Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/TApodEY8028DyJXWycbZvpKO2JY.roa
File: TApodEY8028DyJXWycbZvpKO2JY.roa (raw, json)
Hash identifier: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=
Subject key identifier: 4C:0A:68:74:46:3C:D3:6F:03:C8:95:D6:C9:C6:D9:BE:92:8E:D8:96
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 0194266C22558335DF9C80E184F56188BE35
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/TApodEY8028DyJXWycbZvpKO2JY.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 193.56.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:22:55:83:35:df:9c:80:e1:84:f5:61:88:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c0a6874463cd36f03c895d6c9c6d9be928ed896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:48:ef:5d:88:09:08:3b:98:80:d0:90:22:
7d:cc:71:b4:32:67:64:c2:65:7c:bc:05:a6:74:da:
38:ee:78:8d:f8:04:9c:ac:cc:69:5b:2f:3d:03:7f:
bf:fa:70:b8:da:e3:cb:32:91:fd:bb:84:2e:f7:ac:
28:b5:ca:40:7c:e2:28:90:6a:88:1d:81:f5:1f:5c:
0e:aa:73:37:84:f8:9f:e5:8b:66:c5:4e:46:03:46:
40:74:5e:9f:95:f7:a4:b2:d7:3f:34:f4:e9:37:09:
a8:69:81:5b:b8:ff:e2:02:4b:6a:4d:de:89:c3:18:
b4:b6:c4:16:e9:f5:9e:b0:fd:aa:f6:af:fb:1a:1b:
35:44:c1:47:c0:90:30:2e:97:ee:01:d4:05:ec:19:
1b:c0:6c:79:12:7a:83:19:6a:33:f2:9f:e9:04:fa:
18:14:f2:fc:04:cb:07:2f:8a:ea:1a:b0:25:ca:35:
e3:f5:3d:7d:4e:81:d7:e0:49:1c:3e:4e:0f:b9:72:
03:95:93:08:d9:3a:bc:a2:be:03:c6:78:03:41:61:
3d:8f:1a:7b:53:71:9f:62:1d:64:c9:37:3b:83:a1:
44:5a:34:ed:19:b1:31:23:12:0a:b5:a6:66:dd:88:
b7:39:60:7d:d0:fd:23:88:6c:5d:fb:96:4b:45:45:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:68:74:46:3C:D3:6F:03:C8:95:D6:C9:C6:D9:BE:92:8E:D8:96
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/TApodEY8028DyJXWycbZvpKO2JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6d:f3:7c:99:62:aa:34:38:b1:32:e5:e1:79:78:9c:2f:fd:
4d:9a:23:b4:bc:ea:ac:da:13:d1:98:7c:86:ca:fd:5b:16:c7:
6d:73:3a:56:32:d3:0f:62:6a:99:9d:bb:b8:ce:af:79:5d:27:
ce:de:7e:41:1d:93:4d:99:f8:eb:37:9b:1a:ab:5e:3e:cc:ec:
ac:50:65:19:04:f0:7c:61:7a:eb:62:6e:44:dd:7e:1a:aa:0a:
70:84:e7:2f:69:5d:5b:f2:45:be:32:95:79:a2:f3:7b:33:b1:
1f:11:72:3f:c6:91:bc:98:2e:9e:83:8c:17:b6:e8:01:65:4e:
8a:6a:fd:b3:65:e3:27:8d:b6:57:87:03:26:95:b1:d4:6e:23:
64:bf:10:65:08:b2:08:a4:83:8d:a0:33:5c:4b:1a:71:cb:4e:
cc:0d:b9:6e:f2:1a:18:af:6e:40:33:0d:1b:53:a4:51:bc:c7:
54:bc:7f:4f:f9:44:18:8e:5c:7d:3e:23:1c:f2:36:21:cf:35:
17:8f:68:7f:1c:af:ea:c2:13:f1:a9:13:98:40:5c:86:5e:a5:
60:10:b2:b0:ed:c5:10:12:df:16:94:9e:de:da:7f:0f:c9:02:
c3:ab:db:ae:76:7b:42:05:59:c2:b8:d3:c9:c6:8b:d7:16:85:
e6:cb:83:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbCJVgzXfnIDhhPVhiL41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi
M2RmYmQwHhcNMjUwMTAyMDk1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzBhNjg3NDQ2M2NkMzZmMDNjODk1ZDZjOWM2ZDliZTkyOGVkODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQNI712ICQg7mIDQkCJ9zHG0Mmdk
wmV8vAWmdNo47niN+AScrMxpWy89A3+/+nC42uPLMpH9u4Qu96wotcpAfOIokGqI
HYH1H1wOqnM3hPif5YtmxU5GA0ZAdF6flfekstc/NPTpNwmoaYFbuP/iAktqTd6J
wxi0tsQW6fWesP2q9q/7Ghs1RMFHwJAwLpfuAdQF7BkbwGx5EnqDGWoz8p/pBPoY
FPL8BMsHL4rqGrAlyjXj9T19ToHX4EkcPk4PuXIDlZMI2Tq8or4DxngDQWE9jxp7
U3GfYh1kyTc7g6FEWjTtGbExIxIKtaZm3Yi3OWB90P0jiGxd+5ZLRUWpfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwKaHRGPNNvA8iV1snG2b6SjtiWMB8GA1UdIwQY
MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt
Yzc3OTA1ZmJiYTdiLzEvVEFwb2RFWTgwMjhEeUpYV3ljYlp2cEtPMkpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi
LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTh1MA0G
CSqGSIb3DQEBCwUAA4IBAQCgbfN8mWKqNDixMuXheXicL/1NmiO0vOqs2hPRmHyG
yv1bFsdtczpWMtMPYmqZnbu4zq95XSfO3n5BHZNNmfjrN5saq14+zOysUGUZBPB8
YXrrYm5E3X4aqgpwhOcvaV1b8kW+MpV5ovN7M7EfEXI/xpG8mC6eg4wXtugBZU6K
av2zZeMnjbZXhwMmlbHUbiNkvxBlCLIIpIONoDNcSxpxy07MDblu8hoYr25AMw0b
U6RRvMdUvH9P+UQYjlx9PiMc8jYhzzUXj2h/HK/qwhPxqROYQFyGXqVgELKw7cUQ
Et8WlJ7e2n8PyQLDq9uudntCBVnCuNPJxovXFoXmy4MC
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:29:48 2025 by rpki-client