Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/sbm57hbO9DMhZVoyKG3SdA-duFk.roa
File: sbm57hbO9DMhZVoyKG3SdA-duFk.roa (raw, json)
Hash identifier: 6anRwGUA22JIE2yI5cX9sKlVcBQWgTcUOS+5xTEbTcw=
Subject key identifier: B1:B9:B9:EE:16:CE:F4:33:21:65:5A:32:28:6D:D2:74:0F:9D:B8:59
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A331056B2DB82DD6DED6ABD77FEB
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/sbm57hbO9DMhZVoyKG3SdA-duFk.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202251
IP address blocks: 2.188.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a3:31:05:6b:2d:b8:2d:d6:de:d6:ab:d7:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b9b9ee16cef43321655a32286dd2740f9db859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:d1:b8:95:bd:fd:20:f4:a9:d4:73:07:58:
67:32:e4:28:80:e1:05:d6:c0:25:59:29:c8:59:ee:
04:da:31:20:24:95:f4:ca:44:63:ac:5c:2a:ce:74:
3e:a8:1d:12:08:b6:71:6b:f3:a0:64:54:74:b4:c8:
d9:b6:07:26:b6:8e:37:2b:ec:ff:59:d7:8a:21:d5:
98:f9:b9:f2:a9:3e:e5:d0:42:83:66:e5:ac:76:54:
6b:1c:b5:b0:c5:00:4e:63:25:c7:7f:0d:05:73:68:
85:58:9e:da:ed:36:eb:d7:4c:c5:da:c5:94:ac:39:
eb:51:dc:09:9c:1b:98:ed:5c:a4:c0:32:cb:ba:19:
c4:78:15:88:c4:9f:98:a2:21:e3:15:e9:41:16:91:
2c:dd:b3:b2:d1:a6:18:8b:22:9a:3a:9e:87:df:70:
06:82:38:2f:e8:3c:6b:d0:29:a4:ac:1a:9f:44:00:
2e:aa:be:52:c1:00:93:d9:93:cc:56:2e:2d:78:d2:
b6:41:36:03:1c:cd:13:0e:c8:d2:f6:ab:e9:1f:fe:
5e:c1:6b:7d:c0:b1:26:a8:88:c5:b5:33:c2:6f:e5:
ec:bb:9c:9f:47:5c:5d:51:9e:2a:d2:29:5b:4b:ac:
3e:a2:ae:db:4a:02:c1:e2:eb:7c:81:a4:a4:00:0e:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:B9:EE:16:CE:F4:33:21:65:5A:32:28:6D:D2:74:0F:9D:B8:59
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/sbm57hbO9DMhZVoyKG3SdA-duFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.224.0/20
Signature Algorithm: sha256WithRSAEncryption
76:17:39:dc:f0:a8:c5:e7:2c:17:8a:9b:b0:15:90:a2:16:f3:
78:41:4d:ed:f5:ec:e9:31:4a:dc:1e:5e:7d:5d:18:fb:72:3c:
6f:d9:2d:b5:69:12:49:f8:e8:99:af:2a:e2:2a:09:fd:eb:9f:
b6:9d:19:5e:80:52:94:ca:50:e7:ea:38:16:17:e4:e8:b2:48:
98:a2:62:1d:b8:73:7a:a8:8f:2f:ac:e6:16:ee:13:96:8a:3d:
f2:76:0a:98:60:e9:92:9f:49:69:c5:98:1b:a1:2b:b1:ed:52:
20:59:a2:78:54:9c:ab:fe:b4:73:9b:07:26:5a:54:0b:80:6a:
44:80:99:e8:1e:83:64:96:25:01:40:a0:d6:88:12:aa:c3:6a:
8b:e8:e0:05:7a:ad:f0:9c:58:e3:89:3e:84:12:b7:98:63:b2:
bf:86:95:83:fd:7d:77:1e:7d:a1:64:01:3d:b8:f6:39:30:9e:
b4:1e:68:4a:51:1c:42:3b:9b:95:98:2d:87:1e:19:f1:18:66:
0c:ae:20:36:69:4f:f7:77:52:68:2b:5d:3c:15:7c:d0:e7:61:
c1:2b:8f:3a:64:25:34:36:48:45:fc:65:e5:b2:f5:9c:be:b8:
84:4d:b2:6a:fa:b8:7b:1f:08:a8:b7:6b:3f:d3:49:e6:e9:da:
ef:c5:c2:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6MxBWstuC3W3tar13/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjUwMTAyMTM0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWI5YjllZTE2Y2VmNDMzMjE2NTVhMzIyODZkZDI3NDBmOWRiODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d7RuJW9/SD0qdRzB1hnMuQogOEF
1sAlWSnIWe4E2jEgJJX0ykRjrFwqznQ+qB0SCLZxa/OgZFR0tMjZtgcmto43K+z/
WdeKIdWY+bnyqT7l0EKDZuWsdlRrHLWwxQBOYyXHfw0Fc2iFWJ7a7Tbr10zF2sWU
rDnrUdwJnBuY7VykwDLLuhnEeBWIxJ+YoiHjFelBFpEs3bOy0aYYiyKaOp6H33AG
gjgv6Dxr0CmkrBqfRAAuqr5SwQCT2ZPMVi4teNK2QTYDHM0TDsjS9qvpH/5ewWt9
wLEmqIjFtTPCb+Xsu5yfR1xdUZ4q0ilbS6w+oq7bSgLB4ut8gaSkAA7K1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLG5ue4WzvQzIWVaMiht0nQPnbhZMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvc2JtNTdoYk85RE1oWlZveUtHM1NkQS1kdUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEArzgMA0G
CSqGSIb3DQEBCwUAA4IBAQB2Fznc8KjF5ywXipuwFZCiFvN4QU3t9ezpMUrcHl59
XRj7cjxv2S21aRJJ+OiZryriKgn965+2nRlegFKUylDn6jgWF+ToskiYomIduHN6
qI8vrOYW7hOWij3ydgqYYOmSn0lpxZgboSux7VIgWaJ4VJyr/rRzmwcmWlQLgGpE
gJnoHoNkliUBQKDWiBKqw2qL6OAFeq3wnFjjiT6EEreYY7K/hpWD/X13Hn2hZAE9
uPY5MJ60HmhKURxCO5uVmC2HHhnxGGYMriA2aU/3d1JoK108FXzQ52HBK486ZCU0
NkhF/GXlsvWcvriETbJq+rh7Hwiot2s/00nm6drvxcIF
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:36 2025 by rpki-client