Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/v99_kaWjoTKnpnOcBogb8Emjk4M.roa
File: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (raw, json)
Hash identifier: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=
Subject key identifier: BF:DF:7F:91:A5:A3:A1:32:A7:A6:73:9C:06:88:1B:F0:49:A3:93:83
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7B0D1BDB949AB0C9B71355E870F1
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/v99_kaWjoTKnpnOcBogb8Emjk4M.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49150
IP address blocks: 93.174.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7b:0d:1b:db:94:9a:b0:c9:b7:13:55:e8:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfdf7f91a5a3a132a7a6739c06881bf049a39383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:49:65:70:fe:29:51:a4:96:a9:a8:ac:16:
69:3d:10:d0:0e:6d:77:f0:35:4c:03:3f:9a:1e:8e:
61:85:30:78:4c:a2:72:56:46:23:be:9e:8b:5d:5b:
09:a5:aa:af:e7:92:13:2e:d2:c5:2d:6b:c8:34:12:
41:a5:cc:7e:f9:26:3e:5e:ba:b0:47:5a:a0:d9:c2:
a3:18:3d:3c:6d:3b:70:cf:03:e1:49:cf:c2:12:ad:
b7:ec:56:ef:cc:c7:da:02:fd:38:c5:7a:99:9b:0e:
70:ff:77:28:ec:27:7f:42:33:26:d6:8a:9e:2c:f5:
11:49:fd:f9:5a:7b:7e:70:71:ce:be:04:61:d9:55:
5f:53:12:3c:d0:ad:8a:4b:3d:58:d4:28:66:96:eb:
a5:f0:6e:b8:89:6d:8a:14:07:dd:fa:5a:ed:f9:67:
99:76:fd:6c:67:0a:21:1d:10:8a:74:95:b7:f0:02:
01:e8:f3:44:05:61:e2:89:45:c3:c6:25:e2:71:f0:
c6:45:a6:5d:ed:70:3f:82:3f:9e:36:f4:28:cb:09:
79:35:4a:fa:6c:4b:c9:77:37:92:ce:2d:e6:b8:f7:
58:cd:10:21:15:35:5d:68:b1:09:52:8d:b1:ae:c5:
fb:ed:89:6b:15:8f:bc:7f:1d:c8:60:5b:6d:d4:39:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:7F:91:A5:A3:A1:32:A7:A6:73:9C:06:88:1B:F0:49:A3:93:83
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/v99_kaWjoTKnpnOcBogb8Emjk4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.161.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b5:b2:34:24:d2:da:f1:76:df:22:1b:8f:e7:b1:46:ed:eb:
6f:88:4a:41:85:f7:40:49:ba:5b:7c:5b:5c:31:15:99:06:3c:
60:d5:5b:39:e2:74:09:cd:f9:65:6e:99:6e:1e:28:e0:46:43:
b8:4e:f7:75:48:96:82:72:eb:29:bf:71:85:f4:3b:5c:5f:4e:
ff:92:fe:fb:e8:95:c8:d5:20:7e:6a:70:e5:20:14:53:16:d9:
70:2d:47:85:1c:1e:02:ff:2a:ea:04:79:e2:6a:df:b7:a5:78:
f2:54:ab:f5:7c:71:bd:4c:ac:3d:25:ac:4d:33:4e:f9:b8:59:
e9:fc:76:ac:48:4e:ee:09:34:17:b3:25:84:26:8e:7e:5f:51:
87:70:83:a9:12:3e:a8:03:f1:6c:0d:ec:d3:29:b3:4c:39:67:
27:09:60:d7:07:af:6e:99:95:72:20:03:11:09:79:15:22:43:
fc:9f:88:f7:b1:29:cf:fc:13:3b:ec:b0:15:f2:ba:21:79:95:
e1:26:29:6c:26:f0:de:f4:ee:df:eb:29:63:00:86:d5:ea:4b:
c4:7d:ed:15:1e:67:a1:24:49:7b:4f:02:c1:73:23:55:fe:54:
73:f2:57:68:73:d6:fa:2a:90:8f:df:4e:3c:53:f1:62:ee:e8:
9f:22:91:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH3sNG9uUmrDJtxNV6HDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTAxMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmRmN2Y5MWE1YTNhMTMyYTdhNjczOWMwNjg4MWJmMDQ5YTM5MzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVlJZXD+KVGklqmorBZpPRDQDm13
8DVMAz+aHo5hhTB4TKJyVkYjvp6LXVsJpaqv55ITLtLFLWvINBJBpcx++SY+Xrqw
R1qg2cKjGD08bTtwzwPhSc/CEq237FbvzMfaAv04xXqZmw5w/3co7Cd/QjMm1oqe
LPURSf35Wnt+cHHOvgRh2VVfUxI80K2KSz1Y1Chmluul8G64iW2KFAfd+lrt+WeZ
dv1sZwohHRCKdJW38AIB6PNEBWHiiUXDxiXicfDGRaZd7XA/gj+eNvQoywl5NUr6
bEvJdzeSzi3muPdYzRAhFTVdaLEJUo2xrsX77YlrFY+8fx3IYFtt1Dko0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/ff5Glo6Eyp6ZznAaIG/BJo5ODMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvdjk5X2thV2pvVEtucG5PY0JvZ2I4RW1qazRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXa6hMA0G
CSqGSIb3DQEBCwUAA4IBAQBptbI0JNLa8XbfIhuP57FG7etviEpBhfdASbpbfFtc
MRWZBjxg1Vs54nQJzfllbpluHijgRkO4Tvd1SJaCcuspv3GF9DtcX07/kv776JXI
1SB+anDlIBRTFtlwLUeFHB4C/yrqBHniat+3pXjyVKv1fHG9TKw9JaxNM075uFnp
/HasSE7uCTQXsyWEJo5+X1GHcIOpEj6oA/FsDezTKbNMOWcnCWDXB69umZVyIAMR
CXkVIkP8n4j3sSnP/BM77LAV8roheZXhJilsJvDe9O7f6yljAIbV6kvEfe0VHmeh
JEl7TwLBcyNV/lRz8ldoc9b6KpCP3048U/Fi7uifIpFx
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:42 2025 by rpki-client