Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa
File: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (raw, json)
Hash identifier: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=
Subject key identifier: D4:21:08:21:86:62:D4:13:5A:DE:84:C9:AA:61:FF:B7:23:F0:EA:F3
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B7DA765D0D8EBCAB94DB607E63C30
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28886
IP address blocks: 176.103.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7d:a7:65:d0:d8:eb:ca:b9:4d:b6:07:e6:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42108218662d4135ade84c9aa61ffb723f0eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:5c:1b:18:e5:96:28:be:df:0d:5d:63:79:
97:c7:3f:be:46:ef:75:ac:7c:53:48:b6:af:b7:a8:
5e:bd:29:85:36:1f:d2:44:80:62:cb:cf:e8:c3:75:
d5:e9:10:f1:bf:22:47:c6:2b:66:31:ad:d4:79:6f:
a4:37:ff:2e:ec:d5:fa:99:6e:1d:aa:0d:9f:8b:a6:
f8:2c:35:27:7e:eb:f2:95:65:69:cb:d2:7b:0b:05:
33:89:96:e6:bc:44:fd:69:53:8d:65:e4:9c:76:87:
0f:06:ab:d6:32:38:2a:1c:dc:83:bb:26:05:57:66:
30:52:4e:3d:06:51:35:4b:c3:40:bd:df:a0:a8:a8:
5c:d7:2b:f0:f1:0e:4c:03:3f:98:2b:2e:20:cb:56:
57:98:e8:ba:25:3d:84:0a:fb:f3:89:cc:cb:c2:5e:
5e:1b:b2:40:68:30:8e:28:cf:f6:28:1f:47:3b:5e:
40:0e:fb:da:73:a1:a4:34:fe:66:bc:56:e5:77:2b:
33:c2:a3:ea:e0:f1:e4:a8:49:9d:9d:88:fe:4b:52:
d9:da:e8:49:b7:af:95:a5:2b:6e:d6:4d:06:c6:05:
35:7e:62:61:b5:31:47:85:83:8c:b2:dc:ab:c5:68:
92:f6:54:fc:93:ca:79:d8:f7:1a:ee:c1:15:ca:ac:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:08:21:86:62:D4:13:5A:DE:84:C9:AA:61:FF:B7:23:F0:EA:F3
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f6:b5:d7:98:24:74:ac:1a:0f:93:44:02:03:c1:c1:99:1b:
6e:b8:65:f8:aa:fd:18:48:cf:50:a8:2e:42:51:4c:4c:4a:41:
47:7b:06:10:b9:d2:1c:89:b2:c0:0e:21:ca:1b:2e:a6:c4:7d:
73:b0:25:40:a3:3a:6c:60:92:19:0b:b1:02:b7:e5:66:ed:cc:
4c:b0:85:06:90:7b:00:1a:42:36:b8:48:67:df:5e:7c:36:1f:
5a:51:b0:39:39:c7:24:7c:96:33:e4:79:37:79:75:d8:e8:2b:
5f:64:1e:71:1f:93:6f:1b:ce:fd:5a:6c:0d:d7:f7:5c:63:9d:
ac:e3:79:7a:7a:1f:36:2d:05:fb:89:8b:42:db:53:33:bb:9d:
40:4f:5c:cc:ae:a1:7c:94:16:70:71:1c:65:1d:dd:41:c3:ef:
e5:48:c1:a7:d8:dd:d6:94:a5:26:0f:b2:71:76:4b:71:ec:c7:
ea:36:7b:2e:a4:63:1a:97:b7:d3:3b:3d:1a:ae:3f:23:cd:74:
da:fe:2d:9a:c9:7b:98:c7:6c:6f:07:31:18:eb:65:72:6b:43:
3a:41:cf:63:f9:13:a9:e0:78:16:12:13:d0:a8:9d:23:d9:9e:
9a:bd:6b:9e:c4:c5:8c:e8:76:8d:bb:99:86:e9:55:9f:c1:0d:
68:c4:bc:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma32nZdDY68q5TbYH5jwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjUwMTAyMDk0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDIxMDgyMTg2NjJkNDEzNWFkZTg0YzlhYTYxZmZiNzIzZjBlYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusFcGxjllii+3w1dY3mXxz++Ru91
rHxTSLavt6hevSmFNh/SRIBiy8/ow3XV6RDxvyJHxitmMa3UeW+kN/8u7NX6mW4d
qg2fi6b4LDUnfuvylWVpy9J7CwUziZbmvET9aVONZeScdocPBqvWMjgqHNyDuyYF
V2YwUk49BlE1S8NAvd+gqKhc1yvw8Q5MAz+YKy4gy1ZXmOi6JT2ECvvziczLwl5e
G7JAaDCOKM/2KB9HO15ADvvac6GkNP5mvFbldyszwqPq4PHkqEmdnYj+S1LZ2uhJ
t6+VpStu1k0GxgU1fmJhtTFHhYOMstyrxWiS9lT8k8p52Pca7sEVyqxpuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQhCCGGYtQTWt6Eyaph/7cj8OrzMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvMUNFSUlZWmkxQk5hM29USnFtSF90eVB3NnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGe4MA0G
CSqGSIb3DQEBCwUAA4IBAQAO9rXXmCR0rBoPk0QCA8HBmRtuuGX4qv0YSM9QqC5C
UUxMSkFHewYQudIcibLADiHKGy6mxH1zsCVAozpsYJIZC7ECt+Vm7cxMsIUGkHsA
GkI2uEhn3158Nh9aUbA5OcckfJYz5Hk3eXXY6CtfZB5xH5NvG879WmwN1/dcY52s
43l6eh82LQX7iYtC21Mzu51AT1zMrqF8lBZwcRxlHd1Bw+/lSMGn2N3WlKUmD7Jx
dktx7MfqNnsupGMal7fTOz0arj8jzXTa/i2ayXuYx2xvBzEY62Vya0M6Qc9j+ROp
4HgWEhPQqJ0j2Z6avWuexMWM6HaNu5mG6VWfwQ1oxLxB
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:32 2025 by rpki-client