Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/okAV_h5VY2rYZdeinC81X0hRA2Y.roa
File: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (raw, json)
Hash identifier: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=
Subject key identifier: A2:40:15:FE:1E:55:63:6A:D8:65:D7:A2:9C:2F:35:5F:48:51:03:66
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019425216A1E2DA66A2B4DF2A14431F93BBD
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/okAV_h5VY2rYZdeinC81X0hRA2Y.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6a:1e:2d:a6:6a:2b:4d:f2:a1:44:31:f9:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a24015fe1e55636ad865d7a29c2f355f48510366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:f2:08:3e:1f:7c:db:8a:62:e2:88:1a:b5:
b0:2d:35:1d:a4:3d:5e:03:e0:8f:7c:ad:9f:5d:53:
f5:ae:c8:f9:25:72:a2:53:60:63:45:15:4d:c2:ba:
6e:c8:b9:40:ca:a2:c3:6d:10:9d:f6:eb:72:42:a7:
61:f2:ff:e2:33:fd:b0:f1:20:46:c1:cd:f4:df:e0:
1a:b4:c6:e9:7b:a9:e6:ff:cd:95:a7:58:ca:a6:4f:
bf:04:d5:7d:89:36:b7:74:61:1c:1f:05:01:a4:96:
5f:55:93:5c:f5:da:c8:3f:fb:43:c2:b6:ba:17:df:
ff:f8:87:2b:99:18:50:67:4e:b7:84:d7:2b:86:5d:
46:81:7b:4e:63:c1:f7:83:aa:c1:d9:a4:95:f5:ef:
ac:b5:fe:42:6c:90:f8:6a:c4:03:09:f8:af:7e:b5:
0c:6c:e6:5f:77:6a:f1:d6:24:d1:13:b9:73:ac:d3:
37:02:e8:cf:5a:98:e2:a8:8f:6b:41:f0:6a:46:2c:
87:1d:2f:65:1e:54:23:9a:c0:18:8e:4d:fe:c7:03:
17:89:5c:bb:e0:f1:44:c9:a4:ab:30:c4:c3:a1:f3:
bb:10:ea:63:02:a4:ed:d1:25:9e:86:8f:fb:a3:55:
55:f9:f6:d1:cb:da:3d:fe:e1:3c:0f:26:ef:54:6d:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:40:15:FE:1E:55:63:6A:D8:65:D7:A2:9C:2F:35:5F:48:51:03:66
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/okAV_h5VY2rYZdeinC81X0hRA2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.96.0/20
Signature Algorithm: sha256WithRSAEncryption
21:83:6f:ee:1f:da:18:49:1a:f9:d3:86:ef:cd:45:7f:85:aa:
99:66:c3:9c:d9:6e:c9:3c:be:b8:a9:ab:00:a6:d3:98:c0:2d:
69:dc:90:30:23:6a:50:4b:c6:aa:2f:03:dc:2e:2b:ac:36:a0:
b2:e6:d7:72:b9:93:39:e8:34:c4:40:0a:0c:9b:95:98:22:67:
0e:13:6e:a3:6f:c0:92:bf:76:4e:fc:39:cf:bc:04:7e:1c:c2:
6f:ac:a5:39:ae:1c:b5:b7:a6:ad:90:bc:dd:b2:52:96:de:32:
05:1a:ca:d3:a6:ce:bc:dc:9b:33:8c:e9:37:d1:9b:3e:37:e2:
8b:f5:0d:7e:7c:9e:c1:e3:d2:1e:24:53:4a:ff:72:58:12:9c:
b7:0a:44:58:fb:67:cd:fc:ba:4c:1b:08:15:3f:2f:37:de:ba:
9b:27:a5:79:47:ba:3d:55:f2:f9:0a:27:9c:a9:ea:23:2a:22:
92:08:87:fd:87:dd:37:aa:8b:5e:c6:e6:11:c3:e8:97:ee:67:
03:50:95:42:32:f6:fd:87:69:3c:4e:1b:97:58:4b:f3:09:29:
d7:d6:68:f7:c0:d6:80:ea:74:6d:be:0b:4b:20:5e:92:85:6d:
c5:43:15:62:73:8b:12:12:d2:76:4f:98:b7:1f:ed:74:d6:81:
b0:d5:56:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIWoeLaZqK03yoUQx+Tu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh
MDgzZGMwHhcNMjUwMTAyMDM0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjQwMTVmZTFlNTU2MzZhZDg2NWQ3YTI5YzJmMzU1ZjQ4NTEwMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcbyCD4ffNuKYuKIGrWwLTUdpD1e
A+CPfK2fXVP1rsj5JXKiU2BjRRVNwrpuyLlAyqLDbRCd9utyQqdh8v/iM/2w8SBG
wc303+AatMbpe6nm/82Vp1jKpk+/BNV9iTa3dGEcHwUBpJZfVZNc9drIP/tDwra6
F9//+IcrmRhQZ063hNcrhl1GgXtOY8H3g6rB2aSV9e+stf5CbJD4asQDCfivfrUM
bOZfd2rx1iTRE7lzrNM3AujPWpjiqI9rQfBqRiyHHS9lHlQjmsAYjk3+xwMXiVy7
4PFEyaSrMMTDofO7EOpjAqTt0SWeho/7o1VV+fbRy9o9/uE8DybvVG2nZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJAFf4eVWNq2GXXopwvNV9IUQNmMB8GA1UdIwQY
MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt
ODZlMjlmMDVlYjk3LzEvb2tBVl9oNVZZMnJZWmRlaW5DODFYMGhSQTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3
LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwaFgMA0G
CSqGSIb3DQEBCwUAA4IBAQAhg2/uH9oYSRr504bvzUV/haqZZsOc2W7JPL64qasA
ptOYwC1p3JAwI2pQS8aqLwPcLiusNqCy5tdyuZM56DTEQAoMm5WYImcOE26jb8CS
v3ZO/DnPvAR+HMJvrKU5rhy1t6atkLzdslKW3jIFGsrTps683JszjOk30Zs+N+KL
9Q1+fJ7B49IeJFNK/3JYEpy3CkRY+2fN/LpMGwgVPy833rqbJ6V5R7o9VfL5Ciec
qeojKiKSCIf9h903qotexuYRw+iX7mcDUJVCMvb9h2k8ThuXWEvzCSnX1mj3wNaA
6nRtvgtLIF6ShW3FQxVic4sSEtJ2T5i3H+101oGw1VY2
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:06 2025 by rpki-client