Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/drpgYpxYRR9V4uFvS3LoeipiB54.roa
File: drpgYpxYRR9V4uFvS3LoeipiB54.roa (raw, json)
Hash identifier: HgRwpDtY4dJcGA1mdjtaI4XHix4hfLK6pTPfue/TWyQ=
Subject key identifier: 76:BA:60:62:9C:58:45:1F:55:E2:E1:6F:4B:72:E8:7A:2A:62:07:9E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCD7B0870AB30F9E408A4B92341F1D
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/drpgYpxYRR9V4uFvS3LoeipiB54.roa
Signing time: Thu 02 Jan 2025 07:48:34 +0000
ROA not before: Thu 02 Jan 2025 07:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 94.154.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d7:b0:87:0a:b3:0f:9e:40:8a:4b:92:34:1f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ba60629c58451f55e2e16f4b72e87a2a62079e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:50:9a:bb:da:a0:3a:b6:5a:67:b4:4c:da:
7f:e6:54:e3:9d:9a:01:37:c9:2f:9a:ec:8c:c7:25:
66:fd:d5:3b:58:ff:f8:e6:7b:09:fb:b0:46:67:60:
17:80:d0:a1:86:0e:81:41:06:8d:a1:9d:e6:6d:7c:
24:fc:4f:b7:b1:96:40:8b:44:c9:c8:f2:58:fb:22:
ef:a0:d3:c5:81:46:77:4b:2c:28:dc:ff:c3:4c:1d:
d6:4a:64:69:79:58:30:e0:f0:66:2c:f3:e9:8c:58:
98:fb:e8:20:da:06:db:38:c0:06:16:16:aa:d1:ee:
ab:57:f2:fd:cd:f7:bb:ba:40:5e:c7:ee:0b:26:79:
59:8c:76:3f:f1:a9:da:bb:90:31:a9:39:eb:50:e9:
9e:34:20:57:6a:32:3f:38:d7:65:87:c4:0e:01:be:
8d:05:1a:eb:a6:fd:5c:a1:d3:3d:14:58:65:5b:6b:
e3:0a:1a:07:68:7f:a6:ca:4a:0f:ad:c2:4e:58:c5:
f5:35:50:72:e7:d9:8a:d3:74:f9:d8:c9:97:fd:63:
69:a0:0f:a2:21:a7:f0:f5:cd:a8:d2:3b:8a:7f:87:
71:98:68:ae:e6:2d:2a:0c:5f:13:a9:e9:17:a8:a8:
25:30:1c:9c:6c:83:8e:ac:42:3d:58:b3:7e:99:72:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:60:62:9C:58:45:1F:55:E2:E1:6F:4B:72:E8:7A:2A:62:07:9E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/drpgYpxYRR9V4uFvS3LoeipiB54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:8a:27:2b:3f:b0:c2:90:47:ca:37:28:9c:fd:24:f3:5c:82:
41:f8:d5:b7:d1:dc:08:01:91:78:9a:0c:65:0e:01:17:3a:70:
65:d2:3b:f2:d9:36:26:00:49:ad:85:79:94:3f:d7:3a:73:dc:
0e:d3:f3:77:31:e8:c0:62:2c:0c:a4:6f:fc:92:1c:de:1f:91:
a5:8f:7d:81:a7:4b:d6:5d:c6:46:65:15:bd:b9:8b:81:af:35:
2f:85:31:76:6d:8d:07:cc:d9:03:2d:22:57:d9:49:b2:b8:11:
e4:de:b1:bc:3c:33:27:61:78:11:b3:73:16:94:b5:8b:8b:a9:
72:6b:8b:15:b7:fa:75:fd:47:3a:7f:cc:20:7f:a9:b4:8b:4e:
23:1b:e8:1b:38:fc:52:65:3a:c6:d1:63:65:7c:e9:df:c5:0c:
e3:ea:47:9c:a9:6a:ab:36:e9:6e:4e:a2:94:d0:ce:6a:fe:3d:
f2:a7:ea:fe:5e:c3:a8:b5:7a:08:76:01:eb:72:91:92:b4:33:
3d:3c:62:1f:c7:74:55:03:f7:37:29:b2:a4:0b:62:69:65:03:
d0:51:fa:b6:f4:7e:6f:58:03:67:d3:c0:f3:a0:74:0a:b0:f6:
ce:54:58:fd:df:c5:bd:f1:58:83:cd:4e:98:e1:d7:f8:26:41:
2e:fe:f7:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/NewhwqzD55AikuSNB8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwMTAyMDc0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmJhNjA2MjljNTg0NTFmNTVlMmUxNmY0YjcyZTg3YTJhNjIwNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJdQmrvaoDq2Wme0TNp/5lTjnZoB
N8kvmuyMxyVm/dU7WP/45nsJ+7BGZ2AXgNChhg6BQQaNoZ3mbXwk/E+3sZZAi0TJ
yPJY+yLvoNPFgUZ3Sywo3P/DTB3WSmRpeVgw4PBmLPPpjFiY++gg2gbbOMAGFhaq
0e6rV/L9zfe7ukBex+4LJnlZjHY/8anau5AxqTnrUOmeNCBXajI/ONdlh8QOAb6N
BRrrpv1codM9FFhlW2vjChoHaH+mykoPrcJOWMX1NVBy59mK03T52MmX/WNpoA+i
Iafw9c2o0juKf4dxmGiu5i0qDF8TqekXqKglMBycbIOOrEI9WLN+mXIVbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHa6YGKcWEUfVeLhb0ty6HoqYgeeMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvZHJwZ1lweFlSUjlWNHVGdlMzTG9laXBpQjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXpq0MA0G
CSqGSIb3DQEBCwUAA4IBAQBNiicrP7DCkEfKNyic/STzXIJB+NW30dwIAZF4mgxl
DgEXOnBl0jvy2TYmAEmthXmUP9c6c9wO0/N3MejAYiwMpG/8khzeH5Glj32Bp0vW
XcZGZRW9uYuBrzUvhTF2bY0HzNkDLSJX2UmyuBHk3rG8PDMnYXgRs3MWlLWLi6ly
a4sVt/p1/Uc6f8wgf6m0i04jG+gbOPxSZTrG0WNlfOnfxQzj6kecqWqrNuluTqKU
0M5q/j3yp+r+XsOotXoIdgHrcpGStDM9PGIfx3RVA/c3KbKkC2JpZQPQUfq29H5v
WANn08DzoHQKsPbOVFj938W98ViDzU6Y4df4JkEu/vdy
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:52:36 2025 by rpki-client