Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa
File: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (raw, json)
Hash identifier: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=
Subject key identifier: 48:CB:D2:A5:CB:A5:D9:4A:B8:50:B5:C6:EE:DB:6E:BF:10:41:2E:B5
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019423D708B503B5668427349263D0868D0A
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 134.34.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:08:b5:03:b5:66:84:27:34:92:63:d0:86:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48cbd2a5cba5d94ab850b5c6eedb6ebf10412eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:13:4f:3f:3b:28:b9:9d:ea:0c:c9:20:7d:
0a:7d:2b:be:99:ec:2d:aa:cd:2f:fa:52:6f:a3:f4:
0a:be:4a:35:24:8b:2a:2e:53:08:65:07:99:f7:70:
fa:62:69:13:d4:50:9b:9c:51:c3:28:69:a3:21:1f:
c1:d9:a9:25:b9:2f:91:89:ec:95:c7:3a:e7:22:a4:
57:51:a2:35:84:77:83:2f:5b:90:39:a4:ce:59:b8:
e2:cb:20:39:35:0a:5a:0c:2e:b7:3d:ae:ba:1d:bb:
54:24:d8:fd:c3:6d:ed:53:92:b0:e1:45:b5:df:b4:
31:92:e1:20:de:a7:8c:8f:b0:24:a8:3f:53:21:c8:
1f:62:61:27:cd:90:5b:a7:9a:c9:c8:ce:a7:25:b6:
3f:1c:e1:29:2e:71:0a:79:2d:34:e6:b3:fd:27:e4:
c8:58:82:68:9c:e7:c9:88:df:e0:d1:67:74:cf:98:
96:19:8e:93:bd:25:77:a5:e9:9a:42:4e:a2:e4:cb:
6c:59:5a:36:3f:98:92:00:d0:66:57:3d:47:ff:48:
26:4f:59:4b:e5:2d:8a:d0:56:da:49:d4:44:f7:39:
39:ae:f2:ba:0a:70:0f:d3:47:3e:00:66:64:3b:da:
7b:e3:67:1a:9d:4c:b1:69:f9:65:b4:3b:93:80:68:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CB:D2:A5:CB:A5:D9:4A:B8:50:B5:C6:EE:DB:6E:BF:10:41:2E:B5
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:73:b9:79:90:40:3f:fd:da:71:a5:7b:17:aa:41:68:71:ca:
9f:db:37:70:81:e2:d8:6b:25:fe:a2:a8:50:c4:dc:f8:f2:ae:
52:6a:37:f4:8f:76:52:23:bb:28:c6:93:54:cd:35:ec:0c:25:
b5:14:b5:a8:87:ed:24:c9:bb:f7:8f:31:b8:33:2f:45:b0:2a:
e8:94:40:aa:c5:69:08:0f:7b:42:36:84:09:e2:2e:0a:11:88:
ff:6a:ff:b1:f9:fa:91:87:39:00:f7:2d:5d:a5:95:ed:4f:90:
70:99:67:a1:74:c9:ad:57:7d:72:18:29:99:65:f1:48:2d:db:
72:ca:32:5f:56:ff:ed:55:bc:11:93:a2:24:89:55:b6:b6:dd:
d9:24:01:02:bd:51:45:af:f9:fd:17:d6:58:5e:be:5c:94:3a:
23:1c:6a:17:85:8d:30:3c:76:32:02:7d:34:89:89:1f:34:0a:
af:71:9f:4d:a8:f1:d4:27:a5:7f:9e:b1:d0:0a:6a:15:02:5c:
88:c7:c2:29:5d:26:15:b9:51:71:ec:45:4b:27:7a:e8:97:7f:
43:0e:88:77:10:e9:10:49:be:fa:67:02:be:70:9b:13:65:9b:
50:9b:07:77:60:9c:9c:a4:ed:68:ca:c3:8f:4e:36:2a:c2:43:
99:15:52:78
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQj1wi1A7VmhCc0kmPQho0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2
NzRmZWIwHhcNMjUwMTAxMjE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGNiZDJhNWNiYTVkOTRhYjg1MGI1YzZlZWRiNmViZjEwNDEyZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEoTTz87KLmd6gzJIH0KfSu+mewt
qs0v+lJvo/QKvko1JIsqLlMIZQeZ93D6YmkT1FCbnFHDKGmjIR/B2akluS+RieyV
xzrnIqRXUaI1hHeDL1uQOaTOWbjiyyA5NQpaDC63Pa66HbtUJNj9w23tU5Kw4UW1
37QxkuEg3qeMj7AkqD9TIcgfYmEnzZBbp5rJyM6nJbY/HOEpLnEKeS005rP9J+TI
WIJonOfJiN/g0Wd0z5iWGY6TvSV3pemaQk6i5MtsWVo2P5iSANBmVz1H/0gmT1lL
5S2K0FbaSdRE9zk5rvK6CnAP00c+AGZkO9p742canUyxaflltDuTgGho0QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFEjL0qXLpdlKuFC1xu7bbr8QQS61MB8GA1UdIwQY
MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt
NTY4NjI3OWVjOTZlLzEvU012U3BjdWwyVXE0VUxYRzd0dHV2eEJCTHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl
LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhiIwDQYJ
KoZIhvcNAQELBQADggEBALhzuXmQQD/92nGlexeqQWhxyp/bN3CB4thrJf6iqFDE
3PjyrlJqN/SPdlIjuyjGk1TNNewMJbUUtaiH7STJu/ePMbgzL0WwKuiUQKrFaQgP
e0I2hAniLgoRiP9q/7H5+pGHOQD3LV2lle1PkHCZZ6F0ya1XfXIYKZll8Ugt23LK
Ml9W/+1VvBGToiSJVba23dkkAQK9UUWv+f0X1lhevlyUOiMcaheFjTA8djICfTSJ
iR80Cq9xn02o8dQnpX+esdAKahUCXIjHwildJhW5UXHsRUsneuiXf0MOiHcQ6RBJ
vvpnAr5wmxNlm1CbB3dgnJyk7WjKw49ONirCQ5kVUng=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:28 2025 by rpki-client