Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B_Gs11AOPmwBTtzN3bV75dXljsI.roa
File: B_Gs11AOPmwBTtzN3bV75dXljsI.roa (raw, json)
Hash identifier: hrjsdPN1zRyML+ALu6hbcad1sq1xKzx76ogg2AMr5Y0=
Subject key identifier: 07:F1:AC:D7:50:0E:3E:6C:01:4E:DC:CD:DD:B5:7B:E5:D5:E5:8E:C2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068355B555F10B04B71F799C70A70E8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B_Gs11AOPmwBTtzN3bV75dXljsI.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2587
IP address blocks: 193.233.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:35:5b:55:5f:10:b0:4b:71:f7:99:c7:0a:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07f1acd7500e3e6c014edccdddb57be5d5e58ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:dc:7a:ba:64:4a:64:f1:fd:5d:6d:d2:4a:
13:af:34:60:9f:69:7a:d4:53:41:f2:55:71:e2:eb:
6f:59:2f:23:ce:62:9c:a8:a6:6b:79:eb:b5:16:32:
2c:a7:07:5a:b2:c9:a9:b8:6b:94:ab:d9:95:f2:1a:
88:57:c2:f5:f5:4c:21:e3:7d:47:70:60:a5:ca:29:
2c:58:2f:7b:49:d7:0f:4c:17:e1:66:57:98:53:78:
3e:21:26:b3:b7:5c:58:2f:7e:4c:51:36:7b:6d:80:
c3:cc:b7:5b:00:ed:2d:1c:29:c5:41:0f:16:32:24:
e4:76:b6:ef:3b:35:20:83:a7:70:75:1f:92:87:0e:
0f:5a:4a:9d:73:99:67:b6:2a:b4:e4:ea:10:0c:3c:
41:08:dc:8c:3a:19:c8:51:61:62:70:88:78:41:80:
21:b9:f5:a1:91:94:a8:2a:68:a8:15:2f:34:c5:46:
c5:4a:5c:8e:61:d6:4f:e0:fa:75:c8:be:96:2d:a3:
73:b1:ba:43:67:25:42:fd:c0:06:0f:f9:9b:48:0f:
70:73:c0:4a:5c:f6:c2:0b:8a:02:ba:2a:6c:07:25:
f3:07:44:8e:a2:74:05:22:10:c9:48:c1:47:f3:64:
0c:78:9d:9b:b5:29:f3:d9:a7:13:7b:ab:53:14:2f:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F1:AC:D7:50:0E:3E:6C:01:4E:DC:CD:DD:B5:7B:E5:D5:E5:8E:C2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B_Gs11AOPmwBTtzN3bV75dXljsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
00:23:a0:e4:35:84:a9:bb:2c:20:b3:69:75:40:25:3a:83:7f:
79:9c:6d:3e:3a:1d:4b:5e:e8:f9:78:a5:f6:f5:ec:01:0e:d3:
a5:cf:51:30:08:77:ae:bf:b8:12:91:a9:d5:4c:7b:e6:cc:04:
83:cd:0c:41:3a:2a:61:d8:af:44:18:bd:a2:1b:8c:86:3d:aa:
38:bd:27:cb:bc:dd:c6:25:d3:3b:10:5e:13:d3:36:b9:f6:41:
4a:5d:1a:41:8f:a7:06:ef:4b:93:31:c2:9e:9f:9e:8a:63:56:
a7:24:60:59:ca:34:f6:b4:08:04:c9:ea:0b:ce:40:94:9a:f0:
7b:a5:1c:47:a2:78:67:9d:58:da:b3:53:56:9a:91:85:0b:a4:
e5:80:7e:85:1d:20:da:0b:d8:27:b7:d6:dd:f5:ef:26:16:ba:
99:2e:39:a7:56:20:8d:cd:db:0a:26:02:ea:52:f1:fb:2e:fc:
cb:a9:fc:d1:2b:b8:3c:76:cf:dd:de:00:94:59:17:fe:eb:c5:
97:26:a8:4e:22:12:aa:7a:32:97:ca:f5:97:f7:c5:fa:72:76:
b2:49:03:1e:5a:9d:05:2a:40:ab:67:88:d0:83:bd:99:8c:a4:
32:96:4e:e9:01:8b:4e:df:58:8f:6e:1e:bd:bc:0e:f7:d9:e1:
ca:dd:fa:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDVbVV8QsEtx95nHCnDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMTAxMDU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2YxYWNkNzUwMGUzZTZjMDE0ZWRjY2RkZGI1N2JlNWQ1ZTU4ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIjcerpkSmTx/V1t0koTrzRgn2l6
1FNB8lVx4utvWS8jzmKcqKZreeu1FjIspwdassmpuGuUq9mV8hqIV8L19Uwh431H
cGClyiksWC97SdcPTBfhZleYU3g+ISazt1xYL35MUTZ7bYDDzLdbAO0tHCnFQQ8W
MiTkdrbvOzUgg6dwdR+Shw4PWkqdc5lntiq05OoQDDxBCNyMOhnIUWFicIh4QYAh
ufWhkZSoKmioFS80xUbFSlyOYdZP4Pp1yL6WLaNzsbpDZyVC/cAGD/mbSA9wc8BK
XPbCC4oCuipsByXzB0SOonQFIhDJSMFH82QMeJ2btSnz2acTe6tTFC+EMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfxrNdQDj5sAU7czd21e+XV5Y7CMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvQl9HczExQU9QbXdCVHR6TjNiVjc1ZFhsanNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekOMA0G
CSqGSIb3DQEBCwUAA4IBAQAAI6DkNYSpuywgs2l1QCU6g395nG0+Oh1LXuj5eKX2
9ewBDtOlz1EwCHeuv7gSkanVTHvmzASDzQxBOiph2K9EGL2iG4yGPao4vSfLvN3G
JdM7EF4T0za59kFKXRpBj6cG70uTMcKen56KY1anJGBZyjT2tAgEyeoLzkCUmvB7
pRxHonhnnVjas1NWmpGFC6TlgH6FHSDaC9gnt9bd9e8mFrqZLjmnViCNzdsKJgLq
UvH7LvzLqfzRK7g8ds/d3gCUWRf+68WXJqhOIhKqejKXyvWX98X6cnaySQMeWp0F
KkCrZ4jQg72ZjKQylk7pAYtO31iPbh69vA732eHK3fo9
-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:27 2025 by rpki-client