Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CwaodPYpIcv18dhoIz3DRmXT9MU.roa
File: CwaodPYpIcv18dhoIz3DRmXT9MU.roa (raw, json)
Hash identifier: OFAmSmf4K0f2KGVFT+wfVVCaZmbTsuubhJWxoF8zbXk=
Subject key identifier: 0B:06:A8:74:F6:29:21:CB:F5:F1:D8:68:23:3D:C3:46:65:D3:F4:C5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C142EBB58C808A5324CD35EB6B78C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CwaodPYpIcv18dhoIz3DRmXT9MU.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20616
IP address blocks: 81.180.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:2e:bb:58:c8:08:a5:32:4c:d3:5e:b6:b7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b06a874f62921cbf5f1d868233dc34665d3f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:9a:f0:ec:32:88:52:80:15:f4:6d:c5:65:
ae:10:89:64:c0:22:31:e9:76:91:50:3d:2e:a1:87:
38:5c:4f:94:7f:72:3d:92:6d:2b:a6:80:bc:50:2c:
ae:f6:fb:1a:c0:4e:bf:a3:fb:4f:03:52:7f:e9:e3:
1e:a4:fe:26:b7:eb:39:2a:bd:39:df:9c:7f:9c:e3:
1d:7b:f9:c3:c5:7a:d4:ef:f8:14:b5:eb:97:00:6d:
b5:5d:fc:f3:e1:f5:10:27:9b:b5:23:ca:4e:26:90:
94:98:4b:16:9e:7c:ea:22:f5:18:42:a9:df:a3:3e:
a0:5a:b6:b7:71:6d:45:1f:dd:f2:2a:fc:91:87:2c:
a9:98:56:c5:7a:f3:89:20:e8:69:88:2a:27:25:13:
95:d3:f0:f1:e9:3b:94:d9:24:95:09:fc:e2:75:75:
e1:2c:40:b6:55:44:9f:53:e9:b4:2f:3f:f8:d1:62:
d3:1a:90:be:4a:d9:7d:12:7a:a4:ca:e8:41:a8:78:
54:6d:c8:e9:c5:b8:8d:77:e6:b4:48:a9:73:9a:94:
7d:a2:d6:b0:9e:e3:d1:a0:a4:f4:65:01:ee:16:f1:
93:17:7e:94:fb:38:f9:35:1c:2c:01:e6:72:76:9d:
09:69:49:61:db:6f:fa:fd:fd:53:44:ed:d5:e2:a8:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:A8:74:F6:29:21:CB:F5:F1:D8:68:23:3D:C3:46:65:D3:F4:C5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CwaodPYpIcv18dhoIz3DRmXT9MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e4:86:51:3f:ca:04:29:c6:5e:d9:2e:32:88:68:8d:64:e7:
97:d0:c0:d1:bb:54:27:5b:ee:32:0f:ea:db:ed:f9:8c:59:ca:
4a:45:e7:5d:6c:2f:09:07:0c:bc:b1:62:9f:5a:79:01:42:6e:
4a:3e:f3:b2:6e:6a:82:8e:f0:ff:bc:8c:66:98:53:45:30:5d:
07:2a:9c:14:4d:ae:00:54:5d:03:1d:6b:64:d7:66:2a:c8:13:
e1:c7:f5:2b:a4:e7:3b:32:c2:77:a2:fa:45:56:22:ce:68:e0:
dc:97:06:12:66:d8:33:d3:6c:75:cb:da:9e:db:bd:df:aa:1c:
5f:9d:69:92:4a:71:da:84:40:92:7f:ef:c0:d0:11:b4:5d:85:
52:ff:0c:91:36:59:31:e6:52:fa:a2:b8:8f:59:88:5d:42:08:
27:ed:6a:21:f6:27:13:e5:d6:60:48:8e:c9:65:6a:54:34:76:
26:09:07:c7:7f:46:5b:ec:4d:85:9e:a0:76:e0:70:57:3c:c6:
ea:b8:30:7e:aa:ec:1b:01:56:3a:ea:f1:8a:59:8e:4d:50:e3:
60:21:03:26:5d:f9:cd:20:59:77:e7:1c:cc:08:89:6c:53:d6:
26:67:55:1e:15:14:25:b6:b7:bc:5c:e9:30:f8:40:a5:f9:c5:
b9:41:dd:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjBQuu1jICKUyTNNetreMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjA2YTg3NGY2MjkyMWNiZjVmMWQ4NjgyMzNkYzM0NjY1ZDNmNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Wa8OwyiFKAFfRtxWWuEIlkwCIx
6XaRUD0uoYc4XE+Uf3I9km0rpoC8UCyu9vsawE6/o/tPA1J/6eMepP4mt+s5Kr05
35x/nOMde/nDxXrU7/gUteuXAG21Xfzz4fUQJ5u1I8pOJpCUmEsWnnzqIvUYQqnf
oz6gWra3cW1FH93yKvyRhyypmFbFevOJIOhpiConJROV0/Dx6TuU2SSVCfzidXXh
LEC2VUSfU+m0Lz/40WLTGpC+Stl9EnqkyuhBqHhUbcjpxbiNd+a0SKlzmpR9otaw
nuPRoKT0ZQHuFvGTF36U+zj5NRwsAeZydp0JaUlh22/6/f1TRO3V4qgvUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsGqHT2KSHL9fHYaCM9w0Zl0/TFMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvQ3dhb2RQWXBJY3YxOGRob0l6M0RSbVhUOU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbTIMA0G
CSqGSIb3DQEBCwUAA4IBAQC95IZRP8oEKcZe2S4yiGiNZOeX0MDRu1QnW+4yD+rb
7fmMWcpKReddbC8JBwy8sWKfWnkBQm5KPvOybmqCjvD/vIxmmFNFMF0HKpwUTa4A
VF0DHWtk12YqyBPhx/UrpOc7MsJ3ovpFViLOaODclwYSZtgz02x1y9qe273fqhxf
nWmSSnHahECSf+/A0BG0XYVS/wyRNlkx5lL6oriPWYhdQggn7Woh9icT5dZgSI7J
ZWpUNHYmCQfHf0Zb7E2FnqB24HBXPMbquDB+quwbAVY66vGKWY5NUONgIQMmXfnN
IFl35xzMCIlsU9YmZ1UeFRQltre8XOkw+ECl+cW5Qd16
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:50 2025 by rpki-client