Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BAECJNpn19Ic0vs6gWnf2IK80BI.roa
File: BAECJNpn19Ic0vs6gWnf2IK80BI.roa (raw, json)
Hash identifier: TuX18TU7cBdLG+XtCYGJ2R6bT5wyoQSb5heAzAbp9Is=
Subject key identifier: 04:01:02:24:DA:67:D7:D2:1C:D2:FB:3A:81:69:DF:D8:82:BC:D0:12
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0194236A0437F28B7D8387496B7C79AA8093
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BAECJNpn19Ic0vs6gWnf2IK80BI.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:04:37:f2:8b:7d:83:87:49:6b:7c:79:aa:80:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04010224da67d7d21cd2fb3a8169dfd882bcd012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:bc:64:2b:87:71:cb:dc:8f:9e:73:43:03:
ea:2d:88:27:5e:5f:1f:29:23:ad:99:b4:a6:9b:b0:
ba:4f:7c:af:af:cd:0e:4c:28:be:bc:c3:1f:c9:db:
a3:4f:ac:0f:b3:22:46:64:f7:7d:12:fc:bd:bb:e5:
94:af:2a:70:01:9a:33:76:7a:88:6d:a1:40:f6:f4:
9f:51:9e:9c:01:46:da:a7:cf:4a:d5:fe:2d:d5:fd:
44:3b:e9:0f:2e:ba:5c:31:7a:e6:c1:22:74:f1:62:
bb:c7:69:92:a3:3d:90:d6:0b:0a:4f:70:ee:78:d0:
03:47:b4:cc:2d:c2:dc:31:8b:97:32:76:86:f9:1d:
41:fb:d5:12:94:eb:36:6b:c7:b6:4e:64:65:ba:39:
31:99:b1:82:6d:ca:19:ec:5f:3f:f0:d6:8b:40:90:
38:c7:1f:68:ce:8a:4d:ce:58:bd:6d:3a:5d:33:2d:
2b:ad:55:c4:19:31:67:f0:60:d1:09:2c:2a:92:2d:
11:31:3f:fe:7e:a4:db:b7:df:e4:6e:b9:01:ba:b2:
db:64:b9:6d:99:14:b5:b9:e8:b9:cc:e0:d0:b9:cd:
46:a1:9a:01:a3:be:14:4b:2a:cb:38:d1:e4:5f:8d:
40:69:0c:f7:38:12:6e:d3:22:e4:f8:30:5a:5b:2c:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:02:24:DA:67:D7:D2:1C:D2:FB:3A:81:69:DF:D8:82:BC:D0:12
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BAECJNpn19Ic0vs6gWnf2IK80BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ab:48:0d:90:98:e8:b0:fd:6e:fc:f8:02:85:b1:ee:b4:d7:
19:18:55:25:53:07:b3:67:af:5e:33:b8:02:c5:c8:66:79:5c:
cd:19:dd:70:fb:d4:f8:a9:6d:41:ea:b8:e5:1e:0d:da:03:2c:
fe:f9:1a:cc:56:5a:29:c0:d4:a2:8e:a8:ba:db:b7:f4:79:01:
28:d3:08:9e:05:b9:7b:f0:39:4a:27:a1:73:01:1c:bc:b5:19:
99:90:18:f9:a4:33:e0:2e:48:fd:14:7b:f6:b7:f0:91:dd:69:
9e:22:63:5a:11:d7:49:36:13:b7:b9:b2:aa:44:02:e7:72:3a:
94:90:46:b4:66:3d:b5:fc:e3:8a:72:05:08:fe:36:37:cf:f8:
87:38:8d:0b:02:d4:c7:28:f1:cd:59:70:6f:51:1a:b6:8f:91:
74:3e:9b:68:71:e0:9e:76:c9:db:cf:ec:12:34:a6:13:6b:66:
e7:be:5a:d6:a2:cf:a2:af:95:11:7d:bf:fc:a2:65:34:2d:45:
dd:e7:e7:84:fa:f4:d1:15:2a:a0:88:ff:fa:3b:0f:26:b5:e2:
9b:4e:90:52:5d:18:a4:cf:2c:66:fc:29:10:d7:b0:c7:47:b5:
f8:1c:de:bd:df:cb:e1:51:68:f9:2d:52:3a:f6:76:b3:5f:ca:
ed:91:e7:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagQ38ot9g4dJa3x5qoCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMTAxMTk0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDAxMDIyNGRhNjdkN2QyMWNkMmZiM2E4MTY5ZGZkODgyYmNkMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy68ZCuHccvcj55zQwPqLYgnXl8f
KSOtmbSmm7C6T3yvr80OTCi+vMMfydujT6wPsyJGZPd9Evy9u+WUrypwAZozdnqI
baFA9vSfUZ6cAUbap89K1f4t1f1EO+kPLrpcMXrmwSJ08WK7x2mSoz2Q1gsKT3Du
eNADR7TMLcLcMYuXMnaG+R1B+9USlOs2a8e2TmRlujkxmbGCbcoZ7F8/8NaLQJA4
xx9ozopNzli9bTpdMy0rrVXEGTFn8GDRCSwqki0RMT/+fqTbt9/kbrkBurLbZLlt
mRS1uei5zODQuc1GoZoBo74USyrLONHkX41AaQz3OBJu0yLk+DBaWyztlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQBAiTaZ9fSHNL7OoFp39iCvNASMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvQkFFQ0pOcG4xOUljMHZzNmdXbmYySUs4MEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkWgMA0G
CSqGSIb3DQEBCwUAA4IBAQCnq0gNkJjosP1u/PgChbHutNcZGFUlUwezZ69eM7gC
xchmeVzNGd1w+9T4qW1B6rjlHg3aAyz++RrMVlopwNSijqi627f0eQEo0wieBbl7
8DlKJ6FzARy8tRmZkBj5pDPgLkj9FHv2t/CR3WmeImNaEddJNhO3ubKqRALncjqU
kEa0Zj21/OOKcgUI/jY3z/iHOI0LAtTHKPHNWXBvURq2j5F0PptoceCedsnbz+wS
NKYTa2bnvlrWos+ir5URfb/8omU0LUXd5+eE+vTRFSqgiP/6Ow8mteKbTpBSXRik
zyxm/CkQ17DHR7X4HN6938vhUWj5LVI69nazX8rtkefn
-----END CERTIFICATE-----
Generated at Wed Feb 5 13:02:41 2025 by rpki-client