Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa
File: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (raw, json)
Hash identifier: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=
Subject key identifier: 7E:CD:8D:A9:D1:E6:05:66:DD:96:39:D8:5D:4E:D7:73:C9:3D:14:5C
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01941FFAAFB32EF082417A10AE2C6DF6E01A
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201089
IP address blocks: 188.72.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:b3:2e:f0:82:41:7a:10:ae:2c:6d:f6:e0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ecd8da9d1e60566dd9639d85d4ed773c93d145c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:ba:41:ae:f7:c1:91:d1:fb:f3:70:f7:29:
91:65:0e:3b:9d:00:06:51:d0:86:3a:72:45:8f:d9:
a7:4c:6e:f5:9a:30:a7:01:72:04:3e:5a:c7:04:a4:
14:79:c1:02:c4:54:ac:d4:37:78:77:03:d4:b6:25:
32:09:35:4e:0c:f2:23:ed:cc:56:94:19:9d:f4:78:
43:42:1e:ab:30:31:6e:a0:92:94:a5:21:1d:8d:2f:
fb:80:60:f3:9d:f9:c2:7b:07:ed:34:4b:d0:63:fb:
b5:4d:76:00:8c:83:eb:02:32:ee:e2:7f:8e:41:c4:
61:9c:74:0c:0c:36:96:90:c2:c2:95:d0:74:b0:cf:
84:50:ac:19:94:2e:29:78:f2:21:66:7b:88:95:65:
78:a1:2f:f4:3e:b3:ee:d3:6e:c2:30:19:3e:0a:7e:
1d:64:36:f1:57:9c:b7:e7:41:a6:d5:35:1f:60:5c:
6d:5b:75:96:a6:40:0a:8f:4e:17:f5:d0:5a:d1:49:
eb:a3:ee:fc:d5:31:50:2f:33:31:f5:a4:d2:38:33:
6a:70:bb:e5:35:22:f2:0d:66:15:ea:9f:fd:85:64:
d8:27:83:9c:c2:d3:49:a7:72:a8:00:b6:63:43:2a:
74:58:d0:f1:ba:cb:f1:80:72:fe:6d:d4:ff:52:58:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:8D:A9:D1:E6:05:66:DD:96:39:D8:5D:4E:D7:73:C9:3D:14:5C
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.40.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1a:5a:93:b9:0e:08:b6:22:e3:bd:3b:16:70:d8:54:8f:a2:
86:b2:bc:2b:d4:72:30:eb:11:59:d3:e7:fc:e1:c9:16:8a:47:
88:db:93:2b:4b:3c:fd:3f:be:69:83:5d:6c:44:e8:cb:6c:e0:
a0:5d:e8:a0:0d:26:f7:8d:f8:cb:47:8f:d9:f1:a0:c0:be:59:
a7:52:61:89:d3:f4:b1:ae:fa:2e:73:22:81:4e:ac:e8:7f:99:
fa:ae:e8:ee:97:cd:6f:0b:bc:6b:a2:19:87:b2:29:9d:63:e2:
a8:1f:03:2e:b1:05:b1:42:ed:b1:55:52:de:25:3b:f9:27:02:
b0:75:d0:f1:3a:85:be:2c:0e:b6:0f:1d:5d:de:77:1a:d1:87:
d0:1d:2d:73:80:20:8e:13:87:05:bb:30:04:04:44:d5:b7:96:
75:a9:ec:ea:d3:90:86:16:4b:b7:76:c7:b8:bc:25:51:0e:1d:
5c:e9:f2:c6:e4:bc:f4:ee:7f:7d:ff:ec:c2:fd:cb:8b:64:9f:
85:22:8a:da:a4:0b:f4:1d:01:f2:e9:c3:75:e9:6b:ee:22:1e:
a8:b6:49:af:40:35:69:38:d2:0a:51:52:7f:6a:0f:54:54:64:
0e:ec:1c:93:85:71:c6:7e:5b:ef:18:b0:ce:fd:e0:00:36:13:
5f:82:6e:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+q+zLvCCQXoQrixt9uAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjUwMTAxMDM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWNkOGRhOWQxZTYwNTY2ZGQ5NjM5ZDg1ZDRlZDc3M2M5M2QxNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04S6Qa73wZHR+/Nw9ymRZQ47nQAG
UdCGOnJFj9mnTG71mjCnAXIEPlrHBKQUecECxFSs1Dd4dwPUtiUyCTVODPIj7cxW
lBmd9HhDQh6rMDFuoJKUpSEdjS/7gGDznfnCewftNEvQY/u1TXYAjIPrAjLu4n+O
QcRhnHQMDDaWkMLCldB0sM+EUKwZlC4pePIhZnuIlWV4oS/0PrPu027CMBk+Cn4d
ZDbxV5y350Gm1TUfYFxtW3WWpkAKj04X9dBa0Unro+781TFQLzMx9aTSODNqcLvl
NSLyDWYV6p/9hWTYJ4OcwtNJp3KoALZjQyp0WNDxusvxgHL+bdT/UlgTRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7NjanR5gVm3ZY52F1O13PJPRRcMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvZnMyTnFkSG1CV2JkbGpuWVhVN1hjOGs5RkZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgoMA0G
CSqGSIb3DQEBCwUAA4IBAQAjGlqTuQ4ItiLjvTsWcNhUj6KGsrwr1HIw6xFZ0+f8
4ckWikeI25MrSzz9P75pg11sROjLbOCgXeigDSb3jfjLR4/Z8aDAvlmnUmGJ0/Sx
rvoucyKBTqzof5n6rujul81vC7xrohmHsimdY+KoHwMusQWxQu2xVVLeJTv5JwKw
ddDxOoW+LA62Dx1d3nca0YfQHS1zgCCOE4cFuzAEBETVt5Z1qezq05CGFku3dse4
vCVRDh1c6fLG5Lz07n99/+zC/cuLZJ+FIorapAv0HQHy6cN16WvuIh6otkmvQDVp
ONIKUVJ/ag9UVGQO7ByThXHGflvvGLDO/eAANhNfgm6w
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:33 2025 by rpki-client