Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/rYkWvcE_3GQZ3jkaDTUiqjj986g.roa
File: rYkWvcE_3GQZ3jkaDTUiqjj986g.roa (raw, json)
Hash identifier: FOkCN5CJZuWhjjVzqhCAbEwhLO4+xpDqIO3h/0CpxnA=
Subject key identifier: AD:89:16:BD:C1:3F:DC:64:19:DE:39:1A:0D:35:22:AA:38:FD:F3:A8
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 019424B370D24818554A73FF6AC68BF22759
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/rYkWvcE_3GQZ3jkaDTUiqjj986g.roa
Signing time: Thu 02 Jan 2025 01:48:47 +0000
ROA not before: Thu 02 Jan 2025 01:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200384
IP address blocks: 195.16.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:70:d2:48:18:55:4a:73:ff:6a:c6:8b:f2:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad8916bdc13fdc6419de391a0d3522aa38fdf3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:94:9d:92:ac:33:39:30:50:65:d9:c9:42:
d2:7b:15:68:64:45:25:06:eb:db:10:3e:9c:95:59:
ed:f3:7b:fb:83:ba:fe:d7:f4:98:20:38:f6:c8:5c:
54:86:36:38:87:4a:11:82:64:73:25:b0:99:6a:b3:
4c:a2:ae:fc:11:5a:00:7a:c9:64:0a:8d:e6:10:e2:
c8:e5:1d:26:64:7c:f4:19:c1:6a:8e:fe:06:f3:3f:
c1:63:7f:cb:e4:6b:14:2c:e3:4d:ac:6d:fe:df:52:
63:4c:9b:6a:d3:c2:54:c1:2d:8c:c6:a8:2c:56:70:
0e:20:40:ba:19:d8:18:fa:b1:01:b8:3b:51:7e:64:
cd:84:9e:68:54:41:91:1e:18:f3:47:74:ef:b6:14:
5e:db:3b:eb:fb:d9:32:bc:c6:da:69:21:3c:22:8b:
36:17:7c:c6:3a:2a:ba:a2:e0:0e:f2:e0:01:06:0a:
60:47:47:79:64:2c:db:a9:5c:f5:67:9d:cb:a8:ad:
7f:83:6d:b3:5f:9c:41:52:2d:5c:dd:90:f7:cd:c1:
94:b0:75:f6:fc:5a:bb:41:51:80:32:82:2e:10:8b:
dd:1b:5b:8d:df:ca:83:71:b3:3e:2a:72:12:08:1e:
dc:fd:4c:49:c5:20:99:2e:b1:03:d5:48:be:30:3c:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:16:BD:C1:3F:DC:64:19:DE:39:1A:0D:35:22:AA:38:FD:F3:A8
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/rYkWvcE_3GQZ3jkaDTUiqjj986g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.252.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dd:e9:b7:76:60:99:dc:a9:de:16:d5:9a:66:27:0f:f5:4c:
b7:63:1b:90:92:86:5b:93:8f:0b:d5:66:17:6f:59:ed:05:06:
50:3f:71:88:be:9f:46:2e:60:17:80:8d:40:17:5d:db:96:41:
ce:90:cb:74:a3:0a:0a:82:97:49:55:12:0b:ba:50:70:b9:08:
90:ae:b1:aa:fa:24:82:85:72:85:79:e0:8a:bd:ba:77:12:b3:
30:f7:e4:01:e9:b3:9d:bc:17:fa:9f:b9:7a:ec:8d:04:be:95:
91:bc:27:e7:1e:55:b8:a9:a9:8b:a6:a7:ca:10:13:86:ba:5f:
dc:8e:f5:8c:e7:8a:34:5f:22:52:e6:09:f6:92:4f:74:4d:58:
17:fc:1c:80:2a:f1:08:2c:31:e8:37:7e:3e:4b:d9:cc:53:6a:
8c:00:a5:99:5c:55:f0:a5:71:bc:04:e0:6c:e4:ed:7c:55:1c:
2f:93:65:5c:f3:b8:ca:cf:d6:a9:4b:42:39:34:af:80:d7:0d:
e3:5b:26:08:eb:7c:24:9b:ef:fd:38:97:e7:16:0e:c5:e7:d7:
1a:05:00:d8:b8:cb:7c:82:c7:f5:79:77:1d:c5:9d:54:8f:ea:
cf:d2:0d:ff:98:a0:84:2e:85:12:14:8c:e9:3d:1a:02:17:8d:
84:c9:97:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks3DSSBhVSnP/asaL8idZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjUwMTAyMDE0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDg5MTZiZGMxM2ZkYzY0MTlkZTM5MWEwZDM1MjJhYTM4ZmRmM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t+UnZKsMzkwUGXZyULSexVoZEUl
BuvbED6clVnt83v7g7r+1/SYIDj2yFxUhjY4h0oRgmRzJbCZarNMoq78EVoAeslk
Co3mEOLI5R0mZHz0GcFqjv4G8z/BY3/L5GsULONNrG3+31JjTJtq08JUwS2Mxqgs
VnAOIEC6GdgY+rEBuDtRfmTNhJ5oVEGRHhjzR3TvthRe2zvr+9kyvMbaaSE8Ios2
F3zGOiq6ouAO8uABBgpgR0d5ZCzbqVz1Z53LqK1/g22zX5xBUi1c3ZD3zcGUsHX2
/Fq7QVGAMoIuEIvdG1uN38qDcbM+KnISCB7c/UxJxSCZLrED1Ui+MDzUmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2JFr3BP9xkGd45Gg01Iqo4/fOoMB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEvcllrV3ZjRV8zR1FaM2prYURUVWlxamo5ODZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxD8MA0G
CSqGSIb3DQEBCwUAA4IBAQCE3em3dmCZ3KneFtWaZicP9Uy3YxuQkoZbk48L1WYX
b1ntBQZQP3GIvp9GLmAXgI1AF13blkHOkMt0owoKgpdJVRILulBwuQiQrrGq+iSC
hXKFeeCKvbp3ErMw9+QB6bOdvBf6n7l67I0EvpWRvCfnHlW4qamLpqfKEBOGul/c
jvWM54o0XyJS5gn2kk90TVgX/ByAKvEILDHoN34+S9nMU2qMAKWZXFXwpXG8BOBs
5O18VRwvk2Vc87jKz9apS0I5NK+A1w3jWyYI63wkm+/9OJfnFg7F59caBQDYuMt8
gsf1eXcdxZ1Uj+rP0g3/mKCELoUSFIzpPRoCF42EyZf3
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:57 2025 by rpki-client