Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/e-ijOhbtTVFVKNwA3A0KZtd9G28.roa
File: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (raw, json)
Hash identifier: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=
Subject key identifier: 7B:E8:A3:3A:16:ED:4D:51:55:28:DC:00:DC:0D:0A:66:D7:7D:1B:6F
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019425218C40C03DBF516DE35268EC769193
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/e-ijOhbtTVFVKNwA3A0KZtd9G28.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59853
IP address blocks: 185.156.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8c:40:c0:3d:bf:51:6d:e3:52:68:ec:76:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be8a33a16ed4d515528dc00dc0d0a66d77d1b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:c6:bb:04:73:66:38:2e:b2:04:de:38:60:
c5:5f:5d:e4:c6:77:a2:0d:1e:b6:2c:20:bb:ec:58:
63:5a:99:89:49:f5:72:73:a7:13:c2:30:3a:60:b2:
d8:0e:1c:1f:b3:af:b6:67:14:50:55:62:4b:b4:6c:
42:d8:f9:2f:22:76:75:86:74:46:a2:ff:e5:fc:c0:
1b:d3:de:cf:9b:45:01:e7:25:07:64:4a:d7:39:24:
1d:3b:fa:34:a0:b9:87:77:8a:87:f0:a0:8d:a2:72:
f6:a9:49:50:47:ae:a4:a4:1a:c7:41:b4:c2:e3:cf:
72:41:06:de:c6:36:26:12:85:7d:34:b0:24:3b:99:
60:35:7a:48:c1:7c:83:1c:b4:52:31:46:03:2f:21:
9a:80:08:30:bd:cf:e3:cd:75:14:c5:8a:dd:a7:93:
9c:13:be:40:d2:18:74:29:22:01:ad:b5:9f:81:3c:
9e:a2:e2:9b:ba:1b:cf:5b:fc:3d:57:00:99:94:de:
ef:98:3f:a1:29:9d:92:07:0a:33:3d:63:04:40:f3:
9b:31:74:4b:8c:62:39:ce:cb:34:6c:3c:33:74:50:
ab:1d:20:a6:2a:fa:a1:c1:10:f8:4a:22:3a:1e:b0:
97:10:a3:aa:26:65:76:d4:6e:99:f9:20:36:63:07:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:A3:3A:16:ED:4D:51:55:28:DC:00:DC:0D:0A:66:D7:7D:1B:6F
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/e-ijOhbtTVFVKNwA3A0KZtd9G28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a3:cf:d5:56:26:1c:01:c5:e4:66:01:41:64:f8:50:64:e8:
95:91:91:6f:ea:3f:fa:27:17:25:a6:23:6d:f1:3f:a5:f0:53:
62:e3:60:54:a9:91:d7:37:f6:3f:55:49:4f:ee:b8:93:8c:7f:
32:22:91:a6:c9:b8:38:dc:3c:d3:49:21:9b:92:4c:9d:18:84:
c6:8c:4d:7d:56:e9:56:00:ff:97:cb:e1:4f:3b:58:17:9d:e1:
35:13:4f:bd:67:c2:54:4b:b2:8f:76:37:1b:10:e2:d5:87:b2:
b9:74:18:b4:23:d1:b5:56:46:29:ba:46:43:23:1c:22:bd:3f:
ac:d2:f9:fd:e0:68:1e:e2:51:27:6f:04:d7:40:3f:ab:01:25:
d1:bd:12:5e:9f:b7:f1:59:db:e2:73:1a:b3:ab:b8:58:a5:d5:
70:70:5d:dc:d0:4c:06:03:3a:d1:4c:3c:5b:33:cb:9e:e2:90:
d9:78:92:b1:b7:a6:bd:94:7d:d8:06:8f:50:be:88:2f:cf:0b:
20:a7:7c:16:e9:8a:22:69:de:42:d1:9f:eb:c3:6a:e5:9c:f5:
8f:64:ff:7a:9a:9b:cf:98:21:1f:e6:1c:16:26:47:bf:6f:7a:
7f:e4:a4:28:53:23:83:48:5a:42:e6:58:a4:34:e1:43:34:65:
96:d9:1e:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYxAwD2/UW3jUmjsdpGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjUwMTAyMDM0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmU4YTMzYTE2ZWQ0ZDUxNTUyOGRjMDBkYzBkMGE2NmQ3N2QxYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYjGuwRzZjgusgTeOGDFX13kxnei
DR62LCC77FhjWpmJSfVyc6cTwjA6YLLYDhwfs6+2ZxRQVWJLtGxC2PkvInZ1hnRG
ov/l/MAb097Pm0UB5yUHZErXOSQdO/o0oLmHd4qH8KCNonL2qUlQR66kpBrHQbTC
489yQQbexjYmEoV9NLAkO5lgNXpIwXyDHLRSMUYDLyGagAgwvc/jzXUUxYrdp5Oc
E75A0hh0KSIBrbWfgTyeouKbuhvPW/w9VwCZlN7vmD+hKZ2SBwozPWMEQPObMXRL
jGI5zss0bDwzdFCrHSCmKvqhwRD4SiI6HrCXEKOqJmV21G6Z+SA2YweuHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvoozoW7U1RVSjcANwNCmbXfRtvMB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvZS1pak9oYnRUVkZWS053QTNBMEtadGQ5RzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZwbMA0G
CSqGSIb3DQEBCwUAA4IBAQBso8/VViYcAcXkZgFBZPhQZOiVkZFv6j/6JxclpiNt
8T+l8FNi42BUqZHXN/Y/VUlP7riTjH8yIpGmybg43DzTSSGbkkydGITGjE19VulW
AP+Xy+FPO1gXneE1E0+9Z8JUS7KPdjcbEOLVh7K5dBi0I9G1VkYpukZDIxwivT+s
0vn94Gge4lEnbwTXQD+rASXRvRJen7fxWdvicxqzq7hYpdVwcF3c0EwGAzrRTDxb
M8ue4pDZeJKxt6a9lH3YBo9Qvogvzwsgp3wW6Yoiad5C0Z/rw2rlnPWPZP96mpvP
mCEf5hwWJke/b3p/5KQoUyODSFpC5likNOFDNGWW2R6W
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:25 2025 by rpki-client