Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/Ih96IDuDaMSdBEjycgfBHMlpv1k.roa
File: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (raw, json)
Hash identifier: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=
Subject key identifier: 22:1F:7A:20:3B:83:68:C4:9D:04:48:F2:72:07:C1:1C:C9:69:BF:59
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019420682CFACA15BADFE5424D9B4245DBF9
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/Ih96IDuDaMSdBEjycgfBHMlpv1k.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199584
IP address blocks: 185.61.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2c:fa:ca:15:ba:df:e5:42:4d:9b:42:45:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=221f7a203b8368c49d0448f27207c11cc969bf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:4d:50:0c:e0:da:c9:91:85:6f:9f:65:84:
27:cc:8e:9b:8e:07:2d:f7:53:47:17:e4:63:c0:fc:
f7:7d:71:30:38:6f:a5:c4:ed:b2:76:51:38:03:e1:
e1:10:c6:88:ca:41:48:ce:c9:2b:51:a1:1d:6b:60:
15:d3:2c:78:a5:13:9d:2e:19:c8:38:3a:36:0e:f1:
4c:2f:f5:36:62:9a:b3:59:e9:0f:65:fd:e0:74:4e:
b5:30:14:83:44:b6:95:12:d2:8a:0d:11:4d:40:4d:
ee:e2:a4:f2:f3:37:1f:43:bd:97:68:71:eb:d7:83:
d5:24:0d:c9:11:a1:50:3c:24:68:cb:55:96:0f:d4:
8f:4f:e4:0c:5d:c5:ae:ad:0d:ca:60:a5:75:95:fc:
87:84:bc:a7:3e:12:43:2f:47:f0:eb:3b:15:ac:10:
aa:f9:80:57:7b:57:19:e6:5e:0b:92:ab:1c:d4:3d:
a8:37:90:7a:12:d9:d2:db:41:0e:59:46:fd:d0:3f:
da:b2:56:c7:fc:9a:61:fe:26:3a:9e:bb:13:f2:af:
54:56:51:d9:49:ab:a5:fc:47:58:8f:97:e8:cd:91:
04:f5:97:cd:8f:b8:3f:27:25:11:e8:60:35:66:f7:
6d:28:7c:1e:2f:24:e8:1a:af:24:a3:4a:20:e6:83:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:7A:20:3B:83:68:C4:9D:04:48:F2:72:07:C1:1C:C9:69:BF:59
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/Ih96IDuDaMSdBEjycgfBHMlpv1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.7.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c5:10:0c:8f:27:dd:1c:ce:94:d5:64:bc:52:ba:82:9b:fa:
c9:7f:2a:ed:ec:d2:8e:4c:f7:f0:8c:3e:7c:e1:7e:43:b4:0c:
f9:68:fa:8f:71:4e:25:b3:86:0e:1d:09:6b:49:18:b9:e6:d6:
9c:28:b5:09:d5:ae:50:21:08:42:16:ac:ed:df:3e:db:b6:67:
b5:3c:fa:bb:2c:54:c4:f8:35:81:03:05:1b:ab:48:da:25:ce:
31:c2:44:4b:8d:2c:d8:32:6c:14:05:bd:b1:10:0e:b1:53:0a:
dc:83:34:79:cd:6a:6f:47:fd:dc:44:7f:3e:4f:39:ef:1f:91:
3e:79:5d:91:a8:92:4a:04:c7:10:b7:9d:92:d2:ab:8d:65:46:
19:3e:f2:cc:ca:f3:5e:bc:94:9f:2c:13:72:4e:0a:99:f4:c1:
ab:a7:0a:dc:b1:04:09:04:5c:68:c8:d9:4e:1b:8a:93:8d:3f:
4b:76:db:03:f5:9e:8c:12:51:83:15:05:e3:eb:16:fe:c0:6c:
7d:9e:a1:59:8b:ab:ad:60:1d:a9:b8:57:64:10:cb:c3:5b:59:
1a:ef:4f:9a:65:3c:fd:fd:48:9e:f5:b9:17:ad:19:59:e4:ac:
1a:43:bc:d2:a8:7a:24:74:ab:5c:cb:57:7a:42:f1:1c:13:0f:
ca:b6:5a:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaCz6yhW63+VCTZtCRdv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjkwMzI4NGExZDE1ZGMxNThhZDcxODJlYTBiY2U3ODZj
ZWIyYWQwHhcNMjUwMTAxMDU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjFmN2EyMDNiODM2OGM0OWQwNDQ4ZjI3MjA3YzExY2M5NjliZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNlNUAzg2smRhW+fZYQnzI6bjgct
91NHF+RjwPz3fXEwOG+lxO2ydlE4A+HhEMaIykFIzskrUaEda2AV0yx4pROdLhnI
ODo2DvFML/U2YpqzWekPZf3gdE61MBSDRLaVEtKKDRFNQE3u4qTy8zcfQ72XaHHr
14PVJA3JEaFQPCRoy1WWD9SPT+QMXcWurQ3KYKV1lfyHhLynPhJDL0fw6zsVrBCq
+YBXe1cZ5l4Lkqsc1D2oN5B6EtnS20EOWUb90D/aslbH/Jph/iY6nrsT8q9UVlHZ
Saul/EdYj5fozZEE9ZfNj7g/JyUR6GA1ZvdtKHweLyToGq8ko0og5oNOeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIfeiA7g2jEnQRI8nIHwRzJab9ZMB8GA1UdIwQY
MBaAFD65AyhKHRXcFYrXGC6gvOeGzrKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMt
Yjc3ZGM4ZGMxYzdlLzEvSWg5NklEdURhTVNkQkVqeWNnZkJITWxwdjFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMtYjc3ZGM4ZGMxYzdl
LzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT0HMA0G
CSqGSIb3DQEBCwUAA4IBAQCFxRAMjyfdHM6U1WS8UrqCm/rJfyrt7NKOTPfwjD58
4X5DtAz5aPqPcU4ls4YOHQlrSRi55tacKLUJ1a5QIQhCFqzt3z7btme1PPq7LFTE
+DWBAwUbq0jaJc4xwkRLjSzYMmwUBb2xEA6xUwrcgzR5zWpvR/3cRH8+TznvH5E+
eV2RqJJKBMcQt52S0quNZUYZPvLMyvNevJSfLBNyTgqZ9MGrpwrcsQQJBFxoyNlO
G4qTjT9LdtsD9Z6MElGDFQXj6xb+wGx9nqFZi6utYB2puFdkEMvDW1ka70+aZTz9
/Uie9bkXrRlZ5KwaQ7zSqHokdKtcy1d6QvEcEw/KtlqZ
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:11 2025 by rpki-client