Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa
File: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (raw, json)
Hash identifier: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=
Subject key identifier: 14:53:5F:A1:CC:16:5B:40:1F:C2:12:1B:CA:1E:6C:39:62:A9:F9:84
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 019428269CC9F8A40724064F89793ACB0BE9
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa
Signing time: Thu 02 Jan 2025 17:53:26 +0000
ROA not before: Thu 02 Jan 2025 17:53:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61213
IP address blocks: 94.140.17.0/24 maxlen: 24
185.206.4.0/22 maxlen: 23
2a02:d60::/32 maxlen: 32
2a02:d60::/48 maxlen: 48
2a02:d60:1::/48 maxlen: 48
2a02:d60:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:9c:c9:f8:a4:07:24:06:4f:89:79:3a:cb:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Jan 2 17:53:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14535fa1cc165b401fc2121bca1e6c3962a9f984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:ee:50:ed:74:1f:56:64:dd:b0:c2:34:e8:
28:3c:be:5a:9a:45:36:a1:10:b1:8d:a6:55:49:b8:
a4:70:6e:1a:30:3c:89:f8:98:c8:76:69:dc:41:1b:
e3:be:81:8c:1d:7c:9f:b6:d9:ba:0c:60:fe:b4:f0:
29:9a:c8:cb:3b:6d:92:2c:e2:d2:e8:29:f6:3a:11:
0c:a7:a9:b1:09:28:77:70:ff:f9:d7:d7:30:3f:7d:
41:d9:8c:d5:02:1a:bb:e3:10:90:d4:29:54:e5:81:
99:82:ad:9e:29:88:6e:b4:ae:c3:02:0a:c7:18:9a:
1a:70:e4:77:9d:37:9d:32:b3:ba:22:0f:6b:67:12:
1c:d1:12:93:39:02:0a:26:32:3b:80:94:35:f0:4f:
b2:0b:bb:3d:1f:8d:68:51:ce:13:49:b9:45:22:96:
11:2f:65:90:7b:5d:0f:71:91:51:ae:af:90:c5:0a:
ef:91:67:de:a0:f5:a9:2c:f3:25:81:13:ef:94:cb:
5e:5f:df:0a:84:9f:b6:6a:d4:ba:48:24:02:ef:6a:
0b:a7:e8:64:c6:22:db:00:a4:6b:74:ce:69:9f:d6:
5b:9f:95:b8:7c:d0:4b:c5:51:19:45:4b:4d:3e:72:
9d:e7:4f:f3:4d:6d:e4:95:e3:ed:4e:1d:8d:32:c7:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:5F:A1:CC:16:5B:40:1F:C2:12:1B:CA:1E:6C:39:62:A9:F9:84
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.17.0/24
185.206.4.0/22
IPv6:
2a02:d60::/32
Signature Algorithm: sha256WithRSAEncryption
86:5d:a7:e4:9e:fb:7d:4a:5c:2d:71:ae:64:40:94:a5:c4:5d:
cb:a8:fb:c2:bf:21:aa:40:f9:07:dd:5e:4a:c1:0f:bb:dc:7a:
f7:ae:86:89:9e:9c:5d:3f:45:c5:99:af:ba:02:35:cd:a6:7f:
be:53:3e:6d:f9:07:b3:79:d3:c1:a9:1f:7e:e0:bc:30:8f:ab:
e1:3e:26:77:b3:7e:54:88:9a:8b:46:bc:88:d2:d6:0a:c8:cc:
b3:0b:64:b0:fc:6c:22:d9:04:86:4d:99:0c:d5:16:26:db:1b:
cf:2e:0b:52:e7:18:8c:51:99:4c:b7:28:31:43:3d:34:25:93:
f2:1d:fd:8b:95:82:9a:13:b0:ea:b8:c3:bf:b4:0a:a7:dd:bb:
78:3d:09:21:75:09:3a:c7:4c:ae:82:ae:f6:b2:81:48:42:83:
62:38:13:ac:5c:a9:74:e2:fe:7d:cc:ce:d6:1b:d6:7b:fc:71:
48:91:81:5b:af:ea:76:87:4e:31:c7:9d:d4:f3:d6:80:33:e9:
85:58:a2:64:78:15:af:86:5d:eb:e0:e5:40:d6:c6:78:37:0b:
61:7e:31:10:b3:3c:11:17:60:dc:d8:c8:c4:99:5e:51:01:88:
74:3c:9c:36:21:6d:8a:aa:33:a9:a8:5a:79:18:af:f4:be:0a:
8e:8c:52:6e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQoJpzJ+KQHJAZPiXk6ywvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh
NzBiOWQwHhcNMjUwMTAyMTc1MzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUzNWZhMWNjMTY1YjQwMWZjMjEyMWJjYTFlNmMzOTYyYTlmOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IruUO10H1Zk3bDCNOgoPL5amkU2
oRCxjaZVSbikcG4aMDyJ+JjIdmncQRvjvoGMHXyfttm6DGD+tPApmsjLO22SLOLS
6Cn2OhEMp6mxCSh3cP/519cwP31B2YzVAhq74xCQ1ClU5YGZgq2eKYhutK7DAgrH
GJoacOR3nTedMrO6Ig9rZxIc0RKTOQIKJjI7gJQ18E+yC7s9H41oUc4TSblFIpYR
L2WQe10PcZFRrq+QxQrvkWfeoPWpLPMlgRPvlMteX98KhJ+2atS6SCQC72oLp+hk
xiLbAKRrdM5pn9Zbn5W4fNBLxVEZRUtNPnKd50/zTW3klePtTh2NMse/RQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBRTX6HMFltAH8ISG8oebDliqfmEMB8GA1UdIwQY
MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt
ZGVkYWY3OTM1NmNlLzEvRkZOZm9jd1dXMEFmd2hJYnloNXNPV0twLVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl
LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXowRAwQC
uc4EMA0EAgACMAcDBQAqAg1gMA0GCSqGSIb3DQEBCwUAA4IBAQCGXafknvt9Slwt
ca5kQJSlxF3LqPvCvyGqQPkH3V5KwQ+73Hr3roaJnpxdP0XFma+6AjXNpn++Uz5t
+QezedPBqR9+4Lwwj6vhPiZ3s35UiJqLRryI0tYKyMyzC2Sw/Gwi2QSGTZkM1RYm
2xvPLgtS5xiMUZlMtygxQz00JZPyHf2LlYKaE7DquMO/tAqn3bt4PQkhdQk6x0yu
gq72soFIQoNiOBOsXKl04v59zM7WG9Z7/HFIkYFbr+p2h04xx53U89aAM+mFWKJk
eBWvhl3r4OVA1sZ4NwthfjEQszwRF2Dc2MjEmV5RAYh0PJw2IW2KqjOpqFp5GK/0
vgqOjFJu
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:34 2025 by rpki-client