Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/S_GqD0SxmtRzhF8ypadzBGAiS7A.roa
File: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (raw, json)
Hash identifier: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=
Subject key identifier: 4B:F1:AA:0F:44:B1:9A:D4:73:84:5F:32:A5:A7:73:04:60:22:4B:B0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 0196F1B40A99853F3220D8501EE511D72353
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/S_GqD0SxmtRzhF8ypadzBGAiS7A.roa
Signing time: Wed 21 May 2025 07:17:10 +0000
ROA not before: Wed 21 May 2025 07:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48292
IP address blocks: 213.238.160.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.165.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:b4:0a:99:85:3f:32:20:d8:50:1e:e5:11:d7:23:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 21 07:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bf1aa0f44b19ad473845f32a5a7730460224bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:d5:95:4c:b3:cc:ee:2a:e0:dd:e9:56:81:
38:b6:16:84:11:5d:de:e0:9d:ba:80:bf:8e:ad:98:
8b:f1:05:80:48:1a:db:51:48:69:4a:5d:f1:d9:fe:
35:ed:aa:92:79:64:b7:f6:a4:f0:fd:e6:0d:06:bc:
4b:dd:5a:64:3e:75:33:e5:53:ee:7d:4e:2d:03:f1:
a4:ab:2b:f6:36:ff:dc:f9:9c:e1:83:3f:57:5d:79:
2a:32:37:75:b5:cf:d5:ae:79:23:ab:fe:e6:2f:f0:
43:43:18:8c:ac:ec:3a:1f:9b:ad:a8:31:3d:0d:98:
76:18:00:c5:bf:a0:cc:d3:a2:67:31:24:9b:f0:d9:
7e:4a:dd:e5:a0:26:d5:b7:c1:57:25:c8:ba:d1:eb:
83:38:80:54:e2:65:bf:50:8c:e9:86:33:af:84:82:
ae:e4:6c:2a:24:bb:6d:cf:7f:32:d7:97:03:6c:9c:
31:ee:c8:1b:b6:97:fc:c4:cf:29:83:26:6f:51:22:
68:d1:37:ab:80:13:4f:4c:a5:2b:55:ed:f5:e6:7e:
70:a7:b5:34:0c:c7:da:00:41:ee:c2:17:c8:b8:63:
b3:9f:ef:eb:53:e8:fb:4b:7d:13:3f:0f:e2:e8:97:
12:4d:16:ac:d0:31:64:94:09:65:aa:92:7f:a0:b3:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:AA:0F:44:B1:9A:D4:73:84:5F:32:A5:A7:73:04:60:22:4B:B0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/S_GqD0SxmtRzhF8ypadzBGAiS7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9c:42:7d:e9:ac:89:10:0a:c6:e3:67:33:ad:6c:a7:94:3d:
64:ea:01:6d:ce:35:1c:c1:8b:84:da:34:70:6c:31:05:c8:44:
6a:59:d9:07:97:62:fe:72:43:67:a3:74:5e:f9:64:7e:de:2f:
98:86:32:10:55:53:53:2a:de:67:8f:bc:e4:7e:89:1c:ed:0e:
1f:16:3e:f7:90:03:10:67:ba:c2:a6:1f:2b:01:c1:a7:6f:03:
36:94:bd:0d:ed:ae:89:c2:8f:95:79:83:37:c6:a2:55:e3:f6:
d9:d1:71:26:3d:08:68:94:e3:2c:1a:38:7b:88:8c:c7:dd:98:
b2:67:63:69:03:30:9d:cf:7f:71:be:2b:8a:d7:98:8e:7f:03:
13:14:83:46:fe:b0:40:21:f3:4f:0e:66:1a:06:63:f6:e3:9c:
f6:a1:e2:9c:99:6c:af:aa:52:1b:4b:55:f9:1a:f3:0e:d5:95:
88:8a:3b:59:3f:18:ab:a2:f1:84:b9:8f:be:64:0d:00:a0:b0:
e3:9d:f6:2e:5f:be:b4:b3:a1:2e:34:56:fc:21:ba:2b:10:d3:
fc:42:54:4c:77:a4:b3:ab:b5:75:64:32:8a:a3:3b:08:04:82:
30:6a:b6:eb:d4:22:02:6e:a4:76:18:72:bd:be:a0:fe:c8:02:
ca:d7:84:38
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZbxtAqZhT8yINhQHuUR1yNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwNTIxMDcxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmYxYWEwZjQ0YjE5YWQ0NzM4NDVmMzJhNWE3NzMwNDYwMjI0YmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MnVlUyzzO4q4N3pVoE4thaEEV3e
4J26gL+OrZiL8QWASBrbUUhpSl3x2f417aqSeWS39qTw/eYNBrxL3VpkPnUz5VPu
fU4tA/Gkqyv2Nv/c+Zzhgz9XXXkqMjd1tc/Vrnkjq/7mL/BDQxiMrOw6H5utqDE9
DZh2GADFv6DM06JnMSSb8Nl+St3loCbVt8FXJci60euDOIBU4mW/UIzphjOvhIKu
5GwqJLttz38y15cDbJwx7sgbtpf8xM8pgyZvUSJo0TergBNPTKUrVe315n5wp7U0
DMfaAEHuwhfIuGOzn+/rU+j7S30TPw/i6JcSTRas0DFklAllqpJ/oLN1SwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEvxqg9EsZrUc4RfMqWncwRgIkuwMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvU19HcUQwU3htdFJ6aEY4eXBhZHpCR0FpUzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAXV7qAD
BAHV7qQDBADV7rEwDQYJKoZIhvcNAQELBQADggEBAHycQn3prIkQCsbjZzOtbKeU
PWTqAW3ONRzBi4TaNHBsMQXIRGpZ2QeXYv5yQ2ejdF75ZH7eL5iGMhBVU1Mq3meP
vOR+iRztDh8WPveQAxBnusKmHysBwadvAzaUvQ3tronCj5V5gzfGolXj9tnRcSY9
CGiU4ywaOHuIjMfdmLJnY2kDMJ3Pf3G+K4rXmI5/AxMUg0b+sEAh808OZhoGY/bj
nPah4pyZbK+qUhtLVfka8w7VlYiKO1k/GKui8YS5j75kDQCgsOOd9i5fvrSzoS40
VvwhuisQ0/xCVEx3pLOrtXVkMoqjOwgEgjBqtuvUIgJupHYYcr2+oP7IAsrXhDg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:32:39 2025 by rpki-client