Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/itabYXi3irEL53byV06jkZ3aC48.roa
File: itabYXi3irEL53byV06jkZ3aC48.roa (raw, json)
Hash identifier: QjaQucmPtw8duEVnsbQImiTK3kNOasMc0swqbwK8Lu8=
Subject key identifier: 8A:D6:9B:61:78:B7:8A:B1:0B:E7:76:F2:57:4E:A3:91:9D:DA:0B:8F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746EBC5BB96D218CC957A25C1BD9EA7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/itabYXi3irEL53byV06jkZ3aC48.roa
Signing time: Thu 02 Jan 2025 13:49:06 +0000
ROA not before: Thu 02 Jan 2025 13:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4648
IP address blocks: 195.252.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:eb:c5:bb:96:d2:18:cc:95:7a:25:c1:bd:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad69b6178b78ab10be776f2574ea3919dda0b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:a5:72:94:6d:35:3d:89:a0:84:b1:63:39:
ff:d9:f4:af:05:e0:42:36:12:ed:1c:4e:54:00:ea:
f6:d2:21:47:e9:4b:cb:ee:a0:b8:6e:b5:00:89:1d:
72:7e:f7:d4:c0:85:95:4c:02:e6:c0:3f:3c:d4:fa:
4d:46:6a:ad:30:b1:8d:08:0f:db:f5:e0:c5:70:a9:
2e:37:3f:a2:14:fb:88:9e:4d:b7:90:f6:53:bf:09:
1d:0a:e7:72:07:7a:ff:4a:4c:94:5b:a4:17:36:9d:
81:2f:78:5d:17:9d:ad:9f:1a:70:aa:d4:33:5f:31:
1f:00:46:51:13:49:63:f4:cd:c5:00:80:b8:c6:16:
2b:4d:58:de:59:2a:f9:38:e9:28:96:4a:da:65:b0:
eb:78:2c:7e:a1:54:a7:b5:14:6e:19:01:82:f1:86:
c7:45:5a:af:48:bb:bd:b4:b3:91:23:3a:1a:75:ec:
e4:21:e5:0c:f9:f8:dd:60:26:b0:45:c7:ee:e0:57:
d0:bd:0c:25:bd:f7:4d:99:23:5b:39:7a:74:2d:55:
ee:f4:0c:3b:f3:ea:39:58:c2:eb:e4:a0:13:fc:c1:
66:6a:21:0b:80:2f:99:df:4c:21:24:f9:bf:c9:14:
dc:87:5d:f5:28:8c:1d:a3:43:3a:38:a7:c0:fa:26:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:9B:61:78:B7:8A:B1:0B:E7:76:F2:57:4E:A3:91:9D:DA:0B:8F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/itabYXi3irEL53byV06jkZ3aC48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.168.0/22
Signature Algorithm: sha256WithRSAEncryption
af:3a:6a:ad:cb:e6:ea:1e:9c:90:da:5d:78:c1:ac:55:2d:bc:
d1:f3:40:25:8f:46:33:54:fa:6e:82:05:23:2e:7b:c5:b0:3f:
e3:bd:d6:55:00:87:26:9c:31:2b:af:71:1e:49:f6:05:d5:96:
87:2a:5d:96:5e:bd:1e:96:2b:95:cb:cf:c2:b5:54:bc:38:e3:
2d:67:90:6f:5a:11:cf:4c:ee:95:ad:11:b6:d3:20:ca:5f:64:
2e:68:98:4f:3c:30:8a:d2:0a:21:d3:9b:59:c2:f3:69:91:22:
bd:51:34:a2:69:59:10:f9:dd:71:50:94:2d:d0:55:10:b1:a9:
a2:75:02:03:e3:db:e4:2b:c0:45:61:8d:92:96:5b:f2:c4:fa:
f9:db:5f:c4:58:5b:1d:03:42:70:7b:6f:fe:88:71:11:65:20:
0f:f7:ab:a2:08:f8:5f:16:59:56:8c:c1:f6:fe:79:4c:c0:36:
96:ae:b5:88:76:31:9e:bd:ef:99:4b:6f:bf:9d:b0:96:52:8b:
eb:57:e6:71:d3:38:a6:a6:3c:ea:e6:54:45:ab:41:2f:58:93:
97:fb:6d:18:5a:3d:8f:a1:cc:cc:4d:d9:e6:07:ba:1d:ac:2d:
6c:9b:ef:50:b9:da:76:12:ac:62:c7:f6:5d:e5:b6:55:2a:20:
37:31:e3:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRuvFu5bSGMyVeiXBvZ6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjUwMTAyMTM0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQ2OWI2MTc4Yjc4YWIxMGJlNzc2ZjI1NzRlYTM5MTlkZGEwYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YilcpRtNT2JoISxYzn/2fSvBeBC
NhLtHE5UAOr20iFH6UvL7qC4brUAiR1yfvfUwIWVTALmwD881PpNRmqtMLGNCA/b
9eDFcKkuNz+iFPuInk23kPZTvwkdCudyB3r/SkyUW6QXNp2BL3hdF52tnxpwqtQz
XzEfAEZRE0lj9M3FAIC4xhYrTVjeWSr5OOkolkraZbDreCx+oVSntRRuGQGC8YbH
RVqvSLu9tLORIzoadezkIeUM+fjdYCawRcfu4FfQvQwlvfdNmSNbOXp0LVXu9Aw7
8+o5WMLr5KAT/MFmaiELgC+Z30whJPm/yRTch131KIwdo0M6OKfA+ibriQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrWm2F4t4qxC+d28ldOo5Gd2guPMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvaXRhYllYaTNpckVMNTNieVYwNmprWjNhQzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw/yoMA0G
CSqGSIb3DQEBCwUAA4IBAQCvOmqty+bqHpyQ2l14waxVLbzR80Alj0YzVPpuggUj
LnvFsD/jvdZVAIcmnDErr3EeSfYF1ZaHKl2WXr0eliuVy8/CtVS8OOMtZ5BvWhHP
TO6VrRG20yDKX2QuaJhPPDCK0goh05tZwvNpkSK9UTSiaVkQ+d1xUJQt0FUQsami
dQID49vkK8BFYY2SllvyxPr521/EWFsdA0Jwe2/+iHERZSAP96uiCPhfFllWjMH2
/nlMwDaWrrWIdjGeve+ZS2+/nbCWUovrV+Zx0zimpjzq5lRFq0EvWJOX+20YWj2P
oczMTdnmB7odrC1sm+9Qudp2Eqxix/Zd5bZVKiA3MePc
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:18 2025 by rpki-client