Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/RDOul7gyH90sNWuWnbwP87u8wBY.roa
File: RDOul7gyH90sNWuWnbwP87u8wBY.roa (raw, json)
Hash identifier: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=
Subject key identifier: 44:33:AE:97:B8:32:1F:DD:2C:35:6B:96:9D:BC:0F:F3:BB:BC:C0:16
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E0D482DB155EC5E69BC4EBE9529E2
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/RDOul7gyH90sNWuWnbwP87u8wBY.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61420
IP address blocks: 176.41.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0d:48:2d:b1:55:ec:5e:69:bc:4e:be:95:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4433ae97b8321fdd2c356b969dbc0ff3bbbcc016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:c3:95:b3:f0:81:d5:3c:40:31:aa:35:10:
9d:f2:13:81:ac:0f:d9:7c:88:09:5a:ad:59:73:ad:
7e:3d:c0:2d:5a:49:e7:6c:46:e9:b3:2d:e0:44:a7:
98:fc:29:9c:ad:8b:64:f7:27:3d:d5:0a:ec:4c:88:
56:88:cd:f0:ee:7a:dd:41:2e:10:b0:63:25:71:ac:
9f:36:06:46:c9:e5:2e:d5:2a:81:94:f6:3c:47:f6:
60:ba:69:bc:4d:af:9d:2f:82:cf:41:97:70:8e:f9:
55:e7:d4:8a:e4:92:76:be:65:ff:85:bd:9b:5c:99:
d3:1e:42:58:e8:3d:98:92:7f:11:28:05:4e:cf:0c:
01:d7:2a:8b:c6:ef:29:63:e6:bc:e9:f6:b4:ff:a0:
8e:eb:46:91:33:3f:2c:60:c2:61:22:69:75:28:0d:
ab:95:e8:2d:c6:f2:98:2b:3b:fd:48:2a:f7:2e:12:
fe:1c:4f:f6:b7:62:b4:fa:0e:0a:68:a3:36:50:08:
09:8d:32:46:85:c0:5d:39:51:72:46:ad:b1:1f:68:
43:f0:e3:5a:c4:b9:f5:24:ba:06:b2:9a:5d:ea:c9:
2b:82:89:e9:00:fb:5a:f5:1e:6e:37:09:a9:c5:94:
da:63:cb:b4:95:45:f4:2b:11:1d:54:0b:2c:27:29:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:33:AE:97:B8:32:1F:DD:2C:35:6B:96:9D:BC:0F:F3:BB:BC:C0:16
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/RDOul7gyH90sNWuWnbwP87u8wBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.41.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0d:0e:26:c9:0f:65:5d:48:0c:ff:08:d5:11:b2:9c:2d:ec:
f0:17:2e:09:e0:74:eb:3a:f8:a6:43:6c:76:52:0d:42:5d:09:
fb:98:23:7c:f4:30:b2:07:e3:b1:2b:50:ab:03:36:24:89:6f:
b7:5c:61:3e:9d:d3:d8:00:57:ce:23:0f:f1:7d:e7:da:72:dc:
3a:08:16:76:9c:24:47:2c:10:93:81:fa:98:d3:d5:dc:09:43:
02:d8:3b:6e:f9:8b:7b:a3:fc:91:b9:40:36:a4:38:cd:34:25:
89:3b:3e:d7:a8:43:41:9c:a2:50:34:3c:6b:de:f5:32:ed:d9:
a3:df:13:f3:5d:53:37:13:03:f1:ea:31:50:0d:f7:c4:44:fb:
b7:28:44:15:2e:e7:16:fd:0c:42:e9:0f:4f:b1:6b:3f:69:c1:
1f:2d:8d:e8:e9:4a:d8:3b:20:65:51:a7:88:94:2c:b4:c8:64:
c0:f0:7c:e5:c8:ea:e8:04:39:5e:c9:ea:b9:26:69:7a:05:9c:
10:50:b1:f9:bb:dd:0f:20:ef:33:e1:28:6c:0d:10:01:37:75:
21:c3:5f:70:f8:06:b0:5a:bd:f5:9e:06:d0:ab:a3:5b:4f:d1:
d3:58:f6:b3:ee:09:cc:ca:12:38:f5:d9:ca:23:47:e5:f1:c0:
fe:2e:b0:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijg1ILbFV7F5pvE6+lSniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjUwMTAxMTU0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDMzYWU5N2I4MzIxZmRkMmMzNTZiOTY5ZGJjMGZmM2JiYmNjMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCzDlbPwgdU8QDGqNRCd8hOBrA/Z
fIgJWq1Zc61+PcAtWknnbEbpsy3gRKeY/CmcrYtk9yc91QrsTIhWiM3w7nrdQS4Q
sGMlcayfNgZGyeUu1SqBlPY8R/Zgumm8Ta+dL4LPQZdwjvlV59SK5JJ2vmX/hb2b
XJnTHkJY6D2Ykn8RKAVOzwwB1yqLxu8pY+a86fa0/6CO60aRMz8sYMJhIml1KA2r
legtxvKYKzv9SCr3LhL+HE/2t2K0+g4KaKM2UAgJjTJGhcBdOVFyRq2xH2hD8ONa
xLn1JLoGsppd6skrgonpAPta9R5uNwmpxZTaY8u0lUX0KxEdVAssJym/OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQzrpe4Mh/dLDVrlp28D/O7vMAWMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvUkRPdWw3Z3lIOTBzTld1V25id1A4N3U4d0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsCmFMA0G
CSqGSIb3DQEBCwUAA4IBAQA6DQ4myQ9lXUgM/wjVEbKcLezwFy4J4HTrOvimQ2x2
Ug1CXQn7mCN89DCyB+OxK1CrAzYkiW+3XGE+ndPYAFfOIw/xfefactw6CBZ2nCRH
LBCTgfqY09XcCUMC2Dtu+Yt7o/yRuUA2pDjNNCWJOz7XqENBnKJQNDxr3vUy7dmj
3xPzXVM3EwPx6jFQDffERPu3KEQVLucW/QxC6Q9PsWs/acEfLY3o6UrYOyBlUaeI
lCy0yGTA8HzlyOroBDleyeq5Jml6BZwQULH5u90PIO8z4ShsDRABN3Uhw19w+Aaw
Wr31ngbQq6NbT9HTWPaz7gnMyhI49dnKI0fl8cD+LrD/
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:34 2025 by rpki-client