Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pEyKEBniFut8Ix0vkQUaHAha9c4.roa
File: pEyKEBniFut8Ix0vkQUaHAha9c4.roa (raw, json)
Hash identifier: Yb50r/dQr6PlKBkbw8qIMZBWoPxGiTL6EUt3zQrL7Fc=
Subject key identifier: A4:4C:8A:10:19:E2:16:EB:7C:23:1D:2F:91:05:1A:1C:08:5A:F5:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282497A94E012CFC2289E676A7083823
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pEyKEBniFut8Ix0vkQUaHAha9c4.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132969
IP address blocks: 193.35.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:97:a9:4e:01:2c:fc:22:89:e6:76:a7:08:38:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a44c8a1019e216eb7c231d2f91051a1c085af5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:5d:0b:6b:2a:dc:65:01:e7:e3:9b:7d:9a:
1b:3e:b1:f0:6c:73:48:fb:c1:ce:6f:32:15:14:d7:
f2:ec:c9:57:72:50:eb:98:b3:0f:dc:2b:5d:3a:18:
d2:a2:eb:d5:26:e2:e5:d2:91:ec:26:2e:6e:e8:90:
d9:9a:9b:de:bf:7c:ff:cc:99:5f:58:69:15:ff:32:
aa:93:49:92:5a:47:70:a3:92:c2:e8:bf:90:1c:bc:
c3:2f:0d:51:cc:69:d8:0c:59:f2:fd:21:46:f0:bf:
34:14:c1:b7:5f:5b:5b:d2:6e:80:93:41:e8:e4:9b:
d5:4c:16:f1:cc:01:55:42:96:fe:68:d4:10:1e:31:
7c:40:02:8c:4a:be:f4:2e:95:ec:2d:d6:e0:2f:48:
56:dc:52:b7:e2:90:67:77:e1:5c:a3:9a:9b:99:00:
a7:9d:bc:92:d4:33:76:3b:b9:ee:bc:bb:ea:22:77:
10:a5:74:07:90:7e:ba:4f:a6:e3:f8:ab:8b:83:af:
bd:4e:d8:ce:51:cb:6a:24:44:ca:d7:a3:bc:79:97:
5d:cc:b3:ff:3c:03:2a:53:75:06:c9:a2:4f:a2:c5:
9e:e1:d4:f9:b9:cc:0c:09:d0:b3:f8:32:58:91:c5:
d6:4b:cf:cb:2d:56:ee:de:01:a8:1f:eb:73:1c:eb:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:8A:10:19:E2:16:EB:7C:23:1D:2F:91:05:1A:1C:08:5A:F5:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pEyKEBniFut8Ix0vkQUaHAha9c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8d:5e:d1:89:11:be:98:3d:e9:95:61:ec:f8:69:a0:e7:11:
1f:a6:60:e7:b8:8a:ad:21:e3:e9:64:8c:e0:fc:74:04:94:77:
c3:5c:ae:8e:7d:32:05:09:61:e1:e0:81:ce:a1:54:6e:94:8d:
ce:e3:5d:f2:f2:14:7a:50:66:01:ee:6f:12:3f:93:5e:4d:6d:
58:67:bf:a0:ad:51:52:49:04:ec:16:aa:be:be:2f:de:a7:5b:
40:2e:73:1a:e2:80:c2:68:01:0c:03:d8:f1:16:ee:c6:2d:00:
62:1a:41:d5:90:31:a0:90:94:87:f6:72:ef:f3:d9:62:43:04:
2c:88:ca:37:90:10:0a:33:2a:ca:1c:e6:9e:aa:6b:8a:e4:cb:
09:12:5e:99:8e:11:bd:a9:7d:00:fe:a8:cf:09:0b:b3:0d:33:
0c:72:8f:33:60:35:2e:5d:de:87:9d:3a:98:97:68:93:ab:de:
2c:5b:56:20:dc:a8:c2:b8:25:2e:7f:c1:63:b4:6c:39:82:f3:
8b:34:8b:01:a7:3f:ba:2c:4a:bd:60:80:e1:8b:3f:e9:e7:a0:
9d:d4:9d:46:ed:b3:ff:63:3d:5d:6d:40:84:05:7c:12:ee:d1:
d3:db:8e:41:21:9e:d7:52:a4:7e:38:bb:84:57:94:60:0e:75:
25:f2:af:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJJepTgEs/CKJ5nanCDgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDRjOGExMDE5ZTIxNmViN2MyMzFkMmY5MTA1MWExYzA4NWFmNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsohdC2sq3GUB5+ObfZobPrHwbHNI
+8HObzIVFNfy7MlXclDrmLMP3CtdOhjSouvVJuLl0pHsJi5u6JDZmpvev3z/zJlf
WGkV/zKqk0mSWkdwo5LC6L+QHLzDLw1RzGnYDFny/SFG8L80FMG3X1tb0m6Ak0Ho
5JvVTBbxzAFVQpb+aNQQHjF8QAKMSr70LpXsLdbgL0hW3FK34pBnd+Fco5qbmQCn
nbyS1DN2O7nuvLvqIncQpXQHkH66T6bj+KuLg6+9TtjOUctqJETK16O8eZddzLP/
PAMqU3UGyaJPosWe4dT5ucwMCdCz+DJYkcXWS8/LLVbu3gGoH+tzHOtoSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRMihAZ4hbrfCMdL5EFGhwIWvXOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcEV5S0VCbmlGdXQ4SXgwdmtRVWFIQWhhOWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSMQMA0G
CSqGSIb3DQEBCwUAA4IBAQCdjV7RiRG+mD3plWHs+Gmg5xEfpmDnuIqtIePpZIzg
/HQElHfDXK6OfTIFCWHh4IHOoVRulI3O413y8hR6UGYB7m8SP5NeTW1YZ7+grVFS
SQTsFqq+vi/ep1tALnMa4oDCaAEMA9jxFu7GLQBiGkHVkDGgkJSH9nLv89liQwQs
iMo3kBAKMyrKHOaeqmuK5MsJEl6ZjhG9qX0A/qjPCQuzDTMMco8zYDUuXd6HnTqY
l2iTq94sW1Yg3KjCuCUuf8FjtGw5gvOLNIsBpz+6LEq9YIDhiz/p56Cd1J1G7bP/
Yz1dbUCEBXwS7tHT245BIZ7XUqR+OLuEV5RgDnUl8q8m
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:31 2025 by rpki-client