Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/ACSoxiVrVB6X7y6ozamLSgqazeo.roa
File: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (raw, json)
Hash identifier: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=
Subject key identifier: 00:24:A8:C6:25:6B:54:1E:97:EF:2E:A8:CD:A9:8B:4A:0A:9A:CD:EA
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 019426D9F8642A52E6A1D691766C4DBD8DC3
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/ACSoxiVrVB6X7y6ozamLSgqazeo.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 81.30.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f8:64:2a:52:e6:a1:d6:91:76:6c:4d:bd:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0024a8c6256b541e97ef2ea8cda98b4a0a9acdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:a9:a4:e5:b7:e8:99:19:ae:41:08:15:f2:
47:63:13:7c:7f:be:89:a5:f9:8a:aa:18:f2:b5:6e:
d4:3e:57:4a:dc:b5:48:a6:44:1e:97:cb:8f:7c:25:
ae:b7:b6:ef:e1:fd:93:de:15:e4:31:7b:c7:3e:1e:
83:5a:96:8f:e9:80:fc:df:86:a0:c2:3a:a5:55:ff:
7b:be:a0:34:b4:ab:4d:0d:69:af:38:29:f4:68:b2:
5b:99:d4:de:b4:f2:bf:eb:3f:6f:a5:7d:cd:11:fe:
4f:ca:9d:93:5d:7f:37:1d:d5:7a:cd:ee:4c:8e:a3:
a1:0a:79:f1:50:6b:4b:4d:01:34:40:7d:08:e5:57:
ae:aa:e4:72:3c:9a:a9:56:1e:57:31:8c:bc:c1:18:
fd:0d:ac:50:1f:57:d1:b4:93:8b:f7:8d:cf:8e:0f:
05:8e:5c:3a:66:6a:44:eb:2a:98:ca:de:7f:ae:7e:
16:7c:61:a7:84:79:2b:36:63:4e:f2:29:17:2f:d6:
4b:8f:11:24:62:1d:25:56:6a:d9:83:ef:cd:5e:24:
65:93:25:79:7a:21:1a:69:5f:34:82:b5:65:aa:cb:
0e:c7:5e:e6:1d:43:e1:e7:23:47:f5:d3:02:06:50:
be:5a:3c:95:d9:07:90:a7:08:91:87:2a:e7:b7:85:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:A8:C6:25:6B:54:1E:97:EF:2E:A8:CD:A9:8B:4A:0A:9A:CD:EA
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/ACSoxiVrVB6X7y6ozamLSgqazeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:cb:79:57:9e:5a:0a:b7:a4:f4:04:54:2e:ab:ca:0c:57:ec:
c5:50:93:4c:c5:fa:92:33:61:28:58:e6:f5:a0:e5:66:55:40:
da:39:54:6f:0d:45:04:95:72:82:6b:d3:52:95:bb:48:57:44:
e1:a0:a4:a0:58:1d:9d:36:73:42:8b:e5:84:30:8f:5b:8f:9a:
71:2e:e9:db:d1:5f:b1:ca:7b:bc:7f:e6:10:1d:8c:eb:fb:d3:
31:6a:3b:4a:c1:e5:c8:50:11:88:dc:7d:a6:c3:1e:cf:42:f6:
cc:bb:4d:99:f7:70:3a:92:53:91:f7:aa:46:08:7f:0f:1a:c4:
d3:96:9b:0a:e2:e2:c9:ac:c2:7c:e2:7b:4a:cd:67:7b:14:ea:
2c:c7:80:01:9a:4f:4a:2c:6b:05:42:32:89:0c:e1:01:2a:e6:
27:53:d2:55:78:d6:37:05:db:d7:dd:15:da:cb:56:67:4b:e1:
83:e9:5c:34:aa:aa:d3:4d:13:bf:f9:a9:18:5c:33:66:7c:e6:
5e:11:5d:30:87:a4:04:73:7e:7d:7d:74:6c:ff:f7:3b:7d:e6:
11:a9:f2:5a:27:97:de:94:fc:53:f9:bb:a4:86:72:d1:d6:c8:
70:3e:94:59:aa:c6:4f:4f:fa:b6:c6:e3:4c:ed:bb:46:dd:91:
28:84:84:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2fhkKlLmodaRdmxNvY3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2MyYTI2YjMxYWMyNGJjNTI5NWQyNGE4ZTEzMDcxZjJm
ZjBkNjEwHhcNMjUwMTAyMTE1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDI0YThjNjI1NmI1NDFlOTdlZjJlYThjZGE5OGI0YTBhOWFjZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/mppOW36JkZrkEIFfJHYxN8f76J
pfmKqhjytW7UPldK3LVIpkQel8uPfCWut7bv4f2T3hXkMXvHPh6DWpaP6YD834ag
wjqlVf97vqA0tKtNDWmvOCn0aLJbmdTetPK/6z9vpX3NEf5Pyp2TXX83HdV6ze5M
jqOhCnnxUGtLTQE0QH0I5VeuquRyPJqpVh5XMYy8wRj9DaxQH1fRtJOL943Pjg8F
jlw6ZmpE6yqYyt5/rn4WfGGnhHkrNmNO8ikXL9ZLjxEkYh0lVmrZg+/NXiRlkyV5
eiEaaV80grVlqssOx17mHUPh5yNH9dMCBlC+WjyV2QeQpwiRhyrnt4WsrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAkqMYla1Qel+8uqM2pi0oKms3qMB8GA1UdIwQY
MBaAFAbMKiazGsJLxSldJKjhMHHy/w1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYt
ZmQ4NDIxYmYyYmE5LzEvQUNTb3hpVnJWQjZYN3k2b3phbUxTZ3FhemVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYtZmQ4NDIxYmYyYmE5
LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5mMA0G
CSqGSIb3DQEBCwUAA4IBAQA4y3lXnloKt6T0BFQuq8oMV+zFUJNMxfqSM2EoWOb1
oOVmVUDaOVRvDUUElXKCa9NSlbtIV0ThoKSgWB2dNnNCi+WEMI9bj5pxLunb0V+x
ynu8f+YQHYzr+9MxajtKweXIUBGI3H2mwx7PQvbMu02Z93A6klOR96pGCH8PGsTT
lpsK4uLJrMJ84ntKzWd7FOosx4ABmk9KLGsFQjKJDOEBKuYnU9JVeNY3BdvX3RXa
y1ZnS+GD6Vw0qqrTTRO/+akYXDNmfOZeEV0wh6QEc359fXRs//c7feYRqfJaJ5fe
lPxT+bukhnLR1shwPpRZqsZPT/q2xuNM7btG3ZEohIRz
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:23 2025 by rpki-client