Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/p0cL-vdhY3KSfcwz6s4koNapmbw.roa
File: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (raw, json)
Hash identifier: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=
Subject key identifier: A7:47:0B:FA:F7:61:63:72:92:7D:CC:33:EA:CE:24:A0:D6:A9:99:BC
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 01942144681C323FE08320ADF640DCBB0A79
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/p0cL-vdhY3KSfcwz6s4koNapmbw.roa
Signing time: Wed 01 Jan 2025 09:48:38 +0000
ROA not before: Wed 01 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211403
IP address blocks: 213.110.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:68:1c:32:3f:e0:83:20:ad:f6:40:dc:bb:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7470bfaf7616372927dcc33eace24a0d6a999bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:81:52:66:6e:13:c6:bd:bd:58:c7:08:66:
1c:02:1c:ea:3a:5a:ce:ed:b4:cc:96:90:67:e3:1c:
33:1e:f5:ee:88:6b:df:9a:d8:80:ad:71:de:7b:71:
32:79:8e:eb:58:21:b7:f1:e6:53:20:09:91:28:e4:
5b:60:51:9a:a3:df:b9:7e:a2:ba:c3:94:43:c2:8a:
c2:e9:cf:8f:05:6b:fc:fa:7c:09:2e:5d:c5:3b:34:
0d:4a:5b:35:ec:39:bc:a5:2f:48:82:79:a8:13:fa:
c1:9c:2b:0e:3c:3f:5a:ac:90:0f:91:f8:3a:36:40:
48:a4:6d:30:bb:5c:3f:60:0c:d1:a5:b9:62:df:5f:
20:b0:94:e6:51:58:5d:28:fd:39:d5:d1:b4:b2:fd:
07:c6:79:70:dd:52:96:5d:23:3a:7f:bf:51:18:45:
27:5c:52:0a:ff:16:d7:3e:31:e8:5d:2b:ee:50:a6:
88:da:b1:09:b3:f3:60:9a:59:cd:37:ef:1b:8f:eb:
a1:90:93:65:e3:3c:d0:cc:3a:35:be:bd:2b:d3:02:
e3:a2:7f:b4:92:71:27:5d:2f:0a:10:ef:65:64:af:
4b:e1:b7:68:11:40:e1:08:b4:a0:29:6d:9f:dc:34:
25:b4:b8:6f:f4:83:57:38:e8:72:6c:71:5a:18:57:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:0B:FA:F7:61:63:72:92:7D:CC:33:EA:CE:24:A0:D6:A9:99:BC
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/p0cL-vdhY3KSfcwz6s4koNapmbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.238.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ce:b3:91:e8:fb:92:69:12:73:6a:63:e2:ae:82:21:c3:ae:
e0:f6:1a:f0:92:d0:e0:bd:25:22:3a:26:57:68:f5:9d:17:3a:
98:50:15:e8:ff:5a:ab:df:21:68:e2:95:6d:39:49:ce:98:1c:
fc:6a:9b:56:86:bf:36:b7:d3:91:5d:5d:a1:23:bf:64:ad:ec:
84:ee:c1:36:13:f6:18:a1:2c:5d:6f:87:27:52:73:60:f7:f6:
d1:63:db:61:39:a4:9a:37:01:ee:a9:84:91:ef:df:b7:11:5a:
79:ec:38:71:6e:ee:be:9d:0f:05:4a:0c:04:09:4e:cc:e9:91:
91:ed:f6:94:9b:8c:a2:bc:75:92:fa:96:11:50:34:cf:a4:91:
32:1e:6b:1e:9d:aa:8a:eb:85:d7:93:95:b9:69:37:06:95:bb:
ae:3a:04:bc:9f:c8:44:e8:ae:41:5a:9f:25:92:25:a0:a8:02:
b6:47:c9:56:62:59:e2:74:8c:0a:a9:c2:63:7d:dc:03:23:dc:
5f:2c:52:b1:0b:78:ed:9a:7b:e9:f2:b5:5a:4b:7d:ae:39:c9:
1b:3e:23:ab:0e:4d:27:13:0b:be:15:07:3c:5d:9c:bd:d4:df:
ab:31:2e:27:99:42:40:4d:ab:66:53:1a:b8:22:64:b5:92:bd:
2f:a6:fb:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRGgcMj/ggyCt9kDcuwp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl
OWQ2YzMwHhcNMjUwMTAxMDk0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzQ3MGJmYWY3NjE2MzcyOTI3ZGNjMzNlYWNlMjRhMGQ2YTk5OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4WBUmZuE8a9vVjHCGYcAhzqOlrO
7bTMlpBn4xwzHvXuiGvfmtiArXHee3EyeY7rWCG38eZTIAmRKORbYFGao9+5fqK6
w5RDworC6c+PBWv8+nwJLl3FOzQNSls17Dm8pS9IgnmoE/rBnCsOPD9arJAPkfg6
NkBIpG0wu1w/YAzRpbli318gsJTmUVhdKP051dG0sv0Hxnlw3VKWXSM6f79RGEUn
XFIK/xbXPjHoXSvuUKaI2rEJs/NgmlnNN+8bj+uhkJNl4zzQzDo1vr0r0wLjon+0
knEnXS8KEO9lZK9L4bdoEUDhCLSgKW2f3DQltLhv9INXOOhybHFaGFeNGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKdHC/r3YWNykn3MM+rOJKDWqZm8MB8GA1UdIwQY
MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt
MDM3YjVhN2I5NTQ0LzEvcDBjTC12ZGhZM0tTZmN3ejZzNGtvTmFwbWJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0
LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1W7uMA0G
CSqGSIb3DQEBCwUAA4IBAQBizrOR6PuSaRJzamPiroIhw67g9hrwktDgvSUiOiZX
aPWdFzqYUBXo/1qr3yFo4pVtOUnOmBz8aptWhr82t9ORXV2hI79kreyE7sE2E/YY
oSxdb4cnUnNg9/bRY9thOaSaNwHuqYSR79+3EVp57Dhxbu6+nQ8FSgwECU7M6ZGR
7faUm4yivHWS+pYRUDTPpJEyHmsenaqK64XXk5W5aTcGlbuuOgS8n8hE6K5BWp8l
kiWgqAK2R8lWYlnidIwKqcJjfdwDI9xfLFKxC3jtmnvp8rVaS32uOckbPiOrDk0n
Ewu+FQc8XZy91N+rMS4nmUJATatmUxq4ImS1kr0vpvtw
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:36 2025 by rpki-client