Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/U5Jd_d2-d0edIfwDGW7PCCdAE-4.roa
File: U5Jd_d2-d0edIfwDGW7PCCdAE-4.roa (raw, json)
Hash identifier: xIKGm2NOhk3B691UX8bFgrEED1bf4+wyr7RK//1h4jw=
Subject key identifier: 53:92:5D:FD:DD:BE:77:47:9D:21:FC:03:19:6E:CF:08:27:40:13:EE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F017C9BA8A5CA534E49CE9B128404
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/U5Jd_d2-d0edIfwDGW7PCCdAE-4.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60916
IP address blocks: 185.72.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:01:7c:9b:a8:a5:ca:53:4e:49:ce:9b:12:84:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53925dfdddbe77479d21fc03196ecf08274013ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:b1:fa:40:f3:bb:81:29:cb:94:3b:f9:df:
1e:77:d8:17:51:ae:9b:8d:b5:4c:6d:1c:f9:f9:c5:
c8:ed:fa:2f:aa:b1:13:3f:a4:cc:2a:71:13:55:cd:
ac:ad:67:02:42:97:39:33:f0:83:00:e6:a9:de:ff:
25:ec:27:f7:fc:64:81:04:5e:cc:8b:cc:b7:b0:11:
dd:06:98:5e:1a:f0:a3:42:13:81:fe:bd:f3:b8:41:
bc:02:d5:3c:b4:6a:44:9e:cf:f2:41:33:65:23:47:
41:89:d2:51:2d:6f:08:e2:b7:2b:a0:ca:b9:f3:c4:
6c:6f:a8:e6:e4:d9:a3:6e:64:91:ef:54:a7:9a:2d:
5b:18:a0:60:46:52:f3:23:56:41:db:88:37:ee:f6:
bc:fb:71:e8:6b:fe:48:9e:3f:0f:f6:92:13:be:c3:
af:da:d3:4f:22:8b:3e:12:e5:e2:8a:f8:7c:8b:12:
26:65:f1:3b:7d:fa:47:e4:85:e6:47:19:18:47:0f:
49:2c:f5:b1:f8:e8:63:a7:c1:f8:34:b4:69:54:4d:
19:eb:e7:de:73:47:57:a7:cd:ba:05:86:78:06:79:
12:7a:bf:00:1d:10:2b:0d:b6:6f:e5:69:e4:27:8b:
cd:d4:18:b5:e6:75:d1:6a:f1:6e:a7:42:7b:78:af:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:5D:FD:DD:BE:77:47:9D:21:FC:03:19:6E:CF:08:27:40:13:EE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/U5Jd_d2-d0edIfwDGW7PCCdAE-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:5a:6b:ea:ef:50:76:d2:8c:7f:b0:c3:6d:65:cb:4f:45:5a:
28:4b:be:7d:86:19:6a:5a:6f:28:cc:4f:81:9a:dc:3f:2f:9c:
51:ae:d5:0e:a2:ed:04:41:07:f9:0b:b5:4e:0f:92:23:1c:15:
42:c3:74:da:12:f7:3d:3a:5a:ba:71:70:e5:4f:f7:22:ef:4c:
cb:56:d2:d5:f7:46:f7:8a:53:38:09:73:34:5a:f3:45:ed:e0:
69:44:46:8c:c9:f1:b0:39:06:c7:69:d1:bc:5d:a0:92:8f:e7:
6d:66:79:9b:aa:00:e2:36:dc:98:96:41:56:e4:0f:5a:91:fb:
e5:63:ca:6f:a4:05:e9:5a:f7:15:ca:1a:76:28:89:aa:a8:e2:
68:65:6f:72:55:85:ae:79:e1:1f:d2:5c:7d:70:57:a3:4a:df:
4b:61:3e:f9:33:79:e5:d5:4d:0f:ae:12:ed:81:58:ae:31:00:
0b:70:92:b8:f3:46:5d:24:aa:bf:33:a5:61:f5:6a:c8:ae:aa:
e8:fb:0e:1e:29:07:8c:95:b1:a2:46:2a:53:2c:d8:13:f9:64:
cd:cb:7c:b4:ea:2b:23:c4:70:92:4b:d9:21:68:0c:98:4b:b2:
31:85:28:17:31:35:3d:24:69:29:41:34:c2:b4:0c:dd:75:3e:
55:ed:99:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwF8m6ilylNOSc6bEoQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzkyNWRmZGRkYmU3NzQ3OWQyMWZjMDMxOTZlY2YwODI3NDAxM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowex+kDzu4Epy5Q7+d8ed9gXUa6b
jbVMbRz5+cXI7fovqrETP6TMKnETVc2srWcCQpc5M/CDAOap3v8l7Cf3/GSBBF7M
i8y3sBHdBpheGvCjQhOB/r3zuEG8AtU8tGpEns/yQTNlI0dBidJRLW8I4rcroMq5
88Rsb6jm5NmjbmSR71Snmi1bGKBgRlLzI1ZB24g37va8+3Hoa/5Inj8P9pITvsOv
2tNPIos+EuXiivh8ixImZfE7ffpH5IXmRxkYRw9JLPWx+Ohjp8H4NLRpVE0Z6+fe
c0dXp826BYZ4BnkSer8AHRArDbZv5WnkJ4vN1Bi15nXRavFup0J7eK/QiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOSXf3dvndHnSH8AxluzwgnQBPuMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvVTVKZF9kMi1kMGVkSWZ3REdXN1BDQ2RBRS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUg4MA0G
CSqGSIb3DQEBCwUAA4IBAQC6Wmvq71B20ox/sMNtZctPRVooS759hhlqWm8ozE+B
mtw/L5xRrtUOou0EQQf5C7VOD5IjHBVCw3TaEvc9Olq6cXDlT/ci70zLVtLV90b3
ilM4CXM0WvNF7eBpREaMyfGwOQbHadG8XaCSj+dtZnmbqgDiNtyYlkFW5A9akfvl
Y8pvpAXpWvcVyhp2KImqqOJoZW9yVYWueeEf0lx9cFejSt9LYT75M3nl1U0PrhLt
gViuMQALcJK480ZdJKq/M6Vh9WrIrqro+w4eKQeMlbGiRipTLNgT+WTNy3y06isj
xHCSS9khaAyYS7IxhSgXMTU9JGkpQTTCtAzddT5V7Zn3
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:22 2025 by rpki-client