Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/nosSlJwBAj_YBNjkT9avrBuc-tE.roa
File: nosSlJwBAj_YBNjkT9avrBuc-tE.roa (raw, json)
Hash identifier: TuuhoWGeRJQwFAhBMUAaCZIEFTM7M38j/+BjxywcK08=
Subject key identifier: 9E:8B:12:94:9C:01:02:3F:D8:04:D8:E4:4F:D6:AF:AC:1B:9C:FA:D1
Certificate issuer: /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial: 019421B25534AC967C9BE86741757A1061AA
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/nosSlJwBAj_YBNjkT9avrBuc-tE.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214248
IP address blocks: 185.221.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:55:34:ac:96:7c:9b:e8:67:41:75:7a:10:61:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e8b12949c01023fd804d8e44fd6afac1b9cfad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:c4:53:b0:d6:fc:8d:8f:6f:27:a9:95:6b:
85:a3:18:27:97:e4:c8:be:d0:5a:11:c7:6a:80:d7:
9a:32:b4:29:da:60:25:3c:d5:f0:88:ff:d3:88:11:
0c:30:ad:96:97:17:96:43:78:44:98:23:f6:59:ce:
cb:51:ce:fc:3c:d3:50:65:86:0f:20:7d:93:7d:1f:
f2:dd:ef:61:e9:1d:7c:87:27:d4:df:16:03:1b:c8:
76:b4:81:87:39:18:93:c2:44:05:a6:d1:d7:5d:1c:
04:09:f9:e4:9a:7b:0a:e9:01:23:e8:d4:24:c3:e6:
a7:07:13:0d:61:e7:6d:ca:4a:7a:b9:db:b7:5e:93:
25:80:2a:7d:a6:07:b3:bf:74:59:58:ce:c8:7f:8b:
c2:3f:dc:97:e8:66:12:5c:da:5d:70:38:d1:7a:ce:
fd:e1:3f:d3:ef:ee:6a:e0:dc:3e:e3:a3:e0:fb:02:
30:1e:ba:7f:09:19:1f:ac:12:34:3f:37:3d:0f:f3:
6f:16:cf:ee:c8:2d:29:9e:3b:ef:69:3c:b5:a1:67:
10:8b:8b:c6:7c:0c:41:51:ce:1d:96:8e:b0:a7:58:
b2:1a:61:71:c7:d6:9c:ad:6c:c5:34:63:03:a7:97:
f7:59:52:0f:c5:8f:e1:d7:e9:c4:4c:55:33:56:79:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:12:94:9C:01:02:3F:D8:04:D8:E4:4F:D6:AF:AC:1B:9C:FA:D1
X509v3 Authority Key Identifier:
keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/nosSlJwBAj_YBNjkT9avrBuc-tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:80:5f:68:1d:a1:29:bf:d9:07:9f:5a:12:13:30:6e:8f:2b:
2a:4e:f9:94:82:ad:5a:d7:f9:50:25:46:1e:10:df:20:d2:af:
da:b4:74:87:68:c6:cf:7a:0c:59:5e:0d:f5:65:07:f0:41:7d:
57:c1:27:38:10:eb:b5:34:79:0f:15:cb:76:f5:f5:71:1f:fa:
e6:a8:f6:33:85:30:0c:f6:9b:3f:01:99:ad:6e:6c:52:c2:f6:
3f:2f:e1:21:ac:53:02:b7:c1:ce:cd:5e:50:c1:35:42:78:96:
8f:0e:f0:8f:a2:d2:6b:7a:95:d3:5e:ea:83:69:05:bb:84:f4:
27:2e:f5:37:33:34:80:a4:3e:8e:5c:45:12:1b:0a:f8:0d:f4:
28:04:74:75:f0:32:12:5d:95:2a:c5:60:01:63:19:dd:34:97:
aa:ff:3e:df:8e:2b:c7:7d:d4:fc:a1:5f:21:08:69:44:a3:11:
da:e7:50:6e:c0:5d:51:bd:17:56:cd:ed:7f:51:aa:a8:fd:49:
b6:d8:19:7d:67:1f:e5:ff:41:35:3f:d1:5c:54:e3:da:6c:1f:
83:ba:5b:e3:e0:f8:0d:1a:1f:c8:b0:68:8c:11:26:5a:41:12:
10:34:6a:b8:26:82:fa:f9:76:f0:de:89:b7:b4:19:d6:5d:56:
32:61:cd:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhslU0rJZ8m+hnQXV6EGGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTcyY2U3ZjhjNDk0MjM1YTA4NDgyMzk2NWI5MDQ3MDRi
YzgyNDAwHhcNMjUwMTAxMTE0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZThiMTI5NDljMDEwMjNmZDgwNGQ4ZTQ0ZmQ2YWZhYzFiOWNmYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstzEU7DW/I2PbyeplWuFoxgnl+TI
vtBaEcdqgNeaMrQp2mAlPNXwiP/TiBEMMK2WlxeWQ3hEmCP2Wc7LUc78PNNQZYYP
IH2TfR/y3e9h6R18hyfU3xYDG8h2tIGHORiTwkQFptHXXRwECfnkmnsK6QEj6NQk
w+anBxMNYedtykp6udu3XpMlgCp9pgezv3RZWM7If4vCP9yX6GYSXNpdcDjRes79
4T/T7+5q4Nw+46Pg+wIwHrp/CRkfrBI0Pzc9D/NvFs/uyC0pnjvvaTy1oWcQi4vG
fAxBUc4dlo6wp1iyGmFxx9acrWzFNGMDp5f3WVIPxY/h1+nETFUzVnn/jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6LEpScAQI/2ATY5E/Wr6wbnPrRMB8GA1UdIwQY
MBaAFFfnLOf4xJQjWghII5ZbkEcEvIJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQt
MmEwZjg3NDNjMmMyLzEvbm9zU2xKd0JBal9ZQk5qa1Q5YXZyQnVjLXRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQtMmEwZjg3NDNjMmMy
LzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud2+MA0G
CSqGSIb3DQEBCwUAA4IBAQB6gF9oHaEpv9kHn1oSEzBujysqTvmUgq1a1/lQJUYe
EN8g0q/atHSHaMbPegxZXg31ZQfwQX1XwSc4EOu1NHkPFct29fVxH/rmqPYzhTAM
9ps/AZmtbmxSwvY/L+EhrFMCt8HOzV5QwTVCeJaPDvCPotJrepXTXuqDaQW7hPQn
LvU3MzSApD6OXEUSGwr4DfQoBHR18DISXZUqxWABYxndNJeq/z7fjivHfdT8oV8h
CGlEoxHa51BuwF1RvRdWze1/Uaqo/Um22Bl9Zx/l/0E1P9FcVOPabB+Dulvj4PgN
Gh/IsGiMESZaQRIQNGq4JoL6+Xbw3om3tBnWXVYyYc0h
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:20:02 2025 by rpki-client