Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/G7aptrRzlRJ8DBRVo4J_IAindWA.roa
File: G7aptrRzlRJ8DBRVo4J_IAindWA.roa (raw, json)
Hash identifier: /KruVTSwaUIasJgr9QHP+KNfyw0nqXuPE6AH63Tq7a4=
Subject key identifier: 1B:B6:A9:B6:B4:73:95:12:7C:0C:14:55:A3:82:7F:20:08:A7:75:60
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 01942143D41D1CB3160E7E5C3BE2FFF6DE85
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/G7aptrRzlRJ8DBRVo4J_IAindWA.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51966
IP address blocks: 194.0.23.0/24 maxlen: 24
2001:678:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d4:1d:1c:b3:16:0e:7e:5c:3b:e2:ff:f6:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bb6a9b6b47395127c0c1455a3827f2008a77560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:7f:c2:ff:20:00:44:34:94:54:7d:ed:80:
a8:6c:36:4f:0c:1f:fc:1e:a7:3c:12:fc:1d:aa:5a:
b2:d1:7f:65:2b:72:c3:fb:d2:da:fd:a7:b1:50:5b:
5b:7a:d7:dd:ac:b2:40:b1:dd:6e:ad:93:a2:9d:ac:
a0:6b:26:70:91:50:59:6f:52:f8:0a:c3:40:e5:ea:
7c:a0:1d:09:c6:bc:2b:6c:ca:b2:17:1d:a1:b8:44:
b4:c1:34:ec:c0:ee:c6:87:e1:2c:89:70:a0:e8:38:
ec:2e:bc:bf:6c:35:5e:c7:fc:4a:8b:6f:81:20:97:
79:a6:55:3a:78:8b:47:3c:b6:64:56:ef:f8:70:af:
f7:ff:62:33:d5:00:87:b2:8f:5c:af:18:ba:06:88:
4c:9e:0e:4f:68:e0:7c:a9:83:a3:ad:e5:c5:10:47:
03:46:2d:a7:fe:ee:7b:47:33:4d:82:f3:96:28:18:
b4:c2:12:5b:f8:0d:d4:30:87:3c:26:ab:c1:4a:44:
09:a6:9a:2d:d3:5a:c0:ff:ec:ac:34:b4:66:33:80:
9e:79:37:0c:27:8e:6f:ed:e9:75:6c:28:ee:58:39:
51:61:5c:4f:37:a6:66:a2:eb:cd:fc:13:cb:c2:05:
d3:7b:f9:15:33:3f:10:7a:70:62:5d:ce:bb:3d:54:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:A9:B6:B4:73:95:12:7C:0C:14:55:A3:82:7F:20:08:A7:75:60
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/G7aptrRzlRJ8DBRVo4J_IAindWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.23.0/24
IPv6:
2001:678:1b::/48
Signature Algorithm: sha256WithRSAEncryption
4d:82:d2:1d:00:62:27:1a:fb:5d:fc:ab:24:68:33:11:e8:e4:
ec:8f:d5:12:02:d3:3d:5e:1a:17:f0:7f:96:0e:79:99:f4:25:
c9:c8:86:3e:44:d8:14:64:fb:d5:23:f1:23:85:26:8c:82:7a:
40:20:d9:ac:86:e1:d0:2c:6a:d6:1d:bc:35:97:90:da:fe:89:
47:61:ea:d8:92:ce:ed:ae:b6:ef:c4:bd:54:9f:90:a8:8d:19:
84:6e:1d:c3:4d:fc:1e:fd:d2:9e:b3:c5:be:4f:a9:e0:a9:57:
ac:83:8d:51:92:05:aa:b5:07:68:c0:70:16:7a:c3:7c:b5:41:
5c:cb:a5:94:87:04:25:cd:5e:26:9b:2d:e0:1a:67:cc:82:d4:
7c:5e:9b:8a:de:21:57:c2:7d:d9:ec:3b:85:4d:fd:76:cb:1d:
42:a4:0c:b9:0a:c0:5a:38:a9:3e:04:2c:93:da:44:0f:b6:67:
68:7a:06:5e:a1:d3:0e:0e:87:4d:21:63:a1:a3:27:28:e7:10:
d5:f7:75:0d:05:d6:f1:dc:fe:b1:08:98:23:ab:2a:cb:b2:47:
96:7c:35:0b:0b:c2:4a:49:26:22:cf:c7:48:26:97:59:b7:9c:
cd:5f:33:37:a7:df:48:d1:43:83:71:3c:38:e2:8d:89:fb:cb:
b0:e0:b8:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhQ9QdHLMWDn5cO+L/9t6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzQ4MzhiYjMxN2I4MTg2Njk5ZjBhNDQ4NWRiNmQ5ZGEx
OTA4ZDIwHhcNMjUwMTAxMDk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmI2YTliNmI0NzM5NTEyN2MwYzE0NTVhMzgyN2YyMDA4YTc3NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssh/wv8gAEQ0lFR97YCobDZPDB/8
Hqc8Evwdqlqy0X9lK3LD+9La/aexUFtbetfdrLJAsd1urZOinaygayZwkVBZb1L4
CsNA5ep8oB0JxrwrbMqyFx2huES0wTTswO7Gh+EsiXCg6DjsLry/bDVex/xKi2+B
IJd5plU6eItHPLZkVu/4cK/3/2Iz1QCHso9crxi6BohMng5PaOB8qYOjreXFEEcD
Ri2n/u57RzNNgvOWKBi0whJb+A3UMIc8JqvBSkQJppot01rA/+ysNLRmM4CeeTcM
J45v7el1bCjuWDlRYVxPN6ZmouvN/BPLwgXTe/kVMz8QenBiXc67PVRWJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBu2qba0c5USfAwUVaOCfyAIp3VgMB8GA1UdIwQY
MBaAFBU0g4uzF7gYZpnwpEhdttnaGQjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUt
M2ExNDRjNzBlMGIwLzEvRzdhcHRyUnpsUko4REJSVm80Sl9JQWluZFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUtM2ExNDRjNzBlMGIw
LzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAXMA8E
AgACMAkDBwAgAQZ4ABswDQYJKoZIhvcNAQELBQADggEBAE2C0h0AYica+138qyRo
MxHo5OyP1RIC0z1eGhfwf5YOeZn0JcnIhj5E2BRk+9Uj8SOFJoyCekAg2ayG4dAs
atYdvDWXkNr+iUdh6tiSzu2utu/EvVSfkKiNGYRuHcNN/B790p6zxb5PqeCpV6yD
jVGSBaq1B2jAcBZ6w3y1QVzLpZSHBCXNXiabLeAaZ8yC1Hxem4reIVfCfdnsO4VN
/XbLHUKkDLkKwFo4qT4ELJPaRA+2Z2h6Bl6h0w4Oh00hY6GjJyjnENX3dQ0F1vHc
/rEImCOrKsuyR5Z8NQsLwkpJJiLPx0gml1m3nM1fMzen30jRQ4NxPDjijYn7y7Dg
uPc=
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:27:36 2025 by rpki-client