Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/fv9GU78KTThVylwpUoVkrE_AXzQ.roa
File: fv9GU78KTThVylwpUoVkrE_AXzQ.roa (raw, json)
Hash identifier: nnsqZgD7w8A2HHvf/0xUBOlqX3ZvvzafFDRwPNk7+QE=
Subject key identifier: 7E:FF:46:53:BF:0A:4D:38:55:CA:5C:29:52:85:64:AC:4F:C0:5F:34
Certificate issuer: /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial: 019422FC3BE55265E6D20D616AE5BF7D05DE
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/fv9GU78KTThVylwpUoVkrE_AXzQ.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198655
IP address blocks: 193.105.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3b:e5:52:65:e6:d2:0d:61:6a:e5:bf:7d:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7eff4653bf0a4d3855ca5c29528564ac4fc05f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:b8:a5:87:be:58:6d:0f:df:c4:5b:35:4e:
c4:90:74:aa:76:08:bc:e4:ff:e5:df:13:4e:8d:52:
84:16:f8:29:9a:f3:3f:69:42:68:d7:05:0f:41:b9:
bf:42:ac:90:3e:f0:96:e6:ba:12:bf:8d:71:18:99:
5e:b9:2f:32:65:bb:5c:70:4e:b9:0f:67:54:ec:8c:
03:aa:52:7a:ab:7b:cb:36:8a:c1:b3:10:72:87:cf:
b9:3a:b3:b1:38:af:7c:68:29:79:0b:ba:2a:9f:91:
78:fd:47:a0:17:fd:d6:bf:86:a5:f3:ac:ef:10:9b:
2d:88:d0:1a:87:0e:15:c8:8d:f7:f6:66:af:88:2e:
94:76:33:e5:b8:87:23:4e:1d:10:0d:fa:22:f3:06:
50:a1:79:7f:a7:53:52:5f:2f:b8:84:19:0c:d5:b7:
5c:05:0d:61:97:d2:23:6a:eb:c4:fb:21:59:ea:dc:
59:24:fb:a4:53:e5:92:3d:3c:79:77:2f:28:99:81:
a5:09:5c:04:42:2f:6c:d6:81:97:d1:cb:b0:94:a3:
b9:92:c7:0d:78:28:d8:78:e9:f8:ff:b9:0e:2a:a7:
ed:c9:fd:25:7c:86:93:ff:fb:a6:3c:f7:e2:af:cf:
a4:3a:c2:7c:da:b7:97:a6:0d:29:71:b3:ea:40:4f:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:46:53:BF:0A:4D:38:55:CA:5C:29:52:85:64:AC:4F:C0:5F:34
X509v3 Authority Key Identifier:
keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/fv9GU78KTThVylwpUoVkrE_AXzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.16.0/24
Signature Algorithm: sha256WithRSAEncryption
31:58:d5:b3:01:22:a7:9a:3b:cc:00:d2:da:75:83:e8:11:53:
a6:bf:83:f3:82:41:ad:d3:64:1f:54:26:ee:a9:24:55:0e:f5:
69:86:03:a9:8e:f9:10:e7:7c:98:0d:6a:b5:7e:f3:02:00:26:
83:f3:4f:c2:56:78:f7:66:39:d6:8a:a1:ce:98:b5:a0:ce:9e:
69:c0:cf:73:18:46:23:6e:59:1c:df:24:5f:d5:ee:95:a5:89:
93:8d:e7:bd:d1:2a:bf:77:dd:71:a0:dc:9a:0a:8a:fb:bc:aa:
3e:27:74:1a:96:0a:ff:00:99:2a:5a:33:70:d5:d3:e6:3c:10:
10:eb:be:fa:75:32:45:79:81:d9:14:84:df:39:e0:45:d8:7a:
ad:7c:f6:0e:1b:18:fa:dc:e2:af:89:8a:87:02:d4:17:f9:53:
56:26:87:23:d4:1b:53:f2:9f:5a:e4:95:0b:4b:73:96:ef:9b:
f4:af:6c:85:5f:40:97:d6:16:66:32:04:4d:31:c0:ae:79:3c:
6b:be:6c:39:8a:d4:cf:31:5e:62:d9:f2:52:31:84:73:c9:84:
59:09:04:98:33:6e:d1:2e:96:00:9a:d5:89:47:13:23:d7:2f:
dd:56:20:17:11:6e:7c:9d:2e:42:87:36:49:8a:ca:13:fb:42:
43:e4:2e:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/DvlUmXm0g1hauW/fQXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZWViNWNhMWQyMTViYzlhYzJjYjQwZDFlZTliZWU3NzUw
ZjlmNTcwHhcNMjUwMTAxMTc0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWZmNDY1M2JmMGE0ZDM4NTVjYTVjMjk1Mjg1NjRhYzRmYzA1ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFi4pYe+WG0P38RbNU7EkHSqdgi8
5P/l3xNOjVKEFvgpmvM/aUJo1wUPQbm/QqyQPvCW5roSv41xGJleuS8yZbtccE65
D2dU7IwDqlJ6q3vLNorBsxByh8+5OrOxOK98aCl5C7oqn5F4/UegF/3Wv4al86zv
EJstiNAahw4VyI339maviC6UdjPluIcjTh0QDfoi8wZQoXl/p1NSXy+4hBkM1bdc
BQ1hl9IjauvE+yFZ6txZJPukU+WSPTx5dy8omYGlCVwEQi9s1oGX0cuwlKO5kscN
eCjYeOn4/7kOKqftyf0lfIaT//umPPfir8+kOsJ82reXpg0pcbPqQE/2pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7/RlO/Ck04VcpcKVKFZKxPwF80MB8GA1UdIwQY
MBaAFOXutcodIVvJrCy0DR7pvud1D59XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWU2MXloMGhXOG1zTExRTkh1bS01M1VQbjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kODg0N2EtNzQzZi00OGI2LWI3ODMt
ZTlmYjRiNjE0MTY0LzEvZnY5R1U3OEtUVGhWeWx3cFVvVmtyRV9BWHpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kODg0N2EtNzQzZi00OGI2LWI3ODMtZTlmYjRiNjE0MTY0
LzEvNWU2MXloMGhXOG1zTExRTkh1bS01M1VQbjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkQMA0G
CSqGSIb3DQEBCwUAA4IBAQAxWNWzASKnmjvMANLadYPoEVOmv4PzgkGt02QfVCbu
qSRVDvVphgOpjvkQ53yYDWq1fvMCACaD80/CVnj3ZjnWiqHOmLWgzp5pwM9zGEYj
blkc3yRf1e6VpYmTjee90Sq/d91xoNyaCor7vKo+J3Qalgr/AJkqWjNw1dPmPBAQ
6776dTJFeYHZFITfOeBF2HqtfPYOGxj63OKviYqHAtQX+VNWJocj1BtT8p9a5JUL
S3OW75v0r2yFX0CX1hZmMgRNMcCueTxrvmw5itTPMV5i2fJSMYRzyYRZCQSYM27R
LpYAmtWJRxMj1y/dViAXEW58nS5ChzZJisoT+0JD5C5f
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:04 2025 by rpki-client