Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uCdCyN2B86Bl60LYL_ogLfxP9u4.roa
File: uCdCyN2B86Bl60LYL_ogLfxP9u4.roa (raw, json)
Hash identifier: h5+YtHprjK+vhOwhloeqX2YJWAcld3lB1a7eKZOvWHw=
Subject key identifier: B8:27:42:C8:DD:81:F3:A0:65:EB:42:D8:2F:FA:20:2D:FC:4F:F6:EE
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0194282393ABC0485FE605808CE9BFA6F3C4
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uCdCyN2B86Bl60LYL_ogLfxP9u4.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62390
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:93:ab:c0:48:5f:e6:05:80:8c:e9:bf:a6:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82742c8dd81f3a065eb42d82ffa202dfc4ff6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:2a:71:0c:0d:fb:f8:a8:bd:4e:66:0d:b1:
d6:16:e3:68:43:36:38:23:3a:8b:b2:c1:bd:04:fb:
f2:c6:5a:70:ad:f2:30:4e:97:4e:63:55:4e:c8:64:
5d:1a:dd:96:ca:c2:eb:87:80:8b:90:f8:c0:7b:9e:
48:70:c5:ed:af:cd:aa:a5:ed:46:dc:78:fb:4c:52:
68:b9:54:94:ca:2e:5f:b1:3a:a3:62:86:e9:5e:46:
cc:6b:fb:83:db:51:c1:44:d4:8b:b6:9a:56:77:02:
26:d4:ad:58:08:a3:fe:47:14:e5:f7:7a:28:bf:83:
ab:fe:7f:70:fe:b9:ea:b1:f0:bf:f0:cc:dd:11:63:
c0:aa:2c:a3:26:37:48:f8:1c:bb:d5:ef:20:9f:a0:
a0:ad:02:e4:0a:67:10:f2:a3:0d:bd:9a:3e:e5:98:
43:4e:db:bd:6f:96:b3:d0:22:00:a3:87:b8:8f:d8:
e7:45:7c:9c:af:1e:05:31:35:bf:04:5b:bf:30:23:
57:9c:78:47:67:5f:a1:12:41:48:18:03:ab:12:3c:
08:19:5b:77:5a:0c:1a:11:61:99:f4:d2:52:43:e3:
aa:fd:76:88:a5:a5:ca:93:e1:4c:d2:61:09:7e:37:
ba:51:69:55:65:01:27:51:88:52:93:77:0c:66:1c:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:42:C8:DD:81:F3:A0:65:EB:42:D8:2F:FA:20:2D:FC:4F:F6:EE
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uCdCyN2B86Bl60LYL_ogLfxP9u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7f:c7:35:77:43:eb:86:fe:6a:ef:1a:8d:8e:8b:91:54:10:
63:15:8b:54:26:00:2c:4e:91:c7:65:ae:b5:4f:cc:33:96:30:
55:38:de:35:f0:fc:cc:a0:e4:5e:d8:5e:58:50:1d:ed:3a:1f:
e7:5d:0e:82:22:fa:f8:5e:74:8b:e9:0c:d2:76:87:10:cc:67:
44:e0:dd:c2:05:3f:fd:a0:e7:28:ed:61:c6:42:49:af:20:2a:
32:f9:8a:b3:1c:56:5b:45:e0:af:31:53:53:88:f0:d5:4e:05:
ce:51:60:8f:c3:17:c2:2e:49:10:a1:a9:b0:7b:e2:b2:f3:69:
c4:bb:95:c1:1c:3d:0d:18:c7:61:0f:81:a4:0b:de:cd:7e:40:
0d:f1:12:4a:6b:13:51:e4:44:75:ab:7e:90:ce:41:6f:f1:b3:
e5:ff:f2:79:ce:3d:6e:61:17:83:3e:05:c5:5f:a1:a3:00:4f:
c9:21:fd:a0:a8:0b:44:a2:8f:93:aa:34:22:7f:f9:6e:e8:43:
71:b7:2c:ac:56:29:c3:18:23:a9:72:9a:7a:36:b8:31:a0:03:
c3:90:1c:54:d4:03:25:7b:29:a6:40:d5:99:aa:a9:03:54:d2:
11:b9:bc:65:41:1c:cc:1f:2e:a0:0b:ae:0c:5f:36:31:9d:e9:
71:8b:c3:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI5OrwEhf5gWAjOm/pvPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjUwMTAyMTc1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODI3NDJjOGRkODFmM2EwNjVlYjQyZDgyZmZhMjAyZGZjNGZmNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4oqcQwN+/iovU5mDbHWFuNoQzY4
IzqLssG9BPvyxlpwrfIwTpdOY1VOyGRdGt2WysLrh4CLkPjAe55IcMXtr82qpe1G
3Hj7TFJouVSUyi5fsTqjYobpXkbMa/uD21HBRNSLtppWdwIm1K1YCKP+RxTl93oo
v4Or/n9w/rnqsfC/8MzdEWPAqiyjJjdI+By71e8gn6CgrQLkCmcQ8qMNvZo+5ZhD
Ttu9b5az0CIAo4e4j9jnRXycrx4FMTW/BFu/MCNXnHhHZ1+hEkFIGAOrEjwIGVt3
WgwaEWGZ9NJSQ+Oq/XaIpaXKk+FM0mEJfje6UWlVZQEnUYhSk3cMZhwMWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgnQsjdgfOgZetC2C/6IC38T/buMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvdUNkQ3lOMkI4NkJsNjBMWUxfb2dMZnhQOXU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9iMA0G
CSqGSIb3DQEBCwUAA4IBAQATf8c1d0Prhv5q7xqNjouRVBBjFYtUJgAsTpHHZa61
T8wzljBVON418PzMoORe2F5YUB3tOh/nXQ6CIvr4XnSL6QzSdocQzGdE4N3CBT/9
oOco7WHGQkmvICoy+YqzHFZbReCvMVNTiPDVTgXOUWCPwxfCLkkQoamwe+Ky82nE
u5XBHD0NGMdhD4GkC97NfkAN8RJKaxNR5ER1q36QzkFv8bPl//J5zj1uYReDPgXF
X6GjAE/JIf2gqAtEoo+TqjQif/lu6ENxtyysVinDGCOpcpp6NrgxoAPDkBxU1AMl
eymmQNWZqqkDVNIRubxlQRzMHy6gC64MXzYxnelxi8OU
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:57:51 2025 by rpki-client