Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/f1RZXAhEg31a-K2NYzsPeQqdHwI.roa
File: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (raw, json)
Hash identifier: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=
Subject key identifier: 7F:54:59:5C:08:44:83:7D:5A:F8:AD:8D:63:3B:0F:79:0A:9D:1F:02
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019426D9D60B2949BD43CDE44774CF7871C9
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/f1RZXAhEg31a-K2NYzsPeQqdHwI.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 185.208.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d6:0b:29:49:bd:43:cd:e4:47:74:cf:78:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f54595c0844837d5af8ad8d633b0f790a9d1f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:58:26:83:2a:0b:35:6f:3e:84:0a:06:48:
31:12:80:df:aa:49:b3:bf:af:b2:28:2d:2d:18:69:
8c:7d:2a:4e:83:48:f7:83:ff:d7:73:6c:a4:d5:d2:
b4:dc:01:d0:98:19:1b:d8:74:b6:71:fe:ed:30:b2:
3f:2f:d1:00:e1:58:8a:65:ce:f8:71:2d:f7:7d:ff:
cc:82:c1:6c:d9:7c:29:e5:88:e2:3c:82:48:8f:29:
cf:33:57:52:eb:d8:98:a7:02:68:ec:af:13:6a:86:
0f:25:7f:3a:07:02:e8:cf:87:4d:15:70:a2:66:fb:
ef:60:6f:db:69:ef:77:77:61:fa:5e:68:5b:20:55:
e4:f7:63:c1:b8:a7:95:fd:5c:e4:9c:27:46:e0:ac:
df:28:4d:66:d5:51:b0:85:d9:65:32:b3:d6:ee:9b:
71:41:7e:31:6b:10:0f:a2:98:7f:bd:6f:3b:26:28:
cb:02:15:4e:78:40:de:14:26:95:97:7d:5c:ea:e2:
cc:e5:eb:a4:c9:34:55:4a:95:e3:5c:32:a3:fd:3f:
91:55:b8:42:c1:c7:6b:79:2b:15:0f:2d:c6:fd:85:
ee:eb:bb:2f:37:d5:c8:46:ee:95:c7:2f:db:8f:8e:
11:c5:84:98:ee:b1:a6:b3:78:18:19:e1:12:fc:4e:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:59:5C:08:44:83:7D:5A:F8:AD:8D:63:3B:0F:79:0A:9D:1F:02
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/f1RZXAhEg31a-K2NYzsPeQqdHwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.11.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f7:30:53:c0:43:2a:42:51:3e:7c:fe:29:0b:d4:31:e1:13:
35:5c:30:e8:a8:6f:68:f8:7e:e5:3e:a0:81:1e:6a:06:8d:8c:
83:11:d7:d8:8d:ef:04:af:c7:71:61:c6:74:32:69:ea:30:cd:
fe:44:af:2a:09:86:52:ca:e8:fc:91:e7:d9:15:d5:81:68:bd:
25:56:2e:e4:bb:87:27:66:4a:71:da:c4:e9:d9:e3:ae:42:a5:
b8:05:7b:6f:e8:3a:15:86:a9:3a:88:a9:0f:b0:76:55:af:1d:
82:fa:10:09:de:29:e9:c9:f8:5b:ff:36:e2:87:9f:a6:f5:88:
96:63:98:7c:59:ae:d5:4e:e3:c0:63:df:db:cf:dd:5f:c7:af:
83:65:bd:c0:fa:9e:c7:54:58:73:a6:84:28:b6:7a:32:1e:b0:
36:5d:d4:e8:c8:e0:39:02:0f:c4:fb:aa:49:e4:be:69:85:68:
b0:9b:f8:bb:a0:79:5f:6d:e2:d1:9a:9f:71:cb:3a:ee:45:7b:
d7:25:30:52:f5:f5:4d:08:e8:4d:b3:f7:c6:b6:cb:28:2a:4f:
91:ea:0e:62:a2:57:0b:5d:f5:fb:4a:c5:93:d3:49:e9:9c:49:
99:2a:5e:04:97:fc:92:f9:d4:d6:d3:e1:59:3e:35:2b:dc:44:
55:03:cc:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2dYLKUm9Q83kR3TPeHHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjUwMTAyMTE0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjU0NTk1YzA4NDQ4MzdkNWFmOGFkOGQ2MzNiMGY3OTBhOWQxZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C1YJoMqCzVvPoQKBkgxEoDfqkmz
v6+yKC0tGGmMfSpOg0j3g//Xc2yk1dK03AHQmBkb2HS2cf7tMLI/L9EA4ViKZc74
cS33ff/MgsFs2Xwp5YjiPIJIjynPM1dS69iYpwJo7K8TaoYPJX86BwLoz4dNFXCi
ZvvvYG/bae93d2H6XmhbIFXk92PBuKeV/VzknCdG4KzfKE1m1VGwhdllMrPW7ptx
QX4xaxAPoph/vW87JijLAhVOeEDeFCaVl31c6uLM5eukyTRVSpXjXDKj/T+RVbhC
wcdreSsVDy3G/YXu67svN9XIRu6Vxy/bj44RxYSY7rGms3gYGeES/E6yFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9UWVwIRIN9WvitjWM7D3kKnR8CMB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvZjFSWlhBaEVnMzFhLUsyTll6c1BlUXFkSHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudALMA0G
CSqGSIb3DQEBCwUAA4IBAQAA9zBTwEMqQlE+fP4pC9Qx4RM1XDDoqG9o+H7lPqCB
HmoGjYyDEdfYje8Er8dxYcZ0MmnqMM3+RK8qCYZSyuj8kefZFdWBaL0lVi7ku4cn
Zkpx2sTp2eOuQqW4BXtv6DoVhqk6iKkPsHZVrx2C+hAJ3inpyfhb/zbih5+m9YiW
Y5h8Wa7VTuPAY9/bz91fx6+DZb3A+p7HVFhzpoQotnoyHrA2XdToyOA5Ag/E+6pJ
5L5phWiwm/i7oHlfbeLRmp9xyzruRXvXJTBS9fVNCOhNs/fGtssoKk+R6g5iolcL
XfX7SsWT00npnEmZKl4El/yS+dTW0+FZPjUr3ERVA8yk
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:29:01 2025 by rpki-client