Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa
File: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (raw, json)
Hash identifier: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=
Subject key identifier: BF:99:33:73:3B:43:FD:97:38:0F:06:F0:9C:DE:18:7C:A4:7D:62:80
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0194258EB1C193C53723FB902AEFFBC98537
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa
Signing time: Thu 02 Jan 2025 05:48:16 +0000
ROA not before: Thu 02 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 158.46.176.0/22 maxlen: 22
178.171.48.0/22 maxlen: 22
178.171.48.0/23 maxlen: 23
178.171.50.0/23 maxlen: 23
178.171.60.0/22 maxlen: 22
178.171.60.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b1:c1:93:c5:37:23:fb:90:2a:ef:fb:c9:85:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf9933733b43fd97380f06f09cde187ca47d6280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:be:e0:fe:42:a2:18:82:df:41:53:4b:b4:
ec:23:ed:e6:78:ed:8c:a1:cd:0f:92:ab:ac:a9:d1:
30:ba:08:be:d3:09:ec:83:db:90:15:92:51:58:b5:
2b:cd:22:ab:53:40:4a:ac:a7:84:3a:7b:fe:a0:c6:
0b:88:29:0a:b0:4f:31:9c:53:08:ac:17:a9:76:0a:
d0:99:18:e1:f5:5c:49:f9:e4:9c:d7:a2:50:5a:f0:
23:a3:96:06:a9:45:49:8c:42:64:68:66:6c:99:40:
ce:57:7c:7c:ab:46:be:0b:f2:1d:7d:f2:bf:27:cd:
e2:53:7f:be:0d:1c:89:99:81:77:5e:93:1c:74:d2:
20:4d:95:fd:0f:c5:99:04:96:bd:c4:7e:d3:50:7f:
80:a9:5c:6f:c9:4d:3c:c7:3b:d9:8c:d6:2c:17:0a:
38:e3:82:13:91:43:df:f5:dd:99:af:36:3c:aa:15:
c9:81:6c:dd:97:de:de:cb:c9:a2:88:62:da:4b:cd:
17:a2:6c:3c:f0:6f:a9:6c:17:62:94:53:6c:35:94:
bc:75:66:d2:22:e2:76:3e:dd:b3:5d:ce:3e:f3:4c:
a8:28:42:8d:37:5a:ca:78:e0:7c:8e:25:fe:c4:b1:
a6:a8:1f:39:39:d5:81:c3:ca:f8:ee:0c:d3:37:50:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:33:73:3B:43:FD:97:38:0F:06:F0:9C:DE:18:7C:A4:7D:62:80
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.48.0/22
178.171.60.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:92:b3:ab:1b:89:00:a0:2f:99:94:97:f7:73:5b:85:c7:40:
66:3c:93:44:97:f0:57:87:64:2b:b0:36:3e:b5:f7:cc:a1:e5:
a2:e3:9e:4d:48:49:f6:fa:25:a7:2a:7b:c0:75:48:6e:47:d0:
2a:af:45:bc:9d:ea:88:89:34:83:15:5b:39:2d:57:93:4a:37:
b0:b6:06:7a:b5:ee:4b:c0:93:3b:de:0a:5f:00:10:4d:e9:5f:
22:cb:94:61:42:00:88:d3:2c:d5:8c:9b:39:9d:fd:7b:ab:ec:
8a:40:97:2c:a6:52:d0:25:91:52:b9:5c:34:97:1e:a0:7c:fb:
a4:1b:27:44:41:a0:6c:82:16:48:e9:87:27:85:cd:35:a1:0b:
75:c0:f1:da:20:6b:e1:71:6b:63:c3:70:29:a4:90:83:bb:37:
ec:83:ed:d4:79:69:f4:fa:a3:f5:eb:cf:b0:47:f8:00:e5:d7:
7b:81:0d:fb:6b:cb:15:aa:ef:83:77:97:df:91:15:d4:16:ee:
3e:49:f8:95:61:52:9b:b1:95:ea:ae:cb:74:95:27:9d:d2:4d:
15:3e:39:62:35:f8:f0:09:e5:9e:3d:5d:d4:0e:66:1b:e4:f8:
e7:87:c8:96:0e:4d:2e:b4:c1:49:9d:00:3c:b5:e7:88:d0:1f:
d5:a6:2b:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQljrHBk8U3I/uQKu/7yYU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjUwMTAyMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjk5MzM3MzNiNDNmZDk3MzgwZjA2ZjA5Y2RlMTg3Y2E0N2Q2MjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8O+4P5CohiC30FTS7TsI+3meO2M
oc0PkqusqdEwugi+0wnsg9uQFZJRWLUrzSKrU0BKrKeEOnv+oMYLiCkKsE8xnFMI
rBepdgrQmRjh9VxJ+eSc16JQWvAjo5YGqUVJjEJkaGZsmUDOV3x8q0a+C/IdffK/
J83iU3++DRyJmYF3XpMcdNIgTZX9D8WZBJa9xH7TUH+AqVxvyU08xzvZjNYsFwo4
44ITkUPf9d2ZrzY8qhXJgWzdl97ey8miiGLaS80Xomw88G+pbBdilFNsNZS8dWbS
IuJ2Pt2zXc4+80yoKEKNN1rKeOB8jiX+xLGmqB85OdWBw8r47gzTN1CZcQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL+ZM3M7Q/2XOA8G8JzeGHykfWKAMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvdjVremN6dERfWmM0RHdid25ONFlmS1I5WW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCni6wAwQC
sqswAwQCsqs8MA0GCSqGSIb3DQEBCwUAA4IBAQCqkrOrG4kAoC+ZlJf3c1uFx0Bm
PJNEl/BXh2QrsDY+tffMoeWi455NSEn2+iWnKnvAdUhuR9Aqr0W8neqIiTSDFVs5
LVeTSjewtgZ6te5LwJM73gpfABBN6V8iy5RhQgCI0yzVjJs5nf17q+yKQJcsplLQ
JZFSuVw0lx6gfPukGydEQaBsghZI6Ycnhc01oQt1wPHaIGvhcWtjw3AppJCDuzfs
g+3UeWn0+qP168+wR/gA5dd7gQ37a8sVqu+Dd5ffkRXUFu4+SfiVYVKbsZXqrst0
lSed0k0VPjliNfjwCeWePV3UDmYb5Pjnh8iWDk0utMFJnQA8teeI0B/VpiuT
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:32 2025 by rpki-client