Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/F0fLEPNHCyvyIlmIFcsqkPyplGA.roa
File: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (raw, json)
Hash identifier: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=
Subject key identifier: 17:47:CB:10:F3:47:0B:2B:F2:22:59:88:15:CB:2A:90:FC:A9:94:60
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019427B5947CE1A16BA89BDC380B63464B13
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/F0fLEPNHCyvyIlmIFcsqkPyplGA.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 94.199.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:94:7c:e1:a1:6b:a8:9b:dc:38:0b:63:46:4b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1747cb10f3470b2bf222598815cb2a90fca99460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:6e:b8:09:e6:8e:de:cc:33:5f:a9:e5:1f:
90:b9:23:0e:7c:0b:f6:7a:5f:4f:fe:8c:0f:5d:4e:
4b:a3:11:d1:97:ed:d9:53:fd:47:cf:3b:d4:e7:a7:
fc:49:db:67:da:30:e0:bd:9e:ce:b1:70:d2:5a:79:
fe:d7:00:ac:ce:8f:0f:95:02:d3:a3:06:42:10:1a:
ba:36:89:14:5c:59:26:f2:bd:c7:28:5e:4f:e9:c6:
96:3a:f7:4b:95:b4:96:d3:2d:df:df:ad:d6:a4:f4:
44:31:5c:4a:29:9b:e2:5f:47:84:6b:6a:9a:ba:39:
aa:e6:0b:e1:a2:11:f7:ae:fd:ba:33:3d:c5:74:58:
8a:e3:f6:7b:e6:52:48:e8:14:3f:bd:58:83:68:54:
c1:09:a2:63:e3:de:28:85:1f:41:cf:ef:b8:db:2b:
3b:54:ba:4d:7c:3b:5c:f1:ad:80:8b:2d:80:62:55:
91:1f:e4:26:a6:65:dd:a7:7b:52:76:2d:99:76:44:
f7:b6:46:63:82:cd:8c:57:09:2e:fb:22:6c:86:15:
55:4d:8d:c4:ea:28:8a:9b:87:ac:64:d9:e3:3c:17:
26:9a:60:dd:ba:3b:62:56:af:9c:3e:85:79:8e:8d:
d1:48:47:ca:b9:5a:8e:50:9a:8f:3e:0e:bf:59:83:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:CB:10:F3:47:0B:2B:F2:22:59:88:15:CB:2A:90:FC:A9:94:60
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/F0fLEPNHCyvyIlmIFcsqkPyplGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.0.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3d:c8:18:63:fd:51:d8:be:ec:00:83:38:44:55:ef:61:f6:
db:5a:88:28:d2:15:6b:7f:5f:4a:b1:54:f0:5a:ba:17:38:09:
46:d5:52:59:25:3c:f5:86:d0:5d:10:c2:71:f2:ce:45:4d:5d:
ce:59:a8:ae:b8:42:0c:c9:45:17:3c:07:04:a2:57:8a:93:59:
16:ef:7a:bf:a2:08:d4:be:c0:a9:74:10:42:83:80:83:0c:b1:
42:a8:95:99:ef:e7:0b:09:a3:45:82:27:a0:dc:f7:8a:4f:30:
a8:d0:38:ab:bd:e6:38:0e:3c:5b:c4:5a:b2:49:6f:d0:c5:ab:
51:f7:2b:9a:fd:79:6a:b1:fb:b9:ea:bd:09:93:5d:99:1f:b1:
a8:ad:d5:7a:11:bc:00:65:91:88:58:25:66:bc:2e:4f:9f:24:
d8:18:0e:4f:a7:05:c3:c4:89:2e:44:a0:87:c3:76:e7:45:8d:
a8:fa:f3:4f:e7:26:a4:13:cd:0b:04:fd:d8:7f:28:ea:5a:db:
2b:ed:4c:8d:42:88:d7:26:9e:4f:0f:76:b6:5e:49:02:6d:84:
de:74:c4:98:7d:fa:e9:73:ca:62:50:92:43:3b:49:82:f2:33:
b5:a4:65:4f:63:65:ce:99:6d:e6:17:d0:dd:35:b2:8e:42:67:
b0:c9:57:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZR84aFrqJvcOAtjRksTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4
Nzk1MzcwHhcNMjUwMTAyMTU0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzQ3Y2IxMGYzNDcwYjJiZjIyMjU5ODgxNWNiMmE5MGZjYTk5NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12duuAnmjt7MM1+p5R+QuSMOfAv2
el9P/owPXU5LoxHRl+3ZU/1HzzvU56f8Sdtn2jDgvZ7OsXDSWnn+1wCszo8PlQLT
owZCEBq6NokUXFkm8r3HKF5P6caWOvdLlbSW0y3f363WpPREMVxKKZviX0eEa2qa
ujmq5gvhohH3rv26Mz3FdFiK4/Z75lJI6BQ/vViDaFTBCaJj494ohR9Bz++42ys7
VLpNfDtc8a2Aiy2AYlWRH+QmpmXdp3tSdi2ZdkT3tkZjgs2MVwku+yJshhVVTY3E
6iiKm4esZNnjPBcmmmDdujtiVq+cPoV5jo3RSEfKuVqOUJqPPg6/WYN1uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBdHyxDzRwsr8iJZiBXLKpD8qZRgMB8GA1UdIwQY
MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt
ZTkyZWU1ZWVkMjI2LzEvRjBmTEVQTkhDeXZ5SWxtSUZjc3FrUHlwbEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2
LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXscAMA0G
CSqGSIb3DQEBCwUAA4IBAQBBPcgYY/1R2L7sAIM4RFXvYfbbWogo0hVrf19KsVTw
WroXOAlG1VJZJTz1htBdEMJx8s5FTV3OWaiuuEIMyUUXPAcEoleKk1kW73q/ogjU
vsCpdBBCg4CDDLFCqJWZ7+cLCaNFgieg3PeKTzCo0DirveY4DjxbxFqySW/QxatR
9yua/Xlqsfu56r0Jk12ZH7GordV6EbwAZZGIWCVmvC5PnyTYGA5PpwXDxIkuRKCH
w3bnRY2o+vNP5yakE80LBP3YfyjqWtsr7UyNQojXJp5PD3a2XkkCbYTedMSYffrp
c8piUJJDO0mC8jO1pGVPY2XOmW3mF9DdNbKOQmewyVfX
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:34:47 2025 by rpki-client