Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Xs9U7uc-8oRUES70IrWBeJfCWt4.roa
File: Xs9U7uc-8oRUES70IrWBeJfCWt4.roa (raw, json)
Hash identifier: O/U0Z0idzXeteHEMCCw30pffLsOnQZvXs1WshHlc2dE=
Subject key identifier: 5E:CF:54:EE:E7:3E:F2:84:54:11:2E:F4:22:B5:81:78:97:C2:5A:DE
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A075CF2223FADD6242F535F2E75D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Xs9U7uc-8oRUES70IrWBeJfCWt4.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62077
IP address blocks: 188.132.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a0:75:cf:22:23:fa:dd:62:42:f5:35:f2:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ecf54eee73ef28454112ef422b5817897c25ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:4c:d6:f6:2e:4d:44:e1:dd:ee:d5:1e:aa:
19:f7:69:11:85:3b:8f:dd:6b:90:1d:1e:04:48:50:
45:25:99:6c:2a:58:22:5b:4b:3a:8d:7d:9f:47:29:
7f:a6:41:88:f0:38:69:bd:b0:3c:52:fc:cc:83:05:
bb:b2:40:67:fe:ef:6d:49:bf:ca:3f:ac:3e:3d:ea:
b2:6c:56:6b:88:eb:c0:86:a4:d7:8d:85:ac:25:f6:
48:c8:15:86:78:36:73:ab:8b:19:16:7b:90:8d:64:
5e:05:df:3c:55:40:c5:57:f0:23:f5:20:27:5b:4d:
79:c3:63:77:f9:45:2e:29:a1:8c:35:c0:c6:e7:83:
e2:5e:28:29:0d:4b:e9:c5:8b:22:c6:cf:95:f3:a8:
f8:e8:34:f4:e0:cb:f6:68:eb:44:d0:f5:d7:00:51:
aa:d0:8c:c4:7c:f2:8e:31:c3:12:ea:5b:d4:3f:7c:
74:7f:09:e5:57:49:37:37:61:05:ce:88:05:98:9d:
67:aa:66:0c:3b:80:3c:5d:01:ad:63:8a:ce:f8:06:
32:b5:f0:0d:03:13:94:73:8f:32:0d:73:c7:8e:e5:
e8:de:14:60:7a:df:77:8f:18:98:73:a9:14:c5:4a:
f8:5f:1b:04:c9:7a:9c:4d:39:2f:1f:85:86:ba:a8:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:54:EE:E7:3E:F2:84:54:11:2E:F4:22:B5:81:78:97:C2:5A:DE
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Xs9U7uc-8oRUES70IrWBeJfCWt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:83:e0:e0:18:d5:9e:e6:32:fd:82:db:05:2c:d7:47:6c:2c:
00:71:07:68:8e:d4:74:5c:1a:db:5a:77:ab:a3:67:d5:e7:61:
2f:89:68:c8:d0:39:bb:c7:47:43:83:1b:d7:df:7f:73:ce:b9:
9c:e2:8f:89:2d:fe:5b:ed:b5:62:a7:6e:fc:7d:9f:2a:fa:97:
2c:68:42:3a:12:2a:fa:ff:3a:52:1e:5b:f3:b6:a7:a0:24:d2:
6b:62:a2:c2:56:36:dd:e5:3c:3f:df:4a:37:82:a3:ff:cd:b8:
cd:5a:39:c3:d9:79:bf:a7:03:e4:d5:7c:d7:1a:9f:72:4e:7f:
7f:c6:b8:a3:d9:f2:8b:e1:c2:ed:ca:07:b5:dc:e1:2f:1c:2b:
e1:0d:ee:e9:c1:ff:07:a9:88:01:bd:75:ad:47:88:a1:d8:b2:
63:00:14:73:ac:5f:4e:26:80:05:81:c2:ab:a0:2e:65:a6:3c:
3e:bd:9f:79:2b:07:78:53:b9:d6:1e:fe:b4:01:3f:aa:3c:a9:
f1:1c:45:a8:7d:78:c4:10:b8:7a:f8:c9:31:3a:f7:a4:7d:e0:
d3:f1:a1:18:2c:c2:72:d4:d1:c0:e3:a7:23:35:23:c0:7e:60:
b0:8a:3a:bb:c7:05:f2:57:cb:28:60:c0:e7:d4:ca:33:1b:b7:
9b:76:ab:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRqB1zyIj+t1iQvU18uddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTAyMTM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWNmNTRlZWU3M2VmMjg0NTQxMTJlZjQyMmI1ODE3ODk3YzI1YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCRM1vYuTUTh3e7VHqoZ92kRhTuP
3WuQHR4ESFBFJZlsKlgiW0s6jX2fRyl/pkGI8DhpvbA8UvzMgwW7skBn/u9tSb/K
P6w+PeqybFZriOvAhqTXjYWsJfZIyBWGeDZzq4sZFnuQjWReBd88VUDFV/Aj9SAn
W015w2N3+UUuKaGMNcDG54PiXigpDUvpxYsixs+V86j46DT04Mv2aOtE0PXXAFGq
0IzEfPKOMcMS6lvUP3x0fwnlV0k3N2EFzogFmJ1nqmYMO4A8XQGtY4rO+AYytfAN
AxOUc48yDXPHjuXo3hRget93jxiYc6kUxUr4XxsEyXqcTTkvH4WGuqhPkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7PVO7nPvKEVBEu9CK1gXiXwlreMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvWHM5VTd1Yy04b1JVRVM3MElyV0JlSmZDV3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISyMA0G
CSqGSIb3DQEBCwUAA4IBAQA9g+DgGNWe5jL9gtsFLNdHbCwAcQdojtR0XBrbWner
o2fV52EviWjI0Dm7x0dDgxvX339zzrmc4o+JLf5b7bVip278fZ8q+pcsaEI6Eir6
/zpSHlvztqegJNJrYqLCVjbd5Tw/30o3gqP/zbjNWjnD2Xm/pwPk1XzXGp9yTn9/
xrij2fKL4cLtyge13OEvHCvhDe7pwf8HqYgBvXWtR4ih2LJjABRzrF9OJoAFgcKr
oC5lpjw+vZ95Kwd4U7nWHv60AT+qPKnxHEWofXjEELh6+MkxOvekfeDT8aEYLMJy
1NHA46cjNSPAfmCwijq7xwXyV8soYMDn1MozG7ebdqtz
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:09 2025 by rpki-client