Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/hNrTf4PE5wrSnR7cUGP-FWLvavA.roa
File: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (raw, json)
Hash identifier: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=
Subject key identifier: 84:DA:D3:7F:83:C4:E7:0A:D2:9D:1E:DC:50:63:FE:15:62:EF:6A:F0
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FEBBD4C5B344846FE98C8D92B51DC
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/hNrTf4PE5wrSnR7cUGP-FWLvavA.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:eb:bd:4c:5b:34:48:46:fe:98:c8:d9:2b:51:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84dad37f83c4e70ad29d1edc5063fe1562ef6af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:1f:e1:20:e9:f5:f9:d4:0e:cf:b6:5d:03:
03:b4:f7:fe:7f:9d:d7:05:07:59:70:c6:a2:92:72:
02:b3:da:4e:c6:b4:ce:bd:73:12:2b:ea:87:cc:61:
ed:93:80:be:f0:62:64:a9:ee:e3:1e:ae:28:ee:e5:
c3:05:6e:92:33:88:ca:14:81:d6:d0:5a:76:5f:e1:
0b:61:76:c7:bc:45:87:fd:d2:f5:ad:e4:dc:3a:1f:
06:b5:1d:c0:58:bd:03:76:71:36:ba:31:c1:24:85:
a9:b1:7d:c5:66:33:4b:2d:28:b6:51:3a:07:f0:d9:
c1:fb:d3:eb:7c:54:b0:d8:68:21:85:c9:2d:8a:95:
bc:84:5a:6b:48:49:c4:dc:a4:91:06:f2:39:0b:07:
52:e9:68:97:1a:e5:e8:df:87:73:1a:8f:a7:3d:04:
c2:84:81:18:bc:d7:08:32:93:15:c3:0a:f4:59:19:
20:d2:3e:34:39:b0:54:0c:90:c0:2c:8d:5a:8e:67:
bb:3d:86:09:ad:96:0b:05:d3:46:a9:ce:4e:fe:3d:
b4:84:a2:c8:d8:ad:97:55:08:c5:b8:b6:8b:cc:2f:
c7:31:74:3a:d2:28:c1:85:c4:fd:c0:39:5b:1f:d3:
95:8d:14:ec:6d:7b:2d:f7:85:3f:df:5f:4e:44:82:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DA:D3:7F:83:C4:E7:0A:D2:9D:1E:DC:50:63:FE:15:62:EF:6A:F0
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/hNrTf4PE5wrSnR7cUGP-FWLvavA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:57:d9:b0:8c:61:e6:6e:3e:96:fc:37:2b:f2:87:4d:2a:0b:
7e:c3:58:ed:63:fc:26:5c:e1:c4:68:ae:f8:8c:35:ad:f4:76:
1d:06:35:7a:bb:3e:3c:7f:ee:19:f9:7a:07:db:38:91:be:a4:
0a:30:89:8a:5e:76:6c:3f:31:e0:22:6d:af:30:04:d2:d0:90:
67:6f:21:0e:18:67:a8:d1:2f:38:43:6d:54:de:55:65:02:e9:
f6:f9:b8:cc:35:3d:12:fb:ec:2f:8e:5e:04:b2:40:21:6f:6e:
8f:b4:27:8a:9b:c6:a9:59:14:09:6c:15:bc:1d:3d:88:ba:01:
40:cc:ad:9a:f2:c7:2d:69:c5:2e:97:90:0e:ae:63:94:9e:04:
ca:9d:cc:fd:c9:95:3a:88:24:1a:37:81:4b:57:2e:5c:9a:f0:
1f:03:f7:b8:ea:45:92:72:00:57:7a:eb:70:43:6f:bf:21:c6:
cb:93:5e:43:0d:2e:af:b0:8b:3e:b2:ec:40:3d:e3:2d:e3:1c:
d0:f9:c3:83:4a:c2:be:09:13:55:de:0b:80:f9:ac:21:86:24:
d9:61:20:db:33:64:e0:8b:7b:05:0e:9c:eb:4e:39:55:bd:83:
35:7d:15:2a:f6:27:b9:66:d7:cf:e3:2c:1d:39:f4:ac:f7:26:
63:95:fe:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH+u9TFs0SEb+mMjZK1HcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwMTAxMTM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGRhZDM3ZjgzYzRlNzBhZDI5ZDFlZGM1MDYzZmUxNTYyZWY2YWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkf4SDp9fnUDs+2XQMDtPf+f53X
BQdZcMaiknICs9pOxrTOvXMSK+qHzGHtk4C+8GJkqe7jHq4o7uXDBW6SM4jKFIHW
0Fp2X+ELYXbHvEWH/dL1reTcOh8GtR3AWL0DdnE2ujHBJIWpsX3FZjNLLSi2UToH
8NnB+9PrfFSw2GghhcktipW8hFprSEnE3KSRBvI5CwdS6WiXGuXo34dzGo+nPQTC
hIEYvNcIMpMVwwr0WRkg0j40ObBUDJDALI1ajme7PYYJrZYLBdNGqc5O/j20hKLI
2K2XVQjFuLaLzC/HMXQ60ijBhcT9wDlbH9OVjRTsbXst94U/319ORIKk8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITa03+DxOcK0p0e3FBj/hVi72rwMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvaE5yVGY0UEU1d3JTblI3Y1VHUC1GV0x2YXZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiYwMA0G
CSqGSIb3DQEBCwUAA4IBAQCOV9mwjGHmbj6W/Dcr8odNKgt+w1jtY/wmXOHEaK74
jDWt9HYdBjV6uz48f+4Z+XoH2ziRvqQKMImKXnZsPzHgIm2vMATS0JBnbyEOGGeo
0S84Q21U3lVlAun2+bjMNT0S++wvjl4EskAhb26PtCeKm8apWRQJbBW8HT2IugFA
zK2a8sctacUul5AOrmOUngTKncz9yZU6iCQaN4FLVy5cmvAfA/e46kWScgBXeutw
Q2+/IcbLk15DDS6vsIs+suxAPeMt4xzQ+cODSsK+CRNV3guA+awhhiTZYSDbM2Tg
i3sFDpzrTjlVvYM1fRUq9ie5ZtfP4ywdOfSs9yZjlf4M
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:55 2025 by rpki-client