Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/0tQcefpfubMAiDK8yBCYIdHUFe8.roa
File: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (raw, json)
Hash identifier: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=
Subject key identifier: D2:D4:1C:79:FA:5F:B9:B3:00:88:32:BC:C8:10:98:21:D1:D4:15:EF
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019420D5C9486FE430013F00438814B01F02
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/0tQcefpfubMAiDK8yBCYIdHUFe8.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202932
IP address blocks: 185.136.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c9:48:6f:e4:30:01:3f:00:43:88:14:b0:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d41c79fa5fb9b3008832bcc8109821d1d415ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:74:b5:f1:3c:de:05:7f:51:6d:bf:f4:79:
45:e3:4e:bc:37:67:20:c0:82:f1:e2:74:0e:0e:e6:
b2:69:cc:e7:2f:75:35:ad:00:4f:08:95:d3:14:89:
90:3a:6c:5b:09:b9:14:13:0d:49:17:a1:21:aa:fc:
90:cb:a7:a5:c7:21:6b:9e:3b:be:b5:2c:59:ef:b4:
4b:80:9f:d2:df:fa:ca:2f:7a:f1:3c:09:6f:af:e6:
73:da:4e:e6:f2:d0:13:6a:67:9f:f3:2d:29:d4:25:
ab:59:38:98:17:d0:7e:bd:3d:8b:10:b9:f6:00:5b:
fe:41:40:e9:f3:03:50:b8:1f:60:81:80:84:d2:09:
13:cd:91:ce:b7:2b:f5:01:fd:c1:36:c2:57:5d:e3:
e8:fe:4a:4e:2d:19:16:b1:9e:9c:43:d5:55:11:ff:
46:91:9d:d9:f3:b1:3c:43:6f:2a:a1:cc:65:12:16:
d7:6c:23:09:ca:d7:4a:c2:a6:05:aa:c3:b6:f0:9b:
a9:19:23:86:75:76:ee:42:28:44:a9:1a:0e:5a:5b:
27:57:d3:5b:5e:48:9a:0f:e9:b9:a5:bb:90:b1:b2:
4b:00:e0:da:21:24:50:98:e5:7c:32:43:08:ca:94:
1a:46:a5:ca:7d:ac:29:26:10:2c:f2:6e:59:cc:ee:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:1C:79:FA:5F:B9:B3:00:88:32:BC:C8:10:98:21:D1:D4:15:EF
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/0tQcefpfubMAiDK8yBCYIdHUFe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.4.0/22
Signature Algorithm: sha256WithRSAEncryption
51:2e:ad:56:ab:ba:04:9d:c4:13:35:cb:e7:ff:0b:49:a2:81:
97:5b:ea:7e:16:9f:c9:a1:dc:51:6c:ee:04:b0:51:33:46:54:
0b:0e:90:11:26:87:14:97:ef:74:17:6b:d6:b9:fa:e3:96:62:
40:3d:1f:1a:5f:49:6f:ed:3c:d2:e3:a6:58:4d:68:79:c9:07:
64:8e:4a:1a:75:52:bb:0c:20:8f:25:bc:a3:3f:8d:86:77:54:
de:6c:e9:f0:16:20:4d:b7:22:fb:60:fb:21:2f:47:82:12:88:
e6:f5:e9:03:59:10:a8:29:4a:1a:6a:7a:a0:8d:3e:80:b1:21:
ee:84:e6:cb:65:51:aa:2b:bc:0a:00:37:18:c4:21:3f:e7:a0:
4f:22:27:d1:19:d6:fd:22:33:7d:8f:c6:71:17:12:ed:99:02:
02:d6:c3:19:5c:88:64:24:6f:c3:ab:67:8d:af:65:73:01:7a:
b7:c3:e0:ac:5d:12:6f:fa:e0:5c:e6:0d:1c:c8:1a:01:47:c6:
42:4b:52:da:b9:e5:71:36:9b:ac:9a:51:ae:94:32:7b:69:01:
95:bb:9b:a7:60:52:4f:da:71:e9:49:a5:8b:f1:6c:3b:90:72:
2a:50:e5:d4:bb:90:a9:a4:1f:5d:1e:ea:5c:96:8a:e6:48:8d:
87:88:43:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1clIb+QwAT8AQ4gUsB8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz
M2I3OGIwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmQ0MWM3OWZhNWZiOWIzMDA4ODMyYmNjODEwOTgyMWQxZDQxNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz50tfE83gV/UW2/9HlF4068N2cg
wILx4nQODuayacznL3U1rQBPCJXTFImQOmxbCbkUEw1JF6EhqvyQy6elxyFrnju+
tSxZ77RLgJ/S3/rKL3rxPAlvr+Zz2k7m8tATamef8y0p1CWrWTiYF9B+vT2LELn2
AFv+QUDp8wNQuB9ggYCE0gkTzZHOtyv1Af3BNsJXXePo/kpOLRkWsZ6cQ9VVEf9G
kZ3Z87E8Q28qocxlEhbXbCMJytdKwqYFqsO28JupGSOGdXbuQihEqRoOWlsnV9Nb
XkiaD+m5pbuQsbJLAODaISRQmOV8MkMIypQaRqXKfawpJhAs8m5ZzO6cTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLUHHn6X7mzAIgyvMgQmCHR1BXvMB8GA1UdIwQY
MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt
YWQwOTUzZjdmZDQ5LzEvMHRRY2VmcGZ1Yk1BaURLOHlCQ1lJZEhVRmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5
LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYgEMA0G
CSqGSIb3DQEBCwUAA4IBAQBRLq1Wq7oEncQTNcvn/wtJooGXW+p+Fp/JodxRbO4E
sFEzRlQLDpARJocUl+90F2vWufrjlmJAPR8aX0lv7TzS46ZYTWh5yQdkjkoadVK7
DCCPJbyjP42Gd1TebOnwFiBNtyL7YPshL0eCEojm9ekDWRCoKUoaanqgjT6AsSHu
hObLZVGqK7wKADcYxCE/56BPIifRGdb9IjN9j8ZxFxLtmQIC1sMZXIhkJG/Dq2eN
r2VzAXq3w+CsXRJv+uBc5g0cyBoBR8ZCS1LaueVxNpusmlGulDJ7aQGVu5unYFJP
2nHpSaWL8Ww7kHIqUOXUu5CppB9dHupclormSI2HiEPd
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:09:30 2025 by rpki-client