Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/fXhFaFztkzf8mcxQPPTlD9u5NmU.roa
File: fXhFaFztkzf8mcxQPPTlD9u5NmU.roa (raw, json)
Hash identifier: Du7/cQXYNuu6hth1i86UURyikxJqN8vWHAYYQA/vYHc=
Subject key identifier: 7D:78:45:68:5C:ED:93:37:FC:99:CC:50:3C:F4:E5:0F:DB:B9:36:65
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01942746613F6773A7835D9385D715C80C02
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/fXhFaFztkzf8mcxQPPTlD9u5NmU.roa
Signing time: Thu 02 Jan 2025 13:48:31 +0000
ROA not before: Thu 02 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30860
IP address blocks: 185.255.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:61:3f:67:73:a7:83:5d:93:85:d7:15:c8:0c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7845685ced9337fc99cc503cf4e50fdbb93665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:16:1b:f0:c4:00:81:a9:9e:36:2f:be:bc:
05:41:eb:16:26:b6:a4:c8:3b:4f:c4:48:61:8a:70:
d1:a0:56:72:7b:c1:c8:7b:b4:e2:a5:4b:cb:01:d6:
a0:d7:f5:aa:82:9c:db:10:ad:51:43:c8:70:6d:67:
78:11:f2:25:6e:eb:bd:35:fd:f6:99:82:d1:3d:46:
6c:25:f2:2d:f6:04:56:02:ba:a6:ae:c6:20:b9:42:
98:35:2e:90:64:f4:51:af:df:20:6a:69:88:68:93:
01:56:b7:e8:42:4d:46:5e:23:b7:02:39:23:73:43:
6a:6c:d0:05:ee:4d:23:9a:fd:cd:37:7d:49:ff:79:
b3:1e:50:37:21:9c:68:f3:24:51:06:24:4b:8d:4f:
df:5f:7a:e7:4e:f2:8f:31:c9:42:67:8f:63:f9:36:
d0:bd:5a:5a:05:50:34:99:ca:73:5d:a7:b8:ae:64:
02:c8:5b:ee:5a:94:e3:a7:57:ef:57:0b:72:2e:06:
a2:e3:aa:f3:95:f2:06:ee:e9:c7:c4:93:e6:36:e3:
f4:1a:ce:37:76:d3:68:9c:8f:05:bc:28:19:fe:b8:
46:73:b4:27:e5:d8:a1:1e:4a:dd:fd:15:87:20:f0:
52:ac:f1:23:3e:97:26:09:04:4c:45:b4:1a:7c:ef:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:45:68:5C:ED:93:37:FC:99:CC:50:3C:F4:E5:0F:DB:B9:36:65
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/fXhFaFztkzf8mcxQPPTlD9u5NmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b1:d8:ee:d7:9d:2e:df:dc:24:8d:ba:21:c3:fc:d8:07:cb:
cc:0e:22:2b:23:74:a5:32:de:44:82:83:1d:2d:c3:13:51:55:
0b:0c:91:43:ce:21:9e:1f:32:92:d9:a6:14:69:75:24:04:d3:
fa:0b:63:d7:44:f3:50:1d:37:98:36:34:a4:5a:d1:3e:1b:3b:
11:7a:15:f1:b2:75:0a:30:db:3f:18:74:79:8d:f6:65:dc:f2:
b5:7f:22:00:16:eb:e2:98:f9:e1:90:54:3c:16:01:47:f1:55:
d8:c7:0e:86:44:39:71:9d:ce:0d:b1:d0:5f:b4:41:c5:14:b4:
2e:ec:d4:f2:08:2a:25:a4:6c:46:30:d5:28:73:cc:47:da:5d:
a2:51:e6:30:49:e1:fa:37:1f:aa:a8:2b:7b:03:6d:d1:11:cf:
4e:b5:d9:4c:d5:65:cb:70:ad:00:94:b9:08:25:a8:6e:aa:2f:
99:b6:cb:bc:0c:33:df:3a:93:8e:6b:cb:58:25:aa:69:69:3a:
4c:10:ea:62:69:b4:fb:c3:71:64:f8:46:ed:ec:06:ae:dd:35:
0d:e2:7d:31:6b:d4:59:f7:07:3c:7f:23:68:24:9e:42:5c:66:
29:cd:9b:2e:a3:e0:50:e8:da:9a:e3:a8:81:8b:d8:49:ba:46:
62:d4:e1:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRmE/Z3Ong12ThdcVyAwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjUwMTAyMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDc4NDU2ODVjZWQ5MzM3ZmM5OWNjNTAzY2Y0ZTUwZmRiYjkzNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRgWG/DEAIGpnjYvvrwFQesWJrak
yDtPxEhhinDRoFZye8HIe7TipUvLAdag1/WqgpzbEK1RQ8hwbWd4EfIlbuu9Nf32
mYLRPUZsJfIt9gRWArqmrsYguUKYNS6QZPRRr98gammIaJMBVrfoQk1GXiO3Ajkj
c0NqbNAF7k0jmv3NN31J/3mzHlA3IZxo8yRRBiRLjU/fX3rnTvKPMclCZ49j+TbQ
vVpaBVA0mcpzXae4rmQCyFvuWpTjp1fvVwtyLgai46rzlfIG7unHxJPmNuP0Gs43
dtNonI8FvCgZ/rhGc7Qn5dihHkrd/RWHIPBSrPEjPpcmCQRMRbQafO+0aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH14RWhc7ZM3/JnMUDz05Q/buTZlMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvZlhoRmFGenRremY4bWN4UVBQVGxEOXU1Tm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf96MA0G
CSqGSIb3DQEBCwUAA4IBAQBLsdju150u39wkjbohw/zYB8vMDiIrI3SlMt5EgoMd
LcMTUVULDJFDziGeHzKS2aYUaXUkBNP6C2PXRPNQHTeYNjSkWtE+GzsRehXxsnUK
MNs/GHR5jfZl3PK1fyIAFuvimPnhkFQ8FgFH8VXYxw6GRDlxnc4NsdBftEHFFLQu
7NTyCColpGxGMNUoc8xH2l2iUeYwSeH6Nx+qqCt7A23REc9OtdlM1WXLcK0AlLkI
Jahuqi+Ztsu8DDPfOpOOa8tYJappaTpMEOpiabT7w3Fk+Ebt7Aau3TUN4n0xa9RZ
9wc8fyNoJJ5CXGYpzZsuo+BQ6Nqa46iBi9hJukZi1OEA
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:58 2025 by rpki-client