Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/DiNHNXR16l6mr6L-7h3ekJodIbw.roa
File: DiNHNXR16l6mr6L-7h3ekJodIbw.roa (raw, json)
Hash identifier: KtcFvby2OEPPC4/gEeu3k3WpdBmjl54M4FaSLWhPXrc=
Subject key identifier: 0E:23:47:35:74:75:EA:5E:A6:AF:A2:FE:EE:1D:DE:90:9A:1D:21:BC
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019519CA9982C7974E6D39B62DA883147189
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/DiNHNXR16l6mr6L-7h3ekJodIbw.roa
Signing time: Tue 18 Feb 2025 16:01:02 +0000
ROA not before: Tue 18 Feb 2025 16:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207456
IP address blocks: 193.108.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:ca:99:82:c7:97:4e:6d:39:b6:2d:a8:83:14:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Feb 18 16:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2347357475ea5ea6afa2feee1dde909a1d21bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:33:de:91:94:6e:5f:8f:d3:a8:8e:a7:c7:
fd:16:31:ef:36:f4:f9:39:bc:5f:0f:30:84:e7:c9:
50:5a:4b:c8:e5:fb:3e:d2:de:01:22:62:a9:1f:bf:
27:83:49:4d:14:04:94:45:39:c3:e9:23:ca:cb:3f:
0c:0f:04:80:c1:e6:e9:69:c1:7a:e9:f1:e2:fc:b1:
4f:39:95:f7:03:35:9c:91:fc:fd:a3:d2:78:93:bd:
40:11:c9:5e:38:a3:f5:50:30:87:2e:72:9e:7e:4b:
6e:77:a4:5b:df:84:c7:07:f1:24:fd:eb:be:c4:5f:
7e:d1:99:fc:e4:f3:e7:26:f6:ee:87:1d:7c:88:b7:
97:bc:d2:92:59:81:a3:87:35:65:7d:41:29:31:de:
3c:37:7a:41:2e:c3:47:98:23:0a:15:36:26:22:60:
dc:68:a2:cb:39:a0:3a:95:a6:fd:27:07:29:f6:db:
95:23:ab:5c:22:5d:69:6e:9a:77:8f:8d:fa:08:6c:
26:7e:c8:46:2e:56:79:89:43:d9:19:41:83:f8:ef:
56:b5:cf:a6:b4:66:81:c9:8e:85:c6:00:0b:33:66:
56:ec:95:1d:e7:d9:97:78:0d:0c:e2:e5:7a:a0:3d:
15:44:fd:2c:08:36:45:64:6c:a9:26:14:35:61:74:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:23:47:35:74:75:EA:5E:A6:AF:A2:FE:EE:1D:DE:90:9A:1D:21:BC
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/DiNHNXR16l6mr6L-7h3ekJodIbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.84.0/22
Signature Algorithm: sha256WithRSAEncryption
79:3c:20:7b:f6:31:1a:8b:80:40:94:26:1b:95:77:85:57:3e:
21:92:ea:1e:1d:27:f0:99:e4:b6:1d:0a:2a:3d:43:b7:37:a4:
8b:f6:f3:a8:ba:a5:c7:6e:ba:48:25:8d:d4:20:7c:63:f0:89:
25:ad:d0:b2:7a:c0:7b:a9:1b:3e:22:08:6e:50:72:40:80:70:
d4:d1:f9:d2:46:69:ab:c4:a4:cc:e7:0c:1c:16:ab:61:4d:96:
5d:20:69:85:b6:0b:b1:8d:38:a6:15:ee:db:2d:f7:83:45:08:
cb:75:c4:8b:bb:ad:6f:3b:1a:52:d3:cd:f5:63:3b:16:1e:08:
2b:db:52:eb:9d:83:e7:50:ec:dd:7c:44:ec:1e:37:48:6d:49:
a7:82:91:35:a2:3d:ef:6f:2f:e0:bc:ff:4c:05:68:71:01:ec:
fa:e6:ab:3f:40:a8:ea:ec:b1:11:0d:a1:00:bb:ac:58:be:12:
ec:54:bc:ad:37:61:a5:64:6e:1b:fb:1c:ea:6c:d7:fe:6b:fd:
17:b3:6e:ef:5d:40:57:ea:10:5c:c5:94:2e:8c:78:f1:35:30:
4c:4f:56:44:7a:60:38:b3:aa:a9:bf:e6:59:06:94:6e:28:ed:
b5:4a:52:e5:ee:c2:1d:c3:b6:c0:40:d3:70:6c:7d:32:cd:13:
2a:e3:28:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUZypmCx5dObTm2LaiDFHGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjUwMjE4MTYwMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTIzNDczNTc0NzVlYTVlYTZhZmEyZmVlZTFkZGU5MDlhMWQyMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOoz3pGUbl+P06iOp8f9FjHvNvT5
ObxfDzCE58lQWkvI5fs+0t4BImKpH78ng0lNFASURTnD6SPKyz8MDwSAwebpacF6
6fHi/LFPOZX3AzWckfz9o9J4k71AEcleOKP1UDCHLnKefktud6Rb34THB/Ek/eu+
xF9+0Zn85PPnJvbuhx18iLeXvNKSWYGjhzVlfUEpMd48N3pBLsNHmCMKFTYmImDc
aKLLOaA6lab9Jwcp9tuVI6tcIl1pbpp3j436CGwmfshGLlZ5iUPZGUGD+O9Wtc+m
tGaByY6FxgALM2ZW7JUd59mXeA0M4uV6oD0VRP0sCDZFZGypJhQ1YXQR8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4jRzV0depepq+i/u4d3pCaHSG8MB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvRGlOSE5YUjE2bDZtcjZMLTdoM2VrSm9kSWJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWxUMA0G
CSqGSIb3DQEBCwUAA4IBAQB5PCB79jEai4BAlCYblXeFVz4hkuoeHSfwmeS2HQoq
PUO3N6SL9vOouqXHbrpIJY3UIHxj8IklrdCyesB7qRs+IghuUHJAgHDU0fnSRmmr
xKTM5wwcFqthTZZdIGmFtguxjTimFe7bLfeDRQjLdcSLu61vOxpS0831YzsWHggr
21LrnYPnUOzdfETsHjdIbUmngpE1oj3vby/gvP9MBWhxAez65qs/QKjq7LERDaEA
u6xYvhLsVLytN2GlZG4b+xzqbNf+a/0Xs27vXUBX6hBcxZQujHjxNTBMT1ZEemA4
s6qpv+ZZBpRuKO21SlLl7sIdw7bAQNNwbH0yzRMq4yiE
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:20:39 2025 by rpki-client