Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa
File: 1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa (raw, json)
Hash identifier: 6Eeuw1USF7e5maHoVBqaoYLNV7brdUnH0K/WXFWdKYw=
Subject key identifier: FB:A8:83:3C:67:FB:0D:C5:8E:38:5F:17:93:43:1F:8D:85:43:6B:F5
Certificate issuer: /CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
Certificate serial: 0194258FBE7F108BCC01155100497AF9AFDC
Authority key identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201042
IP address blocks: 194.13.142.0/24 maxlen: 24
2a13:4840::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:be:7f:10:8b:cc:01:15:51:00:49:7a:f9:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba8833c67fb0dc58e385f1793431f8d85436bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:90:4e:31:03:9a:e6:73:86:2b:f2:39:4d:
f8:e1:f7:a2:a0:aa:ab:a8:e8:32:87:b2:62:81:fb:
c9:f7:0b:51:cd:6f:20:b7:56:e8:bc:65:08:c1:7e:
a0:a1:d0:47:1d:54:5b:4a:6f:1a:8a:cc:c4:07:a0:
b5:3f:33:51:a7:6e:75:3b:b5:fb:64:6f:3c:e9:85:
9b:0e:d9:c2:a3:4b:52:0d:b3:08:5f:2a:e9:a5:39:
75:29:44:e7:cb:ad:fd:dd:ec:1f:3e:9d:b2:50:8e:
7c:f7:13:07:9e:2c:67:e7:c2:f8:af:66:68:ad:1e:
0b:ed:52:3f:32:ab:a1:97:01:b6:c1:16:9e:87:b2:
7b:8f:7c:13:a7:9c:02:62:f7:07:a4:7c:19:60:dc:
73:67:92:91:bb:9f:29:6d:69:cb:1a:16:ac:0d:7d:
ed:1a:a7:a8:4e:f1:03:e7:74:e5:b9:49:ce:2a:ac:
ac:2e:15:1a:3c:37:0f:3b:3d:00:2c:c2:c5:d9:76:
28:fb:09:00:3b:d7:89:9e:00:ec:c5:6f:19:05:91:
09:25:9b:6a:61:76:98:8d:85:64:a6:40:d4:e1:f9:
da:b0:f1:18:b9:2b:94:22:e3:e1:3c:62:b1:64:c9:
75:70:6b:e2:7c:e5:c1:39:31:6c:e1:ff:73:70:da:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:83:3C:67:FB:0D:C5:8E:38:5F:17:93:43:1F:8D:85:43:6B:F5
X509v3 Authority Key Identifier:
keyid:7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.142.0/24
IPv6:
2a13:4840::/29
Signature Algorithm: sha256WithRSAEncryption
30:f7:a7:29:82:63:fc:dc:cf:1e:d8:c1:7e:36:ce:ec:c8:95:
74:85:01:12:80:bb:3a:9d:d0:2c:1a:4a:69:40:ae:c5:55:39:
fe:2f:0a:35:1e:96:47:7a:dd:68:86:4d:ad:cc:83:c6:71:7f:
08:43:4b:cd:95:bb:c7:e5:62:19:b0:58:f4:73:71:42:e3:28:
36:e6:7e:7a:ae:b4:8f:da:5a:53:33:0b:1d:3d:8d:b6:f7:c0:
3a:bf:0c:8b:cf:e3:22:f8:15:06:19:04:b0:b4:45:79:6e:c7:
8d:aa:ba:76:70:bf:9e:10:21:dd:2c:5d:65:0b:41:b0:30:a6:
f3:9c:38:93:0a:bb:40:4a:0d:c8:3a:f1:11:b3:03:86:84:54:
fa:aa:b6:75:0d:18:92:41:89:81:ad:28:f6:7d:2b:b4:f5:be:
a1:48:0b:8e:ac:72:a9:d2:57:34:0a:8b:59:2c:22:ec:c2:c3:
c4:03:9a:94:5f:ca:25:60:1f:8a:54:cc:bc:7b:d5:dd:f9:8e:
ba:f0:fe:18:f8:a4:4c:3c:d3:2c:1c:ed:f2:ba:d7:e6:6b:4e:
69:08:90:b4:1d:85:03:12:24:6c:2c:bf:d1:b4:97:28:89:85:
1f:92:1d:69:15:4e:c7:f4:03:df:e6:8d:40:4a:df:cb:8c:e5:
ca:eb:90:88
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQlj75/EIvMARVRAEl6+a/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzBhNWEyZTMzMjRkNWU0MTI2NjdmOWYyOTZmNTJhZjI5
N2JiNGQwHhcNMjUwMTAyMDU0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmE4ODMzYzY3ZmIwZGM1OGUzODVmMTc5MzQzMWY4ZDg1NDM2YmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo06QTjEDmuZzhivyOU344feioKqr
qOgyh7JigfvJ9wtRzW8gt1bovGUIwX6godBHHVRbSm8aiszEB6C1PzNRp251O7X7
ZG886YWbDtnCo0tSDbMIXyrppTl1KUTny6393ewfPp2yUI589xMHnixn58L4r2Zo
rR4L7VI/MquhlwG2wRaeh7J7j3wTp5wCYvcHpHwZYNxzZ5KRu58pbWnLGhasDX3t
GqeoTvED53TluUnOKqysLhUaPDcPOz0ALMLF2XYo+wkAO9eJngDsxW8ZBZEJJZtq
YXaYjYVkpkDU4fnasPEYuSuUIuPhPGKxZMl1cGvifOXBOTFs4f9zcNozMQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPuogzxn+w3FjjhfF5NDH42FQ2v1MB8GA1UdIwQY
MBaAFHowpaLjMk1eQSZn+fKW9Sryl7tNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpDbG91TXlUVjVCSm1mNThwYjFLdktYdTAwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jZDliN2YtN2U1Ny00Zjk1LWFiMzkt
ZjRkMWJjYjVjOTAxLzEvMS02aURQR2Y3RGNXT09GOFhrME1mallWRGFfVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDEvY2Q5YjdmLTdlNTctNGY5NS1hYjM5LWY0ZDFiY2I1Yzkw
MS8xL2VqQ2xvdU15VFY1QkptZjU4cGIxS3ZLWHUwMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMINjjAN
BAIAAjAHAwUDKhNIQDANBgkqhkiG9w0BAQsFAAOCAQEAMPenKYJj/NzPHtjBfjbO
7MiVdIUBEoC7Op3QLBpKaUCuxVU5/i8KNR6WR3rdaIZNrcyDxnF/CENLzZW7x+Vi
GbBY9HNxQuMoNuZ+eq60j9paUzMLHT2NtvfAOr8Mi8/jIvgVBhkEsLRFeW7Hjaq6
dnC/nhAh3SxdZQtBsDCm85w4kwq7QEoNyDrxEbMDhoRU+qq2dQ0YkkGJga0o9n0r
tPW+oUgLjqxyqdJXNAqLWSwi7MLDxAOalF/KJWAfilTMvHvV3fmOuvD+GPikTDzT
LBzt8rrX5mtOaQiQtB2FAxIkbCy/0bSXKImFH5IdaRVOx/QD3+aNQErfy4zlyuuQ
iA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:15 2025 by rpki-client