Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/AM62ybHHCWWC5SJ3qqZPN4gQagI.roa
File: AM62ybHHCWWC5SJ3qqZPN4gQagI.roa (raw, json)
Hash identifier: AVFvXTrcgjF2aw6m7FRqhQhoXQ2y46rVrdLe3YRvzQ8=
Subject key identifier: 00:CE:B6:C9:B1:C7:09:65:82:E5:22:77:AA:A6:4F:37:88:10:6A:02
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747C96FDD31DB3132B452B1DAEBC40C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/AM62ybHHCWWC5SJ3qqZPN4gQagI.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9312
IP address blocks: 194.50.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:6f:dd:31:db:31:32:b4:52:b1:da:eb:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00ceb6c9b1c7096582e52277aaa64f3788106a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:b0:05:53:0a:f1:91:57:62:3b:53:9d:37:
3e:8e:ef:5f:1a:70:67:dc:b3:80:aa:68:eb:e8:59:
ad:56:dd:8e:f7:9b:59:91:cd:30:ed:fc:48:5b:a3:
20:2a:d1:b5:5c:73:bd:05:74:aa:99:43:90:4f:53:
e9:43:7a:32:c6:75:87:2d:7f:69:49:17:e3:3b:05:
5a:70:b3:29:28:39:79:96:b9:65:29:6d:5f:b5:72:
a9:a7:17:ca:27:58:8f:f6:f2:80:bf:70:1d:46:96:
e1:a7:8c:39:c5:94:a3:2f:4c:d1:15:c6:a7:0b:19:
8e:be:9b:1f:b3:2f:f9:81:7a:18:9f:ab:2d:47:d3:
a3:ca:50:49:6c:fe:4e:2d:18:e9:c7:d6:93:35:f4:
dd:e6:79:5e:1a:ef:75:69:a7:4a:4c:1f:b5:94:2d:
08:a8:33:8a:95:0e:78:4f:c3:15:11:e6:f0:b1:3b:
04:07:b6:fe:00:01:15:a7:18:1d:2c:21:fe:3a:a0:
38:a0:4a:94:ca:cf:99:9f:20:b3:47:81:55:9d:db:
c9:7c:0f:f1:71:22:6d:8e:a6:36:b7:dd:9e:2c:41:
15:f0:46:47:c1:23:5c:32:16:e3:38:cf:5e:6c:fc:
a6:f6:e5:6b:d7:1b:92:1b:d8:39:02:7c:97:40:26:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:B6:C9:B1:C7:09:65:82:E5:22:77:AA:A6:4F:37:88:10:6A:02
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/AM62ybHHCWWC5SJ3qqZPN4gQagI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.18.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ef:7e:37:a7:01:0b:18:7a:2a:4c:65:c1:c3:87:93:d7:f6:
c3:ad:69:28:03:a9:89:c8:37:d8:a9:d8:b1:5c:8a:11:b6:47:
3f:61:ce:e3:2c:ae:a4:1d:d0:25:b2:48:23:bf:0b:76:82:66:
87:27:39:22:a9:bf:9b:8b:e6:26:98:bd:62:97:ee:80:b3:ae:
bc:bc:75:87:19:db:57:a6:c3:88:e3:9a:17:4d:4e:db:b1:b2:
17:99:22:e8:98:50:88:c0:d4:d9:fa:e7:4e:ad:18:3c:a9:11:
98:80:95:a7:f4:3f:1f:78:9a:1d:19:65:71:e6:ca:dd:be:40:
55:8b:10:67:fa:42:3d:82:23:f4:ba:86:25:d3:66:6b:21:b6:
43:5a:e3:fe:8b:0a:72:94:a4:8a:08:32:a6:5d:7c:58:7f:f4:
e5:9a:a1:b6:80:2b:23:dc:32:fa:89:37:22:66:70:b4:8c:02:
76:31:7a:9a:2b:28:70:e1:d6:6d:41:b6:25:72:fc:b6:55:f4:
2c:d4:0d:70:f0:37:85:25:8e:e2:5b:5a:23:fd:3f:17:a5:65:
28:56:0d:76:19:25:86:8b:0c:17:84:02:d6:98:6b:b0:f9:cf:
8f:a0:02:69:99:6f:31:59:32:98:ab:cb:39:a0:29:14:34:53:
45:86:a6:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8lv3THbMTK0UrHa68QMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGNlYjZjOWIxYzcwOTY1ODJlNTIyNzdhYWE2NGYzNzg4MTA2YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwawBVMK8ZFXYjtTnTc+ju9fGnBn
3LOAqmjr6FmtVt2O95tZkc0w7fxIW6MgKtG1XHO9BXSqmUOQT1PpQ3oyxnWHLX9p
SRfjOwVacLMpKDl5lrllKW1ftXKppxfKJ1iP9vKAv3AdRpbhp4w5xZSjL0zRFcan
CxmOvpsfsy/5gXoYn6stR9OjylBJbP5OLRjpx9aTNfTd5nleGu91aadKTB+1lC0I
qDOKlQ54T8MVEebwsTsEB7b+AAEVpxgdLCH+OqA4oEqUys+ZnyCzR4FVndvJfA/x
cSJtjqY2t92eLEEV8EZHwSNcMhbjOM9ebPym9uVr1xuSG9g5AnyXQCYzQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADOtsmxxwllguUid6qmTzeIEGoCMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvQU02MnliSEhDV1dDNVNKM3FxWlBONGdRYWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjISMA0G
CSqGSIb3DQEBCwUAA4IBAQBh7343pwELGHoqTGXBw4eT1/bDrWkoA6mJyDfYqdix
XIoRtkc/Yc7jLK6kHdAlskgjvwt2gmaHJzkiqb+bi+YmmL1il+6As668vHWHGdtX
psOI45oXTU7bsbIXmSLomFCIwNTZ+udOrRg8qRGYgJWn9D8feJodGWVx5srdvkBV
ixBn+kI9giP0uoYl02ZrIbZDWuP+iwpylKSKCDKmXXxYf/TlmqG2gCsj3DL6iTci
ZnC0jAJ2MXqaKyhw4dZtQbYlcvy2VfQs1A1w8DeFJY7iW1oj/T8XpWUoVg12GSWG
iwwXhALWmGuw+c+PoAJpmW8xWTKYq8s5oCkUNFNFhqZs
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:38 2025 by rpki-client