Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/m635TplodT5qm4wfbSbB7RhzWUM.roa
File: m635TplodT5qm4wfbSbB7RhzWUM.roa (raw, json)
Hash identifier: B6jn3+DjahjWo60ghacvbwJM35HwBAigFtPVZQ19C6c=
Subject key identifier: 9B:AD:F9:4E:99:68:75:3E:6A:9B:8C:1F:6D:26:C1:ED:18:73:59:43
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01953DF380B95537445FFEEF1B76B03736DF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/m635TplodT5qm4wfbSbB7RhzWUM.roa
Signing time: Tue 25 Feb 2025 16:32:03 +0000
ROA not before: Tue 25 Feb 2025 16:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 195.178.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:f3:80:b9:55:37:44:5f:fe:ef:1b:76:b0:37:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 25 16:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9badf94e9968753e6a9b8c1f6d26c1ed18735943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:ac:c5:89:83:15:d9:8b:cf:ee:df:8f:4b:
f4:ed:2f:a1:d5:c5:56:39:73:57:55:97:c3:b0:6a:
89:8d:5a:44:d6:06:04:50:1e:44:6b:03:30:e4:28:
41:c5:ad:64:4f:47:eb:60:7f:43:71:46:f1:e3:f4:
ab:57:f9:eb:b8:a0:d3:1c:30:8c:a1:92:b2:b9:4f:
7c:3a:1e:38:57:65:ac:21:83:9c:76:e8:d5:21:84:
e7:41:d0:ad:c9:eb:35:e3:15:00:f4:8c:c7:95:43:
b2:af:b8:08:86:c6:24:e6:50:15:0c:4b:00:f2:57:
71:be:60:20:b2:2c:d6:a6:c0:d4:a6:de:eb:07:ba:
14:7c:ed:9e:04:89:33:14:47:46:6d:70:7e:7f:c5:
9c:c4:f7:c6:eb:3c:65:c8:85:9a:9d:20:ca:c3:88:
dd:97:60:6d:f0:88:e6:55:19:33:8c:3f:d0:49:c7:
e5:bb:89:2c:3d:e5:f7:d2:b3:87:61:40:cb:18:7c:
06:56:de:79:64:f3:11:55:0a:7f:93:b7:dd:52:db:
3c:5d:ac:ae:b6:d4:0b:ad:8a:ea:f8:8a:6e:56:11:
f1:e3:62:03:9b:e7:60:fd:ce:b8:23:c5:04:18:94:
45:95:2e:55:33:16:a9:a4:7e:5b:6d:a4:53:82:b5:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AD:F9:4E:99:68:75:3E:6A:9B:8C:1F:6D:26:C1:ED:18:73:59:43
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/m635TplodT5qm4wfbSbB7RhzWUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1f:3e:59:8e:74:b7:e0:cf:12:a1:6e:a9:97:16:77:32:ed:
db:12:9b:c4:09:a9:58:f0:ef:02:c9:47:7b:c3:d2:e8:c6:67:
06:9b:56:45:91:5e:c8:7e:c7:6b:86:45:22:36:0e:0f:06:d8:
df:4e:82:9b:e1:fe:c9:eb:d8:ac:2f:5d:5d:87:2d:b0:65:87:
cd:e1:71:0b:62:af:f6:be:83:a8:d1:03:82:97:72:11:65:2e:
1a:75:60:d0:5a:b6:6f:4b:32:3c:8e:04:85:04:b6:ae:08:90:
d6:4e:5b:11:d0:bb:81:39:2a:af:d9:c1:5d:4c:37:b4:32:4e:
88:f6:1e:64:72:3f:e5:99:91:78:a9:67:77:57:db:c6:9b:54:
74:5b:90:db:40:1d:cf:ab:22:6c:e2:9c:c9:5e:91:be:07:a3:
01:27:d4:9a:91:f7:2b:57:8e:65:ef:11:8b:e2:0c:c3:9b:9f:
59:fa:58:6f:30:81:1b:a1:d0:b5:35:84:39:cd:72:09:ad:34:
64:bc:d1:72:8b:2e:e5:1c:ce:21:d7:70:d5:30:c3:03:1b:de:
8c:74:90:5d:d2:d4:4e:e1:12:5a:c8:a1:ec:ec:e3:c5:35:82:
ed:33:0e:2a:5f:bb:e4:f7:cc:48:e4:74:4a:84:8a:92:1b:ff:
f7:3b:1a:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU984C5VTdEX/7vG3awNzbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUwMjI1MTYzMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmFkZjk0ZTk5Njg3NTNlNmE5YjhjMWY2ZDI2YzFlZDE4NzM1OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4CsxYmDFdmLz+7fj0v07S+h1cVW
OXNXVZfDsGqJjVpE1gYEUB5EawMw5ChBxa1kT0frYH9DcUbx4/SrV/nruKDTHDCM
oZKyuU98Oh44V2WsIYOcdujVIYTnQdCtyes14xUA9IzHlUOyr7gIhsYk5lAVDEsA
8ldxvmAgsizWpsDUpt7rB7oUfO2eBIkzFEdGbXB+f8WcxPfG6zxlyIWanSDKw4jd
l2Bt8IjmVRkzjD/QScflu4ksPeX30rOHYUDLGHwGVt55ZPMRVQp/k7fdUts8Xayu
ttQLrYrq+IpuVhHx42IDm+dg/c64I8UEGJRFlS5VMxappH5bbaRTgrX9mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJut+U6ZaHU+apuMH20mwe0Yc1lDMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvbTYzNVRwbG9kVDVxbTR3ZmJTYkI3Umh6V1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KXMA0G
CSqGSIb3DQEBCwUAA4IBAQBcHz5ZjnS34M8SoW6plxZ3Mu3bEpvECalY8O8CyUd7
w9LoxmcGm1ZFkV7IfsdrhkUiNg4PBtjfToKb4f7J69isL11dhy2wZYfN4XELYq/2
voOo0QOCl3IRZS4adWDQWrZvSzI8jgSFBLauCJDWTlsR0LuBOSqv2cFdTDe0Mk6I
9h5kcj/lmZF4qWd3V9vGm1R0W5DbQB3PqyJs4pzJXpG+B6MBJ9SakfcrV45l7xGL
4gzDm59Z+lhvMIEbodC1NYQ5zXIJrTRkvNFyiy7lHM4h13DVMMMDG96MdJBd0tRO
4RJayKHs7OPFNYLtMw4qX7vk98xI5HRKhIqSG//3Oxpc
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:34:09 2025 by rpki-client