Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/N2ivlz1wZCpdYYLO1Jxljykvn4c.roa
File: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (raw, json)
Hash identifier: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=
Subject key identifier: 37:68:AF:97:3D:70:64:2A:5D:61:82:CE:D4:9C:65:8F:29:2F:9F:87
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019425223661BB03EE9D61BD182503FEECD1
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/N2ivlz1wZCpdYYLO1Jxljykvn4c.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 163.162.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:36:61:bb:03:ee:9d:61:bd:18:25:03:fe:ec:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3768af973d70642a5d6182ced49c658f292f9f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:d0:af:d1:70:08:26:17:57:c2:ab:2f:4b:
8d:c2:6f:ec:ea:0f:4c:ed:f1:e4:6e:39:31:e1:11:
e5:30:5b:92:f7:87:b6:6a:14:2b:95:67:01:13:94:
72:2c:35:af:66:f5:d1:02:6a:15:21:e9:1c:19:f9:
e3:b2:fe:0b:73:1c:01:b5:85:d2:34:14:fd:7a:8d:
95:86:0b:2a:05:52:a0:ea:26:d6:f5:d7:71:d4:f5:
76:98:21:20:d7:16:3f:48:04:aa:80:16:5f:ab:65:
76:88:f4:84:08:ef:bb:30:c6:0e:52:08:f8:0b:da:
d4:f8:ef:7d:80:77:5c:5b:c5:94:0d:77:99:7b:a5:
94:13:8c:c2:41:9f:25:88:f5:c6:90:09:59:7a:98:
73:c7:4a:5c:be:10:cc:24:77:e0:b3:13:7e:be:3f:
a5:d2:4b:63:0b:ce:9b:43:20:be:a2:8a:95:fe:da:
13:c3:ba:77:7d:c1:d7:eb:70:f8:ca:5e:e8:9e:37:
50:cd:73:72:92:88:4c:4a:64:37:f9:5d:5d:d7:42:
7d:ad:01:aa:18:2b:6d:2a:90:5b:ca:ae:3e:90:d5:
e8:f7:1d:2b:f6:06:a8:81:ce:a5:57:e5:b2:0c:a6:
3f:54:40:ca:67:34:af:b5:7a:81:e4:eb:1e:4b:83:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:AF:97:3D:70:64:2A:5D:61:82:CE:D4:9C:65:8F:29:2F:9F:87
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/N2ivlz1wZCpdYYLO1Jxljykvn4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:4e:49:29:de:16:16:c3:14:f4:e2:0b:a6:95:c9:31:88:5c:
70:f6:a0:b1:50:4d:41:70:6b:78:a8:2f:7b:05:e0:1c:5f:f0:
80:1f:95:76:fc:68:d4:74:02:75:ed:e2:60:e9:c6:cb:cb:1d:
16:54:06:6e:83:d1:2f:39:97:41:be:80:10:00:f4:65:2e:c3:
c8:d6:46:97:10:51:61:cd:18:d2:7e:d9:fa:9b:ad:23:dc:e1:
02:1b:c3:1f:7f:ae:88:77:d4:67:2f:7a:fe:2c:59:b4:35:a9:
dc:c3:37:0a:cd:db:a9:fe:a0:a6:5e:6b:25:b6:95:bb:22:6f:
0c:26:1d:4a:02:ae:7d:b4:9e:97:9b:ff:33:56:49:87:77:ce:
a9:ba:17:2f:37:57:d6:36:bf:63:0f:43:81:37:80:78:a9:4b:
13:a7:27:7f:46:05:ed:b5:57:3e:9f:96:01:f8:09:3f:e2:d8:
ee:0c:4a:9a:51:34:45:3d:cc:11:01:b1:58:62:b3:5b:6a:da:
a7:04:cc:2d:ac:c0:1e:a7:59:03:81:67:7d:69:04:51:58:d6:
f7:50:55:fe:e4:c7:18:bb:5b:d4:97:66:e9:e1:5a:23:bd:fe:
55:d9:d5:06:c5:f0:b5:42:6b:33:50:b8:92:da:a6:38:21:b0:
69:6c:ee:ea
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQlIjZhuwPunWG9GCUD/uzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm
ZjFkYmQwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY4YWY5NzNkNzA2NDJhNWQ2MTgyY2VkNDljNjU4ZjI5MmY5Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE3Qr9FwCCYXV8KrL0uNwm/s6g9M
7fHkbjkx4RHlMFuS94e2ahQrlWcBE5RyLDWvZvXRAmoVIekcGfnjsv4LcxwBtYXS
NBT9eo2VhgsqBVKg6ibW9ddx1PV2mCEg1xY/SASqgBZfq2V2iPSECO+7MMYOUgj4
C9rU+O99gHdcW8WUDXeZe6WUE4zCQZ8liPXGkAlZephzx0pcvhDMJHfgsxN+vj+l
0ktjC86bQyC+ooqV/toTw7p3fcHX63D4yl7onjdQzXNykohMSmQ3+V1d10J9rQGq
GCttKpBbyq4+kNXo9x0r9gaogc6lV+WyDKY/VEDKZzSvtXqB5OseS4OckwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFDdor5c9cGQqXWGCztScZY8pL5+HMB8GA1UdIwQY
MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt
OTJkZGVjNmJkMGEyLzEvTjJpdmx6MXdaQ3BkWVlMTzFKeGxqeWt2bjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy
LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAo6IwDQYJ
KoZIhvcNAQELBQADggEBAJtOSSneFhbDFPTiC6aVyTGIXHD2oLFQTUFwa3ioL3sF
4Bxf8IAflXb8aNR0AnXt4mDpxsvLHRZUBm6D0S85l0G+gBAA9GUuw8jWRpcQUWHN
GNJ+2fqbrSPc4QIbwx9/roh31Gcvev4sWbQ1qdzDNwrN26n+oKZeayW2lbsibwwm
HUoCrn20npeb/zNWSYd3zqm6Fy83V9Y2v2MPQ4E3gHipSxOnJ39GBe21Vz6flgH4
CT/i2O4MSppRNEU9zBEBsVhis1tq2qcEzC2swB6nWQOBZ31pBFFY1vdQVf7kxxi7
W9SXZunhWiO9/lXZ1QbF8LVCazNQuJLapjghsGls7uo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:03:15 2025 by rpki-client