Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/dPqyZHQPjclEhoO6YFdX9DjRWHE.roa
File: dPqyZHQPjclEhoO6YFdX9DjRWHE.roa (raw, json)
Hash identifier: 9fpla0+AzxLAKXUZM+irYmUieOiP8DlrXLEQ0BQtpBE=
Subject key identifier: 74:FA:B2:64:74:0F:8D:C9:44:86:83:BA:60:57:57:F4:38:D1:58:71
Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial: 0194228E1D1D4D4B032D72797C39C0A5FFFF
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/dPqyZHQPjclEhoO6YFdX9DjRWHE.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212965
IP address blocks: 185.238.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1d:1d:4d:4b:03:2d:72:79:7c:39:c0:a5:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74fab264740f8dc9448683ba605757f438d15871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:c8:03:c5:12:ca:6e:62:de:3f:04:3d:55:
45:da:0f:3e:aa:2e:cb:60:77:86:c2:f2:a5:b8:d3:
15:bf:31:fe:b4:42:af:b3:3c:38:21:03:c1:7c:d8:
36:b1:4c:60:3d:a4:ae:cf:1d:71:32:0d:57:07:75:
c3:ff:f3:94:3a:93:c1:5f:82:35:35:fa:b1:64:c9:
3a:01:4f:24:c6:2b:92:30:0b:5d:26:3b:d5:8a:d3:
7a:53:30:58:d6:b1:28:5c:06:ee:15:ce:1a:12:ea:
a6:3e:50:6d:4c:46:75:3f:c0:5e:43:1f:2d:c3:a3:
ac:dc:bf:0a:1c:54:27:d5:0e:36:6a:0f:45:c1:d2:
b5:b8:ee:87:89:fd:e3:88:9d:1d:09:11:e3:ac:58:
82:3f:79:26:db:14:1b:0b:9b:a1:6a:55:23:4a:aa:
80:73:43:e9:f4:ff:f7:e0:93:94:dd:51:94:f4:27:
6c:7c:4f:05:02:c9:fa:f6:42:95:71:f3:9d:c0:a7:
77:1e:1d:5f:b9:ec:89:e4:f4:b8:95:92:8c:7b:ec:
c7:48:71:79:8b:82:61:d3:40:0b:c3:f7:0b:13:76:
ca:16:83:8f:4d:a7:2c:4e:61:43:f4:43:6c:ff:de:
c3:ca:25:0a:f6:8b:4a:0e:01:2f:a1:a3:6e:94:d1:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:B2:64:74:0F:8D:C9:44:86:83:BA:60:57:57:F4:38:D1:58:71
X509v3 Authority Key Identifier:
keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/dPqyZHQPjclEhoO6YFdX9DjRWHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
96:14:47:d5:3e:a9:27:76:bf:53:8f:4b:f8:b0:01:b1:07:a3:
07:33:56:f8:95:27:8b:89:b2:82:2d:ad:c3:0c:0a:7e:51:26:
29:0a:ac:b6:2b:69:07:11:0e:67:47:b4:e1:06:21:16:bd:40:
9c:ef:44:79:b2:8d:10:79:46:3d:99:14:b5:c7:e7:89:57:cc:
09:6e:b2:9c:f2:94:e5:73:71:65:ce:94:13:4e:82:2c:0b:6a:
b1:89:bd:15:8d:6d:f9:da:2b:81:11:de:0a:08:e9:a3:dd:65:
4f:83:c4:08:8e:2b:6b:75:ec:3b:c6:ce:07:62:d7:ec:d9:63:
d5:7a:00:8f:e9:c8:99:87:3f:83:5a:a4:b2:73:cb:c9:82:6e:
8d:70:ff:03:c4:42:e4:3b:ed:9a:14:b4:89:f8:f0:31:f0:86:
2b:bb:58:d0:c3:db:93:8c:05:79:27:51:51:81:e3:4c:dd:37:
47:c7:4d:0b:88:25:d8:3d:71:c5:2b:d2:ba:dd:5a:a7:2a:24:
21:13:be:45:28:6e:d1:e5:c4:3e:14:b2:2a:bb:60:5c:0a:a8:
5d:34:f8:5d:34:b2:87:be:44:86:a4:e7:fc:bb:1a:5c:ac:e4:
8e:38:d0:d3:b9:ac:05:ba:bb:a3:81:67:71:07:4d:cc:08:10:
98:d4:0f:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijh0dTUsDLXJ5fDnApf//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDBhODRiYWIzZGVmNDFkNmFhYTkwMjhkZTdhNDc1ZDMy
ZDEyYmQwHhcNMjUwMTAxMTU0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGZhYjI2NDc0MGY4ZGM5NDQ4NjgzYmE2MDU3NTdmNDM4ZDE1ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjXIA8USym5i3j8EPVVF2g8+qi7L
YHeGwvKluNMVvzH+tEKvszw4IQPBfNg2sUxgPaSuzx1xMg1XB3XD//OUOpPBX4I1
NfqxZMk6AU8kxiuSMAtdJjvVitN6UzBY1rEoXAbuFc4aEuqmPlBtTEZ1P8BeQx8t
w6Os3L8KHFQn1Q42ag9FwdK1uO6Hif3jiJ0dCRHjrFiCP3km2xQbC5uhalUjSqqA
c0Pp9P/34JOU3VGU9CdsfE8FAsn69kKVcfOdwKd3Hh1fueyJ5PS4lZKMe+zHSHF5
i4Jh00ALw/cLE3bKFoOPTacsTmFD9ENs/97DyiUK9otKDgEvoaNulNETxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHT6smR0D43JRIaDumBXV/Q40VhxMB8GA1UdIwQY
MBaAFOPQqEurPe9B1qqpAo3npHXTLRK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTkt
MTBlYjhhZGZlYTdlLzEvZFBxeVpIUVBqY2xFaG9PNllGZFg5RGpSV0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTktMTBlYjhhZGZlYTdl
LzEvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6NMA0G
CSqGSIb3DQEBCwUAA4IBAQCWFEfVPqkndr9Tj0v4sAGxB6MHM1b4lSeLibKCLa3D
DAp+USYpCqy2K2kHEQ5nR7ThBiEWvUCc70R5so0QeUY9mRS1x+eJV8wJbrKc8pTl
c3FlzpQTToIsC2qxib0VjW352iuBEd4KCOmj3WVPg8QIjitrdew7xs4HYtfs2WPV
egCP6ciZhz+DWqSyc8vJgm6NcP8DxELkO+2aFLSJ+PAx8IYru1jQw9uTjAV5J1FR
geNM3TdHx00LiCXYPXHFK9K63VqnKiQhE75FKG7R5cQ+FLIqu2BcCqhdNPhdNLKH
vkSGpOf8uxpcrOSOONDTuawFurujgWdxB03MCBCY1A97
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:40 2025 by rpki-client