Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/aV0HuR69hYJIPw5HwKLbzgnSUj8.roa
File: aV0HuR69hYJIPw5HwKLbzgnSUj8.roa (raw, json)
Hash identifier: SHFEsOqJwkOCmFGPA5WtYtOFrOaJ+2dQqhpAdP75uZE=
Subject key identifier: 69:5D:07:B9:1E:BD:85:82:48:3F:0E:47:C0:A2:DB:CE:09:D2:52:3F
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0194206847908553B19A3AEA96AB67CB435E
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/aV0HuR69hYJIPw5HwKLbzgnSUj8.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:90:85:53:b1:9a:3a:ea:96:ab:67:cb:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=695d07b91ebd8582483f0e47c0a2dbce09d2523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:56:90:61:42:0b:a2:90:cf:44:27:96:ca:
0d:26:70:af:eb:3d:42:27:aa:67:42:87:c1:4f:a4:
a4:ce:37:c9:5c:2e:8f:23:f8:f5:a3:65:de:00:43:
49:f0:f8:d6:7a:1e:ca:1d:fd:27:98:1b:a1:4a:85:
21:8f:f4:10:a1:68:21:14:05:35:7a:e7:2c:b3:18:
5e:3d:7f:94:2e:9a:e1:8b:bc:5c:93:0b:31:a3:27:
23:d7:0d:51:59:a8:66:58:13:b5:48:d3:9e:8c:ae:
61:97:78:e4:00:01:29:db:c3:54:5f:6a:48:ce:b3:
a6:d9:dd:ad:9f:f0:1e:ab:3e:ff:7c:bd:d9:2b:5a:
3d:fb:5b:cb:08:cb:8a:fe:19:be:79:98:2a:b9:69:
70:cc:d8:9f:77:c2:d2:a1:df:85:15:29:9f:09:8f:
b2:5d:96:09:5d:53:d7:f1:f6:62:e6:b0:a7:ee:08:
bc:50:32:a1:0d:1d:b7:02:33:0c:0a:bb:e2:84:35:
3f:a9:28:9d:55:91:a7:a6:8f:1b:ea:7d:83:dc:09:
49:fd:49:bc:14:e6:e2:c0:3f:18:8d:77:94:ac:65:
ad:19:3b:36:a6:67:19:61:00:40:0f:ff:f7:0c:7a:
03:ae:9c:4b:07:74:19:99:76:4f:5f:7a:78:c1:73:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:07:B9:1E:BD:85:82:48:3F:0E:47:C0:A2:DB:CE:09:D2:52:3F
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/aV0HuR69hYJIPw5HwKLbzgnSUj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
89:c5:ae:bd:c8:f1:a1:d3:16:59:1f:17:95:2d:df:33:d6:27:
83:65:93:5a:16:9d:93:83:1b:52:a5:ba:1c:e3:7b:7b:07:45:
0b:c1:80:5d:4d:ae:e6:5c:b9:85:49:16:97:34:b4:e6:03:c2:
f4:81:4d:aa:97:08:47:96:e9:54:e9:90:31:47:a1:8d:aa:70:
40:83:af:93:7d:90:34:f9:81:e9:87:b0:1c:1d:79:44:64:e0:
a5:64:af:34:33:b5:f8:a5:10:3e:28:ee:4c:71:a6:b5:e6:32:
60:34:c9:89:bb:5d:63:20:27:41:37:4d:2a:ca:4c:28:13:17:
a4:0a:df:30:01:28:83:ce:f5:d1:e5:0a:56:c6:f8:88:17:e2:
c9:82:4f:89:51:ff:19:6d:31:b7:37:fa:b0:26:cf:db:60:43:
87:59:fc:61:f2:79:f8:fd:4e:bb:8d:38:a5:f9:c5:49:d6:2b:
9f:cf:85:66:7c:e9:ef:e3:9d:a4:8c:89:7f:ef:12:89:1d:eb:
e7:de:20:91:d7:c2:35:1e:07:d6:7b:db:df:69:0a:c6:58:65:
45:c6:89:13:e9:aa:72:2e:2f:04:3f:29:ab:69:37:89:8d:c2:
1c:7a:99:6c:78:b3:03:79:36:46:7a:e8:4d:f9:a6:b1:62:b2:
81:03:21:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgaEeQhVOxmjrqlqtny0NeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjUwMTAxMDU0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTVkMDdiOTFlYmQ4NTgyNDgzZjBlNDdjMGEyZGJjZTA5ZDI1MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzRWkGFCC6KQz0QnlsoNJnCv6z1C
J6pnQofBT6SkzjfJXC6PI/j1o2XeAENJ8PjWeh7KHf0nmBuhSoUhj/QQoWghFAU1
eucssxhePX+ULprhi7xckwsxoycj1w1RWahmWBO1SNOejK5hl3jkAAEp28NUX2pI
zrOm2d2tn/Aeqz7/fL3ZK1o9+1vLCMuK/hm+eZgquWlwzNifd8LSod+FFSmfCY+y
XZYJXVPX8fZi5rCn7gi8UDKhDR23AjMMCrvihDU/qSidVZGnpo8b6n2D3AlJ/Um8
FObiwD8YjXeUrGWtGTs2pmcZYQBAD//3DHoDrpxLB3QZmXZPX3p4wXORYQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGldB7kevYWCSD8OR8Ci284J0lI/MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvYVYwSHVSNjloWUpJUHc1SHdLTGJ6Z25TVWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANemigD
BABemi4wDQYJKoZIhvcNAQELBQADggEBAInFrr3I8aHTFlkfF5Ut3zPWJ4Nlk1oW
nZODG1Kluhzje3sHRQvBgF1NruZcuYVJFpc0tOYDwvSBTaqXCEeW6VTpkDFHoY2q
cECDr5N9kDT5gemHsBwdeURk4KVkrzQztfilED4o7kxxprXmMmA0yYm7XWMgJ0E3
TSrKTCgTF6QK3zABKIPO9dHlClbG+IgX4smCT4lR/xltMbc3+rAmz9tgQ4dZ/GHy
efj9TruNOKX5xUnWK5/PhWZ86e/jnaSMiX/vEokd6+feIJHXwjUeB9Z7299pCsZY
ZUXGiRPpqnIuLwQ/KatpN4mNwhx6mWx4swN5NkZ66E35prFisoEDIfs=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:43 2025 by rpki-client