Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/5TdpsvGEzHHc2DVMKGITS46zP8M.roa
File: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (raw, json)
Hash identifier: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=
Subject key identifier: E5:37:69:B2:F1:84:CC:71:DC:D8:35:4C:28:62:13:4B:8E:B3:3F:C3
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019427B59B5E0362DD40F494799DD590CBAA
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/5TdpsvGEzHHc2DVMKGITS46zP8M.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133301
IP address blocks: 178.248.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9b:5e:03:62:dd:40:f4:94:79:9d:d5:90:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e53769b2f184cc71dcd8354c2862134b8eb33fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:e0:03:96:6d:2b:24:cb:19:cc:39:7b:6d:
26:75:21:08:50:88:4f:ea:7e:7c:61:c2:7b:85:72:
ee:63:44:07:d7:b1:5a:1e:d0:29:c3:33:17:7c:7a:
4f:bb:df:d2:ad:e0:66:a5:2a:6a:c4:1c:14:44:d1:
52:e8:02:21:81:c3:47:72:68:86:db:0d:f5:76:e3:
95:39:6a:90:e9:94:e9:cc:56:79:53:be:96:e4:e8:
61:65:5c:99:40:23:ca:ec:c9:05:00:08:33:dd:b8:
c7:af:1b:e2:7e:aa:81:9c:6b:b3:9b:a4:66:97:88:
72:1a:f8:65:81:63:14:7e:6e:a5:c9:d4:d1:8e:e8:
13:24:a6:9c:7b:8f:0d:f0:72:f6:47:68:91:d4:a0:
c5:8a:e4:f1:98:03:5f:e0:9b:09:49:25:4d:f9:6a:
66:65:39:0b:90:28:ef:c3:ed:8d:71:e9:8a:16:c0:
51:dd:09:07:bd:0f:f7:7c:72:b2:bc:86:63:4a:83:
fe:04:98:54:48:44:4c:1a:dc:0a:36:26:d4:46:f3:
d8:51:dd:b1:ca:8a:f9:ca:07:e0:47:75:05:61:a9:
e9:50:a2:92:b8:c4:14:15:63:a6:18:b5:05:1b:fc:
e1:b5:a1:5b:8e:47:97:ad:50:31:15:27:36:0c:66:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:69:B2:F1:84:CC:71:DC:D8:35:4C:28:62:13:4B:8E:B3:3F:C3
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/5TdpsvGEzHHc2DVMKGITS46zP8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.116.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:b4:cf:3c:26:1e:15:37:f5:14:00:5c:94:c5:5d:e6:57:5c:
19:1e:44:12:a2:d8:e6:d1:93:53:e1:f0:bc:bc:96:08:e3:21:
30:2c:96:b9:5b:d7:a3:1c:a9:ef:76:f6:3f:6b:2d:f3:4f:df:
d2:b0:18:5b:0f:b2:e8:6d:b1:bb:e7:12:f6:83:fa:f0:3a:be:
e8:11:11:b2:57:51:7d:cb:47:e5:bc:a4:56:5c:63:68:ec:70:
ad:d6:30:33:34:df:bd:e9:bc:b8:c9:2a:c7:f4:46:df:b5:0c:
fb:61:a1:e8:b3:8a:c1:04:16:05:1c:9a:ad:99:2e:ab:0a:d2:
dd:3b:80:26:5d:c7:50:96:f3:8a:bf:a3:10:c9:54:61:bd:12:
a8:a8:5c:ba:14:0c:05:6a:d1:75:9a:9c:ea:be:0f:70:01:b8:
0e:43:54:02:81:56:83:fe:3a:77:25:3a:ac:e7:dc:a8:ac:40:
f5:1a:50:13:19:74:3b:d0:57:0e:e1:c4:2b:01:07:ab:64:62:
e4:f5:41:f8:99:c1:10:35:1c:5a:b2:e4:e3:8c:f1:d5:fc:2d:
cb:37:bc:52:0c:b3:c9:27:cd:8f:af:6b:90:f3:f0:3d:54:f1:
19:d5:d1:9e:a9:00:e3:55:e7:30:5c:2b:49:1a:ea:f7:ec:30:
10:a9:35:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZteA2LdQPSUeZ3VkMuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5
YjA5MzYwHhcNMjUwMTAyMTU1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTM3NjliMmYxODRjYzcxZGNkODM1NGMyODYyMTM0YjhlYjMzZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjjgA5ZtKyTLGcw5e20mdSEIUIhP
6n58YcJ7hXLuY0QH17FaHtApwzMXfHpPu9/SreBmpSpqxBwURNFS6AIhgcNHcmiG
2w31duOVOWqQ6ZTpzFZ5U76W5OhhZVyZQCPK7MkFAAgz3bjHrxvifqqBnGuzm6Rm
l4hyGvhlgWMUfm6lydTRjugTJKace48N8HL2R2iR1KDFiuTxmANf4JsJSSVN+Wpm
ZTkLkCjvw+2NcemKFsBR3QkHvQ/3fHKyvIZjSoP+BJhUSERMGtwKNibURvPYUd2x
yor5ygfgR3UFYanpUKKSuMQUFWOmGLUFG/zhtaFbjkeXrVAxFSc2DGabmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOU3abLxhMxx3Ng1TChiE0uOsz/DMB8GA1UdIwQY
MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt
OTk2MTg5ZjljZTE0LzEvNVRkcHN2R0V6SEhjMkRWTUtHSVRTNDZ6UDhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0
LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsvh0MA0G
CSqGSIb3DQEBCwUAA4IBAQAbtM88Jh4VN/UUAFyUxV3mV1wZHkQSotjm0ZNT4fC8
vJYI4yEwLJa5W9ejHKnvdvY/ay3zT9/SsBhbD7LobbG75xL2g/rwOr7oERGyV1F9
y0flvKRWXGNo7HCt1jAzNN+96by4ySrH9EbftQz7YaHos4rBBBYFHJqtmS6rCtLd
O4AmXcdQlvOKv6MQyVRhvRKoqFy6FAwFatF1mpzqvg9wAbgOQ1QCgVaD/jp3JTqs
59yorED1GlATGXQ70FcO4cQrAQerZGLk9UH4mcEQNRxasuTjjPHV/C3LN7xSDLPJ
J82Pr2uQ8/A9VPEZ1dGeqQDjVecwXCtJGur37DAQqTX/
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:33 2025 by rpki-client