Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/sdklJRyXBMo5vnAMtJAE76-VseA.roa
File: sdklJRyXBMo5vnAMtJAE76-VseA.roa (raw, json)
Hash identifier: PMzYVxP4SD61xcc+iiMJiAjcEetP/Z1JcExC2sCVIX4=
Subject key identifier: B1:D9:25:25:1C:97:04:CA:39:BE:70:0C:B4:90:04:EF:AF:95:B1:E0
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0194252214E6183EA33313DBFBFD66DEABEA
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/sdklJRyXBMo5vnAMtJAE76-VseA.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 94.32.32.0/19 maxlen: 24
193.207.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:14:e6:18:3e:a3:33:13:db:fb:fd:66:de:ab:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d925251c9704ca39be700cb49004efaf95b1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:03:0f:c0:e8:4c:9f:5b:8f:1e:e1:5b:d9:
df:0f:0b:9b:35:ac:72:20:81:b0:a6:9c:4d:40:73:
33:22:92:9c:06:42:53:08:b6:a4:a6:9d:d3:80:a6:
d7:77:71:56:2b:cf:50:13:bd:2a:c2:86:6d:5f:15:
09:64:da:18:a9:68:dc:e2:2d:cf:b8:8f:05:14:28:
f9:90:46:b8:92:9b:e2:7d:9e:c6:b5:17:90:bf:e0:
77:a4:25:4c:f6:61:60:61:9f:c9:ce:31:a4:ca:6b:
05:52:7a:98:55:f3:ff:6b:f8:35:e9:0c:23:50:42:
91:27:0a:7b:24:28:93:4c:81:6d:61:78:48:79:a2:
cc:d5:2a:26:0b:c6:9a:6a:21:0f:d1:0d:d9:63:83:
8b:f3:6a:24:97:44:8e:9c:03:42:83:2c:8a:82:8a:
65:cd:fb:7e:d7:3f:1b:a9:86:40:70:4f:4a:86:91:
c0:7f:0e:8e:0a:63:69:f5:0f:6f:d1:a8:01:5d:44:
e3:67:3d:ed:0e:ab:a9:f3:18:6e:80:d2:09:34:ce:
9f:51:46:6f:e3:b7:cd:a6:87:f6:8a:6c:20:04:11:
cc:8c:15:62:9b:cc:e6:e8:3f:c7:f2:34:a2:b9:0e:
87:91:38:8c:64:6a:e9:c1:60:6d:8e:4c:eb:37:ca:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:25:25:1C:97:04:CA:39:BE:70:0C:B4:90:04:EF:AF:95:B1:E0
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/sdklJRyXBMo5vnAMtJAE76-VseA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.32.32.0/19
193.207.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5e:bb:3f:91:da:99:d9:3d:18:64:5e:56:43:63:d0:ec:a7:
d9:e3:ab:68:30:84:21:be:8f:b2:9b:b6:18:d3:38:84:c7:71:
a7:8e:d8:13:be:48:28:00:4f:1d:de:7e:13:fa:3e:20:79:54:
f2:28:39:ee:52:ff:da:9c:07:bc:d4:f1:55:f1:74:d6:b9:fe:
c5:80:4a:69:c1:29:e1:ed:78:66:32:15:57:73:ce:c5:8c:92:
f2:ef:23:f2:9e:00:aa:be:bc:16:f1:72:94:58:9c:a8:7d:2e:
8b:78:ee:37:1c:e8:89:38:15:9f:7f:2f:7e:30:81:6b:66:36:
f8:40:30:4a:1f:f1:aa:19:f5:b2:38:3a:8c:35:86:34:fb:b2:
7a:66:98:da:57:ea:2e:f9:6e:99:0e:3b:ee:f0:09:fe:21:34:
b5:b7:e6:22:16:90:5c:b0:79:8b:64:94:5a:82:2d:c4:d5:28:
38:5e:90:11:34:fa:af:d6:06:63:45:7d:b8:26:b1:ff:74:67:
1a:6d:fe:26:df:bb:48:d6:20:1a:1a:92:cc:4e:c7:12:ae:c7:
24:83:33:64:7f:ec:4d:c1:93:63:16:e9:38:b7:8c:43:33:45:
e4:83:a6:74:56:35:95:bf:ae:19:2a:25:31:23:a3:b6:19:4a:
ca:b4:a5:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIhTmGD6jMxPb+/1m3qvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz
YTY0MzkwHhcNMjUwMTAyMDM0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWQ5MjUyNTFjOTcwNGNhMzliZTcwMGNiNDkwMDRlZmFmOTViMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18gDD8DoTJ9bjx7hW9nfDwubNaxy
IIGwppxNQHMzIpKcBkJTCLakpp3TgKbXd3FWK89QE70qwoZtXxUJZNoYqWjc4i3P
uI8FFCj5kEa4kpvifZ7GtReQv+B3pCVM9mFgYZ/JzjGkymsFUnqYVfP/a/g16Qwj
UEKRJwp7JCiTTIFtYXhIeaLM1SomC8aaaiEP0Q3ZY4OL82okl0SOnANCgyyKgopl
zft+1z8bqYZAcE9KhpHAfw6OCmNp9Q9v0agBXUTjZz3tDqup8xhugNIJNM6fUUZv
47fNpof2imwgBBHMjBVim8zm6D/H8jSiuQ6HkTiMZGrpwWBtjkzrN8o1/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLHZJSUclwTKOb5wDLSQBO+vlbHgMB8GA1UdIwQY
MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt
ZGVlMmY2NTBkZDg2LzEvc2RrbEpSeVhCTW81dm5BTXRKQUU3Ni1Wc2VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2
LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFXiAgAwQA
wc8bMA0GCSqGSIb3DQEBCwUAA4IBAQBsXrs/kdqZ2T0YZF5WQ2PQ7KfZ46toMIQh
vo+ym7YY0ziEx3GnjtgTvkgoAE8d3n4T+j4geVTyKDnuUv/anAe81PFV8XTWuf7F
gEppwSnh7XhmMhVXc87FjJLy7yPyngCqvrwW8XKUWJyofS6LeO43HOiJOBWffy9+
MIFrZjb4QDBKH/GqGfWyODqMNYY0+7J6ZpjaV+ou+W6ZDjvu8An+ITS1t+YiFpBc
sHmLZJRagi3E1Sg4XpARNPqv1gZjRX24JrH/dGcabf4m37tI1iAaGpLMTscSrsck
gzNkf+xNwZNjFuk4t4xDM0Xkg6Z0VjWVv64ZKiUxI6O2GUrKtKU7
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:27 2025 by rpki-client