Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3g7_eGGqWMb0sapr47icAOAgAb4.roa
File: 3g7_eGGqWMb0sapr47icAOAgAb4.roa (raw, json)
Hash identifier: KqefO8QMBo7cJ9/w0OlKRV8IZ5qJRwWhoTO/P46A+ZQ=
Subject key identifier: DE:0E:FF:78:61:AA:58:C6:F4:B1:AA:6B:E3:B8:9C:00:E0:20:01:BE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019663DA91C8F3FF797FBBD8C72A57E6406C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3g7_eGGqWMb0sapr47icAOAgAb4.roa
Signing time: Wed 23 Apr 2025 18:13:10 +0000
ROA not before: Wed 23 Apr 2025 18:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:da:91:c8:f3:ff:79:7f:bb:d8:c7:2a:57:e6:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 23 18:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de0eff7861aa58c6f4b1aa6be3b89c00e02001be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:65:63:73:2d:f8:7a:c0:a9:3a:bc:5f:65:
54:96:8b:db:7f:75:dd:26:52:7f:17:d6:de:73:ad:
87:60:d9:d2:72:9b:c9:1a:b6:be:ec:3f:ad:46:95:
a2:60:1c:31:9c:90:f6:b1:f4:96:0e:ab:b4:1d:4c:
b4:e8:d1:1f:76:5d:32:35:ba:92:0a:1f:21:5f:7d:
7e:b1:60:0d:03:a0:be:3d:a3:5a:4c:b5:18:97:d8:
79:d0:e1:83:d0:b4:9d:9a:60:56:5e:40:94:1b:57:
70:54:50:a8:e2:68:3e:88:fe:58:93:a7:b9:e8:d0:
05:e7:f5:2f:49:bd:b0:99:16:7b:63:7d:b5:71:2b:
70:e1:35:3d:9d:42:70:13:93:e1:5a:9b:a8:b0:77:
bf:f5:ba:4f:46:5a:17:ff:42:57:22:8e:38:f6:21:
1c:13:2d:34:54:e9:8c:50:8a:6a:f8:d7:f7:4b:df:
da:4d:75:cd:73:f0:e8:9b:da:d4:02:a5:3e:2c:23:
fa:e7:67:06:9c:c9:c0:e8:ad:b8:39:a5:ca:31:2b:
9b:86:51:6c:76:ef:bd:a3:0b:79:8b:fc:66:45:8a:
44:81:e8:84:47:31:8c:16:30:ae:8f:bb:72:64:93:
42:e2:28:cb:8e:ba:41:50:c1:3c:db:90:68:c8:b5:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:FF:78:61:AA:58:C6:F4:B1:AA:6B:E3:B8:9C:00:E0:20:01:BE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3g7_eGGqWMb0sapr47icAOAgAb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:4e:38:13:5b:38:40:b2:51:52:b4:74:7f:9f:ec:ca:f3:25:
1a:7c:35:3a:bf:9d:0a:61:17:4c:5c:83:d5:cc:e4:a2:b1:dc:
77:12:32:11:c3:11:d9:ef:cb:b5:82:84:e6:12:1f:53:ce:47:
be:1f:fb:f8:65:65:c8:be:16:b2:4d:8a:c1:a1:79:a6:18:3f:
7e:95:30:fa:1c:96:5c:13:32:89:66:9f:a1:4a:cd:e4:93:86:
d1:ff:5f:04:2b:0e:9f:c3:7c:86:d8:5f:00:ec:4f:2a:eb:b0:
fc:ae:94:5a:f9:2d:bf:56:85:05:a6:62:54:80:06:aa:76:07:
b6:dc:34:2a:7a:68:55:84:e0:7a:2c:45:7e:5c:e7:50:8d:4e:
97:69:77:cb:e6:39:10:3e:9b:b8:a3:39:cc:dc:d3:b0:bf:5d:
56:1d:80:6d:cf:bb:bb:5f:9c:a5:00:47:3c:98:67:fb:6f:26:
8e:e2:d5:e2:24:e4:a8:07:58:96:6b:e8:f8:56:38:a0:f8:bf:
1c:e1:01:d8:75:9b:1b:f1:a9:81:50:29:5c:93:5f:ca:cb:5f:
50:f6:4e:92:1e:ec:e4:25:b2:0f:b5:c1:56:fb:04:d1:b7:95:
b1:05:fb:81:41:d7:76:b6:ec:4a:41:8c:0f:19:e2:5e:e9:26:
3d:34:ac:6a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZZj2pHI8/95f7vYxypX5kBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDIzMTgxMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTBlZmY3ODYxYWE1OGM2ZjRiMWFhNmJlM2I4OWMwMGUwMjAwMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WFlY3Mt+HrAqTq8X2VUlovbf3Xd
JlJ/F9bec62HYNnScpvJGra+7D+tRpWiYBwxnJD2sfSWDqu0HUy06NEfdl0yNbqS
Ch8hX31+sWANA6C+PaNaTLUYl9h50OGD0LSdmmBWXkCUG1dwVFCo4mg+iP5Yk6e5
6NAF5/UvSb2wmRZ7Y321cStw4TU9nUJwE5PhWpuosHe/9bpPRloX/0JXIo449iEc
Ey00VOmMUIpq+Nf3S9/aTXXNc/Dom9rUAqU+LCP652cGnMnA6K24OaXKMSubhlFs
du+9owt5i/xmRYpEgeiERzGMFjCuj7tyZJNC4ijLjrpBUME825BoyLUrNwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFN4O/3hhqljG9LGqa+O4nADgIAG+MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvM2c3X2VHR3FXTWIwc2FwcjQ3aWNBT0FnQWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQE2TwAAwQC
2TwYAwQD2TwgAwQC2TwsAwQD2Tw4MA0GCSqGSIb3DQEBCwUAA4IBAQCzTjgTWzhA
slFStHR/n+zK8yUafDU6v50KYRdMXIPVzOSisdx3EjIRwxHZ78u1goTmEh9Tzke+
H/v4ZWXIvhayTYrBoXmmGD9+lTD6HJZcEzKJZp+hSs3kk4bR/18EKw6fw3yG2F8A
7E8q67D8rpRa+S2/VoUFpmJUgAaqdge23DQqemhVhOB6LEV+XOdQjU6XaXfL5jkQ
Ppu4oznM3NOwv11WHYBtz7u7X5ylAEc8mGf7byaO4tXiJOSoB1iWa+j4Vjig+L8c
4QHYdZsb8amBUClck1/Ky19Q9k6SHuzkJbIPtcFW+wTRt5WxBfuBQdd2tuxKQYwP
GeJe6SY9NKxq
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:12 2025 by rpki-client