Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa
File: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (raw, json)
Hash identifier: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=
Subject key identifier: 8B:7F:96:E7:E4:DA:EA:C0:64:05:A5:57:2E:DA:DB:1C:E5:10:0B:E1
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 01941FFA2DFD046D093745F1D07C3CB01940
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42
IP address blocks: 194.0.17.0/24 maxlen: 24
2001:678:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2d:fd:04:6d:09:37:45:f1:d0:7c:3c:b0:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7f96e7e4daeac06405a5572edadb1ce5100be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:6d:59:30:c1:7d:82:ab:99:09:56:86:1b:
82:53:77:68:bb:10:11:65:76:3f:6f:de:38:5a:e0:
18:f1:db:8a:2b:c3:b8:8c:ad:41:c6:b4:6a:d5:f0:
08:6a:b2:fc:60:96:31:11:78:ac:b0:db:1a:26:63:
a3:6b:a8:de:e5:8d:3d:01:10:a3:43:5a:c9:92:24:
04:e9:ac:49:f0:05:53:50:2c:cb:85:0b:d8:3e:e7:
bb:66:20:bf:59:55:31:da:21:15:17:d3:1c:05:c8:
fa:cc:5c:ef:a6:e6:e5:24:e6:10:99:4f:50:23:e6:
2e:da:c3:6a:1f:22:b4:b0:f0:5e:42:cd:be:ca:df:
a6:c3:f4:bf:72:c9:30:57:bc:b3:fd:a3:b2:56:5f:
1b:1d:a3:5a:eb:f4:96:f1:60:a1:f4:d5:56:f7:90:
76:d0:bc:90:aa:f5:70:9c:c3:9f:31:4b:04:61:5a:
dc:eb:b3:fd:e6:42:6c:64:87:2c:17:77:27:30:4f:
ba:1b:da:d5:04:1c:d5:41:ae:7a:77:47:80:a1:fd:
15:ee:e9:f0:fd:78:4c:58:21:6c:ff:79:ee:f0:ba:
ff:fa:8f:18:f8:84:d5:f3:ed:64:dd:16:38:67:27:
41:c3:51:af:7c:6c:f1:36:92:6e:23:b3:d0:ff:8c:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:96:E7:E4:DA:EA:C0:64:05:A5:57:2E:DA:DB:1C:E5:10:0B:E1
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.17.0/24
IPv6:
2001:678:3::/48
Signature Algorithm: sha256WithRSAEncryption
58:7f:5a:54:0e:da:3e:07:54:46:01:41:50:04:0a:a9:0b:99:
02:7a:3b:43:2d:0d:98:60:1e:11:3e:06:8f:bf:25:b1:97:01:
10:0b:4f:2a:12:51:1b:f7:27:63:58:49:99:95:eb:15:7d:86:
1f:e0:1c:d3:07:18:cc:9a:8a:74:dc:11:2d:e9:4d:34:8e:16:
d6:0e:fb:c5:a2:b1:e8:75:81:d1:ba:ed:12:d5:2e:16:07:31:
3c:b4:b6:a4:bf:00:7f:b9:28:22:d9:66:6b:fa:a1:41:bf:ef:
63:7d:25:ae:3e:3f:17:1a:db:72:1c:70:4c:fd:25:b6:6d:a6:
4d:58:a3:c0:59:1c:2f:f8:4c:93:27:6b:43:3e:03:eb:50:e8:
06:71:51:fd:51:14:ca:43:90:5c:8d:94:4a:c6:b8:e5:b2:93:
2e:72:29:ef:c3:65:e0:69:b5:c7:54:79:3f:4f:70:15:8c:31:
f7:25:60:84:26:42:61:df:9f:33:ff:c3:e9:7b:73:97:fa:77:
74:57:d6:f9:98:e6:85:f0:af:03:32:ab:17:ef:e7:d2:e8:5b:
ac:5c:d8:b5:91:d3:7c:c2:81:b5:3d:01:a5:12:a0:98:91:57:
40:70:24:06:a2:f7:a8:d1:7f:af:9b:2c:60:71:b7:e6:4f:5b:
08:2d:55:c7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+i39BG0JN0Xx0Hw8sBlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjUwMTAxMDM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjdmOTZlN2U0ZGFlYWMwNjQwNWE1NTcyZWRhZGIxY2U1MTAwYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSVtWTDBfYKrmQlWhhuCU3douxAR
ZXY/b944WuAY8duKK8O4jK1BxrRq1fAIarL8YJYxEXissNsaJmOja6je5Y09ARCj
Q1rJkiQE6axJ8AVTUCzLhQvYPue7ZiC/WVUx2iEVF9McBcj6zFzvpublJOYQmU9Q
I+Yu2sNqHyK0sPBeQs2+yt+mw/S/cskwV7yz/aOyVl8bHaNa6/SW8WCh9NVW95B2
0LyQqvVwnMOfMUsEYVrc67P95kJsZIcsF3cnME+6G9rVBBzVQa56d0eAof0V7unw
/XhMWCFs/3nu8Lr/+o8Y+ITV8+1k3RY4ZydBw1GvfGzxNpJuI7PQ/4y3QQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIt/lufk2urAZAWlVy7a2xzlEAvhMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvaTMtVzUtVGE2c0JrQmFWWEx0cmJIT1VRQy1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm
LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgARMA8E
AgACMAkDBwAgAQZ4AAMwDQYJKoZIhvcNAQELBQADggEBAFh/WlQO2j4HVEYBQVAE
CqkLmQJ6O0MtDZhgHhE+Bo+/JbGXARALTyoSURv3J2NYSZmV6xV9hh/gHNMHGMya
inTcES3pTTSOFtYO+8Wiseh1gdG67RLVLhYHMTy0tqS/AH+5KCLZZmv6oUG/72N9
Ja4+Pxca23IccEz9JbZtpk1Yo8BZHC/4TJMna0M+A+tQ6AZxUf1RFMpDkFyNlErG
uOWyky5yKe/DZeBptcdUeT9PcBWMMfclYIQmQmHfnzP/w+l7c5f6d3RX1vmY5oXw
rwMyqxfv59LoW6xc2LWR03zCgbU9AaUSoJiRV0BwJAai96jRf6+bLGBxt+ZPWwgt
Vcc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:34 2025 by rpki-client