Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/584_8-MCCtntQOfvULwWZs9O7nE.roa
File: 584_8-MCCtntQOfvULwWZs9O7nE.roa (raw, json)
Hash identifier: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=
Subject key identifier: E7:CE:3F:F3:E3:02:0A:D9:ED:40:E7:EF:50:BC:16:66:CF:4E:EE:71
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0196D55613E34C19AD4D5E23590F04C2E495
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/584_8-MCCtntQOfvULwWZs9O7nE.roa
Signing time: Thu 15 May 2025 19:05:10 +0000
ROA not before: Thu 15 May 2025 19:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213020
IP address blocks: 109.72.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:56:13:e3:4c:19:ad:4d:5e:23:59:0f:04:c2:e4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 15 19:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ce3ff3e3020ad9ed40e7ef50bc1666cf4eee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:cf:03:36:90:74:ab:89:ba:45:b2:db:6b:
fa:a7:dc:25:be:c2:8e:07:67:54:dd:dc:1a:7b:bb:
82:ee:ed:19:4b:d3:60:b0:e5:9c:9a:d8:ef:38:1a:
54:99:0f:e8:d0:27:b3:ec:b3:23:23:09:ff:37:ec:
43:5d:8a:4f:29:52:c4:5c:63:06:16:a6:08:e5:0f:
e9:f9:06:3d:3d:ac:41:ad:40:d2:19:4a:d1:84:b8:
d8:fd:b8:cc:cc:f7:e1:a6:92:66:be:d7:17:75:e1:
6e:96:6f:33:10:9d:6b:4c:0d:fc:77:53:39:56:b0:
ef:c5:7f:e7:96:79:32:7c:4f:e7:e2:41:bd:b9:4f:
27:de:18:d5:db:b6:58:17:fa:fc:02:7f:7d:cc:47:
87:41:95:0f:7b:b1:a5:eb:ab:e1:fa:d8:03:eb:c8:
c0:30:fc:50:1a:f1:45:7b:ae:f1:77:19:2b:cb:71:
cd:06:31:19:28:de:c1:f4:1f:34:e9:ba:3a:a4:4b:
90:57:49:d2:f3:5b:ab:e9:2e:f2:2c:b6:31:2c:22:
55:8e:62:1b:ea:78:df:d4:d5:cc:f1:48:86:0c:e2:
61:98:c8:4d:4f:c6:d4:f2:6b:32:2d:07:93:48:c1:
65:44:18:4e:67:7e:5d:be:8c:b0:69:50:b8:24:3b:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:3F:F3:E3:02:0A:D9:ED:40:E7:EF:50:BC:16:66:CF:4E:EE:71
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/584_8-MCCtntQOfvULwWZs9O7nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ab:29:43:1e:b7:4d:14:ec:d3:5c:d0:be:d1:d1:8b:40:a3:
9e:d5:92:00:9a:87:cb:d8:41:e6:4b:09:ee:a5:53:00:8f:8d:
3e:5f:f1:83:e6:89:fe:5a:ae:7e:ed:a7:dc:80:7f:54:e2:72:
81:da:1e:e2:3e:3d:d7:da:8f:b8:78:85:3a:19:0d:24:43:c6:
96:4e:9d:95:d9:aa:68:a7:aa:33:44:9b:9b:4d:0c:d1:10:7c:
f9:5a:30:e7:28:8c:24:5f:cb:53:7d:61:40:e6:f4:35:2e:42:
9f:e1:bd:3c:74:f4:09:44:bd:78:a2:78:e3:70:d4:88:f5:ad:
1c:38:1b:33:2c:6c:59:c8:27:db:f5:4f:ab:c0:d3:d8:70:a8:
71:7c:93:82:e2:bd:90:cf:83:2e:c2:51:b2:98:4a:09:c4:25:
2a:50:3b:04:b2:83:3d:67:70:dd:b0:9d:cf:41:64:d3:9a:83:
2e:cb:0c:d7:7b:f1:51:95:4e:81:b9:1c:7c:0d:f5:02:02:56:
51:eb:36:5a:e8:d7:68:eb:cb:d7:2b:cb:81:24:13:23:a9:18:
93:f3:49:eb:20:64:c2:b7:28:a1:4d:59:d7:71:5b:29:9e:43:
f8:3a:3d:09:69:73:28:f5:b5:7a:e1:1b:24:41:fe:8f:12:c2:
ee:da:76:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbVVhPjTBmtTV4jWQ8EwuSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwNTE1MTkwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2NlM2ZmM2UzMDIwYWQ5ZWQ0MGU3ZWY1MGJjMTY2NmNmNGVlZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqXPAzaQdKuJukWy22v6p9wlvsKO
B2dU3dwae7uC7u0ZS9NgsOWcmtjvOBpUmQ/o0Cez7LMjIwn/N+xDXYpPKVLEXGMG
FqYI5Q/p+QY9PaxBrUDSGUrRhLjY/bjMzPfhppJmvtcXdeFulm8zEJ1rTA38d1M5
VrDvxX/nlnkyfE/n4kG9uU8n3hjV27ZYF/r8An99zEeHQZUPe7Gl66vh+tgD68jA
MPxQGvFFe67xdxkry3HNBjEZKN7B9B806bo6pEuQV0nS81ur6S7yLLYxLCJVjmIb
6njf1NXM8UiGDOJhmMhNT8bU8msyLQeTSMFlRBhOZ35dvoywaVC4JDvzNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfOP/PjAgrZ7UDn71C8FmbPTu5xMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvNTg0XzgtTUNDdG50UU9mdlVMd1daczlPN25FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh8MA0G
CSqGSIb3DQEBCwUAA4IBAQAyqylDHrdNFOzTXNC+0dGLQKOe1ZIAmofL2EHmSwnu
pVMAj40+X/GD5on+Wq5+7afcgH9U4nKB2h7iPj3X2o+4eIU6GQ0kQ8aWTp2V2apo
p6ozRJubTQzREHz5WjDnKIwkX8tTfWFA5vQ1LkKf4b08dPQJRL14onjjcNSI9a0c
OBszLGxZyCfb9U+rwNPYcKhxfJOC4r2Qz4MuwlGymEoJxCUqUDsEsoM9Z3DdsJ3P
QWTTmoMuywzXe/FRlU6BuRx8DfUCAlZR6zZa6Ndo68vXK8uBJBMjqRiT80nrIGTC
tyihTVnXcVspnkP4Oj0JaXMo9bV64RskQf6PEsLu2nZK
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:10:37 2025 by rpki-client