Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/o93VYBco2vvWfQM6y3ieuHQCi9k.roa
File: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (raw, json)
Hash identifier: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=
Subject key identifier: A3:DD:D5:60:17:28:DA:FB:D6:7D:03:3A:CB:78:9E:B8:74:02:8B:D9
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019420D661A37F9C88C6EFD2083AEDDE525A
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/o93VYBco2vvWfQM6y3ieuHQCi9k.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5610
IP address blocks: 78.24.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:61:a3:7f:9c:88:c6:ef:d2:08:3a:ed:de:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ddd5601728dafbd67d033acb789eb874028bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:a3:08:79:03:d6:51:68:ee:24:3c:b3:95:
0e:41:0b:ca:3c:21:ff:84:17:49:08:a0:45:c6:28:
d2:6b:2b:5a:09:2f:d2:55:16:30:86:08:80:22:4f:
06:e0:64:89:80:4a:92:0f:ca:e9:9d:55:0d:0e:b4:
8d:ef:04:d7:a5:a7:10:d8:dd:da:97:82:6c:44:e0:
2a:2f:b6:a2:dd:11:d5:42:79:1e:d7:f9:bd:c2:9a:
45:22:12:cc:b5:1e:78:d5:f1:4d:f6:30:59:30:19:
2d:92:1b:9b:5f:2a:27:cc:ef:9d:22:88:4f:93:b7:
a4:9d:02:2b:7a:95:38:a7:e6:45:db:e6:6e:4a:48:
01:b9:a4:b1:db:cb:d6:54:e1:bf:37:3f:bd:b9:d8:
cf:05:53:c3:e9:ba:4e:83:d3:ab:9b:70:fe:9a:39:
e1:66:2b:51:58:bd:17:7a:fe:9c:21:a1:67:d3:51:
af:f1:b8:da:9e:72:ea:39:f8:1f:31:56:43:74:55:
f3:b0:88:dc:3d:54:fb:7c:61:76:16:e8:de:93:70:
3d:27:9c:aa:30:1b:cf:a6:6f:b6:96:47:d1:1d:30:
10:b7:6d:e1:5f:c9:f2:4e:46:ce:71:79:4e:29:fc:
13:aa:c4:6a:a1:c2:94:0a:4e:90:eb:7e:ea:52:45:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DD:D5:60:17:28:DA:FB:D6:7D:03:3A:CB:78:9E:B8:74:02:8B:D9
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/o93VYBco2vvWfQM6y3ieuHQCi9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:73:57:b7:88:fc:17:b4:7c:57:c7:1f:17:2d:0e:ab:b8:b7:
6a:68:6c:09:29:e5:7e:65:64:c2:5b:36:4d:b4:03:8c:2d:b8:
6c:d4:89:98:3f:63:7b:3b:44:d2:37:70:89:10:33:1f:30:fc:
9d:e1:b5:83:18:43:49:79:5a:da:ee:76:58:d8:12:2a:a3:43:
f5:55:93:71:e4:87:58:77:70:db:8f:52:ad:04:3a:b0:c4:25:
e5:46:0f:ec:2d:79:de:af:a6:f2:b0:91:3d:c1:1c:fd:ef:a5:
85:61:98:ac:fe:1a:81:90:2a:7b:6c:b1:0f:b3:16:ee:3a:db:
1b:26:27:11:9f:9c:4b:d8:79:dd:28:9c:7a:52:08:4a:bc:07:
f4:b9:8c:b9:eb:ea:3a:0d:90:51:e8:9f:99:3b:ea:49:e0:f0:
34:7a:93:51:4f:0e:95:69:8f:d4:b0:b6:b6:62:90:2e:56:78:
9d:ac:d8:0b:ef:1b:3c:96:5d:c6:74:54:b3:17:5c:16:03:f1:
03:dd:03:3e:92:33:c8:41:38:8e:2b:f3:49:08:e2:7b:d1:71:
6f:7d:35:8d:e1:8c:fc:dd:e7:ea:b1:62:1b:3e:90:9b:b1:23:
46:4f:28:a7:4e:e3:75:30:19:dd:3e:a7:73:d1:b9:24:25:27:
fe:ea:a3:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1mGjf5yIxu/SCDrt3lJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjUwMTAxMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2RkZDU2MDE3MjhkYWZiZDY3ZDAzM2FjYjc4OWViODc0MDI4YmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2OjCHkD1lFo7iQ8s5UOQQvKPCH/
hBdJCKBFxijSaytaCS/SVRYwhgiAIk8G4GSJgEqSD8rpnVUNDrSN7wTXpacQ2N3a
l4JsROAqL7ai3RHVQnke1/m9wppFIhLMtR541fFN9jBZMBktkhubXyonzO+dIohP
k7eknQIrepU4p+ZF2+ZuSkgBuaSx28vWVOG/Nz+9udjPBVPD6bpOg9Orm3D+mjnh
ZitRWL0Xev6cIaFn01Gv8bjannLqOfgfMVZDdFXzsIjcPVT7fGF2Fujek3A9J5yq
MBvPpm+2lkfRHTAQt23hX8nyTkbOcXlOKfwTqsRqocKUCk6Q637qUkWyOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPd1WAXKNr71n0DOst4nrh0AovZMB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvbzkzVllCY28ydnZXZlFNNnkzaWV1SFFDaTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDThjoMA0G
CSqGSIb3DQEBCwUAA4IBAQBOc1e3iPwXtHxXxx8XLQ6ruLdqaGwJKeV+ZWTCWzZN
tAOMLbhs1ImYP2N7O0TSN3CJEDMfMPyd4bWDGENJeVra7nZY2BIqo0P1VZNx5IdY
d3Dbj1KtBDqwxCXlRg/sLXner6bysJE9wRz976WFYZis/hqBkCp7bLEPsxbuOtsb
JicRn5xL2HndKJx6UghKvAf0uYy56+o6DZBR6J+ZO+pJ4PA0epNRTw6VaY/UsLa2
YpAuVnidrNgL7xs8ll3GdFSzF1wWA/ED3QM+kjPIQTiOK/NJCOJ70XFvfTWN4Yz8
3efqsWIbPpCbsSNGTyinTuN1MBndPqdz0bkkJSf+6qPH
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:06:17 2025 by rpki-client