Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/ihKky7iErFMr7G88FOVCnj74bps.roa
File: ihKky7iErFMr7G88FOVCnj74bps.roa (raw, json)
Hash identifier: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=
Subject key identifier: 8A:12:A4:CB:B8:84:AC:53:2B:EC:6F:3C:14:E5:42:9E:3E:F8:6E:9B
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019423D7E31133E9EDEA6532A16E385D015B
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/ihKky7iErFMr7G88FOVCnj74bps.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209287
IP address blocks: 82.199.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e3:11:33:e9:ed:ea:65:32:a1:6e:38:5d:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a12a4cbb884ac532bec6f3c14e5429e3ef86e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:27:ac:0e:22:2d:35:0e:ae:b6:67:26:be:
c3:fe:7f:dc:e0:03:4e:9f:0e:5f:01:05:0c:30:ce:
ea:16:d8:7c:4f:ee:90:79:f7:21:59:c8:5a:e9:ed:
08:96:66:ca:e5:2f:09:0b:9b:a2:f0:c6:29:c6:73:
74:93:6e:05:b4:3d:0a:cb:e5:33:dc:35:1c:58:65:
17:1a:5b:8c:b5:af:6a:44:e0:d8:0b:eb:e9:30:ac:
08:9d:3c:93:a1:a7:57:b2:f3:08:ec:b1:f0:e0:fd:
bc:1c:4a:c3:0c:3d:91:c9:f7:79:8e:f9:98:c8:ce:
96:1c:2a:73:fa:97:10:3b:49:cc:7e:d5:60:14:55:
cf:6e:4b:1e:f2:bf:90:0a:f9:2d:80:65:61:d1:00:
4e:a5:a4:43:67:1c:20:d8:0b:29:cd:99:13:9d:a7:
b3:7b:ec:92:bf:2b:c5:2d:e9:fc:66:b1:0b:ff:49:
53:1a:1c:07:54:01:6d:3b:00:09:4a:97:46:34:d2:
11:34:d3:b6:da:0f:00:99:81:26:37:84:65:9c:38:
e8:19:97:09:2e:4d:eb:79:76:22:27:6d:a3:1b:02:
1b:a9:3f:15:d2:d1:e8:c8:74:71:26:75:42:6f:12:
05:04:7e:21:c5:5c:79:51:bc:1c:3c:fe:39:d9:ad:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:A4:CB:B8:84:AC:53:2B:EC:6F:3C:14:E5:42:9E:3E:F8:6E:9B
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/ihKky7iErFMr7G88FOVCnj74bps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.62.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d0:ae:d9:b1:8e:a3:34:51:d9:f4:b4:84:09:a4:f3:d3:48:
52:da:bd:da:92:d8:34:ac:44:99:dd:d4:85:bf:95:bb:9d:87:
9d:ce:ac:1b:28:75:9a:f3:cb:98:e4:77:2a:cc:d0:01:1c:93:
28:41:42:2a:19:ce:94:bf:8d:ed:8c:be:a7:18:f3:d0:5b:5c:
37:90:20:d0:cf:b5:68:d6:bc:38:ad:ca:c1:8d:f2:ba:7c:e3:
0e:1d:7c:e3:4f:12:f1:19:14:f1:c2:79:8d:6c:6f:78:24:8c:
99:c6:27:54:94:54:f1:38:1d:62:67:f7:53:38:31:b5:da:6d:
63:06:2f:d0:b8:81:08:5a:6d:16:61:d6:ca:9d:b1:7d:ee:ca:
3f:a4:cf:0a:91:bd:7d:ff:05:4c:7e:7f:e7:46:cb:4b:7c:69:
6b:6b:cd:31:c6:a3:b0:ea:5a:9a:cb:89:00:fe:32:07:2c:be:
4f:30:34:3c:1c:00:cd:c8:eb:f1:16:ee:77:46:77:06:02:05:
be:9b:27:7b:20:e9:81:ba:22:d2:9d:f1:12:17:03:6f:2c:3f:
b8:25:ec:a2:21:bb:06:45:5c:cc:35:5c:c7:ac:89:44:b2:18:
f0:e4:e8:a4:fb:d8:12:33:31:b0:94:fa:97:2c:7c:7f:50:ac:
c5:ec:ca:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1+MRM+nt6mUyoW44XQFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1
ODZiNzcwHhcNMjUwMTAxMjE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTEyYTRjYmI4ODRhYzUzMmJlYzZmM2MxNGU1NDI5ZTNlZjg2ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S8nrA4iLTUOrrZnJr7D/n/c4ANO
nw5fAQUMMM7qFth8T+6QefchWcha6e0IlmbK5S8JC5ui8MYpxnN0k24FtD0Ky+Uz
3DUcWGUXGluMta9qRODYC+vpMKwInTyToadXsvMI7LHw4P28HErDDD2Ryfd5jvmY
yM6WHCpz+pcQO0nMftVgFFXPbkse8r+QCvktgGVh0QBOpaRDZxwg2AspzZkTnaez
e+ySvyvFLen8ZrEL/0lTGhwHVAFtOwAJSpdGNNIRNNO22g8AmYEmN4RlnDjoGZcJ
Lk3reXYiJ22jGwIbqT8V0tHoyHRxJnVCbxIFBH4hxVx5UbwcPP452a1HcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoSpMu4hKxTK+xvPBTlQp4++G6bMB8GA1UdIwQY
MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt
ZmMyZjVmYTc3NTU1LzEvaWhLa3k3aUVyRk1yN0c4OEZPVkNuajc0YnBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1
LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsc+MA0G
CSqGSIb3DQEBCwUAA4IBAQCH0K7ZsY6jNFHZ9LSECaTz00hS2r3aktg0rESZ3dSF
v5W7nYedzqwbKHWa88uY5HcqzNABHJMoQUIqGc6Uv43tjL6nGPPQW1w3kCDQz7Vo
1rw4rcrBjfK6fOMOHXzjTxLxGRTxwnmNbG94JIyZxidUlFTxOB1iZ/dTODG12m1j
Bi/QuIEIWm0WYdbKnbF97so/pM8Kkb19/wVMfn/nRstLfGlra80xxqOw6lqay4kA
/jIHLL5PMDQ8HADNyOvxFu53RncGAgW+myd7IOmBuiLSnfESFwNvLD+4JeyiIbsG
RVzMNVzHrIlEshjw5Oik+9gSMzGwlPqXLHx/UKzF7Moe
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:23 2025 by rpki-client