Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa
File: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (raw, json)
Hash identifier: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=
Subject key identifier: 37:93:6F:09:52:FD:AB:08:D8:65:68:86:02:0A:22:13:79:29:0E:C3
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF062EE244F447C21E51E94BDED92
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5522
IP address blocks: 85.206.40.0/22 maxlen: 24
2a00:1eb8:e006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f0:62:ee:24:4f:44:7c:21:e5:1e:94:bd:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37936f0952fdab08d8656886020a221379290ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:40:68:26:af:5a:98:27:ba:99:3c:46:d5:
7e:4c:28:2a:8b:51:50:f9:74:35:5f:6a:91:1a:2c:
2f:2d:91:d0:b8:4a:7b:ee:3a:d6:f2:92:e5:f9:03:
10:0d:b8:53:9f:73:c1:b6:1a:0d:f2:37:d9:79:4a:
54:a6:7c:0c:0b:47:da:f2:d3:80:2f:fe:b5:2e:e1:
3c:64:a6:ba:66:ef:5c:25:21:63:bb:7a:f9:0b:48:
9b:d0:46:da:09:79:d9:fa:d5:60:b0:eb:56:76:6f:
4f:51:0b:bd:06:ef:93:fb:ea:91:7b:43:cb:08:80:
7f:85:c7:e3:26:64:7e:47:0b:f5:4f:61:19:19:1a:
7c:03:32:e7:ea:e7:16:91:60:f2:05:25:f5:31:ad:
c4:17:f2:20:3e:1d:d2:cb:73:f3:4f:e2:a1:1c:96:
04:8b:bc:b3:bc:1b:cc:c0:02:29:cf:1d:2f:83:80:
62:cd:7b:b1:72:7c:72:97:11:e0:d8:52:7d:0d:b2:
b0:32:88:cd:03:a7:a2:e5:7a:6f:72:bc:e9:c6:99:
2a:5c:d5:2c:17:df:e4:10:54:25:15:8d:44:48:ff:
63:a5:15:99:ac:df:77:03:6b:7a:de:f2:a5:ec:93:
ff:93:de:50:b0:67:e0:59:90:b4:50:e2:64:88:26:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:6F:09:52:FD:AB:08:D8:65:68:86:02:0A:22:13:79:29:0E:C3
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.206.40.0/22
IPv6:
2a00:1eb8:e006::/48
Signature Algorithm: sha256WithRSAEncryption
24:62:1a:29:61:06:84:b6:f5:08:2b:cc:7e:dd:0d:b9:73:c9:
38:e7:74:a9:44:96:ab:6e:81:2c:ee:68:f9:ab:cf:9a:b3:67:
bc:83:38:b3:c3:a7:9f:2f:f8:ca:23:54:42:91:c1:34:4a:ab:
b7:13:df:33:c2:d9:c8:25:fb:f1:48:8a:1a:e5:36:1e:3a:3c:
7c:41:fd:97:ce:88:82:2f:9a:8e:9f:80:37:88:a4:df:bc:d2:
c4:49:29:e2:98:3d:7c:e2:d6:31:56:2b:e5:51:24:fd:20:65:
42:b5:ee:42:83:ab:1d:56:33:b3:0c:1a:83:7b:2d:ab:3a:f8:
33:24:ef:99:f9:10:f5:d2:62:e0:8e:c8:19:3a:d3:1a:69:91:
66:12:3a:29:25:76:8e:7f:c9:eb:ad:73:01:ce:28:fc:83:00:
5d:63:23:06:00:09:ef:88:e9:97:69:e8:e8:70:d5:e6:2d:67:
a6:e4:a3:c8:06:a0:01:c1:95:e7:4a:a8:f5:5d:0f:24:03:44:
76:33:83:72:8f:06:91:22:2f:ec:cd:7a:9b:ad:91:9a:70:65:
28:f9:92:70:d3:6c:22:aa:05:be:5c:22:f3:56:16:ec:ba:71:
ae:4e:9e:7b:f6:d0:0e:d8:52:60:1f:f1:5e:c1:3c:e9:79:a2:
3a:00:fc:33
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZQma/Bi7iRPRHwh5R6Uve2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjUwMTAyMDk0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzkzNmYwOTUyZmRhYjA4ZDg2NTY4ODYwMjBhMjIxMzc5MjkwZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraVAaCavWpgnupk8RtV+TCgqi1FQ
+XQ1X2qRGiwvLZHQuEp77jrW8pLl+QMQDbhTn3PBthoN8jfZeUpUpnwMC0fa8tOA
L/61LuE8ZKa6Zu9cJSFju3r5C0ib0EbaCXnZ+tVgsOtWdm9PUQu9Bu+T++qRe0PL
CIB/hcfjJmR+Rwv1T2EZGRp8AzLn6ucWkWDyBSX1Ma3EF/IgPh3Sy3PzT+KhHJYE
i7yzvBvMwAIpzx0vg4BizXuxcnxylxHg2FJ9DbKwMojNA6ei5XpvcrzpxpkqXNUs
F9/kEFQlFY1ESP9jpRWZrN93A2t63vKl7JP/k95QsGfgWZC0UOJkiCYxkwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFDeTbwlS/asI2GVohgIKIhN5KQ7DMB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xL041TnZDVkw5cXdqWVpXaUdBZ29pRTNrcERzTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJVzigw
DwQCAAIwCQMHACoAHrjgBjANBgkqhkiG9w0BAQsFAAOCAQEAJGIaKWEGhLb1CCvM
ft0NuXPJOOd0qUSWq26BLO5o+avPmrNnvIM4s8Onny/4yiNUQpHBNEqrtxPfM8LZ
yCX78UiKGuU2Hjo8fEH9l86Igi+ajp+AN4ik37zSxEkp4pg9fOLWMVYr5VEk/SBl
QrXuQoOrHVYzswwag3stqzr4MyTvmfkQ9dJi4I7IGTrTGmmRZhI6KSV2jn/J661z
Ac4o/IMAXWMjBgAJ74jpl2no6HDV5i1npuSjyAagAcGV50qo9V0PJANEdjODco8G
kSIv7M16m62RmnBlKPmScNNsIqoFvlwi81YW7Lpxrk6ee/bQDthSYB/xXsE86Xmi
OgD8Mw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:48:18 2025 by rpki-client