Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/1-27kWYKAbmGvckcGXREu8_O6E5Q.roa
File: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (raw, json)
Hash identifier: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=
Subject key identifier: FB:6E:E4:59:82:80:6E:61:AF:72:47:06:5D:11:2E:F3:F3:BA:13:94
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 019424449C406C2E7CD2E6AAD4AE3DAC5A7E
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/1-27kWYKAbmGvckcGXREu8_O6E5Q.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61094
IP address blocks: 178.23.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:40:6c:2e:7c:d2:e6:aa:d4:ae:3d:ac:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6ee45982806e61af7247065d112ef3f3ba1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:ea:64:21:93:2d:1b:ec:4b:e1:e3:9e:05:
39:99:d3:25:4f:e8:c3:79:b3:71:f5:04:e9:2d:e9:
e7:67:cb:91:ee:ee:ab:98:4e:5b:a1:99:fe:a0:91:
80:81:f2:92:10:9d:84:16:f6:c1:3d:5f:43:c8:87:
93:1a:92:81:5f:f3:7e:21:6b:de:b6:8e:71:04:0b:
0e:a7:ef:a1:60:32:52:fb:1c:a1:d5:f0:e1:28:33:
7a:b7:92:40:6f:b9:cb:4b:6e:b3:3a:57:c9:00:33:
a7:47:ee:7b:67:94:1f:c0:65:74:94:93:d8:01:5d:
38:81:22:c7:af:d7:24:73:3d:05:84:36:5f:35:91:
3d:dd:5f:ba:47:31:6f:70:a7:d7:f7:a7:2a:d2:c9:
3c:be:33:81:6d:b5:24:3c:64:01:5a:ba:ed:8e:90:
64:f0:98:3c:6f:dc:bc:f4:a0:12:27:a0:a6:8b:88:
2d:12:e5:76:2c:01:4b:0f:d5:ef:dd:a1:b1:92:95:
03:3a:98:de:44:be:1d:d8:ef:a6:6f:18:24:01:d9:
60:ff:f6:33:b3:84:15:74:d7:ba:5f:84:c0:b3:1c:
5b:8b:aa:c9:44:2f:2b:53:67:a4:6d:b3:e6:5d:b2:
ea:a8:2f:e7:e9:3b:26:eb:ff:54:19:da:60:dc:9e:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:E4:59:82:80:6E:61:AF:72:47:06:5D:11:2E:F3:F3:BA:13:94
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/1-27kWYKAbmGvckcGXREu8_O6E5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.184.0/24
Signature Algorithm: sha256WithRSAEncryption
29:56:5e:06:07:38:1f:8c:1c:a0:9f:db:17:5f:bc:76:d7:6c:
f6:16:01:7b:ac:d3:91:80:9b:df:7b:a7:69:38:60:29:75:7e:
51:ab:b1:a4:68:2e:1a:2b:ce:3c:e1:89:7a:ce:f0:c9:c0:a3:
e1:e2:4b:36:df:9a:09:40:89:48:b0:4d:ce:e1:69:e2:44:58:
c2:5a:03:10:b1:47:cd:8e:96:88:b1:29:25:1a:be:8d:3d:6f:
a4:d1:66:bd:54:a2:e4:8a:ae:d7:ed:03:5b:a8:25:5e:5c:38:
f8:28:72:15:e9:db:74:26:d8:9c:e1:74:53:aa:eb:a5:6a:3a:
50:aa:ff:29:6e:c9:fa:3c:c7:06:8e:24:46:fc:0f:f6:a0:e2:
68:78:e3:4e:db:e6:2f:f2:f8:ef:2f:4e:9a:15:fd:25:77:f0:
2e:4d:01:12:35:21:f3:49:3f:67:bb:48:72:d6:19:18:b2:ec:
f1:9e:a6:90:a8:00:52:a2:8e:3e:aa:b3:99:d0:9c:a1:b1:87:
b5:77:21:a4:15:a3:47:c9:c8:96:37:d9:e2:f4:6e:58:8e:da:
55:31:28:6a:d1:c1:b5:06:a1:d3:cf:e9:64:87:29:e8:b7:ba:
d2:11:29:17:87:05:8f:8b:46:04:5c:04:cb:88:54:d2:1f:51:
97:5d:bb:15
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRJxAbC580uaq1K49rFp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2EwYjU1OTQzMzlhZWZlOGI1NThlMzcyOTI5MGI0MmJi
MWE5NzQwHhcNMjUwMTAxMjM0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjZlZTQ1OTgyODA2ZTYxYWY3MjQ3MDY1ZDExMmVmM2YzYmExMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDDqZCGTLRvsS+HjngU5mdMlT+jD
ebNx9QTpLennZ8uR7u6rmE5boZn+oJGAgfKSEJ2EFvbBPV9DyIeTGpKBX/N+IWve
to5xBAsOp++hYDJS+xyh1fDhKDN6t5JAb7nLS26zOlfJADOnR+57Z5QfwGV0lJPY
AV04gSLHr9ckcz0FhDZfNZE93V+6RzFvcKfX96cq0sk8vjOBbbUkPGQBWrrtjpBk
8Jg8b9y89KASJ6Cmi4gtEuV2LAFLD9Xv3aGxkpUDOpjeRL4d2O+mbxgkAdlg//Yz
s4QVdNe6X4TAsxxbi6rJRC8rU2ekbbPmXbLqqC/n6Tsm6/9UGdpg3J4qNwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtu5FmCgG5hr3JHBl0RLvPzuhOUMB8GA1UdIwQY
MBaAFIM6C1WUM5rv6LVY43KSkLQrsal0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMt
M2QwNmQyNDJmOTkyLzEvMS0yN2tXWUtBYm1HdmNrY0dYUkV1OF9PNkU1US5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmMvNzY2MDZlLTcyNDMtNGIwYi04MmEzLTNkMDZkMjQyZjk5
Mi8xL2d6b0xWWlF6bXVfb3RWampjcEtRdEN1eHFYUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALIXuDAN
BgkqhkiG9w0BAQsFAAOCAQEAKVZeBgc4H4wcoJ/bF1+8dtds9hYBe6zTkYCb33un
aThgKXV+UauxpGguGivOPOGJes7wycCj4eJLNt+aCUCJSLBNzuFp4kRYwloDELFH
zY6WiLEpJRq+jT1vpNFmvVSi5Iqu1+0DW6glXlw4+ChyFenbdCbYnOF0U6rrpWo6
UKr/KW7J+jzHBo4kRvwP9qDiaHjjTtvmL/L47y9OmhX9JXfwLk0BEjUh80k/Z7tI
ctYZGLLs8Z6mkKgAUqKOPqqzmdCcobGHtXchpBWjR8nIljfZ4vRuWI7aVTEoatHB
tQah08/pZIcp6Le60hEpF4cFj4tGBFwEy4hU0h9Rl127FQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:12 2025 by rpki-client