Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/tDMe4xxusG4_nRn5fi_c_u7WdKk.roa
File: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (raw, json)
Hash identifier: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=
Subject key identifier: B4:33:1E:E3:1C:6E:B0:6E:3F:9D:19:F9:7E:2F:DC:FE:EE:D6:74:A9
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0194266C1CB6F8E38B005C2A9895B7672A8D
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/tDMe4xxusG4_nRn5fi_c_u7WdKk.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21170
IP address blocks: 31.184.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1c:b6:f8:e3:8b:00:5c:2a:98:95:b7:67:2a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4331ee31c6eb06e3f9d19f97e2fdcfeeed674a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:a8:1d:c7:52:44:1f:d3:37:cd:93:ac:c7:
bc:39:27:37:76:89:56:4d:c7:55:94:96:7b:1c:16:
4a:68:3a:71:7a:86:9b:85:69:de:ec:07:bf:b4:58:
10:72:b5:04:bd:9e:3e:8e:3d:49:fc:29:ea:83:a7:
34:7f:f5:f1:6e:de:bd:a2:51:ec:ff:e0:e1:a9:39:
4a:c9:a4:61:be:71:1d:54:bc:89:4e:85:a8:ba:44:
2c:91:19:69:7b:49:9b:1d:7a:82:23:6f:7a:22:fd:
38:cb:16:3b:98:7e:f4:d6:21:fe:e2:0b:73:de:a8:
69:6f:21:fc:0a:25:5d:b7:63:3c:2c:c6:d5:88:77:
e2:29:e7:bb:85:0f:19:07:37:1b:b7:54:17:66:00:
b2:af:e1:95:13:d4:bd:ee:02:f0:f9:68:99:e7:71:
58:94:9b:e6:81:4e:b1:c6:7d:7e:fb:07:f1:30:b7:
5a:26:14:71:9a:4f:1a:32:4f:8a:9b:fa:9a:9a:a7:
a5:3f:0c:d8:13:34:5e:99:91:55:e7:37:6a:35:fd:
63:45:a7:60:73:f7:64:f1:7b:e1:c9:a3:0a:00:ef:
8d:6e:52:8c:e7:52:0f:ff:32:f0:72:c0:96:b5:a9:
a5:1a:a8:cd:59:56:87:69:be:9b:5e:f1:50:fd:48:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:1E:E3:1C:6E:B0:6E:3F:9D:19:F9:7E:2F:DC:FE:EE:D6:74:A9
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/tDMe4xxusG4_nRn5fi_c_u7WdKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.164.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8d:20:5b:f9:98:33:13:09:98:e5:68:c7:27:b2:5e:69:9a:
65:3e:e1:89:60:b1:95:41:c2:8d:4f:70:39:45:6e:b2:2c:a6:
35:83:38:98:fc:4f:4f:19:3f:aa:c5:f8:09:c1:a3:ad:f5:91:
f7:56:a6:97:a0:00:a8:b5:4f:9c:92:40:8e:4a:f8:de:64:d2:
29:42:99:a7:15:6e:b5:ab:12:df:49:96:87:ca:8f:eb:f9:c0:
7c:a8:92:ef:4a:65:cc:8b:46:ca:4d:64:59:c1:26:11:94:15:
54:8c:8b:80:b6:aa:7b:09:f7:25:00:d8:51:a2:66:ab:3f:c5:
e9:d4:73:cb:2d:ff:80:31:9f:b9:1a:c6:30:91:cd:af:af:e8:
9b:e6:2a:49:06:40:df:05:ad:33:70:18:1b:01:49:50:78:56:
9e:3a:0b:c8:88:99:f5:9b:01:04:94:d3:93:19:fd:08:e2:d0:
0d:a8:28:a0:05:6f:cb:22:b8:d8:d2:cb:d6:61:57:f3:db:89:
73:88:f1:09:6b:63:6d:26:e5:3c:9c:04:45:e1:b5:31:82:73:
a8:ca:f7:49:29:75:a6:64:78:22:74:c2:de:db:71:ec:f7:a6:
3b:08:5a:a9:40:f6:e2:94:10:1a:9a:bc:29:9d:e8:dc:12:04:
0c:49:01:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBy2+OOLAFwqmJW3ZyqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjUwMTAyMDk1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDMzMWVlMzFjNmViMDZlM2Y5ZDE5Zjk3ZTJmZGNmZWVlZDY3NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+OoHcdSRB/TN82TrMe8OSc3dolW
TcdVlJZ7HBZKaDpxeoabhWne7Ae/tFgQcrUEvZ4+jj1J/Cnqg6c0f/Xxbt69olHs
/+DhqTlKyaRhvnEdVLyJToWoukQskRlpe0mbHXqCI296Iv04yxY7mH701iH+4gtz
3qhpbyH8CiVdt2M8LMbViHfiKee7hQ8ZBzcbt1QXZgCyr+GVE9S97gLw+WiZ53FY
lJvmgU6xxn1++wfxMLdaJhRxmk8aMk+Km/qamqelPwzYEzRemZFV5zdqNf1jRadg
c/dk8XvhyaMKAO+NblKM51IP/zLwcsCWtamlGqjNWVaHab6bXvFQ/Uh4kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQzHuMcbrBuP50Z+X4v3P7u1nSpMB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvdERNZTR4eHVzRzRfblJuNWZpX2NfdTdXZEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7ikMA0G
CSqGSIb3DQEBCwUAA4IBAQBzjSBb+ZgzEwmY5WjHJ7JeaZplPuGJYLGVQcKNT3A5
RW6yLKY1gziY/E9PGT+qxfgJwaOt9ZH3VqaXoACotU+ckkCOSvjeZNIpQpmnFW61
qxLfSZaHyo/r+cB8qJLvSmXMi0bKTWRZwSYRlBVUjIuAtqp7CfclANhRomarP8Xp
1HPLLf+AMZ+5GsYwkc2vr+ib5ipJBkDfBa0zcBgbAUlQeFaeOgvIiJn1mwEElNOT
Gf0I4tANqCigBW/LIrjY0svWYVfz24lziPEJa2NtJuU8nARF4bUxgnOoyvdJKXWm
ZHgidMLe23Hs96Y7CFqpQPbilBAamrwpnejcEgQMSQHd
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:45 2025 by rpki-client