Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/uSGhwqa1EaWC0O0u-4TI5idqWHY.roa
File: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (raw, json)
Hash identifier: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=
Subject key identifier: B9:21:A1:C2:A6:B5:11:A5:82:D0:ED:2E:FB:84:C8:E6:27:6A:58:76
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01942143AA33B617104BD7C6A6F216462EAD
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/uSGhwqa1EaWC0O0u-4TI5idqWHY.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 94.142.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:aa:33:b6:17:10:4b:d7:c6:a6:f2:16:46:2e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b921a1c2a6b511a582d0ed2efb84c8e6276a5876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:9a:56:06:01:60:2d:ea:ee:2e:cb:c2:7b:
54:b0:e0:68:95:e3:4c:f3:db:e1:ab:1b:e9:a7:a2:
95:e2:8a:0b:34:4c:2c:05:21:00:04:2b:a0:d6:77:
36:2f:ac:59:e3:ed:43:3c:2b:97:5c:a3:fe:33:cd:
bd:ff:5f:95:eb:44:14:e2:f1:44:9a:85:8d:04:8e:
a1:5b:9d:b4:57:1c:21:95:07:f0:c9:e7:83:65:f7:
27:03:ac:52:24:82:aa:79:13:9a:c3:37:ca:7a:20:
83:b2:f0:81:a6:e9:2c:a3:91:88:d0:8f:46:55:8d:
b2:93:6a:28:cf:5e:5b:a9:f5:35:30:3c:c3:99:5c:
20:8f:62:58:ae:27:f8:64:f0:8c:9e:a5:fc:e4:ee:
cf:0f:d8:bf:6d:5b:cb:5c:d3:55:12:43:d0:d2:e5:
f6:6a:b2:c7:ea:4f:34:4e:a4:c9:04:2b:c0:b1:77:
61:c1:5e:b6:7b:43:0b:b3:aa:78:4b:4f:84:0f:90:
3e:b8:29:a2:db:9a:8b:f5:b5:73:23:18:03:42:4d:
81:40:33:e3:40:54:a3:f0:36:74:76:08:2d:ae:bb:
d2:f6:76:79:29:25:4b:60:5b:ce:e4:d3:0b:1e:b7:
26:d8:8f:ca:5c:63:22:e8:3e:e6:c3:26:4d:c7:c7:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:A1:C2:A6:B5:11:A5:82:D0:ED:2E:FB:84:C8:E6:27:6A:58:76
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/uSGhwqa1EaWC0O0u-4TI5idqWHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.252.0/24
Signature Algorithm: sha256WithRSAEncryption
66:62:0c:9d:4c:cd:48:44:a1:ac:ab:2c:50:22:94:8e:c8:69:
c3:80:0d:8b:2a:48:d1:4f:f2:9e:0b:fc:8a:f2:04:81:fa:5d:
7a:c3:9a:6a:d3:72:df:89:29:b2:3e:a7:61:9f:64:dd:55:96:
78:cc:ab:19:2f:94:fa:61:4c:0c:fb:aa:8a:12:83:8a:ad:12:
ae:5e:dd:22:67:29:48:34:9f:fa:05:24:87:e2:24:02:d3:45:
3e:3b:7f:ec:c3:c3:d3:a9:ff:aa:2d:18:e1:9a:47:a2:90:15:
8f:2f:20:5c:9d:39:f6:c8:17:c4:79:fd:86:ab:a2:38:dd:3a:
fa:ce:c0:5e:53:61:a8:72:a9:b7:c8:d2:4a:55:20:ca:eb:bd:
27:c9:d0:c0:30:93:97:57:6c:c1:ad:34:d4:e0:17:74:61:22:
7a:86:2c:a7:30:5c:e0:9d:1d:85:a7:74:b8:ad:db:80:bd:f6:
f7:61:02:b2:0a:e3:26:b5:ce:45:c9:0e:6b:e8:ab:e5:d3:e7:
1e:b4:20:b6:37:b5:a1:12:ca:3f:36:02:50:b0:9e:68:ff:43:
5e:06:ea:7c:89:0c:54:58:99:18:c7:27:8d:37:e4:3f:cc:dc:
43:2a:49:94:22:1f:a5:da:0c:bb:32:32:a5:36:d1:a2:2e:e1:
b0:47:6b:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ6ozthcQS9fGpvIWRi6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm
N2JmMmEwHhcNMjUwMTAxMDk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTIxYTFjMmE2YjUxMWE1ODJkMGVkMmVmYjg0YzhlNjI3NmE1ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbWaVgYBYC3q7i7LwntUsOBoleNM
89vhqxvpp6KV4ooLNEwsBSEABCug1nc2L6xZ4+1DPCuXXKP+M829/1+V60QU4vFE
moWNBI6hW520VxwhlQfwyeeDZfcnA6xSJIKqeROawzfKeiCDsvCBpukso5GI0I9G
VY2yk2ooz15bqfU1MDzDmVwgj2JYrif4ZPCMnqX85O7PD9i/bVvLXNNVEkPQ0uX2
arLH6k80TqTJBCvAsXdhwV62e0MLs6p4S0+ED5A+uCmi25qL9bVzIxgDQk2BQDPj
QFSj8DZ0dggtrrvS9nZ5KSVLYFvO5NMLHrcm2I/KXGMi6D7mwyZNx8dceQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkhocKmtRGlgtDtLvuEyOYnalh2MB8GA1UdIwQY
MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt
YzY2MzJjYzAxNGIwLzEvdVNHaHdxYTFFYVdDME8wdS00VEk1aWRxV0hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw
LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo78MA0G
CSqGSIb3DQEBCwUAA4IBAQBmYgydTM1IRKGsqyxQIpSOyGnDgA2LKkjRT/KeC/yK
8gSB+l16w5pq03LfiSmyPqdhn2TdVZZ4zKsZL5T6YUwM+6qKEoOKrRKuXt0iZylI
NJ/6BSSH4iQC00U+O3/sw8PTqf+qLRjhmkeikBWPLyBcnTn2yBfEef2Gq6I43Tr6
zsBeU2Gocqm3yNJKVSDK670nydDAMJOXV2zBrTTU4Bd0YSJ6hiynMFzgnR2Fp3S4
rduAvfb3YQKyCuMmtc5FyQ5r6Kvl0+cetCC2N7WhEso/NgJQsJ5o/0NeBup8iQxU
WJkYxyeNN+Q/zNxDKkmUIh+l2gy7MjKlNtGiLuGwR2tj
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:31:48 2025 by rpki-client