Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/vRyA1sBnGbBdfcd9RnV3r6TFptk.roa
File: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (raw, json)
Hash identifier: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=
Subject key identifier: BD:1C:80:D6:C0:67:19:B0:5D:7D:C7:7D:46:75:77:AF:A4:C5:A6:D9
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019420685E58AFF083959F1672E2ECCE5CE6
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/vRyA1sBnGbBdfcd9RnV3r6TFptk.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 217.196.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:58:af:f0:83:95:9f:16:72:e2:ec:ce:5c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd1c80d6c06719b05d7dc77d467577afa4c5a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:6e:c4:77:a9:db:26:24:c1:45:0a:cb:0a:
ee:b7:08:fb:1c:83:e5:76:29:53:de:42:bb:2d:e7:
d8:ff:1f:81:08:f9:9f:a8:93:ae:32:bc:b6:ad:81:
ad:45:bf:57:b9:7d:b3:d2:f3:01:b9:32:1d:39:51:
8b:75:3e:69:fb:18:cd:18:07:ec:d1:d3:ba:e3:93:
70:13:03:79:ee:9e:7c:c5:96:1b:05:42:17:4e:21:
63:36:e5:f2:62:69:ed:eb:a8:d4:4a:fe:73:b4:e1:
6b:d1:95:06:e5:bc:de:7c:78:92:b3:9c:e5:91:59:
76:93:be:b1:0a:1d:31:00:98:7e:15:8e:71:9a:8e:
c0:f3:65:5a:be:dd:cf:88:01:17:d1:dd:30:7e:1e:
13:6f:33:0b:6b:85:ed:5b:ac:e3:5a:21:6a:4b:c6:
e8:bf:f7:1f:e7:01:c7:e5:67:dc:bb:fe:11:dc:f4:
86:3f:69:1e:06:ad:d5:9a:6b:71:85:9c:ca:3b:04:
39:51:5c:66:34:b1:7c:3b:cb:2e:f1:23:af:6d:6c:
ca:a1:e3:47:2a:cb:ec:d7:65:5f:04:91:88:45:b3:
a7:a0:90:06:58:18:ab:0b:ab:67:a9:bd:74:07:78:
ab:94:14:ad:af:4c:b9:57:6b:9e:92:3b:a0:45:d1:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:80:D6:C0:67:19:B0:5D:7D:C7:7D:46:75:77:AF:A4:C5:A6:D9
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/vRyA1sBnGbBdfcd9RnV3r6TFptk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.176.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:ee:21:46:fc:49:06:af:db:1d:f2:0d:01:4a:e7:b2:82:1d:
db:3a:15:87:42:b1:74:10:38:f4:b0:3b:2e:05:34:a1:75:60:
0b:e1:6d:03:18:95:4b:c0:81:67:5c:82:26:3c:d5:02:05:de:
c1:8e:bb:6b:bf:ab:81:f3:60:28:db:2f:75:2c:16:61:e2:0a:
17:34:10:a2:a6:0d:a2:a5:b8:62:21:08:e9:bf:b4:2a:71:fb:
2a:43:55:e3:78:fb:fc:0f:53:17:c5:a2:c9:51:01:44:b3:46:
60:cd:1e:ec:b4:62:86:07:6b:21:cb:d6:2f:9e:ca:23:12:a8:
f4:c5:6e:80:1a:66:7d:d7:d3:58:73:e5:ad:19:04:ab:8a:fb:
86:a4:7e:f8:f4:e5:a4:55:13:02:75:88:d0:5c:4e:96:8b:28:
ac:f9:ca:ea:fa:cc:88:68:f9:55:fb:7e:64:9c:25:cb:c7:c4:
9f:13:f8:28:ff:dc:b4:47:5f:f5:6e:c5:c4:79:23:85:2a:59:
bb:00:44:e8:1a:76:0c:8e:c4:a6:23:be:2b:7b:2d:1b:2b:44:
e0:3e:18:ce:a4:46:44:a9:b4:c9:1f:b2:31:1e:50:e7:12:cb:
04:29:4d:c5:6e:49:11:5f:f9:8c:31:3f:68:fe:4a:c8:f2:b0:
b1:1b:50:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaF5Yr/CDlZ8WcuLszlzmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMmNiMzViODc0NzgwY2I5M2RjNDQyMTBiOWQ3OWQ2ZWQ5
NGZlNWUwHhcNMjUwMTAxMDU0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDFjODBkNmMwNjcxOWIwNWQ3ZGM3N2Q0Njc1NzdhZmE0YzVhNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmARuxHep2yYkwUUKywrutwj7HIPl
dilT3kK7LefY/x+BCPmfqJOuMry2rYGtRb9XuX2z0vMBuTIdOVGLdT5p+xjNGAfs
0dO645NwEwN57p58xZYbBUIXTiFjNuXyYmnt66jUSv5ztOFr0ZUG5bzefHiSs5zl
kVl2k76xCh0xAJh+FY5xmo7A82Vavt3PiAEX0d0wfh4TbzMLa4XtW6zjWiFqS8bo
v/cf5wHH5Wfcu/4R3PSGP2keBq3VmmtxhZzKOwQ5UVxmNLF8O8su8SOvbWzKoeNH
Ksvs12VfBJGIRbOnoJAGWBirC6tnqb10B3irlBStr0y5V2uekjugRdE1YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0cgNbAZxmwXX3HfUZ1d6+kxabZMB8GA1UdIwQY
MBaAFB8ss1uHR4DLk9xEIQudedbtlP5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHl5elc0ZEhnTXVUM0VRaEM1MTUxdTJVX2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMDM3MmEtYzMzMi00ODVmLWIyOTMt
YTZkMjY4NGE5NDI1LzEvdlJ5QTFzQm5HYkJkZmNkOVJuVjNyNlRGcHRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mMDM3MmEtYzMzMi00ODVmLWIyOTMtYTZkMjY4NGE5NDI1
LzEvSHl5elc0ZEhnTXVUM0VRaEM1MTUxdTJVX2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2cSwMA0G
CSqGSIb3DQEBCwUAA4IBAQA77iFG/EkGr9sd8g0BSueygh3bOhWHQrF0EDj0sDsu
BTShdWAL4W0DGJVLwIFnXIImPNUCBd7Bjrtrv6uB82Ao2y91LBZh4goXNBCipg2i
pbhiIQjpv7QqcfsqQ1XjePv8D1MXxaLJUQFEs0ZgzR7stGKGB2shy9YvnsojEqj0
xW6AGmZ919NYc+WtGQSrivuGpH749OWkVRMCdYjQXE6Wiyis+crq+syIaPlV+35k
nCXLx8SfE/go/9y0R1/1bsXEeSOFKlm7AEToGnYMjsSmI74rey0bK0TgPhjOpEZE
qbTJH7IxHlDnEssEKU3FbkkRX/mMMT9o/krI8rCxG1BV
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:05 2025 by rpki-client