Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/h4PWrnkVIam57UbPm17uUtMJ82A.roa
File: h4PWrnkVIam57UbPm17uUtMJ82A.roa (raw, json)
Hash identifier: vWsK4tCb2fEXWQi6HeJHSYFyq7IN57PLT1icg2MHkKQ=
Subject key identifier: 87:83:D6:AE:79:15:21:A9:B9:ED:46:CF:9B:5E:EE:52:D3:09:F3:60
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01968BA3D0181045D6338451CCB1F6AC24A7
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/h4PWrnkVIam57UbPm17uUtMJ82A.roa
Signing time: Thu 01 May 2025 11:38:10 +0000
ROA not before: Thu 01 May 2025 11:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28952
IP address blocks: 85.248.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:a3:d0:18:10:45:d6:33:84:51:cc:b1:f6:ac:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: May 1 11:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8783d6ae791521a9b9ed46cf9b5eee52d309f360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:f0:ed:a8:3e:23:5d:2f:e4:f4:da:11:ec:
9f:7e:ab:32:3d:29:0b:36:ca:dc:e6:c2:02:1d:f1:
af:65:82:32:4c:11:7b:be:3e:48:51:a1:3a:5d:c7:
d8:40:ee:ed:2a:c9:51:54:ef:a4:d1:84:a3:53:ad:
31:77:ce:b8:35:61:ca:60:2f:b9:b6:9e:c4:3e:a5:
b3:a0:58:63:5c:27:59:9d:a2:a3:f2:19:5d:e7:75:
b6:3f:90:fa:fc:7d:b1:01:cb:99:b5:12:53:bd:43:
62:3f:22:fd:22:57:5f:49:57:63:75:20:ef:d5:d7:
08:0c:01:d2:e6:41:dc:42:e5:85:a4:89:0d:60:7c:
46:f2:50:0d:be:76:77:54:03:67:5c:a1:58:f9:6a:
67:14:73:94:8d:c9:5a:61:d7:83:5e:47:13:a6:6e:
d7:a6:60:14:6b:43:bd:61:c8:79:e1:7b:9e:8c:46:
4c:60:da:9b:48:ff:c8:fc:76:ab:eb:53:7a:8b:98:
11:5d:51:db:72:71:34:df:8f:78:b3:f6:da:c4:61:
d0:5d:74:69:d3:f4:06:6a:80:86:a3:ee:c5:3c:3f:
b9:c5:c2:15:9e:ba:c4:21:99:21:fd:45:42:22:8e:
a1:65:41:cb:f8:82:1c:eb:d8:d8:97:32:f1:50:b5:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:D6:AE:79:15:21:A9:B9:ED:46:CF:9B:5E:EE:52:D3:09:F3:60
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/h4PWrnkVIam57UbPm17uUtMJ82A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.240.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6d:c0:3d:a4:b7:de:2b:c0:1d:9b:97:4d:90:66:40:40:f2:
cf:c1:26:67:4a:d5:18:1b:ac:3b:0a:ad:31:98:bf:18:03:30:
3b:97:8b:6b:de:17:5c:e7:6d:5a:60:df:f9:60:3e:66:bc:be:
79:ea:31:bc:cc:17:c4:49:7b:14:8e:3b:87:80:26:e7:f6:21:
9a:cf:d9:1d:58:6a:f7:a6:fc:d2:4f:04:00:2d:38:42:72:0b:
30:76:9f:3a:85:e8:8c:99:26:ff:ed:16:08:e0:95:55:c2:18:
e2:ba:39:ec:65:6b:51:ce:1f:74:9a:7d:a5:c6:b9:97:b7:0c:
73:ae:7f:3b:0c:e7:65:5d:24:5a:8a:ba:df:6e:34:af:55:ae:
49:34:81:2e:a5:b6:d3:ac:9a:84:08:c3:45:07:de:38:2d:ca:
bc:b0:29:03:5a:61:06:e9:11:4a:11:6a:fb:01:8f:d6:62:8f:
a7:a2:dd:df:30:73:19:65:0c:61:19:f1:64:28:c4:18:66:2d:
1d:4f:f7:16:18:16:e8:a6:5e:6f:8d:52:70:fa:7f:66:0a:9e:
4b:37:6b:cb:67:33:4a:c3:3a:73:79:fd:bd:db:99:70:a8:bf:
d7:7e:1a:9b:44:06:3d:c9:af:5f:6e:27:fa:9a:16:6a:1f:0d:
8a:1f:0b:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaLo9AYEEXWM4RRzLH2rCSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjUwNTAxMTEzODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzgzZDZhZTc5MTUyMWE5YjllZDQ2Y2Y5YjVlZWU1MmQzMDlmMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sjw7ag+I10v5PTaEeyffqsyPSkL
Nsrc5sICHfGvZYIyTBF7vj5IUaE6XcfYQO7tKslRVO+k0YSjU60xd864NWHKYC+5
tp7EPqWzoFhjXCdZnaKj8hld53W2P5D6/H2xAcuZtRJTvUNiPyL9IldfSVdjdSDv
1dcIDAHS5kHcQuWFpIkNYHxG8lANvnZ3VANnXKFY+WpnFHOUjclaYdeDXkcTpm7X
pmAUa0O9Ych54XuejEZMYNqbSP/I/Har61N6i5gRXVHbcnE03494s/baxGHQXXRp
0/QGaoCGo+7FPD+5xcIVnrrEIZkh/UVCIo6hZUHL+IIc69jYlzLxULWutwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIeD1q55FSGpue1Gz5te7lLTCfNgMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvaDRQV3Jua1ZJYW01N1ViUG0xN3VVdE1KODJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfjwMA0G
CSqGSIb3DQEBCwUAA4IBAQBzbcA9pLfeK8Adm5dNkGZAQPLPwSZnStUYG6w7Cq0x
mL8YAzA7l4tr3hdc521aYN/5YD5mvL556jG8zBfESXsUjjuHgCbn9iGaz9kdWGr3
pvzSTwQALThCcgswdp86heiMmSb/7RYI4JVVwhjiujnsZWtRzh90mn2lxrmXtwxz
rn87DOdlXSRairrfbjSvVa5JNIEupbbTrJqECMNFB944Lcq8sCkDWmEG6RFKEWr7
AY/WYo+not3fMHMZZQxhGfFkKMQYZi0dT/cWGBbopl5vjVJw+n9mCp5LN2vLZzNK
wzpzef2925lwqL/XfhqbRAY9ya9fbif6mhZqHw2KHwsE
-----END CERTIFICATE-----
Generated at Wed May 7 18:06:11 2025 by rpki-client