Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa
File: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (raw, json)
Hash identifier: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=
Subject key identifier: 37:C5:73:EF:77:01:5C:04:70:67:20:66:2A:36:4D:21:12:6A:30:9E
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019422FB8E30D899D43346EEFC9D9C7303CE
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa
Signing time: Wed 01 Jan 2025 17:48:18 +0000
ROA not before: Wed 01 Jan 2025 17:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 155.131.55.0/24 maxlen: 24
155.192.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8e:30:d8:99:d4:33:46:ee:fc:9d:9c:73:03:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c573ef77015c04706720662a364d21126a309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:5f:3b:b6:6f:41:f5:bd:db:e5:ab:bf:d5:
2c:6d:98:90:6f:5b:1f:8d:f6:19:ef:41:68:d8:fb:
5b:4b:70:0e:a3:09:09:98:42:98:b8:e0:c1:46:db:
06:06:53:80:ac:27:4b:c9:28:b8:03:cb:b5:cd:4f:
80:50:7c:1c:55:38:cf:98:1b:d5:3d:18:58:0e:71:
56:c9:61:b1:3e:6b:f8:b4:24:72:18:67:91:be:6c:
ee:49:3b:85:e4:f6:3f:3b:41:af:1a:2d:5d:73:02:
2b:b2:b4:5d:db:8f:96:7b:c8:b6:4f:90:33:9d:dc:
01:ac:6f:1e:0b:ac:c5:fa:a4:20:d4:d4:42:67:a5:
09:c2:22:e4:4e:8f:ec:ac:14:1c:42:23:37:42:c3:
1f:96:51:24:80:2b:cf:a5:2e:bd:13:95:86:3e:57:
6d:c4:f9:54:eb:70:80:9c:f4:ab:13:43:75:49:2d:
0c:13:1e:b5:0d:6d:d7:64:3c:f3:7a:2f:1c:8f:6c:
e5:48:bf:8b:2c:5c:2e:28:46:53:d4:1a:43:20:50:
aa:8d:d5:e0:f0:4b:16:3c:03:25:fb:a4:fa:2f:b0:
ec:b8:73:cf:73:d7:d8:26:1f:d4:30:68:4d:d2:25:
cb:df:7f:4e:4f:f3:99:93:6c:08:d4:8c:4c:c8:ad:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:73:EF:77:01:5C:04:70:67:20:66:2A:36:4D:21:12:6A:30:9E
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.131.55.0/24
155.192.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d7:3a:85:6f:8d:5a:53:73:93:9f:2e:bb:64:bd:8e:7d:ee:
b0:46:5b:f6:e8:7b:a2:3f:23:2b:a0:da:ea:ad:72:a7:34:51:
df:0f:17:08:52:d0:d8:87:a8:76:05:04:d3:71:47:96:56:ca:
4e:a8:97:c6:cd:d8:a0:d2:11:c1:d0:da:b6:52:61:19:b9:c7:
f4:70:96:4f:e2:31:1e:0e:e1:d5:ec:a8:2b:13:0f:db:e9:9a:
fe:ec:12:a1:81:4e:17:0d:40:57:f3:80:9a:ea:5a:01:a9:ab:
02:8e:93:8f:c0:7e:e9:ce:69:b4:38:04:96:16:36:b0:62:d4:
19:a8:f2:70:ec:93:a2:c3:a6:62:89:25:57:7b:b7:70:26:09:
76:dd:24:aa:87:82:9d:87:9e:d2:ff:75:40:71:8c:7b:5f:ae:
51:47:4f:14:86:1d:bf:9f:d5:84:6a:42:9c:99:e7:cf:d8:a7:
1e:59:db:a7:44:8d:7a:c2:38:39:4a:a1:50:cc:4c:81:04:d7:
26:de:f6:c2:d6:0e:0c:9a:e1:72:0e:7c:0b:19:c2:5f:59:ca:
9a:ed:cd:38:3e:ba:31:c0:4e:2b:2b:9e:ff:dd:e8:a4:f4:03:
74:99:fc:3f:eb:d0:6f:9a:4a:f3:98:77:bf:34:b4:3b:71:e5:
62:67:4d:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi+44w2JnUM0bu/J2ccwPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2Q1ZTgzMWMzMzBkM2NiNTFkNDc2ZTBjMTYzNTQwZjI1
ZTAzNzIwHhcNMjUwMTAxMTc0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2M1NzNlZjc3MDE1YzA0NzA2NzIwNjYyYTM2NGQyMTEyNmEzMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwNfO7ZvQfW92+Wrv9UsbZiQb1sf
jfYZ70Fo2PtbS3AOowkJmEKYuODBRtsGBlOArCdLySi4A8u1zU+AUHwcVTjPmBvV
PRhYDnFWyWGxPmv4tCRyGGeRvmzuSTuF5PY/O0GvGi1dcwIrsrRd24+We8i2T5Az
ndwBrG8eC6zF+qQg1NRCZ6UJwiLkTo/srBQcQiM3QsMfllEkgCvPpS69E5WGPldt
xPlU63CAnPSrE0N1SS0MEx61DW3XZDzzei8cj2zlSL+LLFwuKEZT1BpDIFCqjdXg
8EsWPAMl+6T6L7DsuHPPc9fYJh/UMGhN0iXL339OT/OZk2wI1IxMyK1gLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDfFc+93AVwEcGcgZio2TSESajCeMB8GA1UdIwQY
MBaAFBE9XoMcMw08tR1HbgwWNUDyXgNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgt
MzNmMzk2YWI1NmYyLzEvTjhWejczY0JYQVJ3WnlCbUtqWk5JUkpxTUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgtMzNmMzk2YWI1NmYy
LzEvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAm4M3AwQA
m8A3MA0GCSqGSIb3DQEBCwUAA4IBAQAP1zqFb41aU3OTny67ZL2Ofe6wRlv26Hui
PyMroNrqrXKnNFHfDxcIUtDYh6h2BQTTcUeWVspOqJfGzdig0hHB0Nq2UmEZucf0
cJZP4jEeDuHV7KgrEw/b6Zr+7BKhgU4XDUBX84Ca6loBqasCjpOPwH7pzmm0OASW
FjawYtQZqPJw7JOiw6ZiiSVXe7dwJgl23SSqh4Kdh57S/3VAcYx7X65RR08Uhh2/
n9WEakKcmefP2KceWdunRI16wjg5SqFQzEyBBNcm3vbC1g4MmuFyDnwLGcJfWcqa
7c04ProxwE4rK57/3eik9AN0mfw/69BvmkrzmHe/NLQ7ceViZ00P
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:22:13 2025 by rpki-client