Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/uw16RrYC31ae26o-GMI2QavuMU0.roa
File: uw16RrYC31ae26o-GMI2QavuMU0.roa (raw, json)
Hash identifier: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=
Subject key identifier: BB:0D:7A:46:B6:02:DF:56:9E:DB:AA:3E:18:C2:36:41:AB:EE:31:4D
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019421B247DC9D4FFB69E3D7220614B249DA
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/uw16RrYC31ae26o-GMI2QavuMU0.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57944
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:47:dc:9d:4f:fb:69:e3:d7:22:06:14:b2:49:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb0d7a46b602df569edbaa3e18c23641abee314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:9a:72:97:62:52:9b:80:b3:7d:23:c6:e1:
10:54:50:0f:e7:12:f5:59:86:ea:3e:52:18:d9:e2:
42:4b:7b:09:d6:53:f6:1f:ea:84:7b:7d:aa:a9:cd:
6b:37:b6:43:e0:df:01:36:df:e3:e7:bb:a4:a4:76:
b7:39:1e:3c:f9:87:b2:b2:f8:38:14:64:21:d3:5d:
63:ad:77:7c:4b:46:c9:cc:42:64:18:73:2e:67:6a:
a7:00:f2:da:9b:f2:39:e3:f9:b2:49:be:bd:dd:b3:
23:9b:92:4d:04:e0:01:90:cb:5f:77:48:03:5b:ab:
75:b5:51:02:f8:92:2d:5e:e1:39:39:46:71:dc:b6:
06:69:e7:09:83:21:32:66:03:51:72:a3:da:6b:e2:
0e:97:17:02:90:c6:e7:1d:90:e6:fe:7f:2e:20:bd:
73:01:8b:cc:9c:55:b7:9e:e5:84:1f:00:03:9e:99:
0c:f6:10:33:ac:9a:2b:22:58:60:9c:07:f0:68:9e:
57:94:49:7d:d4:c7:97:df:3d:8d:81:28:0d:69:ba:
9f:b2:5a:9f:80:a9:60:d3:83:8a:19:49:ae:0a:0a:
d9:a5:1c:be:5f:70:da:ab:21:1b:b0:27:4a:20:32:
fc:e5:83:51:82:ac:52:22:4e:2b:cf:a9:3c:ae:86:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:7A:46:B6:02:DF:56:9E:DB:AA:3E:18:C2:36:41:AB:EE:31:4D
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/uw16RrYC31ae26o-GMI2QavuMU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c8:5b:70:b4:7a:da:5b:de:ba:69:3c:ee:61:d3:90:1f:4c:
10:e3:ba:72:81:34:d4:c1:84:bf:03:91:d5:6d:48:c0:f8:db:
c5:62:76:85:5b:a5:c1:ab:f0:01:f9:18:b7:3c:70:14:b3:68:
0c:68:50:75:7e:3e:ce:a0:12:97:c6:27:99:90:0c:17:95:07:
60:f9:eb:a5:12:77:f0:3b:c8:5c:a4:17:82:7b:13:57:1d:32:
60:04:96:7a:c0:47:4f:c4:f9:49:e7:fb:6e:74:d0:b1:b1:f2:
cf:c9:2c:87:a5:21:1a:c7:e0:d6:6d:1e:d9:61:8c:43:d2:59:
ee:5e:e4:37:f6:78:31:ad:f6:d3:0c:d7:a9:aa:62:d1:99:1a:
93:78:61:7d:f4:a4:00:f5:3f:75:c3:91:57:c0:4f:d6:61:13:
21:3a:76:7f:34:53:10:e7:6a:ce:41:48:30:a8:bf:c5:30:84:
ed:a6:91:f6:26:8c:4c:4b:6b:60:20:d1:a3:d4:31:b5:ff:cb:
5a:f5:6f:c3:d3:74:52:05:e5:cf:e4:35:d9:bd:6f:3d:5f:f2:
3d:f9:3a:6e:f6:42:df:5e:aa:6f:df:2e:bc:63:2a:be:c8:0d:
b8:50:a1:66:1e:87:bb:fd:de:73:71:7e:30:1c:11:93:af:16:
20:c9:7f:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskfcnU/7aePXIgYUsknaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjUwMTAxMTE0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjBkN2E0NmI2MDJkZjU2OWVkYmFhM2UxOGMyMzY0MWFiZWUzMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+OacpdiUpuAs30jxuEQVFAP5xL1
WYbqPlIY2eJCS3sJ1lP2H+qEe32qqc1rN7ZD4N8BNt/j57ukpHa3OR48+Yeysvg4
FGQh011jrXd8S0bJzEJkGHMuZ2qnAPLam/I54/mySb693bMjm5JNBOABkMtfd0gD
W6t1tVEC+JItXuE5OUZx3LYGaecJgyEyZgNRcqPaa+IOlxcCkMbnHZDm/n8uIL1z
AYvMnFW3nuWEHwADnpkM9hAzrJorIlhgnAfwaJ5XlEl91MeX3z2NgSgNabqfslqf
gKlg04OKGUmuCgrZpRy+X3DaqyEbsCdKIDL85YNRgqxSIk4rz6k8robLfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsNeka2At9WntuqPhjCNkGr7jFNMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvdXcxNlJyWUMzMWFlMjZvLUdNSTJRYXZ1TVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOMMA0G
CSqGSIb3DQEBCwUAA4IBAQCyyFtwtHraW966aTzuYdOQH0wQ47pygTTUwYS/A5HV
bUjA+NvFYnaFW6XBq/AB+Ri3PHAUs2gMaFB1fj7OoBKXxieZkAwXlQdg+eulEnfw
O8hcpBeCexNXHTJgBJZ6wEdPxPlJ5/tudNCxsfLPySyHpSEax+DWbR7ZYYxD0lnu
XuQ39ngxrfbTDNepqmLRmRqTeGF99KQA9T91w5FXwE/WYRMhOnZ/NFMQ52rOQUgw
qL/FMITtppH2JoxMS2tgINGj1DG1/8ta9W/D03RSBeXP5DXZvW89X/I9+Tpu9kLf
Xqpv3y68Yyq+yA24UKFmHoe7/d5zcX4wHBGTrxYgyX/A
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:20 2025 by rpki-client