Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nOQG8M5trDQh4XjFetXQ5gl5hAk.roa
File: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (raw, json)
Hash identifier: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=
Subject key identifier: 9C:E4:06:F0:CE:6D:AC:34:21:E1:78:C5:7A:D5:D0:E6:09:79:84:09
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019515BF24629152302E3CFDA4F2EEDB3BD5
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nOQG8M5trDQh4XjFetXQ5gl5hAk.roa
Signing time: Mon 17 Feb 2025 21:10:03 +0000
ROA not before: Mon 17 Feb 2025 21:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216063
IP address blocks: 194.117.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:bf:24:62:91:52:30:2e:3c:fd:a4:f2:ee:db:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Feb 17 21:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce406f0ce6dac3421e178c57ad5d0e609798409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e4:49:d2:72:55:e3:a3:91:e4:29:82:b9:b4:
01:c2:3e:c1:63:37:63:a1:cb:ad:97:64:6a:cd:9a:
33:25:7b:e3:db:ef:2a:9b:3d:9f:b0:18:76:18:58:
1e:b6:01:e8:ef:35:a3:6d:c6:15:a6:00:9b:fc:d1:
50:a7:16:e6:f0:e1:02:a1:5c:4d:b8:8d:f6:f2:2d:
a7:68:b0:d2:42:5a:78:c8:ec:d2:8f:3b:12:d4:ef:
e7:7e:5e:4c:13:df:9d:45:bb:48:3c:75:4d:b0:8c:
fd:57:e9:cb:fe:e7:38:e3:c2:da:5f:16:db:9e:fd:
27:4c:10:0a:1a:7e:1b:62:a5:08:34:91:02:c8:76:
1e:6d:7c:38:2f:7d:16:ee:ff:ee:2a:52:72:50:59:
d2:97:d3:a5:f8:13:19:d9:d3:bd:cb:b6:c7:15:c8:
ac:1d:8c:8f:a9:67:ff:36:c3:8a:0e:59:52:94:ab:
f4:75:87:59:68:23:11:49:86:d1:ca:e2:5a:5d:65:
49:3e:02:4e:98:33:25:af:ee:d2:db:b2:4c:45:e7:
5c:23:66:51:ba:dd:a5:e6:12:87:57:90:2d:77:b0:
39:49:a9:f6:af:69:c4:05:06:bb:94:13:da:02:38:
86:8b:d4:3b:fa:77:5b:71:14:f0:9f:06:ef:f1:1d:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:06:F0:CE:6D:AC:34:21:E1:78:C5:7A:D5:D0:E6:09:79:84:09
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nOQG8M5trDQh4XjFetXQ5gl5hAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.224.0/24
Signature Algorithm: sha256WithRSAEncryption
07:83:76:aa:82:58:9f:40:ab:05:b6:54:9d:11:60:05:58:e2:
3d:d2:0d:34:b8:4a:82:c5:a5:e1:11:b2:e3:14:3d:c6:80:76:
45:ef:4c:eb:98:1c:32:5a:94:fa:61:7f:fd:35:db:f5:cb:ee:
c8:1f:eb:ab:01:03:9f:58:db:ab:02:1b:1a:7c:e0:d7:f0:f9:
d9:3b:1b:a9:58:7d:a1:61:7e:6d:8e:ec:ed:44:61:ed:7c:36:
ba:a7:06:b3:33:21:db:d1:99:44:ae:68:e2:26:da:7a:e3:95:
44:6d:12:c3:1d:87:7f:82:bc:c1:82:fc:a1:83:f9:e8:c7:41:
ce:2f:ac:50:79:6c:1d:58:59:9f:4a:0e:fb:d2:2b:33:08:4f:
4c:6d:b2:3e:a8:e0:2f:af:94:17:ef:ae:86:52:2b:39:6a:63:
27:58:48:e1:1d:83:f2:0c:19:9e:cf:b9:1a:b4:43:00:2e:5f:
cf:07:d3:e6:52:65:e4:4d:1a:59:dd:b5:8c:87:a8:8c:00:d4:
16:0c:fb:4a:6d:64:d1:a0:54:06:ab:f5:14:0e:f5:b0:0a:39:
e9:e2:60:04:c1:69:2b:9f:fd:b2:06:0e:13:6a:59:5d:2f:27:
19:46:f0:95:8f:da:0a:b4:96:c3:61:36:9d:c5:f7:23:4f:b3:
dd:08:63:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUVvyRikVIwLjz9pPLu2zvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwMjE3MjExMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2U0MDZmMGNlNmRhYzM0MjFlMTc4YzU3YWQ1ZDBlNjA5Nzk4NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eRJ0nJV46OR5CmCubQBwj7BYzdj
ocutl2RqzZozJXvj2+8qmz2fsBh2GFgetgHo7zWjbcYVpgCb/NFQpxbm8OECoVxN
uI328i2naLDSQlp4yOzSjzsS1O/nfl5ME9+dRbtIPHVNsIz9V+nL/uc448LaXxbb
nv0nTBAKGn4bYqUINJECyHYebXw4L30W7v/uKlJyUFnSl9Ol+BMZ2dO9y7bHFcis
HYyPqWf/NsOKDllSlKv0dYdZaCMRSYbRyuJaXWVJPgJOmDMlr+7S27JMRedcI2ZR
ut2l5hKHV5Atd7A5San2r2nEBQa7lBPaAjiGi9Q7+ndbcRTwnwbv8R2+eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJzkBvDObaw0IeF4xXrV0OYJeYQJMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvbk9RRzhNNXRyRFFoNFhqRmV0WFE1Z2w1aEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnXgMA0G
CSqGSIb3DQEBCwUAA4IBAQAHg3aqglifQKsFtlSdEWAFWOI90g00uEqCxaXhEbLj
FD3GgHZF70zrmBwyWpT6YX/9Ndv1y+7IH+urAQOfWNurAhsafODX8PnZOxupWH2h
YX5tjuztRGHtfDa6pwazMyHb0ZlErmjiJtp645VEbRLDHYd/grzBgvyhg/nox0HO
L6xQeWwdWFmfSg770iszCE9MbbI+qOAvr5QX766GUis5amMnWEjhHYPyDBmez7ka
tEMALl/PB9PmUmXkTRpZ3bWMh6iMANQWDPtKbWTRoFQGq/UUDvWwCjnp4mAEwWkr
n/2yBg4TalldLycZRvCVj9oKtJbDYTadxfcjT7PdCGMm
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:40:21 2025 by rpki-client