Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/Uol637i_aGyEjqsV-G-zBBGF_fM.roa
File: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (raw, json)
Hash identifier: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=
Subject key identifier: 52:89:7A:DF:B8:BF:68:6C:84:8E:AB:15:F8:6F:B3:04:11:85:FD:F3
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 0195EDCCB14F2A1E7D7BD4619895C226ABA2
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/Uol637i_aGyEjqsV-G-zBBGF_fM.roa
Signing time: Mon 31 Mar 2025 20:02:49 +0000
ROA not before: Mon 31 Mar 2025 20:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199510
IP address blocks: 193.34.138.0/23 maxlen: 23
193.108.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:cc:b1:4f:2a:1e:7d:7b:d4:61:98:95:c2:26:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Mar 31 20:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52897adfb8bf686c848eab15f86fb3041185fdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:27:3a:b4:56:de:46:f2:37:cd:d6:87:2f:
7f:de:d7:d0:e3:fa:3f:11:3a:4d:62:a8:2a:13:a2:
e6:3f:0f:19:78:ab:9f:57:2a:15:af:89:28:4d:4e:
c5:bf:25:2f:d7:80:6a:74:b7:30:69:d5:8b:0b:6d:
d1:07:8a:fb:80:36:a6:1e:93:cd:60:74:85:92:22:
c1:dc:24:8b:cd:05:a4:81:e7:64:91:41:c3:ca:8d:
39:de:da:9b:79:05:c6:4d:d8:0e:07:4d:15:10:0d:
74:f1:36:5e:b4:7b:7f:9f:69:f2:71:99:92:ab:d7:
cd:c4:95:58:40:ec:7b:a2:cd:94:cd:2e:31:03:fa:
f4:19:16:f5:55:f6:b5:3a:79:56:85:74:bf:48:0a:
32:a8:c6:e9:75:cf:43:f7:ec:15:24:fa:37:76:9f:
81:af:ed:a4:19:98:ee:0b:15:1b:38:3a:0b:d0:99:
ae:61:35:04:43:88:b7:95:8e:e0:0c:e2:f8:89:7e:
88:e9:e7:3d:04:48:27:4b:08:35:a4:85:ae:a3:44:
3d:eb:ae:c3:3e:97:0b:77:f6:d3:83:e1:99:84:14:
d7:5e:c5:c9:53:ef:a2:bc:f4:98:78:40:9b:53:cf:
3c:60:4f:46:08:31:ba:93:2c:b0:6b:87:19:25:61:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:7A:DF:B8:BF:68:6C:84:8E:AB:15:F8:6F:B3:04:11:85:FD:F3
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/Uol637i_aGyEjqsV-G-zBBGF_fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.138.0/23
193.108.220.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:aa:52:be:02:13:d7:9b:41:6e:96:12:c0:2e:db:cf:c6:5e:
98:5b:b3:9c:58:e6:92:01:df:ad:a7:27:aa:a8:39:dd:7b:1b:
28:fb:e6:93:47:da:72:0b:ad:86:6e:16:ea:bd:75:92:79:cf:
6f:be:7c:2a:35:29:a1:33:48:65:25:d0:cd:ab:e7:8f:96:7b:
8d:1d:48:51:e4:f6:7e:ab:19:ee:e6:30:4f:3c:21:c4:fe:35:
c9:0a:02:86:f1:48:3c:a9:51:cf:57:59:62:14:ef:c0:aa:58:
e9:73:b8:a5:80:3f:b2:7e:3f:90:67:bb:c3:50:e9:a0:9e:9e:
5e:0f:80:b9:e1:b7:4d:1f:9d:af:00:e8:ab:e1:87:c6:f5:b5:
96:84:2f:de:b7:29:75:45:ef:80:c4:59:a9:a8:d2:25:5d:28:
69:dd:b5:c8:43:79:6b:89:9c:0f:2a:6b:ad:23:3f:cf:9c:44:
62:ee:95:45:c5:d0:0b:e0:79:76:83:2c:dd:9a:dc:22:2c:11:
aa:22:c8:40:00:1b:78:bd:4b:d5:82:fc:88:cb:66:65:a9:98:
09:d3:85:08:93:ae:54:49:a2:17:03:61:2e:2d:4f:74:45:93:
7f:1c:0b:43:41:94:21:37:5e:ef:14:de:0e:ec:48:a6:78:49:
be:88:01:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXtzLFPKh59e9RhmJXCJquiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjUwMzMxMjAwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mjg5N2FkZmI4YmY2ODZjODQ4ZWFiMTVmODZmYjMwNDExODVmZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzYnOrRW3kbyN83Why9/3tfQ4/o/
ETpNYqgqE6LmPw8ZeKufVyoVr4koTU7FvyUv14BqdLcwadWLC23RB4r7gDamHpPN
YHSFkiLB3CSLzQWkgedkkUHDyo053tqbeQXGTdgOB00VEA108TZetHt/n2nycZmS
q9fNxJVYQOx7os2UzS4xA/r0GRb1Vfa1OnlWhXS/SAoyqMbpdc9D9+wVJPo3dp+B
r+2kGZjuCxUbODoL0JmuYTUEQ4i3lY7gDOL4iX6I6ec9BEgnSwg1pIWuo0Q9667D
PpcLd/bTg+GZhBTXXsXJU++ivPSYeECbU888YE9GCDG6kyywa4cZJWHjbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFKJet+4v2hshI6rFfhvswQRhf3zMB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvVW9sNjM3aV9hR3lFanFzVi1HLXpCQkdGX2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSKKAwQA
wWzcMA0GCSqGSIb3DQEBCwUAA4IBAQDlqlK+AhPXm0FulhLALtvPxl6YW7OcWOaS
Ad+tpyeqqDndexso++aTR9pyC62GbhbqvXWSec9vvnwqNSmhM0hlJdDNq+ePlnuN
HUhR5PZ+qxnu5jBPPCHE/jXJCgKG8Ug8qVHPV1liFO/Aqljpc7ilgD+yfj+QZ7vD
UOmgnp5eD4C54bdNH52vAOir4YfG9bWWhC/etyl1Re+AxFmpqNIlXShp3bXIQ3lr
iZwPKmutIz/PnERi7pVFxdAL4Hl2gyzdmtwiLBGqIshAABt4vUvVgvyIy2ZlqZgJ
04UIk65USaIXA2EuLU90RZN/HAtDQZQhN17vFN4O7EimeEm+iAG1
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:16 2025 by rpki-client