Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa
File: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (raw, json)
Hash identifier: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=
Subject key identifier: F8:87:35:0B:F2:50:F1:61:54:0D:16:D0:54:CF:EC:AA:64:87:1B:42
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D7087B1B8DE9DE27173B80CFE9062F
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:08:7b:1b:8d:e9:de:27:17:3b:80:cf:e9:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f887350bf250f161540d16d054cfecaa64871b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:91:05:e1:2d:8b:1a:0b:55:24:d7:d6:4f:
5b:af:52:e6:d6:18:ca:f2:81:a2:b3:14:12:fd:87:
2c:1e:a4:75:71:5b:35:bf:3a:ec:a7:0d:09:65:2a:
c5:21:42:1d:6c:07:2c:65:e3:19:ad:89:dd:9a:d1:
5e:5b:6e:4c:54:d1:46:44:6e:12:7e:0c:29:90:08:
99:26:b9:78:bb:6f:8e:d5:3f:51:99:36:ca:c5:cb:
d5:2d:74:67:c1:0a:d0:be:0b:86:fd:a1:7d:92:58:
de:6d:5f:cc:a9:0f:dd:cb:dd:bb:46:f8:93:aa:e3:
3a:ad:88:98:03:e4:b6:c4:26:eb:80:ff:1c:61:5d:
fa:96:3a:5e:77:e3:38:6f:61:48:4a:0d:17:e1:46:
c6:8b:20:32:0d:2f:71:18:e0:6d:c5:7b:0a:66:f0:
7b:71:32:6a:66:be:e2:ff:af:be:a4:6d:85:f5:38:
0a:a1:3a:8c:6b:ed:41:a9:ae:f7:dd:25:cf:91:28:
a1:07:b2:87:88:43:b9:72:69:71:6a:af:75:da:6c:
48:5f:f7:6a:10:fe:f0:48:ea:79:aa:b7:23:5c:c6:
9e:c9:ed:e1:58:64:69:63:cf:d0:db:49:a1:1c:0e:
e4:ff:bc:dd:37:23:13:97:5c:b6:75:03:54:e3:c5:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:35:0B:F2:50:F1:61:54:0D:16:D0:54:CF:EC:AA:64:87:1B:42
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:94:b1:6a:db:b8:b3:87:17:06:18:9e:50:14:49:58:d8:3d:
d7:63:e2:08:01:60:af:0e:9b:04:3a:8d:f6:9a:ee:0a:ed:2a:
86:91:ba:b0:eb:d9:e6:fd:29:68:51:90:48:71:5e:04:56:1a:
e3:9a:6e:a1:47:40:7f:29:1d:d8:ce:43:a1:c0:02:29:5a:c5:
d7:f0:e5:e1:33:4a:de:f2:2a:4b:40:83:dd:e1:1c:68:70:dc:
91:ce:27:3f:e8:89:c3:9e:ad:0a:87:94:53:8d:40:47:81:fe:
91:33:cb:66:3e:55:8d:8e:d8:f4:34:d4:31:3e:3e:90:2e:25:
0e:51:93:4c:b3:49:a2:63:d8:a1:02:a0:a5:5a:c3:54:f2:8e:
82:94:24:2d:5d:99:c0:e5:86:65:bb:ea:ec:b8:aa:f9:cd:3a:
e6:76:3c:8f:60:7e:a0:dc:75:c7:d5:6e:6d:3b:63:63:92:b8:
0c:f3:5a:32:bf:bd:40:dc:70:3f:9e:4f:13:bd:87:60:10:52:
45:27:0d:eb:d1:4f:e4:9e:42:1e:92:28:31:21:06:56:22:d4:
8b:86:40:ea:e8:35:1f:f5:5e:a0:32:4c:14:40:7d:79:f3:cf:
b7:2d:b5:af:5c:36:45:e7:e0:b3:d8:d7:9c:6c:4c:82:89:8a:
83:89:c3:d9
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZQj1wh7G43p3icXO4DP6QYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMTAxMjE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODg3MzUwYmYyNTBmMTYxNTQwZDE2ZDA1NGNmZWNhYTY0ODcxYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudiRBeEtixoLVSTX1k9br1Lm1hjK
8oGisxQS/YcsHqR1cVs1vzrspw0JZSrFIUIdbAcsZeMZrYndmtFeW25MVNFGRG4S
fgwpkAiZJrl4u2+O1T9RmTbKxcvVLXRnwQrQvguG/aF9kljebV/MqQ/dy927RviT
quM6rYiYA+S2xCbrgP8cYV36ljped+M4b2FISg0X4UbGiyAyDS9xGOBtxXsKZvB7
cTJqZr7i/6++pG2F9TgKoTqMa+1Bqa733SXPkSihB7KHiEO5cmlxaq912mxIX/dq
EP7wSOp5qrcjXMaeye3hWGRpY8/Q20mhHA7k/7zdNyMTl1y2dQNU48XYDQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPiHNQvyUPFhVA0W0FTP7KpkhxtCMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvMS1JYzFDX0pROFdGVURSYlFWTV9zcW1TSEcwSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFh
OS8xL1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANXuswME
ANXutTANBgkqhkiG9w0BAQsFAAOCAQEAX5Sxatu4s4cXBhieUBRJWNg912PiCAFg
rw6bBDqN9pruCu0qhpG6sOvZ5v0paFGQSHFeBFYa45puoUdAfykd2M5DocACKVrF
1/Dl4TNK3vIqS0CD3eEcaHDckc4nP+iJw56tCoeUU41AR4H+kTPLZj5VjY7Y9DTU
MT4+kC4lDlGTTLNJomPYoQKgpVrDVPKOgpQkLV2ZwOWGZbvq7Liq+c065nY8j2B+
oNx1x9VubTtjY5K4DPNaMr+9QNxwP55PE72HYBBSRScN69FP5J5CHpIoMSEGViLU
i4ZA6ug1H/VeoDJMFEB9efPPty21r1w2Refgs9jXnGxMgomKg4nD2Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:36 2025 by rpki-client