Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/U_EXFi0_K3LJzzOGjdd59sx5hhk.roa
File: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (raw, json)
Hash identifier: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=
Subject key identifier: 53:F1:17:16:2D:3F:2B:72:C9:CF:33:86:8D:D7:79:F6:CC:79:86:19
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 01942827CE5C89C39D504A58D8D8B3B32705
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/U_EXFi0_K3LJzzOGjdd59sx5hhk.roa
Signing time: Thu 02 Jan 2025 17:54:44 +0000
ROA not before: Thu 02 Jan 2025 17:54:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209299
IP address blocks: 185.192.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ce:5c:89:c3:9d:50:4a:58:d8:d8:b3:b3:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jan 2 17:54:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53f117162d3f2b72c9cf33868dd779f6cc798619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:f9:46:68:a5:23:0c:1c:ee:1e:1a:c9:9e:
28:b0:e3:18:29:ed:53:29:e9:80:02:d3:db:8b:39:
1e:d8:b1:3f:0b:25:2e:ba:cf:6a:93:1f:01:8d:85:
97:fc:77:11:da:1e:08:2f:3a:dc:5a:b4:8b:96:34:
fa:29:6c:ae:66:b1:6b:e4:93:18:0f:24:78:55:c4:
9b:f2:55:a3:b3:16:cd:84:4d:54:6f:06:3d:8b:c0:
25:7f:4e:7b:0d:68:ef:b0:bb:29:ec:8a:a0:ca:67:
39:1b:0f:96:b1:63:56:83:8b:44:a1:49:44:0e:0b:
dc:4d:e3:b1:9b:7a:97:06:f0:3b:23:a0:c9:11:ca:
46:00:92:b8:22:4b:67:2e:57:44:0b:33:3a:d4:01:
69:ca:1e:fa:38:62:59:ce:b5:3d:d2:95:be:1c:aa:
5f:95:03:0c:3d:1c:2a:87:7b:53:09:5d:c6:b5:7e:
26:4c:db:e6:7a:d1:1e:3a:65:b5:f6:53:31:75:3b:
b5:80:ee:6f:26:da:69:a0:22:2c:1e:3e:fd:56:80:
22:79:d8:4b:6f:33:85:5a:ac:ee:1c:2e:50:d5:ea:
eb:88:c2:c7:b8:08:7f:58:66:67:51:cb:4f:24:58:
14:51:1a:0f:a7:ed:1b:b9:29:21:fe:42:cc:79:80:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:17:16:2D:3F:2B:72:C9:CF:33:86:8D:D7:79:F6:CC:79:86:19
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/U_EXFi0_K3LJzzOGjdd59sx5hhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:91:b2:28:bf:ef:45:20:9a:b5:01:18:e4:1c:a1:a0:16:e5:
9e:8e:59:79:6b:0e:90:d4:4f:83:4e:41:8a:f8:88:cd:2c:a8:
07:b2:cf:07:bf:67:e9:3f:95:ff:70:57:4c:6e:44:70:85:83:
05:d3:71:82:03:da:a3:af:a9:78:c6:11:24:ae:09:9f:0e:5e:
1c:ce:70:54:18:44:5c:f7:22:1b:35:7e:82:18:8e:2e:96:87:
db:55:be:5e:fc:d6:12:82:f8:22:cf:60:4e:ce:c6:37:3c:ee:
57:e7:ea:6b:a2:8b:55:6a:75:e8:c1:08:e9:1b:f2:47:75:0a:
d5:61:3b:1b:f9:06:45:f2:0f:bb:7a:5b:01:b1:42:d9:2a:db:
ea:1d:41:11:59:d5:c7:cb:43:a7:55:ba:c3:f1:0a:1b:9b:f8:
79:57:da:5f:6e:df:13:6b:01:fb:f8:0d:e9:18:3a:8c:7f:3e:
61:19:96:23:92:3b:e5:b7:68:93:f9:fa:5e:be:88:b4:78:31:
ea:58:48:d4:6a:24:ff:a9:09:b3:08:ec:6f:0f:18:d1:1c:ba:
7c:32:59:49:90:4a:c5:30:ab:1f:72:a5:1b:5e:87:fc:83:de:
16:f0:b2:f3:cb:c2:cf:00:50:b9:cd:2c:a0:73:67:10:3b:2b:
2c:9c:02:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ85cicOdUEpY2NizsycFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm
YmU3NDkwHhcNMjUwMTAyMTc1NDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2YxMTcxNjJkM2YyYjcyYzljZjMzODY4ZGQ3NzlmNmNjNzk4NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M35RmilIwwc7h4ayZ4osOMYKe1T
KemAAtPbizke2LE/CyUuus9qkx8BjYWX/HcR2h4ILzrcWrSLljT6KWyuZrFr5JMY
DyR4VcSb8lWjsxbNhE1UbwY9i8Alf057DWjvsLsp7Iqgymc5Gw+WsWNWg4tEoUlE
DgvcTeOxm3qXBvA7I6DJEcpGAJK4IktnLldECzM61AFpyh76OGJZzrU90pW+HKpf
lQMMPRwqh3tTCV3GtX4mTNvmetEeOmW19lMxdTu1gO5vJtppoCIsHj79VoAiedhL
bzOFWqzuHC5Q1erriMLHuAh/WGZnUctPJFgUURoPp+0buSkh/kLMeYCpUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPxFxYtPytyyc8zho3XefbMeYYZMB8GA1UdIwQY
MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt
M2FlNGY5Y2YyNjgzLzEvVV9FWEZpMF9LM0xKenpPR2pkZDU5c3g1aGhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz
LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucAPMA0G
CSqGSIb3DQEBCwUAA4IBAQCekbIov+9FIJq1ARjkHKGgFuWejll5aw6Q1E+DTkGK
+IjNLKgHss8Hv2fpP5X/cFdMbkRwhYMF03GCA9qjr6l4xhEkrgmfDl4cznBUGERc
9yIbNX6CGI4ulofbVb5e/NYSgvgiz2BOzsY3PO5X5+prootVanXowQjpG/JHdQrV
YTsb+QZF8g+7elsBsULZKtvqHUERWdXHy0OnVbrD8Qobm/h5V9pfbt8TawH7+A3p
GDqMfz5hGZYjkjvlt2iT+fpevoi0eDHqWEjUaiT/qQmzCOxvDxjRHLp8MllJkErF
MKsfcqUbXof8g94W8LLzy8LPAFC5zSygc2cQOyssnALq
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:04 2025 by rpki-client