Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/itMgqvJDEnU1J4HZqHz0bG4WjDU.roa
File: itMgqvJDEnU1J4HZqHz0bG4WjDU.roa (raw, json)
Hash identifier: gbwxR9wfwFuEufvva+U9hlUyoucL3lkLwXyMIh9U1Ug=
Subject key identifier: 8A:D3:20:AA:F2:43:12:75:35:27:81:D9:A8:7C:F4:6C:6E:16:8C:35
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0CD0B7B38CA17EF23AA90E3367EA
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/itMgqvJDEnU1J4HZqHz0bG4WjDU.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210212
IP address blocks: 151.237.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0c:d0:b7:b3:8c:a1:7e:f2:3a:a9:0e:33:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad320aaf2431275352781d9a87cf46c6e168c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:48:7a:59:27:4c:ac:6a:8c:b9:33:5a:23:
da:70:92:e1:5e:59:f7:83:4c:f5:d5:73:83:5c:89:
3e:bc:1f:41:58:1a:e7:a7:4b:bc:f2:a0:6f:7c:9d:
11:d2:7c:62:e1:8a:27:c0:34:eb:e2:ef:11:45:d7:
b7:b5:4c:29:6e:65:00:71:0b:ea:f9:61:dc:6b:04:
2e:d0:33:b5:21:77:20:61:6f:d5:1f:6f:9f:00:0f:
ea:34:b6:29:e9:6c:f6:8f:64:95:86:e4:d2:00:9d:
ef:a1:05:3e:60:5f:58:ed:88:ca:c1:d2:0f:a3:ca:
68:a5:51:52:f5:f6:c6:55:93:fa:16:fc:5e:97:da:
09:1a:f6:28:87:fc:18:fa:16:58:56:3c:fd:25:ee:
78:ab:bf:54:94:5f:a7:79:9a:56:4e:e9:49:f0:4c:
ad:44:99:ea:e1:02:c8:5d:0a:78:9c:b3:50:a5:13:
ae:63:6b:fd:e7:10:85:53:c3:00:02:0a:48:43:f6:
3b:0e:82:9f:76:bf:f2:ab:a7:aa:b4:82:a0:1f:e7:
4b:83:5c:d7:58:e9:46:37:ba:bb:6b:90:ed:ed:99:
d9:45:c2:23:a0:70:c8:52:01:58:8d:ce:59:e6:4f:
6f:e5:65:ff:c6:b0:af:92:6b:0b:ee:0a:91:7e:4d:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:20:AA:F2:43:12:75:35:27:81:D9:A8:7C:F4:6C:6E:16:8C:35
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/itMgqvJDEnU1J4HZqHz0bG4WjDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.27.0/24
Signature Algorithm: sha256WithRSAEncryption
77:45:a7:10:99:42:b1:e2:70:2a:0a:6d:ba:4a:92:5b:d0:bf:
44:a2:31:89:9d:b3:dc:68:f9:b5:e5:b9:81:c4:d3:85:e0:33:
7b:7d:ce:e5:bf:ed:7b:f4:b9:fa:76:8b:ef:e0:88:3a:3d:b8:
01:8c:a5:85:6b:d1:c4:63:75:ba:2e:6d:c5:b1:25:ae:e6:55:
c7:d4:6e:cc:0d:ea:fe:0a:5b:ae:50:42:34:f7:28:7b:4b:c3:
7a:ce:05:d1:19:58:cf:a2:e7:17:a3:a7:fc:96:8f:44:52:de:
a2:cd:bb:d4:65:46:be:0b:8c:a5:de:ca:63:b1:3c:2c:ed:40:
fa:eb:11:02:da:48:d6:a0:a0:87:dc:fa:69:d7:b1:ba:8d:83:
6d:42:f3:df:3c:99:65:b4:73:da:02:ab:71:ec:0a:df:c8:32:
0c:90:bb:7a:c0:d1:fc:6a:ee:75:e7:3b:05:bd:df:3d:1a:1c:
b7:2d:fb:96:40:43:b2:e3:39:09:df:85:9b:d1:74:ef:6a:10:
31:36:7e:05:2c:8f:b0:9f:47:95:ca:80:66:ad:3e:4a:a5:fc:
de:5a:57:4d:44:eb:2e:2c:e4:c7:be:2c:fe:ab:5b:4f:6f:a2:
d7:a6:17:bb:8d:bc:68:45:62:98:f3:93:b3:34:5a:4b:74:f5:
c3:1d:e4:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwzQt7OMoX7yOqkOM2fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQzMjBhYWYyNDMxMjc1MzUyNzgxZDlhODdjZjQ2YzZlMTY4YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteJIelknTKxqjLkzWiPacJLhXln3
g0z11XODXIk+vB9BWBrnp0u88qBvfJ0R0nxi4YonwDTr4u8RRde3tUwpbmUAcQvq
+WHcawQu0DO1IXcgYW/VH2+fAA/qNLYp6Wz2j2SVhuTSAJ3voQU+YF9Y7YjKwdIP
o8popVFS9fbGVZP6Fvxel9oJGvYoh/wY+hZYVjz9Je54q79UlF+neZpWTulJ8Eyt
RJnq4QLIXQp4nLNQpROuY2v95xCFU8MAAgpIQ/Y7DoKfdr/yq6eqtIKgH+dLg1zX
WOlGN7q7a5Dt7ZnZRcIjoHDIUgFYjc5Z5k9v5WX/xrCvkmsL7gqRfk3keQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrTIKryQxJ1NSeB2ah89GxuFow1MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvaXRNZ3F2SkRFblUxSjRIWnFIejBiRzRXakRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0bMA0G
CSqGSIb3DQEBCwUAA4IBAQB3RacQmUKx4nAqCm26SpJb0L9EojGJnbPcaPm15bmB
xNOF4DN7fc7lv+179Ln6dovv4Ig6PbgBjKWFa9HEY3W6Lm3FsSWu5lXH1G7MDer+
CluuUEI09yh7S8N6zgXRGVjPoucXo6f8lo9EUt6izbvUZUa+C4yl3spjsTws7UD6
6xEC2kjWoKCH3Ppp17G6jYNtQvPfPJlltHPaAqtx7ArfyDIMkLt6wNH8au515zsF
vd89Ghy3LfuWQEOy4zkJ34Wb0XTvahAxNn4FLI+wn0eVyoBmrT5KpfzeWldNROsu
LOTHviz+q1tPb6LXphe7jbxoRWKY85OzNFpLdPXDHeSD
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:27:05 2025 by rpki-client