Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa
File: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (raw, json)
Hash identifier: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=
Subject key identifier: 53:89:49:BE:2A:58:6E:BE:00:65:06:F0:DE:F4:38:AE:95:DF:5C:DE
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019427B586E5390A0BC8DD0145D083B0B628
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:86:e5:39:0a:0b:c8:dd:01:45:d0:83:b0:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=538949be2a586ebe006506f0def438ae95df5cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:55:a6:ea:87:9b:33:d6:b9:ec:ae:d0:9f:
ee:51:c2:1f:c4:cd:8d:77:2c:5b:05:ae:81:22:90:
a0:30:56:19:10:2e:d7:be:f0:01:2b:53:81:ae:09:
07:af:6a:d7:45:e0:61:03:60:07:e9:66:4a:da:a7:
b9:9f:fd:b0:a1:41:ee:31:12:4d:6a:50:7d:f1:7c:
ef:70:ca:66:b7:f6:ac:52:fa:91:d3:9e:0b:ad:78:
c2:a5:08:cf:4d:ce:f0:6a:b1:0e:d7:22:b2:4e:dc:
a7:b3:bf:a0:ac:1e:a1:7c:c7:c4:0d:0c:69:3d:b0:
40:6e:b0:cd:da:5c:ef:4a:37:0f:7d:1f:c8:3b:58:
e8:e7:af:1a:4b:d3:0f:11:e1:de:78:11:81:1a:82:
65:80:ec:70:8b:62:a1:96:8f:e9:f0:e6:a1:55:98:
09:f0:97:ad:13:42:cd:bf:4e:ed:89:5b:28:19:64:
d1:d8:9a:2f:b7:9f:95:fa:64:2b:59:1e:66:b0:33:
45:fb:24:23:87:41:8c:2a:43:36:8d:7c:e5:84:03:
2a:35:d7:28:26:05:bd:5d:fc:8c:bc:96:50:40:45:
ba:de:0d:5b:ee:88:48:25:28:f9:80:ed:dd:85:ea:
c5:c5:47:6f:a5:20:dc:71:4d:e4:20:86:40:ef:de:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:49:BE:2A:58:6E:BE:00:65:06:F0:DE:F4:38:AE:95:DF:5C:DE
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
71:67:38:cb:03:74:5b:ba:68:64:6a:89:71:85:15:d4:db:eb:
38:b0:54:fd:c6:20:f6:08:65:9a:52:59:ab:68:81:6e:ea:ae:
87:e2:88:81:a9:23:d9:be:6a:ec:43:d8:32:f8:5b:27:78:9c:
56:a5:1a:a1:61:cb:f2:a7:c3:29:0c:37:e1:8f:51:d3:77:25:
6e:e5:52:54:0b:74:ae:99:58:9d:17:52:7e:ed:ed:0b:4c:05:
43:a3:d5:88:24:02:dc:5f:3e:ee:65:30:51:98:ef:ed:0d:d5:
8f:a5:f9:73:dc:02:59:91:86:14:f8:a0:a6:de:42:47:72:9a:
8a:3b:3c:c0:f8:e5:5b:3b:2a:1d:6f:bc:4e:d4:f6:57:9f:42:
29:8c:fe:72:98:97:30:01:e2:9f:18:4e:70:f3:72:f8:c6:ae:
c6:2b:51:7b:d3:a0:17:b7:d9:e7:c4:3a:17:0b:5f:94:0e:d6:
a1:97:3c:89:93:8b:f0:b9:5c:16:6e:83:6f:8a:d3:47:82:d6:
66:73:b7:b1:b8:22:61:82:14:29:a1:b7:b2:25:d8:4e:93:e1:
b4:aa:3f:18:04:53:93:0d:62:9f:63:cb:6c:30:00:c8:d2:be:
35:fd:25:f2:af:2f:f0:a3:42:85:cc:b3:68:a5:e1:e4:1e:12:
26:3a:27:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntYblOQoLyN0BRdCDsLYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjUwMTAyMTU0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzg5NDliZTJhNTg2ZWJlMDA2NTA2ZjBkZWY0MzhhZTk1ZGY1Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpNVpuqHmzPWueyu0J/uUcIfxM2N
dyxbBa6BIpCgMFYZEC7XvvABK1OBrgkHr2rXReBhA2AH6WZK2qe5n/2woUHuMRJN
alB98XzvcMpmt/asUvqR054LrXjCpQjPTc7warEO1yKyTtyns7+grB6hfMfEDQxp
PbBAbrDN2lzvSjcPfR/IO1jo568aS9MPEeHeeBGBGoJlgOxwi2Khlo/p8OahVZgJ
8JetE0LNv07tiVsoGWTR2Jovt5+V+mQrWR5msDNF+yQjh0GMKkM2jXzlhAMqNdco
JgW9XfyMvJZQQEW63g1b7ohIJSj5gO3dherFxUdvpSDccU3kIIZA797lFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOJSb4qWG6+AGUG8N70OK6V31zeMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvVTRsSnZpcFlicjRBWlFidzN2UTRycFhmWE40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeQMA0G
CSqGSIb3DQEBCwUAA4IBAQBxZzjLA3RbumhkaolxhRXU2+s4sFT9xiD2CGWaUlmr
aIFu6q6H4oiBqSPZvmrsQ9gy+FsneJxWpRqhYcvyp8MpDDfhj1HTdyVu5VJUC3Su
mVidF1J+7e0LTAVDo9WIJALcXz7uZTBRmO/tDdWPpflz3AJZkYYU+KCm3kJHcpqK
OzzA+OVbOyodb7xO1PZXn0IpjP5ymJcwAeKfGE5w83L4xq7GK1F706AXt9nnxDoX
C1+UDtahlzyJk4vwuVwWboNvitNHgtZmc7exuCJhghQpobeyJdhOk+G0qj8YBFOT
DWKfY8tsMADI0r41/SXyry/wo0KFzLNopeHkHhImOici
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:08 2025 by rpki-client