ec:65:60:2d:fe:25:f7:77:fd:70:2c:32:
e2:22:c2:be:66:83:ef:6b:96:46:6d:8b:d2:d6:aa:
78:61:39:db:8d:d8:23:b4:3b:15:a9:06:56:b1:87:
16:62:56:d3:42:6f:88:ef:cd:62:8a:30:3c:17:f1:
de:22:20:a8:82:08:f8:ad:11:fd:7e:00:e1:22:fb:
6b:b8:39:a8:98:b2:8c:41:8f:95:1e:92:7e:3c:dc:
b0:06:fa:62:a3:7d:fe:cc:f6:ac:a2:dd:88:a7:1b:
d1:4e:ed:d5:f9:20:b1:27:98:6e:23:53:8b:31:40:
68:8f:4c:3a:45:b8:8a:1c:15:96:04:cd:56:de:b2:
eb:aa:05:a6:76:27:a1:bb:b9:bd:f1:a9:21:89:c7:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:47:D7:AF:9E:BF:2A:CE:AC:9A:53:79:26:22:21:3C:30:7D:DC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_D1H16-evyrOrJpTeSYiITwwfdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.172.3.0/24
217.195.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:88:5c:27:40:b1:bb:32:b2:51:05:3a:81:be:d9:77:8f:3a:
38:25:69:9f:11:de:40:f0:05:34:6f:2d:b1:53:bf:07:be:38:
fd:32:e7:22:87:c9:a9:56:01:18:f5:8b:db:ff:70:a1:93:f5:
d8:b5:0e:ee:97:8c:13:dd:23:a3:b4:6f:cd:38:00:51:9e:e9:
8d:90:7a:39:40:7d:1f:5f:1b:2f:40:4a:aa:11:1b:a9:b7:19:
ea:ff:6c:4d:73:c2:82:be:b6:2f:f8:54:f7:0b:0a:f8:0b:98:
7b:b8:95:93:85:07:7d:23:bd:be:51:ab:49:62:ee:f4:05:b5:
e8:77:43:5d:7d:fc:c8:54:0e:a4:08:d1:39:fd:6c:57:1c:09:
d1:fe:6d:aa:d2:e6:4b:03:24:c8:8f:7e:93:33:2b:fa:b7:0f:
c9:64:0d:50:7c:a5:eb:2d:64:e0:c9:6a:c2:9c:13:b5:ba:f3:
e7:b8:34:4b:b0:99:94:78:cd:72:ce:4e:52:d6:db:8b:96:bc:
d2:4a:88:8d:80:ec:7e:90:45:59:66:44:59:59:7f:dc:2a:d2:
64:2d:74:1b:86:33:ac:b4:c4:8e:1e:1f:d0:81:64:88:27:34:
96:9b:72:a2:cb:3a:56:a2:b2:e8:ce:64:a9:1b:59:93:eb:16:
0f:bc:c4:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijSNpJYHTM7PGVoiIU4cVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzNkNDdkN2FmOWViZjJhY2VhYzlhNTM3OTI2MjIyMTNjMzA3ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oKjVvzAHaveKvWF7fSDSG+/S0Ok
EPwDHfZ1y/f35Gmm+iBMf8zLTTyozSsrM2f5kL1ouxFnNOefn1ApqO+c1SWzpvbw
cHuM0pyA9OTh88ItsKo8XM32Co2XeRsipIEZOmndCEmwhU0WG7bsZWAt/iX3d/1w
LDLiIsK+ZoPva5ZGbYvS1qp4YTnbjdgjtDsVqQZWsYcWYlbTQm+I781iijA8F/He
IiCoggj4rRH9fgDhIvtruDmomLKMQY+VHpJ+PNywBvpio33+zPasot2IpxvRTu3V
+SCxJ5huI1OLMUBoj0w6RbiKHBWWBM1W3rLrqgWmdiehu7m98akhicea+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPw9R9evnr8qzqyaU3kmIiE8MH3cMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvX0QxSDE2LWV2eXJPckpwVGVTWWlJVHd3ZmR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1awDAwQA
2cNWMA0GCSqGSIb3DQEBCwUAA4IBAQAPiFwnQLG7MrJRBTqBvtl3jzo4JWmfEd5A
8AU0by2xU78Hvjj9Mucih8mpVgEY9Yvb/3Chk/XYtQ7ul4wT3SOjtG/NOABRnumN
kHo5QH0fXxsvQEqqERuptxnq/2xNc8KCvrYv+FT3Cwr4C5h7uJWThQd9I72+UatJ
Yu70BbXod0NdffzIVA6kCNE5/WxXHAnR/m2q0uZLAyTIj36TMyv6tw/JZA1QfKXr
LWTgyWrCnBO1uvPnuDRLsJmUeM1yzk5S1tuLlrzSSoiNgOx+kEVZZkRZWX/cKtJk
LXQbhjOstMSOHh/QgWSIJzSWm3KiyzpWorLozmSpG1mT6xYPvMQ3
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:03 2025 by rpki-client