Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/pRIAJQlSrUkvuKhnZASC9fivsrg.roa
File: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (raw, json)
Hash identifier: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=
Subject key identifier: A5:12:00:25:09:52:AD:49:2F:B8:A8:67:64:04:82:F5:F8:AF:B2:B8
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 01942521D1BBE556E9BEF27C5850E73AA84E
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/pRIAJQlSrUkvuKhnZASC9fivsrg.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 95.130.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d1:bb:e5:56:e9:be:f2:7c:58:50:e7:3a:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a51200250952ad492fb8a867640482f5f8afb2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:a2:e3:f1:d3:07:08:b6:65:a1:c9:8e:9c:
eb:bd:84:11:db:37:24:2e:0a:38:f2:6d:19:e6:54:
7f:a9:ed:29:8a:b8:8b:92:fc:7f:db:2b:51:f7:ea:
d6:ac:e0:9c:a3:67:fe:99:d0:43:b0:37:45:e8:4c:
2f:21:9f:7f:01:77:98:3b:cc:44:c6:cd:0c:f7:d2:
72:43:16:92:72:60:4e:64:e6:7e:53:28:f8:bf:a5:
3d:6c:43:d1:00:ca:96:31:09:fd:fc:55:c3:4a:8f:
2d:30:8a:2a:dd:3b:10:5b:f2:07:c0:c0:3c:88:75:
08:6d:c9:81:ec:01:ba:39:ac:47:ba:a1:d7:3c:49:
e1:89:68:e0:a9:54:bf:fc:bc:0d:69:f9:e9:be:ea:
fc:65:e4:99:5e:8c:e3:6b:35:16:c2:ee:ea:d0:57:
fa:82:ba:53:45:24:cc:7a:68:a3:07:61:6f:21:b4:
1b:ad:28:ea:95:85:d1:8a:52:c3:cb:a3:a8:f9:04:
f9:98:c9:27:0c:f4:13:db:21:ab:dd:39:ce:10:05:
41:b4:30:d6:d4:96:6c:a4:c6:29:94:c3:d6:d0:a1:
b9:f9:03:6f:cb:d8:1c:b6:2c:d4:7d:ea:2d:47:20:
4d:2e:88:b9:3d:9f:a0:9a:80:4e:8f:cb:78:52:0a:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:00:25:09:52:AD:49:2F:B8:A8:67:64:04:82:F5:F8:AF:B2:B8
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/pRIAJQlSrUkvuKhnZASC9fivsrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.184.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:21:ed:fb:f3:89:be:2b:62:a8:45:ba:33:43:df:f8:fb:b5:
47:b3:10:4c:cf:57:21:d7:9a:fb:7b:c7:64:2a:0b:cf:17:d4:
e0:b5:78:45:46:d9:80:8e:fa:c4:e3:0f:a2:7f:bf:56:77:ba:
83:02:42:98:9d:34:a9:45:aa:82:b6:7b:8c:cb:f9:b0:eb:06:
ca:bd:a5:4d:e1:0b:ac:2c:52:9e:90:11:f0:98:47:50:a5:22:
7b:89:96:8d:18:81:46:13:8d:82:8d:cb:e2:bf:83:d8:2a:a6:
21:48:23:01:fb:45:44:b3:6b:c9:74:17:fb:2e:ba:9f:ab:38:
81:d3:e4:83:dd:5b:7c:5a:5b:37:3b:d7:30:62:5d:3e:71:4c:
21:9c:df:1d:c6:6c:44:bb:fb:77:01:84:75:b3:66:a8:68:e4:
b0:bf:65:a7:ef:4f:ba:5b:10:3b:66:ec:19:83:f2:b5:e2:c3:
2a:4c:0a:77:0c:f8:60:41:32:4a:52:ee:3b:7f:5d:ec:53:f1:
00:99:06:10:d2:d7:ba:e9:75:f3:3b:18:44:b5:5e:da:5c:15:
ea:bb:ad:af:0a:c2:43:c8:d5:8f:05:0e:4e:8e:22:ee:e9:8d:
70:fa:39:79:96:58:c3:6d:49:d3:53:a2:d8:8c:aa:63:fa:96:
82:cc:a2:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIdG75VbpvvJ8WFDnOqhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz
NzZlZjAwHhcNMjUwMTAyMDM0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTEyMDAyNTA5NTJhZDQ5MmZiOGE4Njc2NDA0ODJmNWY4YWZiMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpui4/HTBwi2ZaHJjpzrvYQR2zck
Lgo48m0Z5lR/qe0piriLkvx/2ytR9+rWrOCco2f+mdBDsDdF6EwvIZ9/AXeYO8xE
xs0M99JyQxaScmBOZOZ+Uyj4v6U9bEPRAMqWMQn9/FXDSo8tMIoq3TsQW/IHwMA8
iHUIbcmB7AG6OaxHuqHXPEnhiWjgqVS//LwNafnpvur8ZeSZXozjazUWwu7q0Ff6
grpTRSTMemijB2FvIbQbrSjqlYXRilLDy6Oo+QT5mMknDPQT2yGr3TnOEAVBtDDW
1JZspMYplMPW0KG5+QNvy9gctizUfeotRyBNLoi5PZ+gmoBOj8t4Ugpw6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKUSACUJUq1JL7ioZ2QEgvX4r7K4MB8GA1UdIwQY
MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct
YzgxM2NlMGY1ZTQ3LzEvcFJJQUpRbFNyVWt2dUtoblpBU0M5Zml2c3JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3
LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4K4MA0G
CSqGSIb3DQEBCwUAA4IBAQAMIe3784m+K2KoRbozQ9/4+7VHsxBMz1ch15r7e8dk
KgvPF9TgtXhFRtmAjvrE4w+if79Wd7qDAkKYnTSpRaqCtnuMy/mw6wbKvaVN4Qus
LFKekBHwmEdQpSJ7iZaNGIFGE42Cjcviv4PYKqYhSCMB+0VEs2vJdBf7LrqfqziB
0+SD3Vt8Wls3O9cwYl0+cUwhnN8dxmxEu/t3AYR1s2aoaOSwv2Wn70+6WxA7ZuwZ
g/K14sMqTAp3DPhgQTJKUu47f13sU/EAmQYQ0te66XXzOxhEtV7aXBXqu62vCsJD
yNWPBQ5OjiLu6Y1w+jl5lljDbUnTU6LYjKpj+paCzKKO
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:01 2025 by rpki-client