Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Iox1_56SLZuHET7km43PDB8l4G4.roa
File: Iox1_56SLZuHET7km43PDB8l4G4.roa (raw, json)
Hash identifier: tf6KaHFbquktp4/KwglJ1eqUxXhgiVKX17/Y40u17EE=
Subject key identifier: 22:8C:75:FF:9E:92:2D:9B:87:11:3E:E4:9B:8D:CF:0C:1F:25:E0:6E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E419627775D98C68E001A94AEF93E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Iox1_56SLZuHET7km43PDB8l4G4.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 213.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:41:96:27:77:5d:98:c6:8e:00:1a:94:ae:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228c75ff9e922d9b87113ee49b8dcf0c1f25e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:cf:9e:52:53:13:5d:e9:fc:4b:f4:e1:bc:
1c:ce:1a:37:9b:87:63:15:78:86:31:5e:d2:93:12:
22:fa:d4:84:ec:cc:bf:de:98:61:00:0b:37:79:bc:
fb:56:e0:6d:aa:80:ba:9f:b7:91:58:8b:fd:2a:81:
8d:97:ed:b3:c1:bc:36:52:07:13:b8:d3:cb:c0:c3:
a3:1f:e1:e5:dc:ef:b8:8f:7f:cd:c2:20:0c:ed:a9:
5b:c7:f8:cb:81:86:43:1e:2c:27:1a:46:9a:3d:4d:
e1:6b:f2:c9:13:50:d1:16:de:66:12:1b:12:41:6a:
96:8c:90:28:16:ab:a2:2a:c9:42:cb:2d:29:5b:c0:
72:53:51:6f:58:42:e7:7c:07:aa:6e:52:a6:e1:93:
7f:12:41:3f:87:73:52:4e:a5:2a:aa:17:6d:a1:86:
b7:e1:30:52:e3:03:89:ed:be:23:57:51:b1:85:2e:
8c:fc:dc:dd:f4:5a:f4:f8:27:25:d2:c7:41:83:35:
bd:b5:3b:d9:c6:38:93:a1:0c:37:61:16:98:be:89:
8f:a6:0a:ea:2e:82:58:ac:33:02:b0:26:0d:8a:bf:
53:83:b6:25:e2:1c:e4:20:8b:d8:99:3a:42:5f:85:
87:64:54:46:c2:93:ea:c5:a2:6e:f5:11:aa:42:ec:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:75:FF:9E:92:2D:9B:87:11:3E:E4:9B:8D:CF:0C:1F:25:E0:6E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Iox1_56SLZuHET7km43PDB8l4G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
f1:c7:f8:99:19:d1:9e:54:8e:71:0f:78:cc:4b:57:a1:31:b3:
b8:97:3f:c4:79:20:da:34:1b:e3:a5:17:60:07:32:06:de:8f:
18:d6:26:ee:55:73:dc:e6:c6:b8:97:ad:4b:4e:3a:24:04:db:
c1:e4:48:fb:ba:2e:57:4a:f9:e6:f1:54:67:b1:1b:3e:ed:16:
40:ce:9c:d6:26:83:a0:2c:28:42:06:77:d7:bb:16:b5:64:1c:
ed:ff:bd:53:0e:ab:61:88:b3:88:5e:87:87:96:74:22:c3:c2:
f8:b6:ff:2f:9a:d9:d6:2e:13:1f:aa:22:83:a3:06:47:40:72:
03:18:57:00:27:65:72:96:fa:6c:62:95:54:3e:d2:9b:64:80:
ff:23:22:5b:5a:24:65:8f:d6:ed:fb:7a:1f:c4:fd:8c:fa:19:
97:1b:27:1f:81:67:b9:57:62:a3:8b:52:53:2e:b3:00:9b:e9:
20:a0:f9:83:5e:f4:2d:55:c2:14:cb:d6:1b:dd:a3:d5:85:8a:
08:66:f0:2e:0e:05:99:17:f5:df:33:86:08:c7:4a:63:72:33:
80:b7:21:00:48:c8:d6:2e:ef:d8:05:f7:22:1c:0a:57:39:11:
66:9f:2c:68:f2:17:58:18:69:28:97:2e:9e:8d:a3:b5:a3:59:
71:d5:79:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijkGWJ3ddmMaOABqUrvk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwMTAxMTU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjhjNzVmZjllOTIyZDliODcxMTNlZTQ5YjhkY2YwYzFmMjVlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/jPnlJTE13p/Ev04bwczho3m4dj
FXiGMV7SkxIi+tSE7My/3phhAAs3ebz7VuBtqoC6n7eRWIv9KoGNl+2zwbw2UgcT
uNPLwMOjH+Hl3O+4j3/NwiAM7albx/jLgYZDHiwnGkaaPU3ha/LJE1DRFt5mEhsS
QWqWjJAoFquiKslCyy0pW8ByU1FvWELnfAeqblKm4ZN/EkE/h3NSTqUqqhdtoYa3
4TBS4wOJ7b4jV1GxhS6M/Nzd9Fr0+Ccl0sdBgzW9tTvZxjiToQw3YRaYvomPpgrq
LoJYrDMCsCYNir9Tg7Yl4hzkIIvYmTpCX4WHZFRGwpPqxaJu9RGqQuxP0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKMdf+eki2bhxE+5JuNzwwfJeBuMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvSW94MV81NlNMWnVIRVQ3a200M1BEQjhsNEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFFMA0G
CSqGSIb3DQEBCwUAA4IBAQDxx/iZGdGeVI5xD3jMS1ehMbO4lz/EeSDaNBvjpRdg
BzIG3o8Y1ibuVXPc5sa4l61LTjokBNvB5Ej7ui5XSvnm8VRnsRs+7RZAzpzWJoOg
LChCBnfXuxa1ZBzt/71TDqthiLOIXoeHlnQiw8L4tv8vmtnWLhMfqiKDowZHQHID
GFcAJ2VylvpsYpVUPtKbZID/IyJbWiRlj9bt+3ofxP2M+hmXGycfgWe5V2Kji1JT
LrMAm+kgoPmDXvQtVcIUy9Yb3aPVhYoIZvAuDgWZF/XfM4YIx0pjcjOAtyEASMjW
Lu/YBfciHApXORFmnyxo8hdYGGkoly6ejaO1o1lx1Xla
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:24 2025 by rpki-client