Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa
File: 7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa (raw, json)
Hash identifier: nQwnfkX+B9YqdykzZWswDiiarqGiJRduXnI4iwryl0U=
Subject key identifier: ED:FD:05:BD:65:A2:2B:E1:49:01:12:F8:5D:B5:2E:F5:9F:E8:32:85
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019613F908E4EA8EE9E8182179A876A9A0DD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa
Signing time: Tue 08 Apr 2025 05:56:49 +0000
ROA not before: Tue 08 Apr 2025 05:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 194.61.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:f9:08:e4:ea:8e:e9:e8:18:21:79:a8:76:a9:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 8 05:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edfd05bd65a22be1490112f85db52ef59fe83285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:8b:cb:fa:4f:b7:0c:bd:ef:57:08:c2:c3:
42:85:df:27:ed:ff:33:ac:29:64:97:95:c2:13:fc:
1f:c4:92:59:39:74:be:f6:fa:57:ea:04:83:c2:3f:
4c:62:7e:24:b3:65:bc:17:2b:58:f0:67:9d:7a:a1:
a5:38:de:37:f5:9c:08:56:a3:6b:57:0f:23:04:19:
71:ee:8a:e8:eb:85:d1:d9:2d:92:c3:ff:09:2e:72:
0a:e7:17:a7:63:cd:63:02:e4:0d:08:3a:66:36:7b:
55:2e:78:df:07:5d:c5:57:26:b0:3f:ea:bb:2d:c3:
bc:52:b9:05:ce:ae:2c:b6:3d:7a:7a:28:76:70:ca:
c9:ff:e8:dc:39:8b:9e:dd:46:55:09:fb:be:53:97:
ad:36:14:54:12:a0:ac:f8:32:31:4d:00:ae:a3:93:
a5:a3:46:cf:79:d4:1c:3a:be:60:83:4b:44:c3:95:
04:21:5d:b1:ac:44:f4:f2:d9:7e:31:23:90:67:2d:
79:43:59:2f:7d:0a:74:b6:56:b7:61:4a:b4:90:6e:
a3:dd:5d:02:fa:bc:f7:54:66:3c:41:39:d9:dc:ae:
43:24:b9:1c:97:69:96:15:57:e7:2c:10:50:1d:6f:
3f:74:43:fc:33:3a:92:8d:7d:ac:06:9e:15:ab:c9:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:05:BD:65:A2:2B:E1:49:01:12:F8:5D:B5:2E:F5:9F:E8:32:85
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7f0FvWWiK-FJARL4XbUu9Z_oMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ea:14:ad:c2:f8:ec:79:d2:3d:60:8c:1b:3c:1f:2a:51:7c:
51:d4:fd:21:05:9c:8f:da:1a:d0:cf:cb:c1:31:4a:cd:7c:25:
43:01:eb:73:d5:60:f3:7d:cb:51:f5:02:53:b4:96:e3:07:a6:
f3:7d:c4:58:cb:34:50:61:39:fb:c0:53:0c:9f:f1:8f:e6:c8:
29:3a:a1:e8:79:b8:d6:0f:8b:4b:db:00:66:d3:12:05:8b:89:
36:be:ed:97:ee:72:70:51:0f:fd:3b:f9:b7:55:9b:c5:78:4d:
e1:c8:87:98:ba:34:6f:a9:ee:f8:17:a4:f7:ed:77:31:5d:24:
22:f6:9d:64:1e:81:a7:b3:89:8d:27:9e:e7:3a:1c:16:32:e4:
b6:f0:33:b0:d8:d1:2e:2d:a4:f3:4a:c9:77:e8:e3:24:48:d1:
7a:e2:7d:15:98:76:31:54:dc:1c:8c:e7:0b:90:ee:3f:d3:d1:
b5:70:78:1d:a9:75:94:9c:df:55:3e:71:81:85:ac:aa:e1:90:
c8:b8:99:6f:c3:80:fd:84:cc:91:a4:db:cf:b3:e9:74:96:ad:
24:92:97:ae:b7:5c:41:6c:a0:10:76:cd:4f:23:f3:fb:20:90:
21:5e:f0:cc:c9:d3:a9:85:dc:85:fd:92:fe:a1:45:c5:68:50:
bf:34:d4:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYT+Qjk6o7p6Bgheah2qaDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwNDA4MDU1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGZkMDViZDY1YTIyYmUxNDkwMTEyZjg1ZGI1MmVmNTlmZTgzMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHmLy/pPtwy971cIwsNChd8n7f8z
rClkl5XCE/wfxJJZOXS+9vpX6gSDwj9MYn4ks2W8FytY8GedeqGlON439ZwIVqNr
Vw8jBBlx7oro64XR2S2Sw/8JLnIK5xenY81jAuQNCDpmNntVLnjfB13FVyawP+q7
LcO8UrkFzq4stj16eih2cMrJ/+jcOYue3UZVCfu+U5etNhRUEqCs+DIxTQCuo5Ol
o0bPedQcOr5gg0tEw5UEIV2xrET08tl+MSOQZy15Q1kvfQp0tla3YUq0kG6j3V0C
+rz3VGY8QTnZ3K5DJLkcl2mWFVfnLBBQHW8/dEP8MzqSjX2sBp4Vq8lxHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO39Bb1loivhSQES+F21LvWf6DKFMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvN2YwRnZXV2lLLUZKQVJMNFhiVXU5Wl9vTW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1JMA0G
CSqGSIb3DQEBCwUAA4IBAQAb6hStwvjsedI9YIwbPB8qUXxR1P0hBZyP2hrQz8vB
MUrNfCVDAetz1WDzfctR9QJTtJbjB6bzfcRYyzRQYTn7wFMMn/GP5sgpOqHoebjW
D4tL2wBm0xIFi4k2vu2X7nJwUQ/9O/m3VZvFeE3hyIeYujRvqe74F6T37XcxXSQi
9p1kHoGns4mNJ57nOhwWMuS28DOw2NEuLaTzSsl36OMkSNF64n0VmHYxVNwcjOcL
kO4/09G1cHgdqXWUnN9VPnGBhayq4ZDIuJlvw4D9hMyRpNvPs+l0lq0kkpeut1xB
bKAQds1PI/P7IJAhXvDMydOphdyF/ZL+oUXFaFC/NNTJ
-----END CERTIFICATE-----
Generated at Sun May 11 04:21:50 2025 by rpki-client