Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rPh-ousy4HVjLFBX0mCy6X85a1E.roa
File: rPh-ousy4HVjLFBX0mCy6X85a1E.roa (raw, json)
Hash identifier: XPx1aMdBcEazcpRcuedWWDmP+k3hPn6nq1apc7rMDYg=
Subject key identifier: AC:F8:7E:A2:EB:32:E0:75:63:2C:50:57:D2:60:B2:E9:7F:39:6B:51
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01950F6AA76AE647A1F16FF43B2309F0FAEC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rPh-ousy4HVjLFBX0mCy6X85a1E.roa
Signing time: Sun 16 Feb 2025 15:40:02 +0000
ROA not before: Sun 16 Feb 2025 15:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34828
IP address blocks: 185.241.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:6a:a7:6a:e6:47:a1:f1:6f:f4:3b:23:09:f0:fa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 16 15:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf87ea2eb32e075632c5057d260b2e97f396b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:57:e0:46:d5:f7:1c:4d:00:fb:04:df:da:
59:d0:1e:32:ad:13:6e:c8:98:74:65:74:55:04:3d:
39:5a:ac:4b:03:83:a7:bb:33:69:35:6d:14:2d:90:
a2:39:a3:9e:30:9f:b2:b6:b3:71:eb:bd:64:6d:81:
05:b0:17:8f:3e:38:95:47:f8:d0:3a:c5:5c:fb:51:
69:9f:a4:fd:0e:a8:9d:c4:a4:d4:a9:a8:6a:27:dd:
fc:04:27:1d:f9:67:f1:ff:3b:b1:e5:c1:26:13:c7:
34:69:62:cc:bf:54:72:44:45:29:db:82:31:08:71:
f7:73:0f:7b:27:ba:47:ee:4b:e4:dc:c4:30:e2:a2:
b4:c7:06:f6:2b:7d:a6:96:2f:34:be:09:a8:28:91:
94:df:2c:ef:97:88:5f:ac:02:3d:81:fa:0b:c0:a1:
98:e2:f8:20:b0:63:08:b6:23:ab:2d:af:b9:88:f1:
15:de:50:8e:2d:fe:49:8a:11:2d:a3:a1:95:c0:0e:
7d:6d:ea:2d:14:f3:b5:bb:2c:fa:d6:18:21:17:bf:
c0:d6:9a:d1:d2:0a:d0:f0:d6:c2:14:74:50:37:2e:
97:32:3b:bb:59:5a:1a:63:e1:c7:b3:ba:7d:b5:e2:
92:fb:35:7a:4b:fb:21:7e:5f:15:14:1e:e5:5a:9c:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F8:7E:A2:EB:32:E0:75:63:2C:50:57:D2:60:B2:E9:7F:39:6B:51
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rPh-ousy4HVjLFBX0mCy6X85a1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.10.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cd:ed:ec:76:37:2c:6c:90:c2:dc:8c:a7:83:24:b4:51:f0:
2e:f4:18:94:fa:7b:93:5e:16:93:34:1f:e2:8f:7b:1b:73:47:
14:ea:fe:6a:2c:98:1e:75:37:23:a5:5b:f6:0a:7b:54:02:32:
29:c8:16:d9:2c:04:0f:f0:9e:5b:43:d3:e2:56:0b:82:34:5b:
ee:de:2e:f9:45:db:24:a0:01:f4:b9:aa:6f:0f:34:e4:cf:47:
93:df:d2:d4:8d:50:ac:57:cb:ce:7c:c7:aa:80:43:77:a5:5d:
35:15:3c:93:45:3f:ea:8b:68:d1:9a:3e:8e:e8:8e:62:03:f4:
de:4c:4d:8f:23:ff:2d:28:84:d2:ba:c6:1c:77:ae:5f:61:7a:
7b:a0:ad:ef:36:6b:60:f0:e8:09:72:84:ba:8c:5d:cb:67:3e:
1d:8b:b7:44:d4:62:65:db:18:d0:77:ff:3a:eb:ee:9c:8e:ba:
f8:0b:ce:57:e8:08:6e:6a:3d:bf:32:d6:c8:a2:8e:a7:2c:64:
c5:23:54:99:32:33:db:41:14:71:05:28:e0:89:55:b6:43:c7:
a9:b3:df:16:52:06:5f:94:19:29:39:65:ff:28:78:74:41:2e:
21:7e:bd:3b:d5:63:20:79:bf:95:ab:78:86:6a:6d:fe:48:a7:
50:da:06:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUPaqdq5keh8W/0OyMJ8PrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMjE2MTU0MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2Y4N2VhMmViMzJlMDc1NjMyYzUwNTdkMjYwYjJlOTdmMzk2YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZNX4EbV9xxNAPsE39pZ0B4yrRNu
yJh0ZXRVBD05WqxLA4OnuzNpNW0ULZCiOaOeMJ+ytrNx671kbYEFsBePPjiVR/jQ
OsVc+1Fpn6T9DqidxKTUqahqJ938BCcd+Wfx/zux5cEmE8c0aWLMv1RyREUp24Ix
CHH3cw97J7pH7kvk3MQw4qK0xwb2K32mli80vgmoKJGU3yzvl4hfrAI9gfoLwKGY
4vggsGMItiOrLa+5iPEV3lCOLf5JihEto6GVwA59beotFPO1uyz61hghF7/A1prR
0grQ8NbCFHRQNy6XMju7WVoaY+HHs7p9teKS+zV6S/shfl8VFB7lWpxrjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKz4fqLrMuB1YyxQV9Jgsul/OWtRMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvclBoLW91c3k0SFZqTEZCWDBtQ3k2WDg1YTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufEKMA0G
CSqGSIb3DQEBCwUAA4IBAQAgze3sdjcsbJDC3IyngyS0UfAu9BiU+nuTXhaTNB/i
j3sbc0cU6v5qLJgedTcjpVv2CntUAjIpyBbZLAQP8J5bQ9PiVguCNFvu3i75Rdsk
oAH0uapvDzTkz0eT39LUjVCsV8vOfMeqgEN3pV01FTyTRT/qi2jRmj6O6I5iA/Te
TE2PI/8tKITSusYcd65fYXp7oK3vNmtg8OgJcoS6jF3LZz4di7dE1GJl2xjQd/86
6+6cjrr4C85X6Ahuaj2/MtbIoo6nLGTFI1SZMjPbQRRxBSjgiVW2Q8eps98WUgZf
lBkpOWX/KHh0QS4hfr071WMgeb+Vq3iGam3+SKdQ2gaZ
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:20 2025 by rpki-client