Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa
File: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (raw, json)
Hash identifier: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=
Subject key identifier: 69:61:B1:02:CA:A0:62:38:CA:D0:0A:F7:AA:05:4D:CC:F2:B0:DF:31
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 0194221FD5B5A5A6AD0057137BDD1249F920
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35007
IP address blocks: 81.30.138.0/23 maxlen: 24
91.201.120.0/22 maxlen: 24
93.157.112.0/21 maxlen: 24
185.6.112.0/22 maxlen: 24
185.221.80.0/22 maxlen: 24
195.160.184.0/23 maxlen: 24
195.225.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d5:b5:a5:a6:ad:00:57:13:7b:dd:12:49:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6961b102caa06238cad00af7aa054dccf2b0df31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:03:a3:52:99:54:1a:8b:9a:db:00:27:48:
d2:a8:22:a7:22:25:75:11:44:e4:92:be:a8:30:d9:
2e:14:b1:08:0a:1f:30:bb:40:a7:2a:75:86:51:3b:
72:9b:ba:8e:df:a2:1f:15:e5:21:02:a4:64:da:d5:
0a:4b:22:c3:50:8d:8e:5b:7a:82:d6:17:0a:58:76:
84:ab:cb:12:b2:09:60:0c:a0:6c:57:7e:33:68:82:
ae:31:0e:85:5a:b3:53:95:cd:40:dc:9f:5f:49:e5:
ad:ad:36:24:44:d0:19:f8:2d:fa:7d:bb:4d:e7:c0:
ca:29:86:39:b7:82:ee:a9:de:96:63:d8:a5:51:43:
0b:94:4f:3e:cf:fa:04:9b:72:33:c9:86:a3:c9:15:
68:4e:09:82:b7:55:17:cd:90:f3:3d:1d:d7:68:0c:
58:a7:1f:75:3e:dc:20:f2:2e:da:58:8e:ab:1a:1e:
07:af:40:17:f8:f0:6c:94:f2:44:d0:ed:95:f6:6c:
1c:66:9a:4e:e2:cf:aa:58:a1:de:b5:53:ce:be:69:
18:99:a2:83:05:0f:5e:5f:49:68:f6:1b:ea:b0:43:
c4:df:bd:49:8f:ec:8f:43:32:86:78:a3:30:f6:22:
dc:b5:01:e2:d1:e1:38:a4:0d:57:8b:79:0f:84:b0:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:B1:02:CA:A0:62:38:CA:D0:0A:F7:AA:05:4D:CC:F2:B0:DF:31
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.138.0/23
91.201.120.0/22
93.157.112.0/21
185.6.112.0/22
185.221.80.0/22
195.160.184.0/23
195.225.36.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:1a:98:84:d7:bc:2b:c0:9a:70:29:00:91:40:26:35:35:fa:
fb:a0:d2:6e:b7:ef:47:9e:f9:99:e6:2a:a1:88:0d:43:c7:7e:
07:cd:b6:d3:c9:76:f6:b8:99:b6:7e:2a:83:21:83:97:13:d7:
6d:65:47:99:27:38:e2:75:2c:b7:72:58:c9:ab:11:43:4d:fb:
c0:b9:47:bb:61:d8:8b:ba:51:b2:16:60:d9:d1:23:fe:0c:28:
e1:17:3e:65:47:24:43:6e:eb:b0:65:1b:2d:4a:d4:4f:f2:2d:
3b:b7:d7:cb:01:37:4f:9b:13:40:20:06:91:6d:ee:f2:3d:f2:
ef:cc:49:09:13:0c:b0:b4:22:ae:79:6d:11:40:8b:da:5c:c9:
db:1c:56:b5:96:af:f7:20:9d:db:b8:aa:13:91:19:3f:af:36:
ce:b3:c0:97:b3:cf:04:9d:37:07:fe:00:39:98:6b:ad:29:30:
c7:6c:c4:b8:03:b8:b9:74:0b:17:c9:26:b8:70:96:ff:6f:e0:
7c:9a:3a:bc:47:ea:3a:87:40:61:a6:43:2c:a4:dd:0d:8f:8f:
2b:31:9c:3e:3e:b3:2a:0d:f1:b3:91:20:22:fc:16:25:92:94:
c8:b5:67:9f:95:0a:1c:54:d3:ec:db:66:ec:c8:8f:de:4c:82:
a4:8b:dc:9c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQiH9W1paatAFcTe90SSfkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY3ZWE5MGQyYTJiNDIwMmU1NzhiMjViYTEzOWIzYzhl
NjI5MjgwHhcNMjUwMTAxMTM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTYxYjEwMmNhYTA2MjM4Y2FkMDBhZjdhYTA1NGRjY2YyYjBkZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B4Do1KZVBqLmtsAJ0jSqCKnIiV1
EUTkkr6oMNkuFLEICh8wu0CnKnWGUTtym7qO36IfFeUhAqRk2tUKSyLDUI2OW3qC
1hcKWHaEq8sSsglgDKBsV34zaIKuMQ6FWrNTlc1A3J9fSeWtrTYkRNAZ+C36fbtN
58DKKYY5t4Luqd6WY9ilUUMLlE8+z/oEm3IzyYajyRVoTgmCt1UXzZDzPR3XaAxY
px91Ptwg8i7aWI6rGh4Hr0AX+PBslPJE0O2V9mwcZppO4s+qWKHetVPOvmkYmaKD
BQ9eX0lo9hvqsEPE371Jj+yPQzKGeKMw9iLctQHi0eE4pA1Xi3kPhLAg8QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGlhsQLKoGI4ytAK96oFTczysN8xMB8GA1UdIwQY
MBaAFFQvfqkNKitCAuV4sluhObPI5ikoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjkt
ZWUxZTFkZWQyZjlmLzEvYVdHeEFzcWdZampLMEFyM3FnVk56UEt3M3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjktZWUxZTFkZWQyZjlm
LzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBUR6KAwQC
W8l4AwQDXZ1wAwQCuQZwAwQCud1QAwQBw6C4AwQBw+EkMA0GCSqGSIb3DQEBCwUA
A4IBAQDdGpiE17wrwJpwKQCRQCY1Nfr7oNJut+9HnvmZ5iqhiA1Dx34HzbbTyXb2
uJm2fiqDIYOXE9dtZUeZJzjidSy3cljJqxFDTfvAuUe7YdiLulGyFmDZ0SP+DCjh
Fz5lRyRDbuuwZRstStRP8i07t9fLATdPmxNAIAaRbe7yPfLvzEkJEwywtCKueW0R
QIvaXMnbHFa1lq/3IJ3buKoTkRk/rzbOs8CXs88EnTcH/gA5mGutKTDHbMS4A7i5
dAsXySa4cJb/b+B8mjq8R+o6h0BhpkMspN0Nj48rMZw+PrMqDfGzkSAi/BYlkpTI
tWeflQocVNPs22bsyI/eTIKki9yc
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:45:09 2025 by rpki-client