Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa
File: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (raw, json)
Hash identifier: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=
Subject key identifier: B0:BD:F5:DB:D1:6C:89:0F:44:3A:20:FE:E9:8F:A8:45:66:74:1D:42
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 0194228E0A4421EFBAEE2A21F6C6761D96D0
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12480
IP address blocks: 194.174.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0a:44:21:ef:ba:ee:2a:21:f6:c6:76:1d:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0bdf5dbd16c890f443a20fee98fa84566741d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:47:c7:e8:60:d9:55:de:ef:c8:04:a7:bb:
e1:c2:5f:a7:d1:7e:52:95:96:71:e3:0b:5d:79:9a:
10:9e:48:19:a9:65:70:8f:25:88:c7:cc:40:bb:69:
98:b9:d9:e5:c4:03:d4:f0:a0:e5:2f:d3:6f:12:3f:
1b:01:5a:01:c2:cb:dc:55:93:61:a1:1a:cc:3e:8a:
2a:f6:bf:a3:70:34:56:d4:79:17:1f:08:d3:37:02:
b3:8c:b6:ac:10:e8:d8:f0:dc:02:39:a3:e6:71:e4:
82:4b:b3:3a:e9:6e:f9:4d:c3:bc:5b:ad:72:89:c6:
c4:64:6e:38:22:ba:9e:03:1e:16:f4:20:4f:ce:03:
ce:40:5f:eb:36:11:a3:c3:ad:93:e6:80:19:4f:aa:
62:24:2a:a4:bb:d1:ea:3d:0c:6c:3f:c9:3f:f9:ff:
5a:7d:aa:5b:2e:78:51:0a:ea:29:b6:ed:22:2f:a8:
f9:31:80:64:ab:1e:c9:59:08:f9:47:28:49:a8:d3:
17:d5:4b:42:b6:2d:71:e5:f6:c4:ea:c0:8f:46:8e:
f4:f5:62:d6:8b:e8:09:7b:98:ca:db:33:24:54:c5:
a8:bb:89:be:d3:34:e8:70:18:43:1f:09:10:ab:58:
2a:d9:a8:5c:93:17:b5:2a:78:0e:21:b8:ce:f4:ea:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:F5:DB:D1:6C:89:0F:44:3A:20:FE:E9:8F:A8:45:66:74:1D:42
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8e:6a:d3:8e:c8:9d:84:a2:7c:ef:35:4e:a3:24:54:f4:27:
51:c1:3b:5d:07:8c:b0:da:c3:af:bd:a6:63:5e:ef:62:6c:bf:
5f:ca:62:29:0e:29:a1:eb:07:61:83:d9:53:5c:20:c5:d9:a6:
0a:39:bb:8c:c4:b4:9b:51:ae:90:ee:6a:1b:35:cc:3f:2b:c1:
ad:41:2b:a0:20:a3:70:15:a6:e2:59:a9:e8:c1:51:8c:4c:2b:
9e:dd:c5:d3:de:78:55:05:df:ab:20:4d:18:db:a7:dc:6d:22:
1d:d4:7e:e8:0c:c9:71:c6:b5:f4:ae:46:98:82:45:9c:f3:07:
90:57:fe:dc:86:d2:3f:d9:bc:38:18:dc:4c:e0:3d:72:c3:b3:
53:7d:1c:0c:9b:fb:42:47:d9:2c:a5:ab:22:bc:a0:95:6e:31:
ea:87:b6:8d:19:27:e2:68:98:67:60:dd:5a:84:3f:06:d8:27:
e9:8e:c5:5d:5b:f4:00:66:80:7e:2b:19:69:ee:10:cf:00:bc:
72:34:cf:e6:84:64:ff:32:6f:83:70:09:0e:47:2d:b7:26:ce:
c3:18:b6:74:8a:1b:e9:03:5f:06:e2:0d:c3:d6:e7:3e:b7:07:
ba:40:97:49:73:da:fa:d1:06:b5:54:be:54:f7:1c:54:90:ec:
cf:6e:96:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijgpEIe+67ioh9sZ2HZbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNThiNmJlOWM2YzAzM2IzYjEyNmYyNzdkMDJiYzA1NDQ5
OWZjZmIwHhcNMjUwMTAxMTU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGJkZjVkYmQxNmM4OTBmNDQzYTIwZmVlOThmYTg0NTY2NzQxZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor1Hx+hg2VXe78gEp7vhwl+n0X5S
lZZx4wtdeZoQnkgZqWVwjyWIx8xAu2mYudnlxAPU8KDlL9NvEj8bAVoBwsvcVZNh
oRrMPooq9r+jcDRW1HkXHwjTNwKzjLasEOjY8NwCOaPmceSCS7M66W75TcO8W61y
icbEZG44IrqeAx4W9CBPzgPOQF/rNhGjw62T5oAZT6piJCqku9HqPQxsP8k/+f9a
fapbLnhRCuoptu0iL6j5MYBkqx7JWQj5RyhJqNMX1UtCti1x5fbE6sCPRo709WLW
i+gJe5jK2zMkVMWou4m+0zTocBhDHwkQq1gq2ahckxe1KngOIbjO9OpZ8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLC99dvRbIkPRDog/umPqEVmdB1CMB8GA1UdIwQY
MBaAFC1Ytr6cbAM7OxJvJ30CvAVEmfz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2Mt
Y2I4NmRiMzUwOTMxLzEvc0wzMTI5RnNpUTlFT2lELTZZLW9SV1owSFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2MtY2I4NmRiMzUwOTMx
LzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwq4LMA0G
CSqGSIb3DQEBCwUAA4IBAQCCjmrTjsidhKJ87zVOoyRU9CdRwTtdB4yw2sOvvaZj
Xu9ibL9fymIpDimh6wdhg9lTXCDF2aYKObuMxLSbUa6Q7mobNcw/K8GtQSugIKNw
FabiWanowVGMTCue3cXT3nhVBd+rIE0Y26fcbSId1H7oDMlxxrX0rkaYgkWc8weQ
V/7chtI/2bw4GNxM4D1yw7NTfRwMm/tCR9kspasivKCVbjHqh7aNGSfiaJhnYN1a
hD8G2CfpjsVdW/QAZoB+Kxlp7hDPALxyNM/mhGT/Mm+DcAkORy23Js7DGLZ0ihvp
A18G4g3D1uc+twe6QJdJc9r60Qa1VL5U9xxUkOzPbpaw
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:17 2025 by rpki-client