Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa
File: j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa (raw, json)
Hash identifier: k9js+BE4RFtwEtbQ/V0azAY+xGWrWmclJFMU8tYRWW8=
Subject key identifier: 8F:B4:ED:9F:60:56:15:A0:E1:69:BE:D9:0E:77:98:07:C2:33:93:AC
Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial: 01941F8C467898E2A488159F811F70F6F72D
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56000
IP address blocks: 176.126.128.0/24 maxlen: 24
176.126.129.0/24 maxlen: 24
176.126.131.0/24 maxlen: 24
176.126.132.0/24 maxlen: 24
176.126.134.0/24 maxlen: 24
176.126.135.0/24 maxlen: 24
192.162.152.0/24 maxlen: 24
192.162.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:46:78:98:e2:a4:88:15:9f:81:1f:70:f6:f7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fb4ed9f605615a0e169bed90e779807c23393ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:4b:80:86:38:36:82:34:ff:f6:1e:64:fd:
eb:e7:07:1b:5a:c8:e1:ff:1d:9b:76:96:e3:25:6c:
2d:a7:e7:b6:77:c9:69:f5:c5:68:43:10:34:59:86:
87:42:0f:92:1a:cb:5c:73:e5:c8:8d:9b:de:cf:61:
d0:23:ac:85:1b:d6:67:61:fa:de:52:3c:18:14:dd:
66:67:3a:b5:6d:28:41:be:72:63:0d:d6:16:1b:0f:
8d:d2:d2:11:12:2f:38:a1:3f:1d:c9:cb:1a:32:64:
e7:ca:2d:83:7f:5e:4e:3e:7b:2a:14:56:ab:a8:5e:
6c:70:49:51:fc:1b:d4:2a:c8:9c:81:f5:9a:6c:34:
d5:eb:94:f4:81:7e:7f:86:0e:ab:96:55:04:39:6d:
0d:e8:60:ef:c5:bc:9e:16:bc:10:a2:29:84:a5:82:
84:85:b3:d8:6e:ba:f2:3b:1e:85:47:74:e8:e0:9c:
65:05:52:94:9d:84:e3:e8:68:37:f3:e5:19:d3:9f:
7a:e1:6d:73:38:97:ce:56:ba:6c:07:6b:c5:bf:ca:
c9:bc:4f:91:c1:5d:8c:2e:d4:a1:ea:60:59:8a:79:
3a:45:74:53:04:50:93:80:6b:c3:c9:aa:ba:08:d4:
75:1f:ef:e4:97:69:70:ae:fc:17:38:30:a8:ad:76:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:ED:9F:60:56:15:A0:E1:69:BE:D9:0E:77:98:07:C2:33:93:AC
X509v3 Authority Key Identifier:
keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.128.0/23
176.126.131.0-176.126.132.255
176.126.134.0/23
192.162.152.0/23
Signature Algorithm: sha256WithRSAEncryption
13:96:af:c0:1b:32:7d:0a:12:89:eb:dd:10:e2:28:5d:56:95:
c2:c4:65:bc:55:f0:4f:07:ba:b3:17:e7:12:40:63:06:36:a4:
83:10:c3:43:e6:ff:71:2d:15:e8:ce:20:de:1f:74:df:5e:30:
76:59:05:35:bb:5d:e4:d5:d1:a2:3b:6c:d9:17:5a:d9:80:63:
a6:07:58:d5:10:cb:d0:f5:dc:b8:4c:95:1c:12:a5:83:60:9b:
49:bf:27:69:47:3d:7f:3d:56:a8:94:b4:1f:42:74:2e:6d:dc:
5b:f1:7f:6c:ee:30:b3:95:db:52:7a:8b:57:a0:99:73:75:35:
63:ec:48:e4:ca:30:49:9b:ab:b3:ea:6c:f3:b1:e6:99:8f:33:
9d:9d:9f:b0:0f:9b:39:69:52:54:db:9b:d5:f5:22:11:99:8b:
0b:fa:cf:5d:74:ae:88:84:b3:03:fb:5e:74:6b:ca:d8:47:eb:
71:82:29:7c:76:48:8c:fa:dd:89:1a:de:4b:4e:cb:67:5b:8a:
52:56:72:d2:10:8e:29:c4:2e:3d:26:bd:af:28:a7:9a:b5:bf:
cf:53:f2:5c:ba:88:c2:e2:f4:82:27:05:fa:ff:8a:cd:dc:9e:
c5:7d:59:60:d5:82:b5:a7:68:8a:c7:ec:ab:ab:07:58:96:22:
8c:4d:ab:d7
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQfjEZ4mOKkiBWfgR9w9vctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOThkMWY5OWUzODMzZWY0MDFkNDYzNDhlZWM4Yjc1MjA4
OGM1NWQwHhcNMjUwMTAxMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmI0ZWQ5ZjYwNTYxNWEwZTE2OWJlZDkwZTc3OTgwN2MyMzM5M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a5LgIY4NoI0//YeZP3r5wcbWsjh
/x2bdpbjJWwtp+e2d8lp9cVoQxA0WYaHQg+SGstcc+XIjZvez2HQI6yFG9ZnYfre
UjwYFN1mZzq1bShBvnJjDdYWGw+N0tIREi84oT8dycsaMmTnyi2Df15OPnsqFFar
qF5scElR/BvUKsicgfWabDTV65T0gX5/hg6rllUEOW0N6GDvxbyeFrwQoimEpYKE
hbPYbrryOx6FR3To4JxlBVKUnYTj6Gg38+UZ05964W1zOJfOVrpsB2vFv8rJvE+R
wV2MLtSh6mBZink6RXRTBFCTgGvDyaq6CNR1H+/kl2lwrvwXODCorXYZZwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFI+07Z9gVhWg4Wm+2Q53mAfCM5OsMB8GA1UdIwQY
MBaAFG+Y0fmeODPvQB1GNI7si3UgiMVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYt
MDdkNGIxMTVjYzgyLzEvajdUdG4yQldGYURoYWI3WkRuZVlCOEl6azZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYtMDdkNGIxMTVjYzgy
LzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBsH6AMAwD
BACwfoMDBACwfoQDBAGwfoYDBAHAopgwDQYJKoZIhvcNAQELBQADggEBABOWr8Ab
Mn0KEonr3RDiKF1WlcLEZbxV8E8HurMX5xJAYwY2pIMQw0Pm/3EtFejOIN4fdN9e
MHZZBTW7XeTV0aI7bNkXWtmAY6YHWNUQy9D13LhMlRwSpYNgm0m/J2lHPX89VqiU
tB9CdC5t3Fvxf2zuMLOV21J6i1egmXN1NWPsSOTKMEmbq7PqbPOx5pmPM52dn7AP
mzlpUlTbm9X1IhGZiwv6z110roiEswP7XnRrythH63GCKXx2SIz63Yka3ktOy2db
ilJWctIQjinELj0mva8op5q1v89T8ly6iMLi9IInBfr/is3cnsV9WWDVgrWnaIrH
7KurB1iWIoxNq9c=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:22:37 2025 by rpki-client