Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Fiaoyzt87itbMDPQcRW3KUFZRqE.roa
File: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (raw, json)
Hash identifier: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=
Subject key identifier: 16:26:A8:CB:3B:7C:EE:2B:5B:30:33:D0:71:15:B7:29:41:59:46:A1
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194274895CD6A967DC02E0D6CEFD2C18BA2
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Fiaoyzt87itbMDPQcRW3KUFZRqE.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 80.93.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:95:cd:6a:96:7d:c0:2e:0d:6c:ef:d2:c1:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1626a8cb3b7cee2b5b3033d07115b729415946a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:56:ab:0d:2e:0b:3c:c6:ba:0c:77:b3:b5:
b8:e3:dd:4a:84:84:49:c1:a9:e5:1e:78:5b:fb:7a:
18:56:e0:86:71:f9:e8:bf:a7:52:36:9a:8c:b1:44:
cf:b9:55:ed:01:de:19:5a:fd:d1:b5:06:09:41:c5:
b6:aa:ad:80:9c:6a:c0:a0:35:bf:f6:f9:78:41:60:
e8:f3:35:8a:4a:5e:14:64:44:a2:be:48:11:6a:30:
71:34:24:1e:bc:6e:44:38:d6:04:75:7f:d2:d4:84:
5e:0c:02:f1:92:3d:83:31:7a:19:9e:23:a0:8b:8a:
ce:ee:ff:41:66:86:96:8a:81:27:e6:d8:7b:f2:30:
68:de:87:e5:79:8b:04:2b:ad:c4:2d:ec:03:34:ad:
cb:57:fa:9c:bd:c9:86:05:cd:9c:fb:07:fc:e6:4a:
17:cb:84:2c:98:bf:bb:36:46:6b:d6:ca:1f:7b:a1:
9b:3b:e0:0a:23:50:24:04:e3:02:b4:25:42:76:28:
0d:e2:1d:38:f8:e1:1e:a7:15:ba:56:34:d6:f4:44:
56:d1:be:20:3d:73:d4:03:89:9e:72:16:db:ac:fd:
3e:a7:c5:f2:13:91:dc:a2:51:7c:be:96:f9:c6:79:
8c:b0:2c:a1:27:b6:c8:cb:c3:79:97:a9:8e:15:70:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:A8:CB:3B:7C:EE:2B:5B:30:33:D0:71:15:B7:29:41:59:46:A1
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Fiaoyzt87itbMDPQcRW3KUFZRqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a2:d5:ca:69:ac:22:67:0c:55:81:88:de:35:95:82:2e:11:
c4:de:a6:ec:40:62:f9:b1:00:99:82:61:a0:a1:7a:04:5b:2e:
6b:bb:7d:9d:21:f6:a8:35:39:71:c8:91:8f:25:cd:40:98:13:
ec:f1:bb:72:a9:e8:95:1a:0a:e1:9d:c4:32:82:11:45:74:fb:
63:8b:12:9b:6b:0c:38:a6:6a:e5:38:f2:12:2a:f5:cd:af:82:
28:7d:d0:49:9b:7e:d9:dd:fa:47:e0:e6:ca:b9:52:82:10:33:
cc:86:65:5a:18:eb:9a:3c:4e:dd:26:ba:d6:45:36:4c:8d:fc:
9b:55:3e:2a:48:6e:a7:17:0b:b6:43:ad:e0:e7:fd:56:0c:29:
6e:3c:96:25:21:8a:4c:b8:db:8b:53:b8:48:36:12:44:09:ee:
0f:fc:34:2f:73:13:e3:30:d1:7f:99:5d:54:5b:d7:7c:39:85:
29:57:6d:32:37:6a:b5:70:a9:7d:77:44:d5:f8:b0:d5:cf:58:
ff:57:84:24:66:d0:9b:75:a7:66:0d:53:cb:b6:b0:91:59:c6:
6d:ad:df:2a:ed:ae:56:8b:b0:35:5f:3a:d4:89:31:40:75:4c:
25:ae:db:4c:91:16:2f:29:77:d2:8f:14:77:2d:b2:f6:f8:da:
ab:f4:a0:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSJXNapZ9wC4NbO/SwYuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjUwMTAyMTM1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjI2YThjYjNiN2NlZTJiNWIzMDMzZDA3MTE1YjcyOTQxNTk0NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWVWqw0uCzzGugx3s7W4491KhIRJ
wanlHnhb+3oYVuCGcfnov6dSNpqMsUTPuVXtAd4ZWv3RtQYJQcW2qq2AnGrAoDW/
9vl4QWDo8zWKSl4UZESivkgRajBxNCQevG5EONYEdX/S1IReDALxkj2DMXoZniOg
i4rO7v9BZoaWioEn5th78jBo3ofleYsEK63ELewDNK3LV/qcvcmGBc2c+wf85koX
y4QsmL+7NkZr1sofe6GbO+AKI1AkBOMCtCVCdigN4h04+OEepxW6VjTW9ERW0b4g
PXPUA4mechbbrP0+p8XyE5HcolF8vpb5xnmMsCyhJ7bIy8N5l6mOFXDtkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBYmqMs7fO4rWzAz0HEVtylBWUahMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvRmlhb3l6dDg3aXRiTURQUWNSVzNLVUZaUnFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3KMA0G
CSqGSIb3DQEBCwUAA4IBAQBuotXKaawiZwxVgYjeNZWCLhHE3qbsQGL5sQCZgmGg
oXoEWy5ru32dIfaoNTlxyJGPJc1AmBPs8btyqeiVGgrhncQyghFFdPtjixKbaww4
pmrlOPISKvXNr4IofdBJm37Z3fpH4ObKuVKCEDPMhmVaGOuaPE7dJrrWRTZMjfyb
VT4qSG6nFwu2Q63g5/1WDCluPJYlIYpMuNuLU7hINhJECe4P/DQvcxPjMNF/mV1U
W9d8OYUpV20yN2q1cKl9d0TV+LDVz1j/V4QkZtCbdadmDVPLtrCRWcZtrd8q7a5W
i7A1XzrUiTFAdUwlrttMkRYvKXfSjxR3LbL2+Nqr9KBp
-----END CERTIFICATE-----
Generated at Wed Feb 5 05:49:28 2025 by rpki-client