Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa
File: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (raw, json)
Hash identifier: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=
Subject key identifier: 98:87:96:AC:2B:C7:FE:F8:BA:58:83:B8:01:BA:B0:D3:04:99:F7:01
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 0196491402B14450E2921C09358A39273699
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa
Signing time: Fri 18 Apr 2025 13:26:10 +0000
ROA not before: Fri 18 Apr 2025 13:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.119.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:14:02:b1:44:50:e2:92:1c:09:35:8a:39:27:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Apr 18 13:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988796ac2bc7fef8ba5883b801bab0d30499f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:74:3e:67:26:e1:7b:12:65:f8:44:1c:7f:
db:47:cd:73:82:c5:e3:ef:43:29:3a:e6:cc:d4:00:
cd:08:70:91:ae:39:a1:60:55:1c:99:3f:05:c2:0b:
61:d4:82:0b:70:b8:87:56:fa:df:97:e5:cd:45:e6:
a8:35:58:cd:12:b9:23:e6:c8:df:a9:56:50:56:52:
97:4f:cd:ee:81:5a:fb:21:c8:f1:4b:e8:e9:b2:3a:
bf:d5:b9:a9:8e:fb:9e:36:3f:86:fb:4b:56:00:d8:
af:cb:c7:67:e9:cf:2f:75:d0:84:71:cb:c7:81:23:
28:92:be:84:1b:97:42:f3:a3:cd:16:48:43:10:87:
aa:6e:58:e6:66:c2:71:17:38:67:b6:ae:8e:e7:5a:
82:77:c4:eb:1f:02:6e:9c:77:5b:a3:18:1c:86:b9:
64:92:01:fb:ca:a7:e2:00:21:12:e7:99:f8:de:d5:
55:cd:7a:ef:61:f3:e1:a4:18:c0:9f:09:3c:3e:55:
b6:21:f3:1f:19:3f:2f:9c:86:6d:6d:d9:73:ac:03:
de:19:03:6b:f1:50:81:a2:7a:13:f2:2a:e4:54:fd:
f6:28:e1:bf:da:fd:03:0d:96:5f:fa:a1:65:56:84:
60:8c:7b:6f:fe:00:4f:bf:34:8d:a2:b7:74:d6:6d:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:96:AC:2B:C7:FE:F8:BA:58:83:B8:01:BA:B0:D3:04:99:F7:01
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.119.70.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d6:07:7f:08:e8:6f:66:f1:28:8c:b9:d3:95:ac:c8:aa:49:
a3:79:43:0b:84:0d:8d:ca:78:b4:b7:73:15:f0:c0:bd:3f:b9:
34:91:9c:2b:44:63:a0:41:81:79:cf:0c:4a:30:24:54:80:73:
db:03:5a:15:47:40:9a:63:7d:67:4c:5c:cc:8c:e0:db:e5:e8:
06:91:61:d7:d8:f2:d2:f7:7d:6e:e2:be:e0:6a:14:fa:11:f9:
75:e0:8d:6b:50:49:03:b4:5f:d9:b8:ab:cf:99:87:c3:7d:3d:
53:8d:4d:06:56:df:3a:0a:00:0a:62:12:cd:14:d8:7d:18:04:
93:0a:02:b6:9f:be:9d:bc:02:83:cd:ef:b4:4e:b4:9b:ba:ca:
26:9c:70:92:af:03:4e:d5:ee:e2:4b:85:5e:49:b9:4d:8a:9e:
01:ac:a2:4e:84:ea:7e:8b:01:a4:c2:49:a5:8f:0c:3e:4c:ed:
54:b0:27:d5:97:da:30:b6:ec:9a:28:86:a7:37:2b:dd:ed:24:
2d:90:f0:0f:a5:73:b2:83:50:d1:06:1b:05:0b:d3:a1:18:9b:
d1:20:6b:f8:22:cd:d0:85:68:86:2e:64:d5:9f:b9:c8:75:9a:
4c:d3:94:3f:eb:94:0c:43:7d:9c:c9:50:e6:b2:a9:ca:62:23:
3f:76:08:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZJFAKxRFDikhwJNYo5JzaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDM0ZmQwNDhiNTk3YjNlNWY3ZGE4OWRmZTY0NjU3Njk3
ZThlZTMwHhcNMjUwNDE4MTMyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODg3OTZhYzJiYzdmZWY4YmE1ODgzYjgwMWJhYjBkMzA0OTlmNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8B0Pmcm4XsSZfhEHH/bR81zgsXj
70MpOubM1ADNCHCRrjmhYFUcmT8Fwgth1IILcLiHVvrfl+XNReaoNVjNErkj5sjf
qVZQVlKXT83ugVr7IcjxS+jpsjq/1bmpjvueNj+G+0tWANivy8dn6c8vddCEccvH
gSMokr6EG5dC86PNFkhDEIeqbljmZsJxFzhntq6O51qCd8TrHwJunHdboxgchrlk
kgH7yqfiACES55n43tVVzXrvYfPhpBjAnwk8PlW2IfMfGT8vnIZtbdlzrAPeGQNr
8VCBonoT8irkVP32KOG/2v0DDZZf+qFlVoRgjHtv/gBPvzSNord01m1r+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiHlqwrx/74uliDuAG6sNMEmfcBMB8GA1UdIwQY
MBaAFEXTT9BItZez5ffaid/mRldpfo7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZTc3YjEtMWM0ZC00N2IwLWE3N2It
ODQzOTQ4Y2JmYjgxLzEvbUllV3JDdkhfdmk2V0lPNEFicXcwd1NaOXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZTc3YjEtMWM0ZC00N2IwLWE3N2ItODQzOTQ4Y2JmYjgx
LzEvUmROUDBFaTFsN1BsOTlxSjMtWkdWMmwtanVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwndGMA0G
CSqGSIb3DQEBCwUAA4IBAQBG1gd/COhvZvEojLnTlazIqkmjeUMLhA2Nyni0t3MV
8MC9P7k0kZwrRGOgQYF5zwxKMCRUgHPbA1oVR0CaY31nTFzMjODb5egGkWHX2PLS
931u4r7gahT6Efl14I1rUEkDtF/ZuKvPmYfDfT1TjU0GVt86CgAKYhLNFNh9GAST
CgK2n76dvAKDze+0TrSbusomnHCSrwNO1e7iS4VeSblNip4BrKJOhOp+iwGkwkml
jww+TO1UsCfVl9owtuyaKIanNyvd7SQtkPAPpXOyg1DRBhsFC9OhGJvRIGv4Is3Q
hWiGLmTVn7nIdZpM05Q/65QMQ32cyVDmsqnKYiM/dgin
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:29 2025 by rpki-client