Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/FamIa9uVUsnSTLirzZic8UQVhs8.roa
File: FamIa9uVUsnSTLirzZic8UQVhs8.roa (raw, json)
Hash identifier: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=
Subject key identifier: 15:A9:88:6B:DB:95:52:C9:D2:4C:B8:AB:CD:98:9C:F1:44:15:86:CF
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019425FDEB251228547D9965ED12187D63D0
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/FamIa9uVUsnSTLirzZic8UQVhs8.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
212.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:25:12:28:54:7d:99:65:ed:12:18:7d:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15a9886bdb9552c9d24cb8abcd989cf1441586cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:9f:97:15:49:b8:76:7d:c1:91:36:26:57:
64:b4:3a:42:58:7b:88:ed:8a:22:32:56:21:f9:db:
2a:6f:2b:3e:fb:ab:eb:2e:d1:4e:56:b3:56:53:1b:
9c:5b:53:5e:e2:df:ba:4e:c3:eb:02:0b:d8:eb:0c:
b9:93:25:a6:c8:3e:ba:98:9b:72:da:28:33:cb:fd:
a3:63:01:5b:30:cb:1d:40:0c:d5:2d:b5:92:6c:6f:
06:e5:d4:2b:6e:1e:81:09:4e:57:cb:97:92:26:79:
3c:6c:fb:7b:24:a2:4f:2d:5a:ee:38:bc:9c:4b:83:
b0:b3:3f:38:f1:73:16:a1:de:bc:be:e9:77:3d:be:
fd:1c:80:ac:a1:fc:de:aa:5c:c6:21:3d:c9:60:7e:
a8:68:36:ec:6a:b8:7a:ad:43:32:16:cf:df:35:13:
71:8e:84:ba:b6:9d:48:8c:14:47:b9:4c:93:f5:11:
64:b9:4c:14:e6:25:6f:7e:ba:aa:4a:03:c9:46:47:
24:ad:62:be:ae:40:b3:1b:19:8d:0a:cd:83:15:31:
10:8b:a4:d1:d1:5b:a1:3a:12:a0:c4:f5:77:bf:24:
d2:f3:b7:71:7b:09:7c:37:fb:b2:d6:04:df:b9:98:
18:05:cf:05:49:a8:6d:e1:fe:64:6f:e4:e8:ab:3b:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:88:6B:DB:95:52:C9:D2:4C:B8:AB:CD:98:9C:F1:44:15:86:CF
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/FamIa9uVUsnSTLirzZic8UQVhs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.148.0/23
212.39.229.0/24
Signature Algorithm: sha256WithRSAEncryption
23:47:93:51:d9:ec:c1:3c:15:ca:80:73:9d:f4:11:ad:53:0a:
87:db:4c:be:de:ee:b0:4c:31:28:d6:6a:86:31:0f:b3:af:c8:
0b:18:40:cd:c1:d6:8d:e9:48:a8:7d:8b:66:72:10:b4:c2:ab:
99:7a:ea:00:a2:33:1a:51:d0:be:3c:35:06:bc:da:e5:71:f5:
95:ea:2b:cf:11:de:34:2d:51:c9:c9:c7:cb:31:92:c2:6e:80:
4d:13:3f:de:11:e4:3f:2d:f7:29:43:9f:85:46:b0:75:0c:a7:
c9:dc:30:b7:b4:2a:c4:7c:e0:ee:0b:5f:65:e8:be:ca:6b:60:
a1:c3:84:54:56:f0:8e:db:71:92:ce:e6:a5:3c:3f:30:60:46:
b0:c6:fb:32:38:c6:81:9e:1e:8e:17:3c:a0:0e:bc:67:55:dc:
e1:67:76:be:3c:26:36:f0:f5:0e:d6:29:32:5a:07:95:e7:5e:
c0:7d:19:4f:3c:22:91:ce:60:fc:6f:54:3c:3d:68:75:9e:d3:
d0:a3:a0:d2:63:6f:cb:32:30:6d:d4:b9:91:4a:4f:57:88:dc:
dd:da:29:46:9b:c8:4a:2b:fc:48:3b:58:9d:81:82:f8:78:60:
1f:51:e6:f0:a8:85:ad:27:92:bf:1d:59:ea:29:c5:a6:f6:99:
7b:5e:d0:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/eslEihUfZll7RIYfWPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjUwMTAyMDc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWE5ODg2YmRiOTU1MmM5ZDI0Y2I4YWJjZDk4OWNmMTQ0MTU4NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EuflxVJuHZ9wZE2JldktDpCWHuI
7YoiMlYh+dsqbys++6vrLtFOVrNWUxucW1Ne4t+6TsPrAgvY6wy5kyWmyD66mJty
2igzy/2jYwFbMMsdQAzVLbWSbG8G5dQrbh6BCU5Xy5eSJnk8bPt7JKJPLVruOLyc
S4Owsz848XMWod68vul3Pb79HICsofzeqlzGIT3JYH6oaDbsarh6rUMyFs/fNRNx
joS6tp1IjBRHuUyT9RFkuUwU5iVvfrqqSgPJRkckrWK+rkCzGxmNCs2DFTEQi6TR
0VuhOhKgxPV3vyTS87dxewl8N/uy1gTfuZgYBc8FSaht4f5kb+ToqztjJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBWpiGvblVLJ0ky4q82YnPFEFYbPMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvRmFtSWE5dVZVc25TVExpcnpaaWM4VVFWaHM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw6CUAwQA
1CflMA0GCSqGSIb3DQEBCwUAA4IBAQAjR5NR2ezBPBXKgHOd9BGtUwqH20y+3u6w
TDEo1mqGMQ+zr8gLGEDNwdaN6UiofYtmchC0wquZeuoAojMaUdC+PDUGvNrlcfWV
6ivPEd40LVHJycfLMZLCboBNEz/eEeQ/LfcpQ5+FRrB1DKfJ3DC3tCrEfODuC19l
6L7Ka2Chw4RUVvCO23GSzualPD8wYEawxvsyOMaBnh6OFzygDrxnVdzhZ3a+PCY2
8PUO1ikyWgeV517AfRlPPCKRzmD8b1Q8PWh1ntPQo6DSY2/LMjBt1LmRSk9XiNzd
2ilGm8hKK/xIO1idgYL4eGAfUebwqIWtJ5K/HVnqKcWm9pl7XtC/
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:11 2025 by rpki-client