Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/muE7z7bw5WUF44PtXee-WtjAnUQ.roa
File: muE7z7bw5WUF44PtXee-WtjAnUQ.roa (raw, json)
Hash identifier: eOTAuS8cb5e4NeqERvCCoU2l75Ey2kGH2CxTpug1Tes=
Subject key identifier: 9A:E1:3B:CF:B6:F0:E5:65:05:E3:83:ED:5D:E7:BE:5A:D8:C0:9D:44
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 0194221F9402E7D426EC9CDB5F0FE3AE656A
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/muE7z7bw5WUF44PtXee-WtjAnUQ.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206094
IP address blocks: 185.192.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:94:02:e7:d4:26:ec:9c:db:5f:0f:e3:ae:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae13bcfb6f0e56505e383ed5de7be5ad8c09d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:0d:70:0b:22:67:48:b5:c9:ae:30:63:f2:
87:69:0e:06:4a:2f:b0:eb:cd:89:ba:c9:5c:1e:3d:
78:fd:ad:fe:7e:5c:cf:c6:00:82:4f:a9:5c:45:84:
20:93:45:7e:dc:c7:58:c9:c1:39:8c:81:85:c8:a5:
99:b7:97:48:67:0e:30:4e:34:e4:b5:76:88:89:37:
73:0d:e0:d2:ff:fa:d6:56:ac:34:93:5a:e5:f2:68:
ff:d7:4e:f7:6d:81:3e:8b:40:82:86:46:58:cc:9d:
2d:a2:20:e3:26:84:95:4e:b3:53:ed:c5:46:fb:9d:
7d:88:08:53:a0:62:bd:fa:f8:12:0a:aa:3f:85:3a:
c9:ab:73:ec:a7:09:7c:f6:3c:2e:50:3b:7e:f7:58:
4c:c1:11:af:42:e2:b9:6c:7f:e9:2d:79:e1:5e:53:
b8:0a:84:e9:7f:11:06:a5:6a:71:79:d3:7c:26:54:
fc:47:de:d7:24:e6:3a:72:a1:e5:0a:a5:0e:03:a0:
f9:2c:6a:c9:0b:67:8d:63:ee:cc:4d:0e:e9:d9:a3:
c5:14:04:f6:51:5f:e4:06:64:b5:f2:7f:21:64:a4:
bc:79:f0:72:31:8b:5a:7b:fd:38:e9:1c:d5:8d:6d:
21:29:55:f6:92:a6:2f:c0:87:62:46:55:81:dd:75:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:3B:CF:B6:F0:E5:65:05:E3:83:ED:5D:E7:BE:5A:D8:C0:9D:44
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/muE7z7bw5WUF44PtXee-WtjAnUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.240.0/22
Signature Algorithm: sha256WithRSAEncryption
97:f4:ea:02:89:d0:89:44:19:8f:75:92:6c:f7:94:05:5c:eb:
01:8f:1f:fa:7f:f8:cb:f4:72:e3:26:9d:3b:c3:f3:f6:ef:81:
26:a4:5a:59:ad:b3:87:04:86:56:2c:99:1b:6d:58:c9:f9:dd:
a3:c1:da:b9:76:a1:74:ef:16:81:52:37:2e:e7:90:33:a8:a3:
c6:1d:50:23:4e:8f:08:b7:f7:9b:82:5d:20:c4:61:d4:f2:99:
9f:de:f6:20:6d:2f:2d:ef:6f:3a:71:6f:4c:7e:bd:9c:bc:bc:
ce:06:06:f8:d3:4f:09:ea:7a:63:de:c6:fb:fc:99:cc:05:6e:
14:89:49:f1:12:ff:b5:55:ee:d3:5a:fb:ed:c2:e1:82:10:d5:
d0:e4:e4:df:ec:48:99:ae:cf:ea:d9:be:a0:92:85:81:3a:d8:
96:b1:49:e3:5f:7e:67:bf:de:c8:8c:4f:e8:b0:d5:05:5f:75:
77:3a:a8:14:25:63:89:f6:c8:74:e7:d8:47:c0:68:6a:6c:88:
f6:6a:e4:8a:ab:b4:be:64:bb:b5:a1:17:10:50:03:b1:e5:56:
44:dc:f1:82:e6:c2:78:73:c8:c6:36:96:34:b2:0f:4b:80:44:
b0:c1:15:24:6f:9a:33:1e:9b:92:77:db:df:e6:ea:2d:c3:a8:
98:65:1e:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH5QC59Qm7JzbXw/jrmVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTJhNTJlODhiMDE4MzJjZjBlZTM3Y2NkYWI2MWRlY2U3
ZDEyYzYwHhcNMjUwMTAxMTM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWUxM2JjZmI2ZjBlNTY1MDVlMzgzZWQ1ZGU3YmU1YWQ4YzA5ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e0NcAsiZ0i1ya4wY/KHaQ4GSi+w
682JuslcHj14/a3+flzPxgCCT6lcRYQgk0V+3MdYycE5jIGFyKWZt5dIZw4wTjTk
tXaIiTdzDeDS//rWVqw0k1rl8mj/1073bYE+i0CChkZYzJ0toiDjJoSVTrNT7cVG
+519iAhToGK9+vgSCqo/hTrJq3Pspwl89jwuUDt+91hMwRGvQuK5bH/pLXnhXlO4
CoTpfxEGpWpxedN8JlT8R97XJOY6cqHlCqUOA6D5LGrJC2eNY+7MTQ7p2aPFFAT2
UV/kBmS18n8hZKS8efByMYtae/046RzVjW0hKVX2kqYvwIdiRlWB3XVpBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrhO8+28OVlBeOD7V3nvlrYwJ1EMB8GA1UdIwQY
MBaAFHASpS6IsBgyzw7jfM2rYd7OfRLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgt
MzIwMWI4N2YxNDkwLzEvbXVFN3o3Ync1V1VGNDRQdFhlZS1XdGpBblVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgtMzIwMWI4N2YxNDkw
LzEvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucDwMA0G
CSqGSIb3DQEBCwUAA4IBAQCX9OoCidCJRBmPdZJs95QFXOsBjx/6f/jL9HLjJp07
w/P274EmpFpZrbOHBIZWLJkbbVjJ+d2jwdq5dqF07xaBUjcu55AzqKPGHVAjTo8I
t/ebgl0gxGHU8pmf3vYgbS8t7286cW9Mfr2cvLzOBgb4008J6npj3sb7/JnMBW4U
iUnxEv+1Ve7TWvvtwuGCENXQ5OTf7EiZrs/q2b6gkoWBOtiWsUnjX35nv97IjE/o
sNUFX3V3OqgUJWOJ9sh059hHwGhqbIj2auSKq7S+ZLu1oRcQUAOx5VZE3PGC5sJ4
c8jGNpY0sg9LgESwwRUkb5ozHpuSd9vf5uotw6iYZR7q
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:49 2025 by rpki-client