Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/AnOjAErapOHwpd7AwIATrv6oaPs.roa
File: AnOjAErapOHwpd7AwIATrv6oaPs.roa (raw, json)
Hash identifier: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=
Subject key identifier: 02:73:A3:00:4A:DA:A4:E1:F0:A5:DE:C0:C0:80:13:AE:FE:A8:68:FB
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 01942C2E86D6C796C3E36CD367040D9598BA
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/AnOjAErapOHwpd7AwIATrv6oaPs.roa
Signing time: Fri 03 Jan 2025 12:40:34 +0000
ROA not before: Fri 03 Jan 2025 12:40:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 194.146.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:2e:86:d6:c7:96:c3:e3:6c:d3:67:04:0d:95:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Jan 3 12:40:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0273a3004adaa4e1f0a5dec0c08013aefea868fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:6f:e6:c3:ad:e8:69:c6:fb:fc:67:62:ca:
9a:d1:b6:3d:ea:c1:84:6a:ff:42:24:25:21:8f:7d:
71:14:76:9d:94:76:e6:41:2e:a5:38:69:8c:4e:2b:
69:47:f8:9a:a9:bf:b4:19:ef:92:04:47:69:4d:5c:
c5:9a:8b:4a:cc:87:6c:41:ea:b7:9f:e1:2c:9c:4f:
18:c7:a2:11:b1:d6:48:5f:12:e6:d8:89:80:e4:49:
8d:16:5e:47:6e:43:4f:c7:04:f1:4f:15:ea:05:3f:
16:1c:96:06:93:39:7b:13:63:54:56:d8:8e:19:11:
e8:42:1b:fd:7d:0e:4b:2e:4e:3f:56:fd:7d:31:77:
97:9c:89:4f:31:85:ad:c4:92:3a:5a:95:63:30:e8:
21:13:27:64:53:d5:35:2a:0f:45:aa:3c:d2:97:0c:
69:04:48:60:f8:04:fd:ab:b5:81:ba:32:9e:07:6e:
e7:2f:fc:bc:b8:af:b7:bb:e6:91:7b:2c:86:f5:f9:
71:8d:e8:eb:17:b2:b4:a5:4e:a0:45:cf:68:10:75:
f2:86:e2:df:01:8b:6b:ef:db:3d:ee:8f:50:7f:48:
f6:e7:a5:07:29:a9:bb:9c:67:b4:e0:3b:ff:b8:1b:
6d:bb:db:2f:42:0e:e7:28:8e:3e:42:ec:ce:3f:36:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:A3:00:4A:DA:A4:E1:F0:A5:DE:C0:C0:80:13:AE:FE:A8:68:FB
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/AnOjAErapOHwpd7AwIATrv6oaPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.68.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e5:67:af:ae:b2:df:01:24:4d:b6:3d:80:34:58:57:19:51:
41:5a:d3:b9:54:00:29:8c:45:4c:97:17:b6:8f:8f:4b:5f:e4:
3c:57:ae:6b:fd:92:81:f2:93:6d:8c:3a:bf:ab:ec:b6:62:96:
22:9c:f0:02:66:3e:25:35:4c:35:cd:dd:34:da:71:84:f9:5b:
1c:f4:be:9d:42:a0:a6:17:2a:28:40:7b:82:4d:76:ea:06:7e:
ab:67:c6:ec:ae:1d:fd:ad:0d:3c:dd:35:2c:8f:4f:9c:5f:63:
32:62:eb:dc:da:af:38:a0:5f:2a:60:e7:91:43:7c:04:dd:30:
d6:cd:21:74:7b:c6:16:c3:e8:e0:cf:a4:ee:d3:ed:df:92:60:
13:92:b2:55:fd:5e:e2:26:b8:21:96:79:2d:62:5d:d3:cb:4e:
21:63:44:d3:43:10:2a:64:00:99:85:a9:d1:c8:63:59:43:60:
1e:8d:3e:9b:4e:69:53:93:9b:f9:53:10:ca:c1:55:ff:09:2e:
3f:78:05:d3:77:81:7f:82:f1:8e:d3:5b:c6:9c:da:da:c7:9c:
b3:44:d6:97:7d:62:27:d7:06:e5:88:4a:99:36:cb:31:9c:94:
30:b7:77:c7:25:f0:01:f4:80:e5:f9:01:39:df:4a:4e:06:fc:
14:e8:58:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQsLobWx5bD42zTZwQNlZi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmMzZGJkMWE0ZjIyNGFiODRhZDYwOWMyNjgwNzlmYjYy
NGI1YmQwHhcNMjUwMTAzMTI0MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjczYTMwMDRhZGFhNGUxZjBhNWRlYzBjMDgwMTNhZWZlYTg2OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ohv5sOt6GnG+/xnYsqa0bY96sGE
av9CJCUhj31xFHadlHbmQS6lOGmMTitpR/iaqb+0Ge+SBEdpTVzFmotKzIdsQeq3
n+EsnE8Yx6IRsdZIXxLm2ImA5EmNFl5HbkNPxwTxTxXqBT8WHJYGkzl7E2NUVtiO
GRHoQhv9fQ5LLk4/Vv19MXeXnIlPMYWtxJI6WpVjMOghEydkU9U1Kg9FqjzSlwxp
BEhg+AT9q7WBujKeB27nL/y8uK+3u+aReyyG9flxjejrF7K0pU6gRc9oEHXyhuLf
AYtr79s97o9Qf0j256UHKam7nGe04Dv/uBttu9svQg7nKI4+QuzOPzZImwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJzowBK2qTh8KXewMCAE67+qGj7MB8GA1UdIwQY
MBaAFLu8Pb0aTyJKuErWCcJoB5+2JLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDct
YTI0Y2I1NzIyOThlLzEvQW5PakFFcmFwT0h3cGQ3QXdJQVRydjZvYVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDctYTI0Y2I1NzIyOThl
LzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJEMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ5WevrrLfASRNtj2ANFhXGVFBWtO5VAApjEVMlxe2
j49LX+Q8V65r/ZKB8pNtjDq/q+y2YpYinPACZj4lNUw1zd002nGE+Vsc9L6dQqCm
FyooQHuCTXbqBn6rZ8bsrh39rQ083TUsj0+cX2MyYuvc2q84oF8qYOeRQ3wE3TDW
zSF0e8YWw+jgz6Tu0+3fkmATkrJV/V7iJrghlnktYl3Ty04hY0TTQxAqZACZhanR
yGNZQ2AejT6bTmlTk5v5UxDKwVX/CS4/eAXTd4F/gvGO01vGnNrax5yzRNaXfWIn
1wbliEqZNssxnJQwt3fHJfAB9IDl+QE530pOBvwU6Fj8
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:34:29 2025 by rpki-client