Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/SA-KGCApQAk5dV-uBcL4crTpK78.roa
File: SA-KGCApQAk5dV-uBcL4crTpK78.roa (raw, json)
Hash identifier: U4+vxtQUb5bot1HWyDwYpTjdt9NcKSDTCzFzv9zH3l8=
Subject key identifier: 48:0F:8A:18:20:29:40:09:39:75:5F:AE:05:C2:F8:72:B4:E9:2B:BF
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01941FFA4D96A2F91CF42827A386B467FB09
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/SA-KGCApQAk5dV-uBcL4crTpK78.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.239.162.0/24 maxlen: 24
193.239.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4d:96:a2:f9:1c:f4:28:27:a3:86:b4:67:fb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480f8a182029400939755fae05c2f872b4e92bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:39:21:06:41:51:12:ed:91:bf:b8:c1:4a:
8e:11:26:85:dc:78:65:b6:6a:6b:b9:3e:73:14:01:
28:71:87:33:5e:a1:9c:24:4c:36:94:1d:81:c2:20:
29:e9:2f:a2:6b:12:de:47:6d:9c:12:e0:ab:1f:b9:
cd:d7:be:85:fe:18:46:de:26:1f:e2:7f:65:13:37:
20:32:40:b7:6b:7f:99:26:3a:cf:36:bf:73:67:42:
2e:6c:52:b1:23:8a:c9:54:7a:25:9d:76:23:80:2e:
ee:84:ac:01:d9:ed:e0:74:4b:07:89:89:31:68:81:
c8:e7:1e:45:b9:dd:0e:89:dc:2a:e4:89:5d:6f:08:
c1:70:1a:71:cf:fe:bd:a4:7e:79:a8:2d:ae:4e:f3:
95:8c:bf:2a:60:39:ec:5b:7c:ae:73:6e:28:c9:89:
49:6b:90:75:16:9e:e4:69:5e:87:71:b8:a4:db:e7:
1e:f5:4b:0c:9b:2a:20:18:6a:9e:5a:c9:db:6c:74:
4b:cc:50:5f:6a:8f:bd:d2:64:56:72:d5:4e:3e:73:
8a:3e:9d:55:64:48:40:13:92:75:2b:33:63:dc:4a:
ca:50:80:39:4d:b2:22:50:74:ae:f1:13:2b:8c:75:
75:4a:22:99:83:18:5a:72:5a:c3:53:cf:d6:ca:74:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0F:8A:18:20:29:40:09:39:75:5F:AE:05:C2:F8:72:B4:E9:2B:BF
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/SA-KGCApQAk5dV-uBcL4crTpK78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:db:90:2b:c2:1d:7e:df:d6:75:6e:ca:c3:fd:96:c7:8e:19:
f6:45:c0:82:c6:6d:32:b0:d2:b4:6d:f4:42:77:37:08:10:b2:
b6:38:ce:81:3b:37:f4:e2:0f:3d:48:a9:9f:a1:a1:28:68:60:
1b:39:6c:e7:db:90:ba:7f:69:37:71:13:b1:f8:dc:ef:31:55:
61:45:90:9c:c2:17:cb:f3:35:cf:36:3d:5b:ff:00:73:e5:b6:
36:43:d3:68:4c:f4:1f:39:3b:e2:7d:30:e9:48:cc:fe:ba:b1:
58:65:c8:03:99:69:d9:f6:0d:74:29:5c:af:c3:27:8e:21:53:
f8:e0:6c:91:b5:97:18:62:12:ef:4a:d5:4c:02:fb:36:b3:d7:
51:54:67:96:fa:d0:64:a0:ea:44:6d:8c:8c:c1:8e:6d:c1:94:
f2:65:45:45:2f:54:ff:0f:e8:01:07:73:cf:12:a1:f8:11:91:
20:db:64:ea:4b:f4:e4:47:52:f8:a1:15:b5:1f:0b:ef:bc:ef:
02:d9:35:66:31:5d:27:52:1a:28:4b:44:41:e9:59:52:54:4f:
70:a5:3e:49:e8:85:be:16:d8:74:c0:fd:d2:68:81:12:bb:15:
ac:e4:e2:8c:35:84:5f:d9:e6:ba:2f:79:0a:93:92:19:55:9c:
fc:93:36:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+k2Wovkc9Cgno4a0Z/sJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTFiNWI4MTMyZjllMzA3YjcxN2EzZTFlNTRkMWY3ZjQ1
YWU1MTcwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODBmOGExODIwMjk0MDA5Mzk3NTVmYWUwNWMyZjg3MmI0ZTkyYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lo5IQZBURLtkb+4wUqOESaF3Hhl
tmpruT5zFAEocYczXqGcJEw2lB2BwiAp6S+iaxLeR22cEuCrH7nN176F/hhG3iYf
4n9lEzcgMkC3a3+ZJjrPNr9zZ0IubFKxI4rJVHolnXYjgC7uhKwB2e3gdEsHiYkx
aIHI5x5Fud0Oidwq5IldbwjBcBpxz/69pH55qC2uTvOVjL8qYDnsW3yuc24oyYlJ
a5B1Fp7kaV6Hcbik2+ce9UsMmyogGGqeWsnbbHRLzFBfao+90mRWctVOPnOKPp1V
ZEhAE5J1KzNj3ErKUIA5TbIiUHSu8RMrjHV1SiKZgxhaclrDU8/WynRbPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgPihggKUAJOXVfrgXC+HK06Su/MB8GA1UdIwQY
MBaAFI9RtbgTL54we3F6Ph5U0ff0WuUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzct
ZTIyNTFlNDg5Y2JiLzEvU0EtS0dDQXBRQWs1ZFYtdUJjTDRjclRwSzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzctZTIyNTFlNDg5Y2Ji
LzEvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+iMA0G
CSqGSIb3DQEBCwUAA4IBAQBr25Arwh1+39Z1bsrD/ZbHjhn2RcCCxm0ysNK0bfRC
dzcIELK2OM6BOzf04g89SKmfoaEoaGAbOWzn25C6f2k3cROx+NzvMVVhRZCcwhfL
8zXPNj1b/wBz5bY2Q9NoTPQfOTvifTDpSMz+urFYZcgDmWnZ9g10KVyvwyeOIVP4
4GyRtZcYYhLvStVMAvs2s9dRVGeW+tBkoOpEbYyMwY5twZTyZUVFL1T/D+gBB3PP
EqH4EZEg22TqS/TkR1L4oRW1HwvvvO8C2TVmMV0nUhooS0RB6VlSVE9wpT5J6IW+
Fth0wP3SaIESuxWs5OKMNYRf2ea6L3kKk5IZVZz8kzZG
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:42 2025 by rpki-client