Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa
File: dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa (raw, json)
Hash identifier: mvhCiOx4Qlj1FzGtfnYTbx0VdAMMtllc6DDb99JSemU=
Subject key identifier: 75:23:60:A1:EB:D6:47:23:14:7E:08:CD:A2:2F:C6:5C:9E:07:F3:F9
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019420684867BAB40B3D623EA13FD7A17B62
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:48:67:ba:b4:0b:3d:62:3e:a1:3f:d7:a1:7b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=752360a1ebd64723147e08cda22fc65c9e07f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:93:46:1e:be:11:c1:4d:22:88:26:50:3c:
b9:03:42:c8:00:a7:98:2f:43:28:be:94:80:14:4a:
df:a8:f9:08:4f:b5:3e:8a:36:aa:b0:a9:85:e0:34:
e9:6d:9c:68:60:39:cc:96:71:d6:83:96:20:fe:d0:
d8:97:d1:38:6b:98:23:00:09:42:20:b8:22:40:4c:
d7:9e:d5:9e:25:db:fe:23:be:fc:4b:0d:76:52:85:
ac:87:5d:7d:ee:62:d2:ff:f4:a2:48:f1:ef:e0:4f:
3c:fa:fe:57:f7:4a:bc:a6:db:3f:02:b1:5b:58:ff:
1e:16:5a:99:ea:81:46:1b:fc:f6:d9:df:32:8f:b2:
de:54:7d:b9:89:0f:64:22:5e:0d:40:62:20:84:6d:
3f:00:af:a0:6a:a4:24:7a:ca:3f:a3:55:cf:b2:db:
1c:1d:66:d8:03:a4:60:2c:74:0e:ec:ca:08:fb:62:
d6:cc:22:16:dd:49:26:6d:e4:6a:8d:96:3c:91:ea:
a0:e1:6c:5c:4e:e3:63:6b:d5:4e:8b:a6:20:58:0d:
d2:53:88:b9:ec:ef:c5:c9:34:4d:e3:c5:1f:3d:28:
6f:8a:de:a8:9e:b2:56:40:2c:b0:70:d6:ed:55:56:
9b:1c:d5:eb:a9:91:7f:b6:2b:fb:ae:c3:b3:53:9c:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:60:A1:EB:D6:47:23:14:7E:08:CD:A2:2F:C6:5C:9E:07:F3:F9
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.43.0/24
Signature Algorithm: sha256WithRSAEncryption
50:79:30:80:40:8e:d3:27:d2:2a:60:08:95:be:9b:90:82:a3:
03:01:d2:19:7e:ba:47:48:39:13:71:8b:5e:31:e0:bf:f5:76:
fd:50:3e:8a:42:8b:8f:de:33:db:cb:bc:f5:f9:ec:c0:83:b8:
0e:48:6b:7d:fb:0b:f6:d3:b8:13:a0:21:cd:8c:da:84:49:a2:
77:c5:4a:4a:a1:8d:7f:9c:70:a4:2e:aa:2d:df:70:73:bb:d3:
04:43:48:96:fa:fe:d3:d3:30:2d:f4:9f:b0:17:c1:26:0c:c0:
c9:2b:75:fb:6e:a2:07:f9:29:e9:c1:0c:e4:48:32:f8:95:df:
e5:c1:cf:d3:a4:8a:6d:53:22:27:04:7f:2b:73:19:a3:ef:8b:
7a:f5:45:4d:50:1e:16:f0:fd:97:5c:38:dc:3f:ee:41:fa:42:
24:80:49:fc:ee:69:f9:c4:e4:57:b1:c0:73:fd:85:7b:14:40:
6c:5f:ed:42:ed:d2:eb:40:57:ab:18:59:d9:d4:e3:52:0e:d4:
c8:66:59:d5:79:cf:66:c9:d7:30:97:b4:75:33:a8:85:ef:e0:
ca:cc:1a:73:25:2b:36:bb:05:1c:59:ed:59:99:6e:e3:a7:1a:
98:65:8a:b9:d9:a9:71:d4:ca:2e:5d:1b:c4:78:b9:ab:9c:5c:
8e:9d:07:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaEhnurQLPWI+oT/XoXtiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjUwMTAxMDU0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTIzNjBhMWViZDY0NzIzMTQ3ZTA4Y2RhMjJmYzY1YzllMDdmM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6biTRh6+EcFNIogmUDy5A0LIAKeY
L0MovpSAFErfqPkIT7U+ijaqsKmF4DTpbZxoYDnMlnHWg5Yg/tDYl9E4a5gjAAlC
ILgiQEzXntWeJdv+I778Sw12UoWsh1197mLS//SiSPHv4E88+v5X90q8pts/ArFb
WP8eFlqZ6oFGG/z22d8yj7LeVH25iQ9kIl4NQGIghG0/AK+gaqQkeso/o1XPstsc
HWbYA6RgLHQO7MoI+2LWzCIW3UkmbeRqjZY8keqg4WxcTuNja9VOi6YgWA3SU4i5
7O/FyTRN48UfPShvit6onrJWQCywcNbtVVabHNXrqZF/tiv7rsOzU5xq/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUjYKHr1kcjFH4IzaIvxlyeB/P5MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvZFNOZ29ldldSeU1VZmdqTm9pX0dYSjRIOF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXporMA0G
CSqGSIb3DQEBCwUAA4IBAQBQeTCAQI7TJ9IqYAiVvpuQgqMDAdIZfrpHSDkTcYte
MeC/9Xb9UD6KQouP3jPby7z1+ezAg7gOSGt9+wv207gToCHNjNqESaJ3xUpKoY1/
nHCkLqot33Bzu9MEQ0iW+v7T0zAt9J+wF8EmDMDJK3X7bqIH+SnpwQzkSDL4ld/l
wc/TpIptUyInBH8rcxmj74t69UVNUB4W8P2XXDjcP+5B+kIkgEn87mn5xORXscBz
/YV7FEBsX+1C7dLrQFerGFnZ1ONSDtTIZlnVec9mydcwl7R1M6iF7+DKzBpzJSs2
uwUcWe1ZmW7jpxqYZYq52alx1MouXRvEeLmrnFyOnQfn
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:33:51 2025 by rpki-client