Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/f__gtya754lWl6PiypfMMRlv6ak.roa
File: f__gtya754lWl6PiypfMMRlv6ak.roa (raw, json)
Hash identifier: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=
Subject key identifier: 7F:FF:E0:B7:26:BB:E7:89:56:97:A3:E2:CA:97:CC:31:19:6F:E9:A9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01942444B3B9CFE0EA65A1BB7C1529B77E66
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/f__gtya754lWl6PiypfMMRlv6ak.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50941
IP address blocks: 185.195.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b3:b9:cf:e0:ea:65:a1:bb:7c:15:29:b7:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fffe0b726bbe7895697a3e2ca97cc31196fe9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:a2:bd:74:10:07:8d:e0:20:15:0c:40:f7:
86:e4:da:5f:6f:3c:f2:7e:e4:d6:63:83:8a:1f:90:
3c:76:45:af:63:0b:d0:d7:3d:a9:00:60:cb:f6:34:
6c:96:9c:2e:35:3f:18:3c:57:06:bf:b8:40:59:51:
fa:86:a2:cf:8a:02:ae:98:6d:d2:fb:bc:f5:f2:68:
5e:52:21:61:57:e8:81:04:43:c3:01:88:bc:e9:3a:
ef:26:d2:ad:39:b4:a3:2b:59:7d:95:2d:01:64:09:
b2:98:ab:82:77:66:98:03:ac:87:42:9d:ed:3a:87:
0b:47:4f:c6:1f:b2:f9:8d:22:33:26:a6:46:7d:0a:
f4:1f:8d:46:16:0c:8b:b8:93:79:1e:40:09:d0:2e:
a6:d9:e0:b5:fb:0d:55:f1:3a:22:86:3f:5f:01:a4:
e4:98:bc:77:e7:1e:7d:7d:a1:bd:6a:ea:b1:24:71:
cf:00:90:aa:d7:ba:2c:99:6b:5e:d9:1c:e8:99:be:
a0:a8:67:cb:96:c9:60:e2:c1:e9:9a:f3:59:8e:01:
94:39:44:81:68:74:3b:da:38:33:93:0a:fb:a1:4d:
a9:22:3b:82:b0:26:b4:a5:a1:55:7f:8b:2e:ad:67:
48:41:9a:69:fa:6d:9d:32:bc:fe:59:57:f9:4e:a9:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:E0:B7:26:BB:E7:89:56:97:A3:E2:CA:97:CC:31:19:6F:E9:A9
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/f__gtya754lWl6PiypfMMRlv6ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8d:ad:b1:95:09:71:49:fd:eb:e2:4b:6d:5a:9c:ad:0d:71:
3a:67:f1:67:49:21:c5:f7:94:37:de:b9:81:6f:c0:38:0d:73:
00:c8:51:8c:d4:a1:48:75:6b:91:3d:a5:d6:ff:41:33:80:ff:
fe:fa:67:20:4c:0a:31:e0:eb:df:44:d2:1e:d6:15:51:46:31:
17:37:05:92:68:c0:5d:d5:9e:0f:f3:bd:c1:84:07:a6:a1:4e:
0a:2e:15:30:ae:6c:7a:e3:69:6e:fa:db:16:43:70:31:9e:4d:
34:55:51:a6:89:aa:f8:f4:a9:d6:27:c3:a7:22:a8:b5:06:30:
5b:2c:27:7a:e0:8d:c9:f8:b8:a1:19:e4:62:db:e8:15:8a:d9:
bb:fa:45:49:d2:95:bb:b7:6e:0a:d9:60:ee:aa:78:83:bb:f5:
f7:8b:e1:df:75:66:4f:3f:5d:73:54:b6:1c:d3:9c:cf:7c:85:
35:e7:70:11:4e:71:86:49:48:29:d5:88:08:4d:b7:0a:3f:3e:
6e:af:67:a0:6e:5d:67:19:85:df:4d:04:ea:86:a1:cc:ee:a4:
6c:69:c9:6c:4a:15:04:e5:86:41:a2:3a:fc:8a:a3:55:7c:7f:
87:cc:d1:55:8f:aa:8e:d6:41:38:d1:76:70:cb:19:40:52:24:
db:7a:75:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRLO5z+DqZaG7fBUpt35mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmZmZTBiNzI2YmJlNzg5NTY5N2EzZTJjYTk3Y2MzMTE5NmZlOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RSivXQQB43gIBUMQPeG5Npfbzzy
fuTWY4OKH5A8dkWvYwvQ1z2pAGDL9jRslpwuNT8YPFcGv7hAWVH6hqLPigKumG3S
+7z18mheUiFhV+iBBEPDAYi86TrvJtKtObSjK1l9lS0BZAmymKuCd2aYA6yHQp3t
OocLR0/GH7L5jSIzJqZGfQr0H41GFgyLuJN5HkAJ0C6m2eC1+w1V8Toihj9fAaTk
mLx35x59faG9auqxJHHPAJCq17osmWte2Rzomb6gqGfLlslg4sHpmvNZjgGUOUSB
aHQ72jgzkwr7oU2pIjuCsCa0paFVf4surWdIQZpp+m2dMrz+WVf5TqnmmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH//4Lcmu+eJVpej4sqXzDEZb+mpMB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvZl9fZ3R5YTc1NGxXbDZQaXlwZk1NUmx2NmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucPnMA0G
CSqGSIb3DQEBCwUAA4IBAQCaja2xlQlxSf3r4kttWpytDXE6Z/FnSSHF95Q33rmB
b8A4DXMAyFGM1KFIdWuRPaXW/0EzgP/++mcgTAox4OvfRNIe1hVRRjEXNwWSaMBd
1Z4P873BhAemoU4KLhUwrmx642lu+tsWQ3Axnk00VVGmiar49KnWJ8OnIqi1BjBb
LCd64I3J+LihGeRi2+gVitm7+kVJ0pW7t24K2WDuqniDu/X3i+HfdWZPP11zVLYc
05zPfIU153ARTnGGSUgp1YgITbcKPz5ur2egbl1nGYXfTQTqhqHM7qRsaclsShUE
5YZBojr8iqNVfH+HzNFVj6qO1kE40XZwyxlAUiTbenUf
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:08:34 2025 by rpki-client