Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ubCtS1VfMlpqc29JR5yJamthyao.roa
File: ubCtS1VfMlpqc29JR5yJamthyao.roa (raw, json)
Hash identifier: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=
Subject key identifier: B9:B0:AD:4B:55:5F:32:5A:6A:73:6F:49:47:9C:89:6A:6B:61:C9:AA
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0194458D0C5C8D73100DB307A8F8E370ED38
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ubCtS1VfMlpqc29JR5yJamthyao.roa
Signing time: Wed 08 Jan 2025 10:54:19 +0000
ROA not before: Wed 08 Jan 2025 10:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 37.49.150.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:8d:0c:5c:8d:73:10:0d:b3:07:a8:f8:e3:70:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 8 10:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b0ad4b555f325a6a736f49479c896a6b61c9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:d5:0b:2c:de:3d:12:2b:93:20:7f:9e:83:
65:3c:0e:eb:45:ff:df:26:a1:fd:76:95:e9:5b:dc:
3b:67:6f:4c:be:25:a3:7b:2f:4c:3e:76:7b:d5:f0:
38:f9:e7:72:5b:76:41:e3:63:64:28:91:ce:0f:bc:
b4:e1:1b:93:e4:be:3b:7e:48:de:e0:9a:35:50:4c:
ba:82:f2:1a:ca:f7:f7:92:33:9a:cb:8a:23:25:38:
27:76:ac:62:46:80:f3:90:41:ec:92:8f:f8:f0:3e:
e8:68:88:31:e7:57:76:bf:9b:00:c9:fd:49:a5:0a:
3b:c9:9f:38:a5:54:c8:c7:80:5e:a8:42:2f:09:7d:
d3:2f:08:78:0b:fd:98:54:66:57:e1:a1:4c:39:4a:
26:cd:94:77:86:d9:d0:09:c5:33:1f:53:50:82:e1:
16:4a:c0:c1:39:c8:a2:23:d3:5c:22:ac:a0:79:40:
bc:70:e8:25:13:ca:50:8e:2b:2d:ae:6a:48:84:94:
fd:78:f3:a9:ef:2e:68:b6:85:f7:dc:0e:b3:0d:3f:
71:7b:f9:f0:8f:8f:e0:ba:7b:bc:df:ca:9b:09:32:
9a:b7:a1:f5:1c:10:96:d5:38:da:23:41:74:f2:3f:
11:a1:5d:e0:97:00:38:52:3f:0b:a9:75:bb:40:6a:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:AD:4B:55:5F:32:5A:6A:73:6F:49:47:9C:89:6A:6B:61:C9:AA
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ubCtS1VfMlpqc29JR5yJamthyao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.150.0/24
176.46.159.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2f:01:af:90:85:d1:4f:c1:e0:d9:c7:f1:5c:00:0e:00:60:
af:1d:b5:5a:31:98:8a:11:83:96:94:c5:9d:ea:18:cb:7d:d2:
87:82:d2:72:0b:3d:4e:67:fb:84:0f:9f:84:32:42:1e:ec:82:
b4:e7:7e:00:be:de:38:99:8b:2c:2f:4e:b6:cf:8d:39:b3:d2:
01:02:02:63:3b:ea:f6:59:36:6d:15:00:4a:9a:33:31:ad:17:
1c:2f:98:b4:cf:3f:c3:73:85:f8:67:92:34:03:d6:1c:e3:a4:
12:f1:15:44:e0:ac:d3:40:2b:09:5d:61:f7:3e:b5:ba:20:77:
33:b4:5f:47:0d:4c:80:d7:7b:1a:33:b3:33:b3:fe:b4:93:3b:
8f:55:8d:93:29:10:61:47:2c:1a:e5:8b:42:a3:a8:6e:6b:52:
87:9e:08:40:37:1e:07:eb:e5:f4:24:ae:9b:f5:9f:ab:70:e6:
a3:3b:40:bd:c2:89:76:01:5b:80:93:c1:3a:75:ce:92:60:92:
28:55:d7:d7:e5:2c:63:58:64:4a:4c:6d:5e:f0:d4:df:81:87:
60:74:17:57:f2:0b:aa:f3:cb:6e:7c:41:0a:07:09:b2:12:0c:
22:19:41:cc:ce:ea:a4:12:3c:11:6f:1e:24:51:40:5b:a2:01:
fc:7c:11:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRFjQxcjXMQDbMHqPjjcO04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjUwMTA4MTA1NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWIwYWQ0YjU1NWYzMjVhNmE3MzZmNDk0NzljODk2YTZiNjFjOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSjVCyzePRIrkyB/noNlPA7rRf/f
JqH9dpXpW9w7Z29MviWjey9MPnZ71fA4+edyW3ZB42NkKJHOD7y04RuT5L47fkje
4Jo1UEy6gvIayvf3kjOay4ojJTgndqxiRoDzkEHsko/48D7oaIgx51d2v5sAyf1J
pQo7yZ84pVTIx4BeqEIvCX3TLwh4C/2YVGZX4aFMOUomzZR3htnQCcUzH1NQguEW
SsDBOciiI9NcIqygeUC8cOglE8pQjistrmpIhJT9ePOp7y5otoX33A6zDT9xe/nw
j4/gunu838qbCTKat6H1HBCW1TjaI0F08j8RoV3glwA4Uj8LqXW7QGoRkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLmwrUtVXzJaanNvSUeciWprYcmqMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvdWJDdFMxVmZNbHBxYzI5SlI1eUphbXRoeWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJTGWAwQA
sC6fMA0GCSqGSIb3DQEBCwUAA4IBAQAxLwGvkIXRT8Hg2cfxXAAOAGCvHbVaMZiK
EYOWlMWd6hjLfdKHgtJyCz1OZ/uED5+EMkIe7IK0534Avt44mYssL062z405s9IB
AgJjO+r2WTZtFQBKmjMxrRccL5i0zz/Dc4X4Z5I0A9Yc46QS8RVE4KzTQCsJXWH3
PrW6IHcztF9HDUyA13saM7Mzs/60kzuPVY2TKRBhRywa5YtCo6hua1KHnghANx4H
6+X0JK6b9Z+rcOajO0C9wol2AVuAk8E6dc6SYJIoVdfX5SxjWGRKTG1e8NTfgYdg
dBdX8guq88tufEEKBwmyEgwiGUHMzuqkEjwRbx4kUUBbogH8fBEm
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:46:05 2025 by rpki-client