Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa
File: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (raw, json)
Hash identifier: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=
Subject key identifier: E5:8B:16:36:82:7F:79:55:E7:2D:05:26:BD:17:D1:BF:7E:7E:21:3A
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF6FA6CB8BBB9ED3D294E7D8E6385
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205686
IP address blocks: 213.190.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f6:fa:6c:b8:bb:b9:ed:3d:29:4e:7d:8e:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58b1636827f7955e72d0526bd17d1bf7e7e213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:5d:98:fe:cd:88:76:db:59:9c:5d:37:1a:
aa:fe:0d:08:cd:9f:2f:fe:60:b1:6d:5a:b1:05:35:
e1:6f:36:9d:34:68:d1:56:39:c5:60:60:8a:37:8f:
3c:54:d4:1a:82:4e:b2:6e:9f:e5:ac:4a:01:3c:54:
ea:fa:7a:25:2f:4d:e0:0c:c4:5d:ca:72:64:d8:fc:
cf:5c:31:ae:b2:62:42:f0:91:69:11:1b:d0:8a:ed:
c9:88:bd:a3:d7:32:29:91:ea:2c:ce:2d:12:79:06:
d0:86:84:96:05:7d:d2:74:e3:71:5d:eb:c0:85:d4:
f8:40:17:bc:41:35:f0:2e:75:10:08:13:ae:e0:96:
9b:41:f6:5d:fe:d8:44:9f:9a:f1:b2:4d:62:79:22:
db:13:88:b5:be:7c:0d:3a:e4:ba:17:7a:fa:02:5c:
3a:28:e7:b0:7e:94:f0:65:4c:2b:06:ef:6e:af:97:
4b:3b:5c:a1:74:9c:e5:7b:bf:36:41:cc:2a:56:38:
f9:47:2e:3d:42:00:f7:ac:ed:36:b4:9f:5c:4f:c4:
91:dd:6e:a6:3e:93:c0:b4:b5:69:a4:f9:20:ab:64:
dc:ef:2b:67:3b:3d:28:48:48:38:37:9f:18:bf:68:
1e:51:6f:1e:89:6d:0e:6a:3a:b3:f2:64:b1:33:45:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:16:36:82:7F:79:55:E7:2D:05:26:BD:17:D1:BF:7E:7E:21:3A
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.34.0/24
Signature Algorithm: sha256WithRSAEncryption
93:dd:05:cc:92:c3:ec:fa:86:b7:a0:36:ac:d3:9f:f0:76:48:
16:ef:b1:4d:8d:ed:7b:b9:4a:fa:ea:28:1b:53:04:39:54:98:
b9:60:a1:37:4e:e3:0a:54:55:f3:b5:aa:18:22:60:79:86:cf:
8c:40:56:a3:2b:6a:e6:b8:a0:d6:f9:08:41:12:59:e7:63:6a:
88:96:05:79:4c:92:7e:da:83:c7:5a:ff:53:07:ee:9f:38:28:
28:b1:f6:b8:de:13:e7:22:15:0a:20:74:43:07:ae:85:4d:a6:
ae:76:49:92:55:0a:d1:73:7e:8d:5f:74:9a:9d:b6:88:e9:fc:
fe:f5:57:83:6e:00:a7:56:3f:7b:65:e3:19:33:c0:b6:23:3e:
94:c6:8e:73:a0:36:f7:fb:6f:30:e8:cc:a7:13:66:87:5c:47:
d0:81:31:da:22:7d:6d:a9:1c:51:bc:bd:c6:3c:be:6d:dd:c5:
ff:2e:69:5a:2f:6a:17:61:12:9d:13:bb:57:ec:cb:26:cc:32:
09:7c:d3:5a:ec:e4:12:97:03:65:21:8b:df:fd:e4:14:06:c4:
2f:41:5f:1f:b2:fe:3e:6e:af:07:95:69:b1:a5:2a:f9:5d:71:
15:3b:82:ef:14:f0:dc:64:1c:da:69:39:bf:2c:df:ac:53:88:
eb:3b:8d:3e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQma/b6bLi7ue09KU59jmOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjUwMTAyMDk0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNThiMTYzNjgyN2Y3OTU1ZTcyZDA1MjZiZDE3ZDFiZjdlN2UyMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppBdmP7NiHbbWZxdNxqq/g0IzZ8v
/mCxbVqxBTXhbzadNGjRVjnFYGCKN488VNQagk6ybp/lrEoBPFTq+nolL03gDMRd
ynJk2PzPXDGusmJC8JFpERvQiu3JiL2j1zIpkeoszi0SeQbQhoSWBX3SdONxXevA
hdT4QBe8QTXwLnUQCBOu4JabQfZd/thEn5rxsk1ieSLbE4i1vnwNOuS6F3r6Alw6
KOewfpTwZUwrBu9ur5dLO1yhdJzle782QcwqVjj5Ry49QgD3rO02tJ9cT8SR3W6m
PpPAtLVppPkgq2Tc7ytnOz0oSEg4N58Yv2geUW8eiW0Oajqz8mSxM0X+QwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOWLFjaCf3lV5y0FJr0X0b9+fiE6MB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xLzVZc1dOb0pfZVZYbkxRVW12UmZSdjM1LUlUby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVviIw
DQYJKoZIhvcNAQELBQADggEBAJPdBcySw+z6hregNqzTn/B2SBbvsU2N7Xu5Svrq
KBtTBDlUmLlgoTdO4wpUVfO1qhgiYHmGz4xAVqMraua4oNb5CEESWedjaoiWBXlM
kn7ag8da/1MH7p84KCix9rjeE+ciFQogdEMHroVNpq52SZJVCtFzfo1fdJqdtojp
/P71V4NuAKdWP3tl4xkzwLYjPpTGjnOgNvf7bzDozKcTZodcR9CBMdoifW2pHFG8
vcY8vm3dxf8uaVovahdhEp0Tu1fsyybMMgl801rs5BKXA2Uhi9/95BQGxC9BXx+y
/j5urweVabGlKvldcRU7gu8U8NxkHNppOb8s36xTiOs7jT4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:55:48 2025 by rpki-client