Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa
File: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (raw, json)
Hash identifier: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=
Subject key identifier: 75:DC:B3:AC:2E:41:0B:8C:31:11:03:70:9A:48:DC:65:C1:4F:99:8E
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019428234300756C08637DFAEBF92046B902
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa
Signing time: Thu 02 Jan 2025 17:49:47 +0000
ROA not before: Thu 02 Jan 2025 17:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198726
IP address blocks: 193.110.40.0/21 maxlen: 21
194.4.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:43:00:75:6c:08:63:7d:fa:eb:f9:20:46:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jan 2 17:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75dcb3ac2e410b8c311103709a48dc65c14f998e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:54:bc:c8:8c:fc:8e:94:56:52:98:24:e8:
60:0a:9a:19:cf:66:ca:35:4d:47:e4:a4:b8:e9:00:
d2:50:19:19:bc:2b:95:3c:35:81:8f:b2:de:1b:70:
42:ca:80:70:ed:89:39:fc:cd:e6:94:f0:1e:55:a3:
1f:94:c1:26:aa:bc:60:7a:11:37:28:04:9c:43:1f:
56:cf:d8:bb:80:73:f9:16:ad:e2:f8:5d:07:bf:34:
4e:8d:ab:42:fe:b2:4f:73:6a:10:93:1b:82:5c:8d:
51:c5:7b:cf:cb:55:d7:ad:bc:ef:bf:a0:11:54:91:
66:c4:89:5f:58:46:60:2b:8f:e6:07:f1:06:40:24:
46:9a:d7:e4:6a:f7:cd:69:05:9f:a7:25:16:0d:57:
f5:a7:15:82:21:8c:44:fe:ee:52:45:20:7c:65:63:
10:34:2f:7c:bf:2e:04:82:8a:23:88:b5:9f:25:69:
c5:63:55:25:ce:8e:7f:96:3f:e0:27:e2:63:3f:ba:
fb:91:7b:7c:cb:0e:7c:87:1d:fa:42:4a:56:23:53:
ac:12:70:f1:83:df:75:61:e1:84:5b:d2:77:8f:0a:
7b:59:78:cc:be:8c:14:4c:dd:0d:19:57:fc:6c:1b:
50:98:96:d4:be:64:61:21:6b:f4:bb:6f:01:f7:c0:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:B3:AC:2E:41:0B:8C:31:11:03:70:9A:48:DC:65:C1:4F:99:8E
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.40.0/21
194.4.160.0/22
Signature Algorithm: sha256WithRSAEncryption
60:1a:29:72:0f:43:df:46:25:78:0c:d0:b0:9d:6e:4c:c7:43:
35:4e:0c:8b:d2:43:d4:81:3d:06:33:b4:7d:dd:67:7f:06:ac:
41:93:57:46:01:17:d5:ed:41:d1:dc:97:19:40:a8:dd:28:d2:
8c:a0:03:34:1c:da:07:be:dc:f1:3b:7f:7f:bc:f2:3a:9a:ae:
1f:8c:94:e2:da:69:5f:83:57:79:94:74:c9:c1:46:fa:77:04:
ea:a4:d3:37:27:c0:f8:fb:83:87:0f:f8:4f:98:32:4d:a3:18:
71:bf:da:e5:e8:d9:23:c3:81:b1:22:73:a5:63:7d:5d:20:1b:
33:b5:5d:59:37:29:0a:86:96:4a:94:be:b5:d9:80:69:e2:e7:
2d:ca:c2:0f:1d:8a:b9:51:66:d6:40:fb:20:96:a8:44:14:71:
df:ff:d1:32:a2:2d:e7:b7:c3:73:b7:0e:7e:47:36:36:a6:a0:
73:c6:d8:13:d6:2f:81:a0:d6:16:f7:5b:82:70:39:af:57:dc:
c5:48:02:84:2c:bf:ca:e5:49:d2:f8:c8:48:f0:55:b2:5a:5f:
f0:f1:86:b7:f4:bc:0a:f9:ca:11:c5:7b:2a:ff:18:ca:41:f7:
92:43:bd:bd:e0:a5:4f:e7:3d:ac:5c:b8:b5:2e:df:ed:56:0e:
f0:1e:ec:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI0MAdWwIY3366/kgRrkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1
ZTU3YTEwHhcNMjUwMTAyMTc0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWRjYjNhYzJlNDEwYjhjMzExMTAzNzA5YTQ4ZGM2NWMxNGY5OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwVUvMiM/I6UVlKYJOhgCpoZz2bK
NU1H5KS46QDSUBkZvCuVPDWBj7LeG3BCyoBw7Yk5/M3mlPAeVaMflMEmqrxgehE3
KAScQx9Wz9i7gHP5Fq3i+F0HvzROjatC/rJPc2oQkxuCXI1RxXvPy1XXrbzvv6AR
VJFmxIlfWEZgK4/mB/EGQCRGmtfkavfNaQWfpyUWDVf1pxWCIYxE/u5SRSB8ZWMQ
NC98vy4EgoojiLWfJWnFY1Ulzo5/lj/gJ+JjP7r7kXt8yw58hx36QkpWI1OsEnDx
g991YeGEW9J3jwp7WXjMvowUTN0NGVf8bBtQmJbUvmRhIWv0u28B98CExwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHXcs6wuQQuMMREDcJpI3GXBT5mOMB8GA1UdIwQY
MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt
OTA5MWNkNzNkMzhjLzEvZGR5enJDNUJDNHd4RVFOd21ramNaY0ZQbVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj
LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwW4oAwQC
wgSgMA0GCSqGSIb3DQEBCwUAA4IBAQBgGilyD0PfRiV4DNCwnW5Mx0M1TgyL0kPU
gT0GM7R93Wd/BqxBk1dGARfV7UHR3JcZQKjdKNKMoAM0HNoHvtzxO39/vPI6mq4f
jJTi2mlfg1d5lHTJwUb6dwTqpNM3J8D4+4OHD/hPmDJNoxhxv9rl6Nkjw4GxInOl
Y31dIBsztV1ZNykKhpZKlL612YBp4uctysIPHYq5UWbWQPsglqhEFHHf/9Eyoi3n
t8Nztw5+RzY2pqBzxtgT1i+BoNYW91uCcDmvV9zFSAKELL/K5UnS+MhI8FWyWl/w
8Ya39LwK+coRxXsq/xjKQfeSQ7294KVP5z2sXLi1Lt/tVg7wHuy8
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:57 2025 by rpki-client