Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/h3IlmNBUta64FM5WZScf8hVpi8A.roa
File: h3IlmNBUta64FM5WZScf8hVpi8A.roa (raw, json)
Hash identifier: ppaOLq/FJ6f3Ak5mYUKQhJqj0bS+4bw0dLvPbybNEHk=
Subject key identifier: 87:72:25:98:D0:54:B5:AE:B8:14:CE:56:65:27:1F:F2:15:69:8B:C0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427488E1942A762972B3CC3E35251B754
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/h3IlmNBUta64FM5WZScf8hVpi8A.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58052
IP address blocks: 194.15.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:19:42:a7:62:97:2b:3c:c3:e3:52:51:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87722598d054b5aeb814ce5665271ff215698bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:cb:7f:c1:07:80:d0:54:6b:31:46:ed:e2:
72:f7:8e:1d:c1:53:d2:2a:26:03:6b:14:39:b4:08:
4e:62:fa:05:47:fb:72:a1:32:84:ea:16:7c:4d:8b:
be:d1:e0:9b:dd:fc:1c:0e:9a:93:a8:df:19:4e:9a:
72:e3:6b:12:ba:73:18:0d:5c:fa:94:0f:68:39:ea:
98:9f:e9:b1:05:77:b4:dd:57:20:86:8c:bd:8c:d9:
11:1d:e8:74:87:31:67:e8:73:a1:17:32:ff:9c:86:
8e:80:bc:ce:4c:31:f6:54:6f:7c:29:4b:d0:2c:d7:
db:32:82:c2:c0:1b:3b:4f:2e:7e:c0:da:96:a3:36:
36:04:ab:59:3d:f9:83:b6:d6:26:be:1a:c7:6f:ab:
03:76:21:ec:f2:86:4e:d2:84:99:c2:9b:30:30:68:
3f:c5:84:db:bb:af:af:a9:c3:12:d5:a9:6e:95:84:
0b:dd:26:4c:fd:57:06:60:0c:76:07:c8:1b:d5:b4:
ed:b7:9c:a5:89:2d:bd:a6:c1:2a:1c:6b:97:98:67:
e9:f6:0c:e1:69:57:98:77:b2:64:c9:d9:00:dd:a9:
e2:8d:6a:aa:ed:75:44:1b:82:96:a1:b9:6b:24:84:
61:e8:49:b2:ed:51:0f:1e:a2:98:18:e8:d6:5c:75:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:25:98:D0:54:B5:AE:B8:14:CE:56:65:27:1F:F2:15:69:8B:C0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/h3IlmNBUta64FM5WZScf8hVpi8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b3:45:c9:30:76:98:2b:5f:ee:5a:58:bf:15:43:92:bb:00:
91:18:47:71:97:63:e4:45:4f:cb:d0:0a:e4:d1:7a:90:de:49:
01:1a:03:24:7f:7e:d9:7b:14:15:32:64:aa:92:fd:36:b5:4b:
33:5a:57:cb:37:a8:cf:d4:4f:d9:d1:c6:f3:57:8c:ad:00:dd:
0b:c5:36:7e:c3:f3:60:df:10:37:e1:67:6d:02:c1:a2:97:51:
86:be:a0:51:f4:2d:49:5d:d4:44:bf:b9:aa:30:8d:d6:90:84:
36:ff:26:5b:a2:96:a0:91:f2:34:da:2a:f7:dc:f0:90:96:f9:
57:9d:36:3e:95:6b:24:46:03:f7:8d:a7:e0:10:ce:cb:86:e2:
42:ba:e1:ab:30:35:94:e2:d0:f7:f3:89:94:50:78:20:ee:10:
1e:ab:74:c0:f9:aa:90:c6:92:4e:f5:5c:66:ac:dc:4b:40:aa:
55:54:fc:a1:23:05:ad:71:ba:2c:25:ea:1d:c0:54:2c:89:63:
3c:62:b9:87:e2:d8:88:1f:d6:3b:cb:bf:d1:6b:36:50:76:4c:
ca:48:2f:92:50:2d:a4:88:c1:ff:de:1c:da:83:5a:d3:74:48:
62:2d:15:9d:df:a7:93:e2:18:df:df:c5:0b:6f:34:c8:0a:5e:
a3:3e:23:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSI4ZQqdilys8w+NSUbdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzcyMjU5OGQwNTRiNWFlYjgxNGNlNTY2NTI3MWZmMjE1Njk4YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zbLf8EHgNBUazFG7eJy944dwVPS
KiYDaxQ5tAhOYvoFR/tyoTKE6hZ8TYu+0eCb3fwcDpqTqN8ZTppy42sSunMYDVz6
lA9oOeqYn+mxBXe03Vcghoy9jNkRHeh0hzFn6HOhFzL/nIaOgLzOTDH2VG98KUvQ
LNfbMoLCwBs7Ty5+wNqWozY2BKtZPfmDttYmvhrHb6sDdiHs8oZO0oSZwpswMGg/
xYTbu6+vqcMS1alulYQL3SZM/VcGYAx2B8gb1bTtt5yliS29psEqHGuXmGfp9gzh
aVeYd7JkydkA3anijWqq7XVEG4KWoblrJIRh6Emy7VEPHqKYGOjWXHV3zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdyJZjQVLWuuBTOVmUnH/IVaYvAMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvaDNJbG1OQlV0YTY0Rk01V1pTY2Y4aFZwaThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg8mMA0G
CSqGSIb3DQEBCwUAA4IBAQCes0XJMHaYK1/uWli/FUOSuwCRGEdxl2PkRU/L0Ark
0XqQ3kkBGgMkf37ZexQVMmSqkv02tUszWlfLN6jP1E/Z0cbzV4ytAN0LxTZ+w/Ng
3xA34WdtAsGil1GGvqBR9C1JXdREv7mqMI3WkIQ2/yZbopagkfI02ir33PCQlvlX
nTY+lWskRgP3jafgEM7LhuJCuuGrMDWU4tD384mUUHgg7hAeq3TA+aqQxpJO9Vxm
rNxLQKpVVPyhIwWtcbosJeodwFQsiWM8YrmH4tiIH9Y7y7/RazZQdkzKSC+SUC2k
iMH/3hzag1rTdEhiLRWd36eT4hjf38ULbzTICl6jPiNR
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:01:16 2025 by rpki-client