Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/tseR8GP4Fbf261yqYCNjj9fDV1M.roa
File: tseR8GP4Fbf261yqYCNjj9fDV1M.roa (raw, json)
Hash identifier: fi4QggPDU2QjSa/CfYSOVM8ZVKWF4rBk1jBf4sgMqBk=
Subject key identifier: B6:C7:91:F0:63:F8:15:B7:F6:EB:5C:AA:60:23:63:8F:D7:C3:57:53
Certificate issuer: /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Certificate serial: 01941FFA32508B62C6FF972F6024EA09955D
Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/tseR8GP4Fbf261yqYCNjj9fDV1M.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.2.0/24 maxlen: 24
2001:7f8:81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:50:8b:62:c6:ff:97:2f:60:24:ea:09:95:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c791f063f815b7f6eb5caa6023638fd7c35753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:6a:29:08:e0:6d:ed:80:55:7a:f0:b7:50:
3b:85:4c:c4:99:bc:c7:9f:aa:93:fe:61:14:60:ba:
b8:51:e9:b1:2d:e1:1a:0a:1a:d5:72:13:6f:34:66:
c8:a4:32:46:23:37:37:d2:97:4c:3a:68:c8:61:71:
01:d9:27:f8:ec:8f:d6:6f:18:90:86:96:ad:eb:f1:
9e:2c:ad:d7:96:d8:98:04:f5:74:26:c2:d9:54:93:
87:4b:4a:1d:19:ea:20:9c:33:21:18:4e:5a:f8:df:
7c:78:3f:ac:15:71:56:b0:db:7f:ee:3c:4c:59:7a:
7f:82:27:51:8c:86:92:d6:16:46:9d:0b:d4:e8:f9:
df:4d:f4:57:e4:0d:04:60:85:48:66:e8:3d:9e:35:
2e:66:a6:a8:b2:1c:c8:06:c9:7f:91:c7:ea:1c:0e:
6e:97:da:d2:97:4c:21:8d:0b:76:16:0b:45:d4:6a:
93:13:2e:7b:25:55:c4:98:6b:01:a3:4e:66:3c:e1:
5f:e8:5e:3c:5a:fd:0d:44:8e:0a:0d:10:06:57:b9:
53:e0:04:34:e3:bc:4a:0b:3b:0a:90:af:be:9c:05:
c4:9e:f1:55:25:90:b3:8e:d4:ec:ad:26:5e:20:31:
3b:52:27:88:c6:5d:45:5c:ff:f1:ef:7f:7f:3c:1b:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:91:F0:63:F8:15:B7:F6:EB:5C:AA:60:23:63:8F:D7:C3:57:53
X509v3 Authority Key Identifier:
keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/tseR8GP4Fbf261yqYCNjj9fDV1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.2.0/24
IPv6:
2001:7f8:81::/48
Signature Algorithm: sha256WithRSAEncryption
b6:cb:2e:5b:11:c1:73:2e:33:58:b8:70:e1:55:91:1b:9b:3d:
05:cf:40:ee:3b:9a:61:90:43:a5:54:7d:49:b9:70:54:0c:4e:
59:c2:5d:b3:1d:16:c9:c7:c3:18:45:a0:03:ab:bd:f0:bd:ea:
cc:6f:1b:a4:98:34:75:36:be:a3:3c:ed:df:01:18:b5:f6:9a:
af:3f:09:1b:c3:9e:3a:ae:0b:8c:f7:0f:ce:4b:d2:d9:91:c5:
db:0d:77:d6:18:63:2f:a0:d6:de:af:ef:23:be:52:6e:e2:99:
cb:a7:6d:27:41:b8:3a:d0:5f:b2:f5:49:0b:02:96:b7:8a:67:
44:62:93:2d:91:9b:6d:a8:1a:1a:fe:10:9e:c8:e7:47:f1:5a:
77:db:6d:c8:7d:97:4f:b7:b3:5b:2e:7c:68:d9:c4:c6:2a:06:
22:13:14:88:f4:b6:2f:8c:42:5a:cd:e4:e4:f0:15:ae:10:a9:
8a:5f:e0:2f:f6:14:18:5f:37:f4:3a:e9:50:7a:13:31:7d:2d:
34:12:82:13:e8:74:da:51:3c:82:70:72:00:62:46:18:90:0f:
19:a7:89:46:8a:c3:83:12:72:50:ad:bd:5e:3d:40:75:5d:03:
7f:a6:10:91:75:f0:0b:e8:4a:2d:4d:bc:15:ed:97:08:d3:fd:
47:2a:4c:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+jJQi2LG/5cvYCTqCZVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGRjNWU3ODI1OGU0MjY3MzliZDg4YzJkNGMyMDBhYWRm
M2JmMTMwHhcNMjUwMTAxMDM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmM3OTFmMDYzZjgxNWI3ZjZlYjVjYWE2MDIzNjM4ZmQ3YzM1NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rVqKQjgbe2AVXrwt1A7hUzEmbzH
n6qT/mEUYLq4UemxLeEaChrVchNvNGbIpDJGIzc30pdMOmjIYXEB2Sf47I/WbxiQ
hpat6/GeLK3XltiYBPV0JsLZVJOHS0odGeognDMhGE5a+N98eD+sFXFWsNt/7jxM
WXp/gidRjIaS1hZGnQvU6PnfTfRX5A0EYIVIZug9njUuZqaoshzIBsl/kcfqHA5u
l9rSl0whjQt2FgtF1GqTEy57JVXEmGsBo05mPOFf6F48Wv0NRI4KDRAGV7lT4AQ0
47xKCzsKkK++nAXEnvFVJZCzjtTsrSZeIDE7UieIxl1FXP/x739/PBsuswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLbHkfBj+BW39utcqmAjY4/Xw1dTMB8GA1UdIwQY
MBaAFOmNxeeCWOQmc5vYjC1MIAqt878TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZDdmNmUtYzZkZi00MWQ3LThmZmQt
NTA4OWI2MDJiZmMyLzEvdHNlUjhHUDRGYmYyNjF5cVlDTmpqOWZEVjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZDdmNmUtYzZkZi00MWQ3LThmZmQtNTA4OWI2MDJiZmMy
LzEvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQECMA8E
AgACMAkDBwAgAQf4AIEwDQYJKoZIhvcNAQELBQADggEBALbLLlsRwXMuM1i4cOFV
kRubPQXPQO47mmGQQ6VUfUm5cFQMTlnCXbMdFsnHwxhFoAOrvfC96sxvG6SYNHU2
vqM87d8BGLX2mq8/CRvDnjquC4z3D85L0tmRxdsNd9YYYy+g1t6v7yO+Um7imcun
bSdBuDrQX7L1SQsClreKZ0Riky2Rm22oGhr+EJ7I50fxWnfbbch9l0+3s1sufGjZ
xMYqBiITFIj0ti+MQlrN5OTwFa4QqYpf4C/2FBhfN/Q66VB6EzF9LTQSghPodNpR
PIJwcgBiRhiQDxmniUaKw4MSclCtvV49QHVdA3+mEJF18AvoSi1NvBXtlwjT/Ucq
TFY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:50 2025 by rpki-client