Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hLgYUuulXvR_ZFtvomF5WTg--O0.roa
File: hLgYUuulXvR_ZFtvomF5WTg--O0.roa (raw, json)
Hash identifier: m4UO7U5+rbI+/91qf6Sb0S9y4vTU0pCF6ipO3XjLNOg=
Subject key identifier: 84:B8:18:52:EB:A5:5E:F4:7F:64:5B:6F:A2:61:79:59:38:3E:F8:ED
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746ADC7A4881B18D695960E8AE0D02C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hLgYUuulXvR_ZFtvomF5WTg--O0.roa
Signing time: Thu 02 Jan 2025 13:48:50 +0000
ROA not before: Thu 02 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206670
IP address blocks: 188.132.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ad:c7:a4:88:1b:18:d6:95:96:0e:8a:e0:d0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b81852eba55ef47f645b6fa2617959383ef8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:1d:c1:a6:24:7b:d9:92:c3:55:b8:2d:84:
5e:58:a8:c9:6c:b1:da:35:c8:64:80:32:26:d4:b0:
30:42:4c:43:f7:dd:89:fa:2c:c3:fd:d4:07:c4:b0:
67:47:6e:24:fb:b2:17:04:0c:c6:fc:eb:23:6f:d9:
6e:bf:d0:f3:9b:35:0c:c8:7b:d9:a6:b8:2b:3b:e8:
28:0d:4f:81:59:a6:b6:18:d7:15:4f:32:67:16:1d:
4e:11:b4:27:7b:09:d4:a3:ca:1c:53:89:65:3e:87:
35:ba:c7:ae:36:d0:9c:51:74:a6:41:64:d8:36:81:
d6:2b:bb:6d:80:86:f2:e1:e5:4b:e2:e0:06:7a:bc:
dc:b9:25:6b:76:74:e9:eb:1a:b8:83:b9:62:57:01:
4c:7b:95:55:9d:c9:ee:f0:e2:02:de:a0:f6:d0:d0:
5b:ae:6d:ec:f2:92:e9:71:6b:2d:59:88:45:ae:e2:
60:11:a3:dd:43:e9:6a:bc:49:7b:15:91:88:8a:65:
8b:35:b7:54:99:75:fe:bd:41:9f:51:3b:fc:02:5d:
cf:8d:8e:f0:5a:99:da:9a:e9:68:fb:6b:17:8d:9d:
54:ea:ff:88:64:8d:ec:b2:af:13:35:d3:ba:02:28:
75:1c:98:4a:ce:3e:88:33:b9:97:94:9c:65:da:05:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:18:52:EB:A5:5E:F4:7F:64:5B:6F:A2:61:79:59:38:3E:F8:ED
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hLgYUuulXvR_ZFtvomF5WTg--O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4f:76:fc:87:0c:53:9a:ad:e7:5d:f6:7d:3b:59:24:c9:1f:
83:05:b5:97:e3:16:67:c6:b3:b8:8c:3e:9c:61:8d:ee:0a:46:
44:33:e6:41:81:f1:28:42:38:f5:1b:48:2f:df:3f:14:da:42:
67:2e:ba:4c:83:a3:a2:30:0c:6e:8f:9d:6d:9a:f4:53:7f:91:
8d:a1:d4:85:ef:16:e3:cf:e7:ec:0a:e3:40:b3:0a:fe:f2:e0:
40:3e:cc:e4:17:ac:ad:1a:e5:93:5f:97:f8:32:3e:8c:a9:85:
ae:1b:60:2c:02:a3:36:d5:66:a1:55:fa:74:28:82:06:4a:c2:
ef:a8:e4:18:a6:b8:ea:ad:55:c9:0b:f4:72:e7:53:39:c4:11:
e9:6c:c3:0d:2a:0a:94:1c:37:43:26:d4:c2:a6:3e:17:55:a3:
ae:08:0f:2c:44:ee:48:8d:a5:51:ba:6b:2b:6d:ef:2c:ab:8c:
09:03:99:eb:e6:b1:14:a7:60:d3:be:48:1c:67:e0:73:73:88:
bc:d9:fe:da:fe:24:66:43:d3:88:de:b7:29:c2:ed:6f:b1:5b:
5f:d5:3e:10:53:a2:2a:3d:2b:02:f7:5e:b1:85:5d:c0:29:d2:
52:38:3c:a0:a3:d4:8f:ff:3f:d1:72:1a:93:9f:45:35:12:74:
f7:d2:96:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRq3HpIgbGNaVlg6K4NAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTAyMTM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGI4MTg1MmViYTU1ZWY0N2Y2NDViNmZhMjYxNzk1OTM4M2VmOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqgdwaYke9mSw1W4LYReWKjJbLHa
NchkgDIm1LAwQkxD992J+izD/dQHxLBnR24k+7IXBAzG/Osjb9luv9DzmzUMyHvZ
prgrO+goDU+BWaa2GNcVTzJnFh1OEbQnewnUo8ocU4llPoc1useuNtCcUXSmQWTY
NoHWK7ttgIby4eVL4uAGerzcuSVrdnTp6xq4g7liVwFMe5VVncnu8OIC3qD20NBb
rm3s8pLpcWstWYhFruJgEaPdQ+lqvEl7FZGIimWLNbdUmXX+vUGfUTv8Al3PjY7w
Wpnamulo+2sXjZ1U6v+IZI3ssq8TNdO6Aih1HJhKzj6IM7mXlJxl2gVwRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIS4GFLrpV70f2Rbb6JheVk4PvjtMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvaExnWVV1dWxYdlJfWkZ0dm9tRjVXVGctLU8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIScMA0G
CSqGSIb3DQEBCwUAA4IBAQAOT3b8hwxTmq3nXfZ9O1kkyR+DBbWX4xZnxrO4jD6c
YY3uCkZEM+ZBgfEoQjj1G0gv3z8U2kJnLrpMg6OiMAxuj51tmvRTf5GNodSF7xbj
z+fsCuNAswr+8uBAPszkF6ytGuWTX5f4Mj6MqYWuG2AsAqM21WahVfp0KIIGSsLv
qOQYprjqrVXJC/Ry51M5xBHpbMMNKgqUHDdDJtTCpj4XVaOuCA8sRO5IjaVRumsr
be8sq4wJA5nr5rEUp2DTvkgcZ+Bzc4i82f7a/iRmQ9OI3rcpwu1vsVtf1T4QU6Iq
PSsC916xhV3AKdJSODygo9SP/z/RchqTn0U1EnT30pab
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:54 2025 by rpki-client