Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa
File: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (raw, json)
Hash identifier: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=
Subject key identifier: EE:81:80:F9:CE:90:46:3E:F0:12:D5:2A:70:A3:55:41:E8:8F:68:A0
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 019422FAFA3475CADEC25A2663ACD5449321
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41848
IP address blocks: 83.137.8.0/21 maxlen: 21
2a02:ea8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fa:34:75:ca:de:c2:5a:26:63:ac:d5:44:93:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee8180f9ce90463ef012d52a70a35541e88f68a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:6c:69:4c:6d:f8:f0:ce:52:3e:eb:f1:61:
71:9b:19:71:4f:34:f6:5a:24:75:ba:d6:a0:be:ac:
32:45:fe:0c:35:cc:78:6c:7c:3d:76:d7:2d:d7:fe:
60:ef:66:50:06:28:cd:58:24:4f:9f:d9:00:95:16:
68:dd:df:0c:b5:c4:1b:2c:7f:49:73:d4:df:fc:c4:
50:d6:f1:a4:30:18:fe:14:3b:6e:ba:d2:76:c4:2a:
c1:ec:7e:dd:17:b7:7e:49:f6:d6:43:00:08:8d:8c:
2b:73:6f:cd:64:81:34:16:b1:f3:b8:1b:9b:39:68:
8e:12:5f:ce:ea:1a:aa:51:a1:50:ad:48:f6:ef:ad:
d9:9c:20:53:00:e8:b3:00:95:87:e4:72:93:58:82:
91:aa:16:f8:ea:9a:52:3b:6d:d2:82:e9:c2:00:15:
09:0a:3e:98:c7:b1:49:3d:c4:64:a3:8d:8e:5b:31:
70:8f:8b:d6:bb:84:c1:dc:41:89:74:9f:69:7a:e4:
a2:5a:4b:b7:f0:45:c9:4e:89:0f:c5:a9:1c:6f:d8:
14:66:b4:be:4a:7b:f7:f6:ed:46:fb:d0:af:1c:97:
bd:b2:03:34:ee:c4:60:ef:bc:d6:57:37:d8:51:c3:
36:c0:68:d4:b4:78:ec:e8:df:dc:ed:bc:32:01:25:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:80:F9:CE:90:46:3E:F0:12:D5:2A:70:A3:55:41:E8:8F:68:A0
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.8.0/21
IPv6:
2a02:ea8::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7c:59:e5:a6:ca:55:31:37:4c:2a:c2:24:78:ce:3d:1d:b3:
a0:95:1a:75:3a:8a:10:87:73:d6:66:c8:4e:e0:54:77:bd:12:
8a:c5:1e:c2:a6:1f:0d:5c:c5:f0:93:5f:72:4e:53:56:a1:a1:
46:6d:4c:72:9f:8c:db:72:9b:24:d9:5d:8b:2d:60:6c:b5:65:
7b:11:83:ce:41:99:23:99:8b:f0:c1:e1:17:1a:89:18:bf:4b:
e9:6d:8f:a5:7e:aa:a0:f0:12:5a:f2:38:19:85:7a:11:1d:c8:
10:a2:38:7f:c3:c7:84:92:f2:ed:e0:e8:e7:f1:2a:02:64:fe:
8b:cb:05:8e:d1:24:d6:42:ab:ee:3f:9c:be:fe:4e:8b:3e:24:
71:ae:33:8f:69:31:6b:12:cc:d5:e3:28:64:9e:67:b0:86:69:
78:23:37:d9:9f:e9:01:81:19:02:01:c7:19:df:a1:ed:d2:e1:
6f:9b:97:4f:73:e1:72:fd:44:72:a0:ad:e9:9b:0b:b0:16:3a:
16:c3:6b:fc:df:67:39:70:d1:98:38:d0:0a:2d:cd:af:3c:99:
1c:5d:18:dc:b0:4b:fa:4a:57:5c:e2:0f:a5:70:94:55:e1:16:
cc:bb:d3:4f:a1:e7:2e:50:57:eb:14:15:64:ab:3c:42:47:e0:
7d:0c:68:51
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQi+vo0dcrewlomY6zVRJMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNGYzMTU3NTk5YjY2ZjI4Y2JjNWEyZWVkMzZmYmEyM2Yw
M2QyY2UwHhcNMjUwMTAxMTc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTgxODBmOWNlOTA0NjNlZjAxMmQ1MmE3MGEzNTU0MWU4OGY2OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr1saUxt+PDOUj7r8WFxmxlxTzT2
WiR1utagvqwyRf4MNcx4bHw9dtct1/5g72ZQBijNWCRPn9kAlRZo3d8MtcQbLH9J
c9Tf/MRQ1vGkMBj+FDtuutJ2xCrB7H7dF7d+SfbWQwAIjYwrc2/NZIE0FrHzuBub
OWiOEl/O6hqqUaFQrUj2763ZnCBTAOizAJWH5HKTWIKRqhb46ppSO23SgunCABUJ
Cj6Yx7FJPcRko42OWzFwj4vWu4TB3EGJdJ9peuSiWku38EXJTokPxakcb9gUZrS+
Snv39u1G+9CvHJe9sgM07sRg77zWVzfYUcM2wGjUtHjs6N/c7bwyASV9ZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO6BgPnOkEY+8BLVKnCjVUHoj2igMB8GA1UdIwQY
MBaAFKxPMVdZm2byjLxaLu02+6I/A9LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjIt
MjUwOTgwZTc1YmRmLzEvN29HQS1jNlFSajd3RXRVcWNLTlZRZWlQYUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjItMjUwOTgwZTc1YmRm
LzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDU4kIMA0E
AgACMAcDBQAqAg6oMA0GCSqGSIb3DQEBCwUAA4IBAQCrfFnlpspVMTdMKsIkeM49
HbOglRp1OooQh3PWZshO4FR3vRKKxR7Cph8NXMXwk19yTlNWoaFGbUxyn4zbcpsk
2V2LLWBstWV7EYPOQZkjmYvwweEXGokYv0vpbY+lfqqg8BJa8jgZhXoRHcgQojh/
w8eEkvLt4Ojn8SoCZP6LywWO0STWQqvuP5y+/k6LPiRxrjOPaTFrEszV4yhknmew
hml4IzfZn+kBgRkCAccZ36Ht0uFvm5dPc+Fy/URyoK3pmwuwFjoWw2v832c5cNGY
ONAKLc2vPJkcXRjcsEv6Sldc4g+lcJRV4RbMu9NPoecuUFfrFBVkqzxCR+B9DGhR
-----END CERTIFICATE-----
Generated at Wed Apr 23 13:55:38 2025 by rpki-client