Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/sHwtxq6vNU_20TTJKVKHNMboy68.roa
File: sHwtxq6vNU_20TTJKVKHNMboy68.roa (raw, json)
Hash identifier: e+pIPXszPmA0jYLK/3ZYIDt9j7uU5CIIUFy94OjzT34=
Subject key identifier: B0:7C:2D:C6:AE:AF:35:4F:F6:D1:34:C9:29:52:87:34:C6:E8:CB:AF
Certificate issuer: /CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Certificate serial: 01942521D201EB2B2C76572FD347C0B0C142
Authority key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/sHwtxq6vNU_20TTJKVKHNMboy68.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211385
IP address blocks: 193.107.12.0/24 maxlen: 24
2a10:f240::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d2:01:eb:2b:2c:76:57:2f:d3:47:c0:b0:c1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b07c2dc6aeaf354ff6d134c929528734c6e8cbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:78:19:ad:a4:ee:d4:55:ff:9b:91:42:3b:
e4:28:29:50:1b:8e:be:7c:97:ab:66:a8:b1:5c:95:
46:d2:2f:2f:3f:d5:b6:75:04:05:1e:69:59:60:09:
b8:de:8a:3d:05:9d:d7:a9:5e:2e:f9:6f:d0:7e:6a:
a2:4c:af:83:a0:a6:24:b9:3b:8a:95:97:76:c2:18:
ee:dd:3d:13:4b:bc:fb:d9:20:f2:3a:18:78:62:8b:
9d:77:2f:47:d9:f9:02:d1:0f:0c:f5:b8:6b:f1:0b:
bd:18:39:c6:cd:52:fe:23:87:1c:3b:63:49:23:54:
fa:73:9c:68:f7:08:48:6c:9b:58:29:92:84:1f:10:
a7:9b:32:86:ba:06:e7:83:e6:54:1e:e5:f9:fd:f9:
50:f6:da:18:c0:67:c3:e9:13:f4:49:bd:5c:34:fd:
ad:0e:37:0d:fb:75:7b:ba:c4:8d:ec:1d:56:b9:b0:
ef:55:e6:66:04:cb:c7:f4:15:d2:77:65:bd:40:8d:
73:04:37:d6:39:b5:2d:4f:f4:a3:f0:e7:84:c6:cd:
df:6b:40:bd:e6:bd:36:aa:fc:30:58:b5:71:dd:76:
bd:92:ed:77:c0:3d:10:73:d3:af:55:98:85:ef:5e:
90:9c:ed:06:3b:37:e0:07:fd:13:b1:90:a8:19:10:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:2D:C6:AE:AF:35:4F:F6:D1:34:C9:29:52:87:34:C6:E8:CB:AF
X509v3 Authority Key Identifier:
keyid:16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/sHwtxq6vNU_20TTJKVKHNMboy68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.12.0/24
IPv6:
2a10:f240::/29
Signature Algorithm: sha256WithRSAEncryption
6f:2b:34:f4:7d:94:36:32:a2:23:c0:4a:5d:44:4c:30:67:7a:
a3:5b:f8:6a:17:5a:33:c7:8c:fa:f9:c8:35:66:62:d9:61:9d:
d2:bf:95:b6:dc:0d:96:a3:77:7c:99:b8:58:5f:66:57:90:cb:
37:62:72:e5:54:ff:9b:3c:1a:b4:72:4a:81:88:02:cc:97:85:
1a:c8:f2:72:60:72:31:79:1b:27:bb:9b:03:17:90:0b:f2:5c:
eb:44:96:27:8a:66:f1:fc:1a:ee:fa:42:2c:99:b8:13:4e:fc:
d2:66:98:64:69:23:aa:0e:12:2a:ae:60:b0:85:3f:93:14:aa:
e5:92:ed:58:27:80:cc:17:51:6c:f3:84:46:48:17:15:f9:49:
f5:0b:cb:c2:62:c8:8e:0a:a8:0f:c3:b0:4d:b9:e9:7f:3f:e6:
fd:00:fa:ab:21:05:66:d9:39:45:ad:f0:bf:ab:2f:b8:eb:23:
be:2f:f3:bf:8a:37:9b:52:5b:03:26:3b:58:18:93:99:9b:6f:
57:ef:a9:3e:73:9f:e2:35:3c:84:cf:73:0a:2a:a1:ce:b2:82:
3b:2b:d7:fa:df:1b:a0:b0:ea:72:cf:77:0a:63:c1:0a:7d:c1:
84:ae:d0:01:93:01:1b:fd:48:9a:4d:70:7a:0d:68:0d:36:3a:
33:51:89:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIdIB6yssdlcv00fAsMFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU4ZDI4NDMwYzRlNDllNjFhNThhZjRmZDdhNmY2NTZl
ZGZkOWUwHhcNMjUwMTAyMDM0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDdjMmRjNmFlYWYzNTRmZjZkMTM0YzkyOTUyODczNGM2ZThjYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukd4Ga2k7tRV/5uRQjvkKClQG46+
fJerZqixXJVG0i8vP9W2dQQFHmlZYAm43oo9BZ3XqV4u+W/QfmqiTK+DoKYkuTuK
lZd2whju3T0TS7z72SDyOhh4Youddy9H2fkC0Q8M9bhr8Qu9GDnGzVL+I4ccO2NJ
I1T6c5xo9whIbJtYKZKEHxCnmzKGugbng+ZUHuX5/flQ9toYwGfD6RP0Sb1cNP2t
DjcN+3V7usSN7B1WubDvVeZmBMvH9BXSd2W9QI1zBDfWObUtT/Sj8OeExs3fa0C9
5r02qvwwWLVx3Xa9ku13wD0Qc9OvVZiF716QnO0GOzfgB/0TsZCoGRDuiQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLB8LcaurzVP9tE0ySlShzTG6MuvMB8GA1UdIwQY
MBaAFBYFjShDDE5J5hpYr0/XpvZW7f2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdXTktFTU1Ua25tR2xpdlQ5ZW05bGJ0X1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iODgxMzktMWE5My00YmQwLTk4MjUt
YmFmYjc5MTFlZTE3LzEvc0h3dHhxNnZOVV8yMFRUSktWS0hOTWJveTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iODgxMzktMWE5My00YmQwLTk4MjUtYmFmYjc5MTFlZTE3
LzEvRmdXTktFTU1Ua25tR2xpdlQ5ZW05bGJ0X1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWsMMA0E
AgACMAcDBQMqEPJAMA0GCSqGSIb3DQEBCwUAA4IBAQBvKzT0fZQ2MqIjwEpdREww
Z3qjW/hqF1ozx4z6+cg1ZmLZYZ3Sv5W23A2Wo3d8mbhYX2ZXkMs3YnLlVP+bPBq0
ckqBiALMl4UayPJyYHIxeRsnu5sDF5AL8lzrRJYnimbx/Bru+kIsmbgTTvzSZphk
aSOqDhIqrmCwhT+TFKrlku1YJ4DMF1Fs84RGSBcV+Un1C8vCYsiOCqgPw7BNuel/
P+b9APqrIQVm2TlFrfC/qy+46yO+L/O/ijebUlsDJjtYGJOZm29X76k+c5/iNTyE
z3MKKqHOsoI7K9f63xugsOpyz3cKY8EKfcGErtABkwEb/UiaTXB6DWgNNjozUYl9
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:17 2025 by rpki-client