Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KHGMaVCjJikA-jckTkNqY1eTznI.roa
File: KHGMaVCjJikA-jckTkNqY1eTznI.roa (raw, json)
Hash identifier: 7N6cm3TsmgThn5FO+5y9/GvUHsg0jga54Yoey0KwPIU=
Subject key identifier: 28:71:8C:69:50:A3:26:29:00:FA:37:24:4E:43:6A:63:57:93:CE:72
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C127C0278BD6782E1BFFDFAA798D5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KHGMaVCjJikA-jckTkNqY1eTznI.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13059
IP address blocks: 193.231.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:12:7c:02:78:bd:67:82:e1:bf:fd:fa:a7:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28718c6950a3262900fa37244e436a635793ce72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:52:1d:7e:2e:85:74:c8:83:a7:16:a5:ec:
65:e1:46:23:2c:24:8f:69:4c:c0:0f:ff:7d:53:6c:
ad:d0:5b:44:51:6c:a4:96:2f:b5:e6:a3:4d:bb:ae:
eb:dc:ec:34:33:08:5b:c3:59:e3:c3:4c:21:c8:3c:
df:14:44:5e:44:72:9e:93:cc:33:6d:b3:db:e1:e7:
1a:3e:f5:53:71:59:32:2a:99:b6:0f:ae:d0:76:50:
31:75:a5:56:e4:02:1e:34:55:03:89:ce:f3:ac:ad:
f7:11:26:36:8a:a0:e6:45:ee:10:1b:e9:3a:d4:83:
3e:76:58:33:41:6c:98:a3:4a:77:d4:f9:a4:12:f7:
6a:9c:7e:5c:c2:9d:94:f1:03:c6:37:c9:22:86:ee:
71:ae:87:a9:cc:72:15:5d:29:5f:03:d0:4a:c4:e0:
e8:22:bf:9a:e5:86:14:52:fa:e5:82:ae:7b:b7:01:
5f:d7:44:0c:c2:ff:80:56:51:d4:c0:c0:fb:0d:66:
87:34:7b:bd:0d:16:bd:9b:eb:01:e0:7e:ea:44:1f:
b0:04:98:7f:2b:44:9e:60:c8:c4:05:b0:03:51:65:
7c:c8:c9:1b:47:ce:be:4e:1c:2a:08:84:a8:f0:ff:
be:09:43:55:86:7c:38:06:c6:13:be:fd:ce:36:19:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:8C:69:50:A3:26:29:00:FA:37:24:4E:43:6A:63:57:93:CE:72
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KHGMaVCjJikA-jckTkNqY1eTznI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.83.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f8:2a:48:b5:5b:b9:a4:32:8b:0e:9a:d2:1e:a4:5f:19:02:
25:4f:5f:d9:32:85:15:cb:cb:bf:5e:23:74:9a:91:37:98:c4:
16:be:09:a3:fc:f4:f5:9d:fe:63:1e:31:bf:01:00:f3:17:22:
ae:30:af:21:30:42:99:f1:9f:39:c3:01:89:af:af:fc:25:f2:
0f:dd:79:07:04:e3:ff:1e:2e:7a:bf:c3:6e:cf:a8:a7:13:a2:
72:b6:11:f7:36:03:43:31:a1:6a:86:3b:f4:aa:53:24:22:1c:
d7:dc:94:2b:ca:f8:59:f7:10:c0:20:0c:13:9f:d9:60:e7:c4:
52:e8:38:c6:ee:09:6f:ba:8e:2d:d9:6e:b7:69:32:e0:1f:e7:
d5:36:cd:7e:84:85:e3:85:a4:4a:4c:60:6e:e8:4d:ad:3c:d7:
58:3e:68:1e:23:05:f3:c0:9e:df:18:be:a5:e6:ed:dd:4c:67:
5e:84:20:59:79:40:f0:54:37:7f:97:a7:88:e7:71:ed:66:a9:
7d:61:82:bb:8e:ba:f8:f9:01:e6:75:ae:24:aa:e4:57:99:98:
fc:4d:f7:1f:54:00:b2:27:00:ac:9e:5c:c0:22:9e:67:a2:55:
5a:9e:7f:a0:e0:2b:e3:3a:f5:06:2a:7f:aa:c8:34:00:4a:74:
83:92:5e:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjBJ8Ani9Z4Lhv/36p5jVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODcxOGM2OTUwYTMyNjI5MDBmYTM3MjQ0ZTQzNmE2MzU3OTNjZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/hSHX4uhXTIg6cWpexl4UYjLCSP
aUzAD/99U2yt0FtEUWykli+15qNNu67r3Ow0Mwhbw1njw0whyDzfFEReRHKek8wz
bbPb4ecaPvVTcVkyKpm2D67QdlAxdaVW5AIeNFUDic7zrK33ESY2iqDmRe4QG+k6
1IM+dlgzQWyYo0p31PmkEvdqnH5cwp2U8QPGN8kihu5xroepzHIVXSlfA9BKxODo
Ir+a5YYUUvrlgq57twFf10QMwv+AVlHUwMD7DWaHNHu9DRa9m+sB4H7qRB+wBJh/
K0SeYMjEBbADUWV8yMkbR86+ThwqCISo8P++CUNVhnw4BsYTvv3ONhnHnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChxjGlQoyYpAPo3JE5DamNXk85yMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvS0hHTWFWQ2pKaWtBLWpja1RrTnFZMWVUem5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwedTMA0G
CSqGSIb3DQEBCwUAA4IBAQB3+CpItVu5pDKLDprSHqRfGQIlT1/ZMoUVy8u/XiN0
mpE3mMQWvgmj/PT1nf5jHjG/AQDzFyKuMK8hMEKZ8Z85wwGJr6/8JfIP3XkHBOP/
Hi56v8Nuz6inE6JythH3NgNDMaFqhjv0qlMkIhzX3JQryvhZ9xDAIAwTn9lg58RS
6DjG7glvuo4t2W63aTLgH+fVNs1+hIXjhaRKTGBu6E2tPNdYPmgeIwXzwJ7fGL6l
5u3dTGdehCBZeUDwVDd/l6eI53HtZql9YYK7jrr4+QHmda4kquRXmZj8TfcfVACy
JwCsnlzAIp5nolVann+g4CvjOvUGKn+qyDQASnSDkl6O
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:00 2025 by rpki-client