Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/9aHsA3_Ynggs276_sCFsSz4MycM.roa
File: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (raw, json)
Hash identifier: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=
Subject key identifier: F5:A1:EC:03:7F:D8:9E:08:2C:DB:BE:BF:B0:21:6C:4B:3E:0C:C9:C3
Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial: 0194266C1334C858E8D908FD1B756815B334
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/9aHsA3_Ynggs276_sCFsSz4MycM.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 193.56.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:13:34:c8:58:e8:d9:08:fd:1b:75:68:15:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a1ec037fd89e082cdbbebfb0216c4b3e0cc9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:49:37:a4:32:eb:19:a3:74:ac:41:81:f7:
4e:bd:fd:2c:20:6f:fa:40:4d:a8:37:25:bb:84:c6:
ed:6c:94:b1:61:7c:9b:17:c9:38:dd:c4:4b:13:44:
15:a9:ab:12:a3:c0:d6:2c:96:8a:65:d2:53:de:18:
52:96:cc:82:9e:d9:04:d9:a2:61:40:cb:f8:35:80:
86:3c:2d:5a:30:54:f0:6b:10:c8:ee:0d:95:3e:ef:
46:a5:e3:3b:8a:a9:54:89:01:c3:0b:2a:36:b6:1e:
fe:0e:71:66:b2:c1:30:79:8e:bc:0f:17:e4:e8:ea:
b6:6b:87:0e:c2:0e:c5:46:a0:b0:1f:f4:16:d4:15:
a3:84:fe:0b:96:b1:71:39:d4:5f:fb:50:91:ea:36:
f9:b2:72:13:e9:c9:e9:09:ab:d0:25:c0:c4:12:54:
b6:68:e9:6e:53:f1:89:da:ff:92:26:2c:6b:8c:81:
94:05:65:f3:82:19:60:9e:9a:25:f1:dc:4f:cf:14:
f4:80:25:db:88:c6:11:54:19:db:87:67:3f:4a:45:
8a:5f:9b:5d:fd:19:66:b1:3d:97:f0:00:22:d3:48:
5e:dc:2f:6c:a5:b9:6d:65:57:41:b7:ab:36:f8:11:
0e:1d:74:b7:1f:83:0f:4a:0a:d4:25:95:d4:31:c1:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:EC:03:7F:D8:9E:08:2C:DB:BE:BF:B0:21:6C:4B:3E:0C:C9:C3
X509v3 Authority Key Identifier:
keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/9aHsA3_Ynggs276_sCFsSz4MycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2f:54:2f:69:ea:85:1c:4f:98:07:8f:15:d0:2d:4e:0e:aa:
33:93:1c:1b:d9:b8:d2:32:d6:27:a3:10:81:15:5c:0b:06:d9:
b7:4b:87:9f:86:26:48:ec:d7:80:0e:4e:47:8b:8d:a9:bb:ff:
a9:05:87:1a:75:c6:0e:30:60:9d:5c:ae:e6:b1:dd:1e:22:68:
0c:59:24:ed:ad:20:65:5f:05:e1:56:d4:7f:30:12:60:85:b1:
02:45:fa:12:20:b2:50:39:44:c4:bd:01:51:46:c3:43:0a:a1:
7e:97:de:c2:ff:3f:28:e9:1a:13:f1:c3:86:2f:b8:e9:63:b5:
fe:46:4a:16:1c:4a:0e:5d:09:da:86:ff:af:44:3f:26:55:3d:
7a:5a:c5:6d:da:a4:ed:d5:39:93:19:5d:8f:50:ca:eb:51:21:
39:42:39:ee:ae:7b:8c:20:7c:49:d9:5e:94:a7:d8:2b:3d:4b:
ea:d1:0f:c3:e4:7e:04:39:a9:2c:6f:b1:46:17:aa:a6:65:d3:
af:70:22:e7:4e:8d:1b:ec:08:d0:86:87:1b:77:99:36:92:3d:
63:41:f9:98:b0:8d:72:a8:de:07:bf:90:dd:0f:93:14:3e:7d:
62:c5:6e:77:f8:e0:3a:88:30:0e:2b:f6:e4:81:25:c8:b9:dc:
ad:ba:56:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBM0yFjo2Qj9G3VoFbM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQ4ZjdhNTkxMjA1ODhkNDE3MGVhMjgxNWU2YWU1MWJl
NmJjZmYwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWExZWMwMzdmZDg5ZTA4MmNkYmJlYmZiMDIxNmM0YjNlMGNjOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtVJN6Qy6xmjdKxBgfdOvf0sIG/6
QE2oNyW7hMbtbJSxYXybF8k43cRLE0QVqasSo8DWLJaKZdJT3hhSlsyCntkE2aJh
QMv4NYCGPC1aMFTwaxDI7g2VPu9GpeM7iqlUiQHDCyo2th7+DnFmssEweY68Dxfk
6Oq2a4cOwg7FRqCwH/QW1BWjhP4LlrFxOdRf+1CR6jb5snIT6cnpCavQJcDEElS2
aOluU/GJ2v+SJixrjIGUBWXzghlgnpol8dxPzxT0gCXbiMYRVBnbh2c/SkWKX5td
/RlmsT2X8AAi00he3C9spbltZVdBt6s2+BEOHXS3H4MPSgrUJZXUMcEeIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWh7AN/2J4ILNu+v7AhbEs+DMnDMB8GA1UdIwQY
MBaAFKzEj3pZEgWI1BcOooFeauUb5rz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTIt
YjUyYjNhMjM2ZmE3LzEvOWFIc0EzX1luZ2dzMjc2X3NDRnNTejRNeWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTItYjUyYjNhMjM2ZmE3
LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTglMA0G
CSqGSIb3DQEBCwUAA4IBAQA/L1QvaeqFHE+YB48V0C1ODqozkxwb2bjSMtYnoxCB
FVwLBtm3S4efhiZI7NeADk5Hi42pu/+pBYcadcYOMGCdXK7msd0eImgMWSTtrSBl
XwXhVtR/MBJghbECRfoSILJQOUTEvQFRRsNDCqF+l97C/z8o6RoT8cOGL7jpY7X+
RkoWHEoOXQnahv+vRD8mVT16WsVt2qTt1TmTGV2PUMrrUSE5QjnurnuMIHxJ2V6U
p9grPUvq0Q/D5H4EOaksb7FGF6qmZdOvcCLnTo0b7AjQhocbd5k2kj1jQfmYsI1y
qN4Hv5DdD5MUPn1ixW53+OA6iDAOK/bkgSXIudytulY2
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:38:05 2025 by rpki-client