Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7tBWPUtaPE01Cn5Jx6W7KcfPuvQ.roa
File: 7tBWPUtaPE01Cn5Jx6W7KcfPuvQ.roa (raw, json)
Hash identifier: Rtz5W7BT4Q+o3U1+wK24Ys1u2ozt2HYOOuHovcrk03E=
Subject key identifier: EE:D0:56:3D:4B:5A:3C:4D:35:0A:7E:49:C7:A5:BB:29:C7:CF:BA:F4
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F954B6054BDC5B4EFC310F5581927
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7tBWPUtaPE01Cn5Jx6W7KcfPuvQ.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50464
IP address blocks: 93.92.113.92/32 maxlen: 32
93.92.113.96/32 maxlen: 32
93.92.113.199/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:95:4b:60:54:bd:c5:b4:ef:c3:10:f5:58:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed0563d4b5a3c4d350a7e49c7a5bb29c7cfbaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:5e:63:3a:c2:e8:13:c9:c7:1f:b8:43:b9:
8d:d3:1d:80:57:3d:0a:4a:08:a7:ff:51:11:a4:43:
f2:11:2c:88:7d:4c:be:4b:a3:b6:2d:65:7f:ef:8b:
52:7a:9d:09:c2:e9:9f:4c:3a:8a:c1:03:69:44:6d:
7d:52:66:67:b4:88:23:e7:90:1f:96:cb:fb:6d:75:
28:c7:eb:0e:09:0c:a7:58:d2:a7:2d:83:08:8f:4b:
26:80:88:dc:b6:e9:b4:4e:db:4e:35:58:2c:6a:af:
37:b7:db:31:04:5c:74:2a:db:69:5b:a5:28:fa:07:
97:95:53:8c:73:50:d4:46:ac:e5:2b:d6:93:56:d0:
77:00:a4:cd:5d:d6:30:c7:c2:84:3e:b9:fc:26:65:
11:e3:0c:c7:ef:da:fb:3f:da:ee:b9:0e:15:a6:02:
7c:9b:ab:7d:c5:54:c8:f3:46:1d:ba:63:c2:f8:4f:
f9:d2:58:f0:8c:55:d6:93:aa:1e:b5:a8:ac:ef:a0:
0b:1c:63:1c:f4:ca:46:15:0e:ff:71:f7:cd:c9:eb:
74:90:77:90:e2:db:58:25:fb:df:30:ba:56:d7:f6:
4c:79:a9:ef:a9:05:eb:28:c6:a4:51:0a:9c:b0:1a:
3b:27:aa:da:9d:a9:f0:ad:ad:bf:92:b1:00:a7:63:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:56:3D:4B:5A:3C:4D:35:0A:7E:49:C7:A5:BB:29:C7:CF:BA:F4
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7tBWPUtaPE01Cn5Jx6W7KcfPuvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.113.92/32
93.92.113.96/32
93.92.113.199/32
Signature Algorithm: sha256WithRSAEncryption
0b:18:36:d4:fe:7d:59:98:47:27:c0:f0:1b:56:f3:a4:32:22:
a6:4e:8c:88:95:73:cc:b6:87:33:05:16:24:45:de:91:cb:7e:
9c:0d:4a:51:92:8d:d1:66:d4:70:41:28:b9:94:f2:62:93:a4:
39:c9:c7:ae:be:63:57:6e:3c:ba:a9:b9:1b:33:ec:79:49:ad:
35:fb:ba:2f:47:7e:47:ce:e7:6d:93:58:22:a1:76:e2:5a:fd:
fa:c2:e6:49:33:82:89:15:a2:a4:a9:46:74:52:7b:eb:a4:95:
cc:12:c3:e0:8f:79:23:25:2f:a8:c4:3a:f0:e5:21:27:9a:d1:
35:81:2b:05:ff:34:64:30:ad:21:15:e6:c6:a9:7d:57:3d:be:
2f:81:eb:9e:0a:0c:48:d0:84:17:a9:c0:80:57:df:4e:ea:18:
28:74:99:10:7f:37:ce:40:9e:38:05:1f:09:ce:13:63:c5:93:
17:1b:69:0a:d6:20:89:8b:19:92:bd:b7:5b:73:8f:aa:ce:1b:
59:ff:6c:d4:82:d3:44:cd:35:44:47:fa:3c:67:56:76:92:84:
dd:5d:8f:94:ed:e2:5d:31:f5:ea:04:00:c2:83:20:ca:94:45:
db:7b:70:b4:73:02:0c:4d:6f:b8:fe:4b:52:d1:8a:6a:fd:64:
ed:80:4e:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj5VLYFS9xbTvwxD1WBknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQwNTYzZDRiNWEzYzRkMzUwYTdlNDljN2E1YmIyOWM3Y2ZiYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY5eYzrC6BPJxx+4Q7mN0x2AVz0K
Sgin/1ERpEPyESyIfUy+S6O2LWV/74tSep0JwumfTDqKwQNpRG19UmZntIgj55Af
lsv7bXUox+sOCQynWNKnLYMIj0smgIjctum0TttONVgsaq83t9sxBFx0KttpW6Uo
+geXlVOMc1DURqzlK9aTVtB3AKTNXdYwx8KEPrn8JmUR4wzH79r7P9ruuQ4VpgJ8
m6t9xVTI80YdumPC+E/50ljwjFXWk6oetais76ALHGMc9MpGFQ7/cffNyet0kHeQ
4ttYJfvfMLpW1/ZMeanvqQXrKMakUQqcsBo7J6rananwra2/krEAp2MwFwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO7QVj1LWjxNNQp+SceluynHz7r0MB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvN3RCV1BVdGFQRTAxQ241Sng2VzdLY2ZQdXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAATAVAwUAXVxxXAMF
AF1ccWADBQBdXHHHMA0GCSqGSIb3DQEBCwUAA4IBAQALGDbU/n1ZmEcnwPAbVvOk
MiKmToyIlXPMtoczBRYkRd6Ry36cDUpRko3RZtRwQSi5lPJik6Q5yceuvmNXbjy6
qbkbM+x5Sa01+7ovR35Hzudtk1gioXbiWv36wuZJM4KJFaKkqUZ0UnvrpJXMEsPg
j3kjJS+oxDrw5SEnmtE1gSsF/zRkMK0hFebGqX1XPb4vgeueCgxI0IQXqcCAV99O
6hgodJkQfzfOQJ44BR8JzhNjxZMXG2kK1iCJixmSvbdbc4+qzhtZ/2zUgtNEzTVE
R/o8Z1Z2koTdXY+U7eJdMfXqBADCgyDKlEXbe3C0cwIMTW+4/ktS0Ypq/WTtgE5F
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:45 2025 by rpki-client