Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/PsSNrF4GYSF0wH771eRpN_af86E.roa
File: PsSNrF4GYSF0wH771eRpN_af86E.roa (raw, json)
Hash identifier: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=
Subject key identifier: 3E:C4:8D:AC:5E:06:61:21:74:C0:7E:FB:D5:E4:69:37:F6:9F:F3:A1
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019421B2494C345F806CF5510B7EC0793BC9
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/PsSNrF4GYSF0wH771eRpN_af86E.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 5.42.223.0/24 maxlen: 24
185.231.113.0/24 maxlen: 24
194.180.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:49:4c:34:5f:80:6c:f5:51:0b:7e:c0:79:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ec48dac5e06612174c07efbd5e46937f69ff3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:0f:8a:ba:1d:66:99:a2:a0:a7:86:23:f7:
60:40:0b:5e:5b:ce:63:d7:6b:e6:93:55:1a:5a:af:
48:18:a5:8f:c0:67:16:88:5d:4f:8d:d3:90:2f:08:
e3:a4:16:10:dd:97:72:33:c3:f9:25:b0:5b:bb:e3:
33:3d:1c:c3:fa:06:6d:70:f7:47:b2:cf:1f:18:11:
33:c9:5e:b6:95:c1:d7:25:33:43:04:7d:21:0d:0b:
3f:87:f6:bc:1d:03:b6:33:1f:fe:f6:76:f6:c8:d0:
6b:e0:82:3e:e2:87:d7:70:26:0f:cd:ee:c9:06:35:
7b:12:2e:15:f4:c0:7b:af:67:fb:63:bb:fa:10:71:
95:ed:9c:5f:06:1d:39:16:c7:3c:04:18:95:f8:c7:
19:57:3a:cc:0f:1d:6c:e1:62:d2:5a:19:40:de:11:
6e:8d:96:b3:e3:c8:2b:56:56:a4:b9:32:3e:f7:ea:
54:b8:10:f7:dd:fb:70:7c:38:3a:ad:0d:d6:f1:03:
be:08:5e:c2:85:6d:00:a5:b1:b2:e6:fa:83:9e:b3:
a3:dc:ac:6a:3b:43:ee:b8:42:1e:2a:e5:95:22:40:
42:5b:77:1e:1d:00:e6:87:9c:ca:73:cf:9b:5f:2d:
5e:c9:f3:ac:05:7a:68:97:81:44:e3:a5:52:f8:c5:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:8D:AC:5E:06:61:21:74:C0:7E:FB:D5:E4:69:37:F6:9F:F3:A1
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/PsSNrF4GYSF0wH771eRpN_af86E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.223.0/24
185.231.113.0/24
194.180.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:39:e6:e8:7b:64:fe:dd:89:1d:57:6d:71:9e:22:64:ad:2b:
fd:5a:3b:60:a6:7d:d5:a1:f8:5d:90:b1:c5:7f:03:e7:e9:65:
60:98:1e:56:98:fc:22:d6:25:2d:b8:44:7e:48:b3:5d:71:c5:
73:6e:1d:05:17:95:5d:62:03:54:9c:68:f5:97:c5:ae:80:0a:
a2:e8:ff:69:fc:d2:ee:f2:11:2f:3c:26:da:60:df:62:32:00:
36:e8:73:45:ac:9c:a1:ce:92:cc:e8:30:3c:90:e0:06:47:31:
d2:c0:fb:73:78:ed:aa:e7:56:66:f1:2a:8d:62:df:24:c3:bf:
83:4f:57:32:f4:e7:aa:ad:be:26:9a:97:02:db:f9:17:c0:a7:
d1:09:ab:67:2d:81:64:f8:16:c5:b8:a4:b4:19:07:3c:69:1a:
81:e0:e6:6c:8e:66:4b:1d:c2:8a:9a:b7:49:e4:95:6d:19:0c:
95:53:5e:34:e2:10:5f:e8:51:eb:2f:11:22:4a:c4:55:f5:f6:
6a:79:00:33:b4:7c:9b:91:da:b6:eb:91:2a:30:cd:a7:0a:d0:
f4:59:bb:95:e3:8f:38:68:5f:27:a7:15:d4:a0:40:a8:2b:a0:
11:c0:c8:99:f0:b2:ae:a6:20:3b:39:44:0e:6b:c4:c3:61:6e:
a5:b1:ae:d2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhsklMNF+AbPVRC37AeTvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjUwMTAxMTE0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWM0OGRhYzVlMDY2MTIxNzRjMDdlZmJkNWU0NjkzN2Y2OWZmM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3cPirodZpmioKeGI/dgQAteW85j
12vmk1UaWq9IGKWPwGcWiF1PjdOQLwjjpBYQ3ZdyM8P5JbBbu+MzPRzD+gZtcPdH
ss8fGBEzyV62lcHXJTNDBH0hDQs/h/a8HQO2Mx/+9nb2yNBr4II+4ofXcCYPze7J
BjV7Ei4V9MB7r2f7Y7v6EHGV7ZxfBh05Fsc8BBiV+McZVzrMDx1s4WLSWhlA3hFu
jZaz48grVlakuTI+9+pUuBD33ftwfDg6rQ3W8QO+CF7ChW0ApbGy5vqDnrOj3Kxq
O0PuuEIeKuWVIkBCW3ceHQDmh5zKc8+bXy1eyfOsBXpol4FE46VS+MVX3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD7EjaxeBmEhdMB++9XkaTf2n/OhMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvUHNTTnJGNEdZU0Ywd0g3NzFlUnBOX2FmODZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSrfAwQA
uedxAwQAwrTgMA0GCSqGSIb3DQEBCwUAA4IBAQBeOeboe2T+3YkdV21xniJkrSv9
Wjtgpn3VofhdkLHFfwPn6WVgmB5WmPwi1iUtuER+SLNdccVzbh0FF5VdYgNUnGj1
l8WugAqi6P9p/NLu8hEvPCbaYN9iMgA26HNFrJyhzpLM6DA8kOAGRzHSwPtzeO2q
51Zm8SqNYt8kw7+DT1cy9Oeqrb4mmpcC2/kXwKfRCatnLYFk+BbFuKS0GQc8aRqB
4OZsjmZLHcKKmrdJ5JVtGQyVU1404hBf6FHrLxEiSsRV9fZqeQAztHybkdq265Eq
MM2nCtD0WbuV4484aF8npxXUoECoK6ARwMiZ8LKupiA7OUQOa8TDYW6lsa7S
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:41:46 2025 by rpki-client