Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/iDsGG6EDS8fs9Hct4p8CitByvws.roa
File: iDsGG6EDS8fs9Hct4p8CitByvws.roa (raw, json)
Hash identifier: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=
Subject key identifier: 88:3B:06:1B:A1:03:4B:C7:EC:F4:77:2D:E2:9F:02:8A:D0:72:BF:0B
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B48819C1B6D8E8E705C56FB1B3C31B
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/iDsGG6EDS8fs9Hct4p8CitByvws.roa
Signing time: Thu 02 Jan 2025 15:48:50 +0000
ROA not before: Thu 02 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215394
IP address blocks: 31.130.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:88:19:c1:b6:d8:e8:e7:05:c5:6f:b1:b3:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=883b061ba1034bc7ecf4772de29f028ad072bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:25:56:3d:7d:3a:45:91:01:4e:60:d7:23:
4f:43:e0:9c:f5:77:76:19:6d:9a:de:fc:8c:e0:02:
09:15:d4:01:57:53:e6:79:1e:d2:d3:92:ad:5a:08:
a1:91:f5:34:25:ed:b3:83:eb:b4:f5:8b:d5:6b:4b:
70:2a:94:8f:a1:9c:48:59:36:6a:47:47:f1:16:0f:
72:64:f3:d3:f9:36:44:f0:23:6e:b1:2e:47:76:ae:
f7:b8:77:3a:87:91:25:41:63:55:de:f6:f4:56:66:
18:65:8d:ce:62:7f:f5:57:d9:62:95:93:66:cd:ff:
3c:ee:e4:7b:8b:e5:04:94:f4:22:21:92:aa:a8:85:
07:b1:b4:f8:d9:c0:6d:39:44:ec:83:ec:0f:b6:bb:
48:cc:34:46:6c:af:ff:28:2b:b8:03:3a:0b:03:10:
96:80:51:c7:3b:fa:a3:ca:c3:b3:34:60:03:b2:ea:
d0:ee:ad:fa:b2:3c:d9:b0:2a:2c:52:92:04:84:c6:
03:2a:83:b5:fc:b0:e5:02:36:7f:ca:32:b9:bf:41:
ce:ed:9a:b4:92:ac:64:22:92:53:38:31:44:04:6d:
eb:b6:60:75:85:7d:6a:a9:3f:30:1d:e0:57:4a:a7:
25:0a:e3:a5:f3:17:b4:ce:01:c9:bf:95:c9:05:3a:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3B:06:1B:A1:03:4B:C7:EC:F4:77:2D:E2:9F:02:8A:D0:72:BF:0B
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/iDsGG6EDS8fs9Hct4p8CitByvws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1c:48:71:34:92:85:dd:8b:96:d2:04:02:e3:57:75:63:e9:
a2:91:1c:06:f3:c9:4a:a4:c7:15:0f:10:9e:d2:af:f3:1f:17:
11:f1:14:0f:22:af:93:5f:40:b2:85:21:a7:ac:20:a3:7f:cb:
29:7b:80:18:24:68:c8:50:9a:b2:b4:8c:c4:1f:92:d0:ab:ac:
cb:c2:54:47:4a:50:b8:87:3f:eb:92:20:1f:c4:2d:60:27:43:
1e:d6:86:d7:06:05:32:55:12:5a:27:1e:2f:34:38:b1:28:91:
fd:e4:35:a1:60:9d:13:2e:dc:97:e8:46:0d:79:2b:ba:43:0e:
1d:af:51:a4:57:a9:ee:54:f8:87:26:87:44:1d:e7:1c:82:2a:
e1:c9:f6:a3:e3:4e:16:a6:06:06:a7:87:3b:07:08:f0:3a:a8:
b4:62:45:21:58:d4:71:20:0e:d7:02:bf:3c:61:0d:e4:4b:81:
0e:4f:d1:92:e7:9a:f2:dd:95:1a:27:0f:f3:85:45:48:16:b0:
8d:3a:33:eb:e5:e1:2c:b3:fa:26:ac:96:40:dc:2f:c2:bc:ab:
29:63:e4:b4:a2:a1:86:be:29:ca:8a:62:25:3e:e5:16:02:14:
d2:0c:11:71:fd:e9:3f:51:13:2d:c2:a7:7e:f4:d2:a6:f4:68:
4f:37:d8:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntIgZwbbY6OcFxW+xs8MbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjUwMTAyMTU0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODNiMDYxYmExMDM0YmM3ZWNmNDc3MmRlMjlmMDI4YWQwNzJiZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ElVj19OkWRAU5g1yNPQ+Cc9Xd2
GW2a3vyM4AIJFdQBV1PmeR7S05KtWgihkfU0Je2zg+u09YvVa0twKpSPoZxIWTZq
R0fxFg9yZPPT+TZE8CNusS5Hdq73uHc6h5ElQWNV3vb0VmYYZY3OYn/1V9lilZNm
zf887uR7i+UElPQiIZKqqIUHsbT42cBtOUTsg+wPtrtIzDRGbK//KCu4AzoLAxCW
gFHHO/qjysOzNGADsurQ7q36sjzZsCosUpIEhMYDKoO1/LDlAjZ/yjK5v0HO7Zq0
kqxkIpJTODFEBG3rtmB1hX1qqT8wHeBXSqclCuOl8xe0zgHJv5XJBTqL6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIg7BhuhA0vH7PR3LeKfAorQcr8LMB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvaURzR0c2RURTOGZzOUhjdDRwOENpdEJ5dndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4KLMA0G
CSqGSIb3DQEBCwUAA4IBAQBvHEhxNJKF3YuW0gQC41d1Y+mikRwG88lKpMcVDxCe
0q/zHxcR8RQPIq+TX0CyhSGnrCCjf8spe4AYJGjIUJqytIzEH5LQq6zLwlRHSlC4
hz/rkiAfxC1gJ0Me1obXBgUyVRJaJx4vNDixKJH95DWhYJ0TLtyX6EYNeSu6Qw4d
r1GkV6nuVPiHJodEHeccgirhyfaj404WpgYGp4c7BwjwOqi0YkUhWNRxIA7XAr88
YQ3kS4EOT9GS55ry3ZUaJw/zhUVIFrCNOjPr5eEss/omrJZA3C/CvKspY+S0oqGG
vinKimIlPuUWAhTSDBFx/ek/URMtwqd+9NKm9GhPN9ia
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:36 2025 by rpki-client