Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/SiSRrPcHelaVZsbMdPyYnFpcX7g.roa
File: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (raw, json)
Hash identifier: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=
Subject key identifier: 4A:24:91:AC:F7:07:7A:56:95:66:C6:CC:74:FC:98:9C:5A:5C:5F:B8
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 0194221F4E11F7D50D679CDE845E1EB5AE5B
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/SiSRrPcHelaVZsbMdPyYnFpcX7g.roa
Signing time: Wed 01 Jan 2025 13:47:44 +0000
ROA not before: Wed 01 Jan 2025 13:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47472
IP address blocks: 195.242.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4e:11:f7:d5:0d:67:9c:de:84:5e:1e:b5:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a2491acf7077a569566c6cc74fc989c5a5c5fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:16:b6:d0:3a:d4:d6:ce:9e:69:3b:4d:4b:
34:6b:1c:68:84:b2:57:25:af:30:45:00:a1:1b:26:
4c:fc:d9:56:2d:2d:44:8e:55:1f:48:42:a4:25:f4:
51:9b:d2:ff:ee:7e:60:dc:66:7d:bc:d3:72:42:24:
59:e8:5c:7f:0d:f3:7e:21:80:e1:f5:ba:84:52:ee:
55:e7:64:b0:ef:da:ea:a8:0d:3c:81:4e:3f:0c:9d:
f8:63:3f:25:36:37:63:ec:45:07:a6:1a:94:fe:2d:
96:fb:63:01:4c:1b:67:58:bb:3a:f4:15:d8:92:53:
a1:ee:20:2c:39:6c:56:41:db:ce:86:11:36:31:0e:
a3:02:01:1f:80:b2:b0:ce:e0:09:1e:a5:fe:d2:46:
f2:9e:31:d3:03:67:70:9a:a1:11:d6:f2:ee:a1:4c:
0f:2f:ce:11:86:bf:f8:c5:71:8a:0d:5d:db:4e:3d:
de:1f:b8:49:d6:35:fa:7e:15:8c:52:2a:30:40:96:
ba:b0:b7:33:20:db:aa:fe:04:4c:da:21:79:40:2f:
10:74:69:fa:c2:6e:b4:4d:f5:f6:1d:90:97:a2:80:
2e:cf:11:63:94:44:55:c8:ff:e8:7f:8f:ab:6b:bd:
47:e3:62:f5:72:ef:8d:71:da:2a:a0:61:03:ca:7d:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:91:AC:F7:07:7A:56:95:66:C6:CC:74:FC:98:9C:5A:5C:5F:B8
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/SiSRrPcHelaVZsbMdPyYnFpcX7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a5:2e:d3:44:b2:9c:1e:4e:26:8e:54:c5:37:7f:ed:0d:0e:
ba:f9:a2:7b:64:4f:4d:9f:70:fe:27:46:ed:4a:b8:3a:c2:13:
cc:a9:aa:9c:96:cf:96:7e:6e:c0:c1:ae:c1:81:0a:5c:08:ae:
8c:a1:e0:7c:88:68:3d:3a:be:eb:7f:dc:d8:6f:96:28:39:e9:
06:b4:22:f1:b0:34:e4:e1:2e:e6:0c:ac:be:dc:5b:e8:2e:5b:
7c:29:53:67:ee:0c:a4:a5:f6:f9:9f:51:13:71:c9:5f:00:cd:
51:4e:8c:93:b9:81:81:b7:a0:e2:f5:bc:84:11:97:69:1d:6c:
71:4c:68:d2:23:d8:d8:bc:3a:32:5b:2d:f7:1d:3a:98:6d:f7:
60:aa:fc:56:75:43:d4:03:93:1c:f4:e0:d4:7e:67:3d:97:f6:
14:f4:7e:13:3b:bc:3c:b6:c6:7a:c2:6b:b5:f3:d0:18:cd:9c:
45:b2:31:d7:71:90:37:0d:d2:1b:0c:22:f3:58:64:25:a2:0d:
46:e3:71:54:c6:49:cd:63:6e:b4:60:fe:96:cd:d3:8e:14:4a:
a3:d0:38:83:74:38:08:de:69:93:6f:da:09:a1:d4:69:26:cd:
51:23:b9:ba:56:1c:20:d2:a7:8d:fd:60:c9:d1:b0:ac:16:08:
4c:2a:c1:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH04R99UNZ5zehF4eta5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjAyMmNlNGRjODFmMDNiM2IzMDczMGE2YzIzZWFmMzQy
ZWNjNWUwHhcNMjUwMTAxMTM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTI0OTFhY2Y3MDc3YTU2OTU2NmM2Y2M3NGZjOTg5YzVhNWM1ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrYWttA61NbOnmk7TUs0axxohLJX
Ja8wRQChGyZM/NlWLS1EjlUfSEKkJfRRm9L/7n5g3GZ9vNNyQiRZ6Fx/DfN+IYDh
9bqEUu5V52Sw79rqqA08gU4/DJ34Yz8lNjdj7EUHphqU/i2W+2MBTBtnWLs69BXY
klOh7iAsOWxWQdvOhhE2MQ6jAgEfgLKwzuAJHqX+0kbynjHTA2dwmqER1vLuoUwP
L84Rhr/4xXGKDV3bTj3eH7hJ1jX6fhWMUiowQJa6sLczINuq/gRM2iF5QC8QdGn6
wm60TfX2HZCXooAuzxFjlERVyP/of4+ra71H42L1cu+NcdoqoGEDyn2e+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEokkaz3B3pWlWbGzHT8mJxaXF+4MB8GA1UdIwQY
MBaAFCzwIs5NyB8Ds7MHMKbCPq80LsxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUt
Y2E0ZWQ4MDk3OTcwLzEvU2lTUnJQY0hlbGFWWnNiTWRQeVluRnBjWDdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUtY2E0ZWQ4MDk3OTcw
LzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/K0MA0G
CSqGSIb3DQEBCwUAA4IBAQBvpS7TRLKcHk4mjlTFN3/tDQ66+aJ7ZE9Nn3D+J0bt
Srg6whPMqaqcls+Wfm7Awa7BgQpcCK6MoeB8iGg9Or7rf9zYb5YoOekGtCLxsDTk
4S7mDKy+3FvoLlt8KVNn7gykpfb5n1ETcclfAM1RToyTuYGBt6Di9byEEZdpHWxx
TGjSI9jYvDoyWy33HTqYbfdgqvxWdUPUA5Mc9ODUfmc9l/YU9H4TO7w8tsZ6wmu1
89AYzZxFsjHXcZA3DdIbDCLzWGQlog1G43FUxknNY260YP6WzdOOFEqj0DiDdDgI
3mmTb9oJodRpJs1RI7m6Vhwg0qeN/WDJ0bCsFghMKsFU
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:33:33 2025 by rpki-client