Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/190LxKM5s1ZchW-1QFPWBCXJIzw.roa
File: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (raw, json)
Hash identifier: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=
Subject key identifier: D7:DD:0B:C4:A3:39:B3:56:5C:85:6F:B5:40:53:D6:04:25:C9:23:3C
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019584922A7FBDE61555D6BF1A0519154B54
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/190LxKM5s1ZchW-1QFPWBCXJIzw.roa
Signing time: Tue 11 Mar 2025 09:38:46 +0000
ROA not before: Tue 11 Mar 2025 09:38:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.29.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:92:2a:7f:bd:e6:15:55:d6:bf:1a:05:19:15:4b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 11 09:38:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7dd0bc4a339b3565c856fb54053d60425c9233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:14:66:20:75:80:e4:e9:5b:68:37:d4:06:
2b:d5:68:90:60:df:d6:33:cb:1c:48:0a:17:ea:9f:
f6:2a:3b:d5:fe:4d:d6:32:df:75:e1:ce:36:5e:1f:
69:19:01:0a:ca:1c:fd:9e:2a:d0:99:d5:3c:0d:f9:
79:41:aa:1a:3b:ae:fe:61:76:27:a9:55:b4:d7:5e:
94:ca:10:5f:00:9f:47:83:d4:eb:18:ac:87:32:71:
e2:0d:3a:94:ff:8d:ee:6f:7b:4b:d4:ae:18:b2:79:
12:bd:bd:b1:19:f5:7f:4e:cf:87:2e:23:b8:ab:67:
31:2a:b7:a5:6c:b3:a4:a9:39:92:e0:27:5b:ac:67:
43:ec:bf:54:f5:42:b2:c9:1a:d8:37:2e:79:8f:9f:
9e:5e:35:21:ae:da:d2:29:9e:32:38:8b:59:43:63:
d1:14:c4:ef:ea:2b:13:f7:c7:6f:90:ff:17:1c:2e:
1b:0b:75:4f:79:07:f7:cc:43:e9:ad:0e:81:ec:17:
d5:ac:d4:30:c8:97:25:f0:39:0e:02:84:69:00:29:
ae:4a:0e:32:44:82:86:1a:c0:b3:90:13:30:f2:91:
5c:6c:82:b7:1c:ea:ab:1e:c6:32:40:ea:bd:5d:d9:
7f:c7:60:32:9d:f7:c4:aa:ea:df:cb:3c:71:1e:0a:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:0B:C4:A3:39:B3:56:5C:85:6F:B5:40:53:D6:04:25:C9:23:3C
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/190LxKM5s1ZchW-1QFPWBCXJIzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:f1:12:0d:61:9c:fc:67:62:0e:18:92:58:28:0f:32:92:52:
10:35:51:78:fb:2a:db:a8:9c:c1:b0:8e:c0:bc:b5:88:3f:f5:
cd:dd:a8:5e:c1:f6:74:a2:75:dd:f1:27:aa:76:64:bf:1b:ba:
f4:f2:94:76:49:cd:bf:4b:17:2a:99:6d:d2:c0:46:14:af:38:
8c:09:3e:ab:c9:0a:64:8e:a1:61:90:dd:96:79:25:1c:54:c6:
d4:05:a8:df:bb:df:83:04:c0:30:b6:4b:18:7e:0b:35:53:2b:
ce:87:ad:f1:9c:c1:1f:ab:f2:e6:9b:dc:fb:f3:2e:8c:f5:83:
6f:51:25:40:fe:bd:38:3b:d3:dd:63:bd:cb:d8:ae:02:d2:fb:
34:3c:7a:c2:09:73:5b:21:7e:78:82:11:d5:87:bc:06:91:2d:
61:08:1c:c7:8b:d1:dd:fb:3e:78:21:98:c8:87:7f:93:11:1d:
60:31:2d:ef:9e:e0:c2:f9:6c:f9:f9:66:32:f9:19:bd:ba:0c:
e4:fc:f3:54:e9:36:1e:f1:23:11:ce:08:b0:3b:7f:6f:0d:b8:
78:91:f3:15:fd:55:43:79:a2:a4:46:60:0b:c3:7d:17:ec:bb:
b0:f3:70:eb:96:6f:9a:5b:76:8d:24:11:79:6c:29:c9:27:de:
d9:18:f2:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWEkip/veYVVda/GgUZFUtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMzExMDkzODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2RkMGJjNGEzMzliMzU2NWM4NTZmYjU0MDUzZDYwNDI1YzkyMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJQUZiB1gOTpW2g31AYr1WiQYN/W
M8scSAoX6p/2KjvV/k3WMt914c42Xh9pGQEKyhz9nirQmdU8Dfl5QaoaO67+YXYn
qVW0116UyhBfAJ9Hg9TrGKyHMnHiDTqU/43ub3tL1K4YsnkSvb2xGfV/Ts+HLiO4
q2cxKrelbLOkqTmS4CdbrGdD7L9U9UKyyRrYNy55j5+eXjUhrtrSKZ4yOItZQ2PR
FMTv6isT98dvkP8XHC4bC3VPeQf3zEPprQ6B7BfVrNQwyJcl8DkOAoRpACmuSg4y
RIKGGsCzkBMw8pFcbIK3HOqrHsYyQOq9Xdl/x2AynffEqurfyzxxHgp6SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfdC8SjObNWXIVvtUBT1gQlySM8MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvMTkwTHhLTTVzMVpjaFctMVFGUFdCQ1hKSXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLh0YMA0G
CSqGSIb3DQEBCwUAA4IBAQCm8RINYZz8Z2IOGJJYKA8yklIQNVF4+yrbqJzBsI7A
vLWIP/XN3ahewfZ0onXd8SeqdmS/G7r08pR2Sc2/SxcqmW3SwEYUrziMCT6ryQpk
jqFhkN2WeSUcVMbUBajfu9+DBMAwtksYfgs1UyvOh63xnMEfq/Lmm9z78y6M9YNv
USVA/r04O9PdY73L2K4C0vs0PHrCCXNbIX54ghHVh7wGkS1hCBzHi9Hd+z54IZjI
h3+TER1gMS3vnuDC+Wz5+WYy+Rm9ugzk/PNU6TYe8SMRzgiwO39vDbh4kfMV/VVD
eaKkRmALw30X7Luw83Drlm+aW3aNJBF5bCnJJ97ZGPL7
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:19 2025 by rpki-client