Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rDUvNtZszdxpY34gm0iJ4XXssy8.roa
File: rDUvNtZszdxpY34gm0iJ4XXssy8.roa (raw, json)
Hash identifier: rdG2Jm5DwCCfr8z6gPXWtBKSRy8af2vrs2PzyLc4UcY=
Subject key identifier: AC:35:2F:36:D6:6C:CD:DC:69:63:7E:20:9B:48:89:E1:75:EC:B3:2F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C17A1FCCB31B0F9F78C90737E0EA4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rDUvNtZszdxpY34gm0iJ4XXssy8.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31554
IP address blocks: 81.181.76.0/24 maxlen: 24
81.181.78.0/23 maxlen: 23
81.181.165.0/24 maxlen: 24
193.226.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:a1:fc:cb:31:b0:f9:f7:8c:90:73:7e:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac352f36d66ccddc69637e209b4889e175ecb32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:52:a7:6d:49:6d:c6:90:e8:d5:e0:ac:a3:
23:52:3f:41:1f:b6:9d:02:4d:ce:d1:de:35:8d:d5:
bd:8e:76:5d:49:14:73:48:df:e9:23:ca:31:e0:37:
25:4f:92:0e:b1:f4:79:86:e6:c7:8f:28:45:4b:70:
39:68:6e:66:2c:15:8f:ae:3e:50:d9:87:33:cc:6d:
b3:24:f1:d8:bb:3c:12:28:f7:0f:17:32:b2:d7:22:
f1:16:a4:ee:94:e6:23:63:35:b2:9a:f5:ed:3a:e5:
82:bc:f3:c6:dc:e7:1a:ae:ae:34:04:19:08:85:df:
85:2d:5f:fa:22:c9:53:9f:20:2d:36:61:d2:41:f9:
ac:08:3a:62:ce:a6:bd:22:7c:a2:89:83:c1:e6:df:
64:47:69:d3:5a:02:e9:83:95:41:22:36:27:2a:3f:
30:14:1c:ad:6d:9d:eb:7c:32:36:f5:e4:1c:a8:90:
06:73:69:1b:67:88:8c:38:2e:4f:1c:42:16:e4:f7:
fc:c9:29:88:7b:5c:a9:36:ec:d5:a3:1f:d7:64:7d:
95:88:4c:56:c6:11:03:a8:70:fd:0f:a2:fa:ea:60:
05:1b:b8:1d:cf:b4:67:c3:80:13:20:be:2f:fe:74:
73:46:32:e3:10:6f:f9:c3:dd:a0:e9:61:b7:1b:36:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:2F:36:D6:6C:CD:DC:69:63:7E:20:9B:48:89:E1:75:EC:B3:2F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rDUvNtZszdxpY34gm0iJ4XXssy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.76.0/24
81.181.78.0/23
81.181.165.0/24
193.226.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:aa:65:58:f2:68:08:bf:46:3b:2b:86:d1:72:25:5f:35:7f:
87:65:fa:79:f7:7c:4d:ce:1e:0a:31:6f:78:cd:dd:0a:bb:3c:
1e:31:a6:55:f6:82:3d:80:13:48:9a:bb:ee:a1:47:78:40:6d:
f4:58:32:ab:29:70:ab:cb:3d:2a:01:a8:16:1e:c9:a7:90:de:
af:29:64:2a:a8:eb:10:59:65:f8:20:27:2b:ec:58:89:1c:14:
b4:6b:b8:d2:88:e7:9d:d2:29:25:fa:ae:3a:99:5a:8f:06:05:
77:f9:5d:71:96:af:a1:c3:ba:62:41:0b:ee:d8:45:84:54:ab:
14:63:17:57:a5:e8:be:98:11:f1:d4:56:50:43:23:40:1e:b6:
da:34:67:4b:e1:92:16:1a:bd:6a:8d:ec:fc:0c:33:22:50:99:
59:83:f7:17:2f:b7:d4:1e:38:da:4e:82:fd:44:14:37:12:7d:
cf:80:22:28:ae:86:16:0e:f6:df:8c:84:7f:31:bb:58:71:27:
89:05:c3:d4:b9:62:c8:b0:23:bf:35:f9:e4:dd:da:15:cd:09:
10:de:d1:34:73:9e:e0:b0:ab:36:d4:51:5d:67:d4:32:81:ad:
5d:40:99:45:ab:42:e7:5a:92:c7:da:df:c2:98:22:da:98:d1:
7d:4c:72:00
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQfjBeh/MsxsPn3jJBzfg6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzM1MmYzNmQ2NmNjZGRjNjk2MzdlMjA5YjQ4ODllMTc1ZWNiMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQxSp21JbcaQ6NXgrKMjUj9BH7ad
Ak3O0d41jdW9jnZdSRRzSN/pI8ox4DclT5IOsfR5hubHjyhFS3A5aG5mLBWPrj5Q
2YczzG2zJPHYuzwSKPcPFzKy1yLxFqTulOYjYzWymvXtOuWCvPPG3Ocarq40BBkI
hd+FLV/6IslTnyAtNmHSQfmsCDpizqa9InyiiYPB5t9kR2nTWgLpg5VBIjYnKj8w
FBytbZ3rfDI29eQcqJAGc2kbZ4iMOC5PHEIW5Pf8ySmIe1ypNuzVox/XZH2ViExW
xhEDqHD9D6L66mAFG7gdz7Rnw4ATIL4v/nRzRjLjEG/5w92g6WG3GzazpwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKw1LzbWbM3caWN+IJtIieF17LMvMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvckRVdk50WnN6ZHhwWTM0Z20waUo0WFhzc3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUbVMAwQB
UbVOAwQAUbWlAwQAweJcMA0GCSqGSIb3DQEBCwUAA4IBAQB9qmVY8mgIv0Y7K4bR
ciVfNX+HZfp593xNzh4KMW94zd0KuzweMaZV9oI9gBNImrvuoUd4QG30WDKrKXCr
yz0qAagWHsmnkN6vKWQqqOsQWWX4ICcr7FiJHBS0a7jSiOed0ikl+q46mVqPBgV3
+V1xlq+hw7piQQvu2EWEVKsUYxdXpei+mBHx1FZQQyNAHrbaNGdL4ZIWGr1qjez8
DDMiUJlZg/cXL7fUHjjaToL9RBQ3En3PgCIoroYWDvbfjIR/MbtYcSeJBcPUuWLI
sCO/Nfnk3doVzQkQ3tE0c57gsKs21FFdZ9Qyga1dQJlFq0LnWpLH2t/CmCLamNF9
THIA
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:49:55 2025 by rpki-client