Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KCqKEGXTkNG0jxUoHPQr-vrYcjE.roa
File: KCqKEGXTkNG0jxUoHPQr-vrYcjE.roa (raw, json)
Hash identifier: sBtVrGaj6hiYQjRxOISVXJEO+KUFH/2q9bEg3tmf74U=
Subject key identifier: 28:2A:8A:10:65:D3:90:D1:B4:8F:15:28:1C:F4:2B:FA:FA:D8:72:31
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019543430FA0902BDDAF4CB29E1DF5BE277E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KCqKEGXTkNG0jxUoHPQr-vrYcjE.roa
Signing time: Wed 26 Feb 2025 17:17:03 +0000
ROA not before: Wed 26 Feb 2025 17:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 5.83.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 04:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:43:0f:a0:90:2b:dd:af:4c:b2:9e:1d:f5:be:27:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 26 17:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=282a8a1065d390d1b48f15281cf42bfafad87231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:56:b3:ab:a2:df:37:a7:fb:62:d0:b8:81:
56:9a:2a:26:2c:e5:5d:74:e8:fe:25:b1:ea:29:be:
b3:df:17:cd:c7:ea:cb:fe:28:c1:90:ed:59:ad:4c:
a7:5f:2d:95:1e:d6:74:24:30:40:98:04:5b:b5:d6:
38:a3:00:32:73:56:58:83:88:14:80:e9:c5:ca:b6:
b8:74:3b:15:72:98:e9:5f:62:73:61:41:84:f9:23:
66:21:99:9a:b2:e7:8d:d8:2b:99:cd:88:42:76:6c:
ea:bc:64:f3:db:a4:e0:24:ca:8b:5b:72:79:ca:a4:
c4:f6:cc:f5:d7:52:aa:bb:73:b3:bd:19:f5:fa:1d:
b3:f9:24:da:fe:74:43:33:67:a4:74:17:6c:13:7e:
ad:1a:94:ed:64:22:ee:64:17:8d:65:b1:4d:a9:b4:
9d:d1:6a:72:a8:63:8d:b8:cb:72:a6:4d:cc:ac:42:
c9:fd:98:0e:7f:5e:07:73:1e:8f:3f:0d:fe:11:1c:
06:64:02:c8:50:01:de:a3:61:c6:88:36:fb:43:61:
18:2b:94:9c:b1:0b:70:36:2a:85:6e:16:00:fe:c4:
4a:82:17:5f:0d:41:b2:66:ee:bd:c2:ac:fb:11:a8:
8f:1b:c2:50:81:53:66:9b:59:1c:61:ba:e7:62:3b:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:8A:10:65:D3:90:D1:B4:8F:15:28:1C:F4:2B:FA:FA:D8:72:31
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KCqKEGXTkNG0jxUoHPQr-vrYcjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
69:eb:d3:bb:f9:8d:33:6a:d3:53:08:77:e6:7a:f0:1f:aa:ce:
5b:79:a4:64:da:c0:5d:41:83:94:1e:39:b8:bd:82:94:78:23:
2a:38:1a:b5:88:7c:33:21:39:1d:a8:e3:1e:2b:4d:06:15:38:
d1:0c:6e:12:14:0e:85:12:ba:d7:74:aa:ec:d0:7c:fd:80:a3:
b6:6e:a2:2c:e5:4c:81:89:1c:93:a7:2a:25:7e:11:c8:ef:4e:
ef:19:27:c9:a5:61:e1:f0:cb:a1:8d:71:bd:c5:65:d7:c6:18:
1d:a8:bd:9c:a8:d7:02:b4:9d:28:cf:17:2e:f6:6b:8e:d5:ba:
d0:ea:8c:bf:9d:e3:27:f0:c3:18:f4:29:00:e1:ed:43:07:43:
09:99:d4:cc:3e:e7:05:1a:05:86:28:9c:1a:26:ee:45:12:71:
61:67:05:60:d9:27:1d:9e:aa:ae:27:a1:b8:3a:af:27:d9:67:
37:cb:e3:ac:5f:85:a1:8d:62:6a:53:82:e3:da:f3:26:6c:8d:
15:e3:e1:e6:50:be:89:27:d2:9a:7a:87:4d:39:7e:ae:1f:5e:
0d:45:a7:3f:64:ce:fb:fc:51:b5:f8:aa:bc:09:01:d1:cd:9e:
ac:97:23:cd:f7:6d:d9:a2:9f:26:94:5a:b5:10:1d:d1:af:54:
64:36:ad:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVDQw+gkCvdr0yynh31vid+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjI2MTcxNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODJhOGExMDY1ZDM5MGQxYjQ4ZjE1MjgxY2Y0MmJmYWZhZDg3MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLVWs6ui3zen+2LQuIFWmiomLOVd
dOj+JbHqKb6z3xfNx+rL/ijBkO1ZrUynXy2VHtZ0JDBAmARbtdY4owAyc1ZYg4gU
gOnFyra4dDsVcpjpX2JzYUGE+SNmIZmasueN2CuZzYhCdmzqvGTz26TgJMqLW3J5
yqTE9sz111Kqu3OzvRn1+h2z+STa/nRDM2ekdBdsE36tGpTtZCLuZBeNZbFNqbSd
0WpyqGONuMtypk3MrELJ/ZgOf14Hcx6PPw3+ERwGZALIUAHeo2HGiDb7Q2EYK5Sc
sQtwNiqFbhYA/sRKghdfDUGyZu69wqz7EaiPG8JQgVNmm1kcYbrnYjtAgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgqihBl05DRtI8VKBz0K/r62HIxMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvS0NxS0VHWFRrTkcwanhVb0hQUXItdnJZY2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOfMA0G
CSqGSIb3DQEBCwUAA4IBAQBp69O7+Y0zatNTCHfmevAfqs5beaRk2sBdQYOUHjm4
vYKUeCMqOBq1iHwzITkdqOMeK00GFTjRDG4SFA6FErrXdKrs0Hz9gKO2bqIs5UyB
iRyTpyolfhHI707vGSfJpWHh8MuhjXG9xWXXxhgdqL2cqNcCtJ0ozxcu9muO1brQ
6oy/neMn8MMY9CkA4e1DB0MJmdTMPucFGgWGKJwaJu5FEnFhZwVg2ScdnqquJ6G4
Oq8n2Wc3y+OsX4WhjWJqU4Lj2vMmbI0V4+HmUL6JJ9KaeodNOX6uH14NRac/ZM77
/FG1+Kq8CQHRzZ6slyPN923Zop8mlFq1EB3Rr1RkNq03
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:51:53 2025 by rpki-client