Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa
File: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (raw, json)
Hash identifier: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=
Subject key identifier: B0:A8:31:75:52:31:7F:FE:DA:39:C8:08:EE:E6:8B:8C:AC:D7:25:A1
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D704D3EB660A3A36D3D3ECCCECCB8B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41683
IP address blocks: 213.238.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:04:d3:eb:66:0a:3a:36:d3:d3:ec:cc:ec:cb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a8317552317ffeda39c808eee68b8cacd725a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:7f:75:31:e3:56:09:3e:bc:19:81:a9:f7:
cb:16:dc:65:5e:55:f6:6d:3b:d1:36:b1:6c:60:1c:
01:d8:39:71:3d:87:66:a1:11:56:d7:12:ba:38:fc:
04:c2:34:10:a2:2c:b6:32:b2:00:20:e1:44:e9:9e:
8f:88:b8:f8:2c:da:23:54:63:8b:b0:43:36:8f:a7:
e5:91:a8:3d:13:54:77:cb:59:e4:3b:4a:c6:62:cf:
e4:90:44:37:90:58:67:a7:16:b5:f5:95:d4:9d:d4:
04:83:a8:1e:15:3c:67:73:8a:87:13:c9:e0:16:be:
2a:20:30:b2:79:8e:9c:f2:ad:05:5a:ea:c9:87:f9:
c4:b2:66:16:e9:93:77:58:0e:f9:1e:e5:6f:c5:77:
f1:b7:45:20:2f:c4:68:ce:c8:c6:0e:29:19:c9:8b:
41:ad:00:19:5a:a6:6a:d4:19:14:1c:fb:3e:af:49:
3e:4e:5f:f6:52:ae:49:ef:67:56:74:9f:d4:04:ce:
3f:c7:b2:17:5c:ce:f1:80:40:bb:f7:95:ee:9b:27:
23:88:fc:99:70:22:98:ba:28:a3:6f:1c:93:52:a2:
e4:15:b4:14:91:e1:eb:aa:91:53:02:d8:ff:ff:30:
30:1c:0a:7f:70:42:bd:07:c9:b7:ce:eb:08:4d:c0:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:31:75:52:31:7F:FE:DA:39:C8:08:EE:E6:8B:8C:AC:D7:25:A1
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:88:e0:3b:3c:66:49:79:9d:df:34:09:41:86:6e:f7:51:a5:
77:ee:eb:88:58:79:9e:4b:b3:56:44:8a:8c:c9:34:87:49:45:
7e:4e:2d:82:fb:fa:e4:f0:fa:12:22:cb:f7:17:81:47:73:bf:
c8:61:c2:69:97:42:69:a3:39:9a:ea:87:a6:ca:d8:73:3b:25:
52:ed:52:af:49:7a:f1:a7:3f:07:6d:38:ad:c6:e4:61:9e:00:
0d:2c:19:99:e3:6d:37:be:fe:db:cc:6d:91:61:94:ee:9c:22:
d8:b9:27:bb:d1:0a:c3:f2:f9:15:cd:0d:e6:dd:97:aa:a2:5c:
89:fd:49:7e:3f:1f:57:d3:cc:71:65:af:23:95:d4:8e:69:42:
0d:d0:9a:92:94:ec:54:2f:d7:b1:4b:de:de:9d:f1:29:dd:f0:
0f:b2:a9:08:fa:7a:61:8d:c0:7b:5c:46:ae:5f:0c:ef:5a:86:
f7:cf:6e:49:75:c1:51:c6:cc:99:79:66:02:6f:d7:38:ef:be:
43:8c:6f:b9:92:08:b1:9f:f7:ea:c5:8c:b4:2e:41:fb:15:15:
35:20:34:fb:8a:63:5a:1a:40:12:f3:00:4a:38:8d:a8:48:fd:
bb:b9:c8:43:dd:63:17:33:bc:c1:50:d1:6e:5d:5e:58:95:39:
6a:9e:1a:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1wTT62YKOjbT0+zM7MuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMTAxMjE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGE4MzE3NTUyMzE3ZmZlZGEzOWM4MDhlZWU2OGI4Y2FjZDcyNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WB/dTHjVgk+vBmBqffLFtxlXlX2
bTvRNrFsYBwB2DlxPYdmoRFW1xK6OPwEwjQQoiy2MrIAIOFE6Z6PiLj4LNojVGOL
sEM2j6flkag9E1R3y1nkO0rGYs/kkEQ3kFhnpxa19ZXUndQEg6geFTxnc4qHE8ng
Fr4qIDCyeY6c8q0FWurJh/nEsmYW6ZN3WA75HuVvxXfxt0UgL8RozsjGDikZyYtB
rQAZWqZq1BkUHPs+r0k+Tl/2Uq5J72dWdJ/UBM4/x7IXXM7xgEC795XumycjiPyZ
cCKYuiijbxyTUqLkFbQUkeHrqpFTAtj//zAwHAp/cEK9B8m3zusITcAVywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCoMXVSMX/+2jnICO7mi4ys1yWhMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvc0tneGRWSXhmXzdhT2NnSTd1YUxqS3pYSmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6wMA0G
CSqGSIb3DQEBCwUAA4IBAQCuiOA7PGZJeZ3fNAlBhm73UaV37uuIWHmeS7NWRIqM
yTSHSUV+Ti2C+/rk8PoSIsv3F4FHc7/IYcJpl0Jpozma6oemythzOyVS7VKvSXrx
pz8HbTitxuRhngANLBmZ4203vv7bzG2RYZTunCLYuSe70QrD8vkVzQ3m3ZeqolyJ
/Ul+Px9X08xxZa8jldSOaUIN0JqSlOxUL9exS97enfEp3fAPsqkI+nphjcB7XEau
XwzvWob3z25JdcFRxsyZeWYCb9c4775DjG+5kgixn/fqxYy0LkH7FRU1IDT7imNa
GkAS8wBKOI2oSP27uchD3WMXM7zBUNFuXV5YlTlqnhrL
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:30:06 2025 by rpki-client