Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/SpkdakB2OdIuVE348-y165owlz0.roa
File: SpkdakB2OdIuVE348-y165owlz0.roa (raw, json)
Hash identifier: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=
Subject key identifier: 4A:99:1D:6A:40:76:39:D2:2E:54:4D:F8:F3:EC:B5:EB:9A:30:97:3D
Certificate issuer: /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial: 019425215083000CD34AAE1EAB0623119F9F
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/SpkdakB2OdIuVE348-y165owlz0.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39103
IP address blocks: 81.16.216.0/22 maxlen: 22
81.16.216.0/23 maxlen: 23
81.16.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:50:83:00:0c:d3:4a:ae:1e:ab:06:23:11:9f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a991d6a407639d22e544df8f3ecb5eb9a30973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:a8:d2:66:7e:c0:27:ec:0c:22:d2:80:8d:
17:2b:42:05:f4:e0:cf:4b:53:46:b4:46:14:78:7b:
3d:a8:d7:ee:53:4a:fa:c2:8e:3d:83:34:e3:b5:14:
1a:da:b3:36:ab:35:21:5d:73:d3:72:04:9a:da:70:
a9:05:d6:90:7d:76:e0:11:94:ac:49:54:1a:46:bf:
df:8d:bd:79:d4:b2:07:c6:05:22:d1:ff:4a:da:1e:
92:1f:e6:5b:db:04:9f:b8:22:ef:32:80:12:7d:d5:
eb:12:de:7c:b1:54:33:21:a0:f9:45:bc:6f:70:ab:
d0:7e:a4:c8:e4:7b:7d:89:f0:de:9c:27:a6:55:0a:
67:82:0a:97:a1:e6:97:51:a9:49:38:3a:69:46:38:
8e:98:d5:d2:a5:35:95:4e:f3:2a:23:4f:ef:3a:85:
25:d2:29:3d:22:5b:1f:ad:97:a6:f7:6f:ac:74:f5:
d6:f7:cd:ef:31:bb:77:60:f1:05:71:02:55:9e:85:
6b:ee:22:b9:ee:11:41:d8:2b:67:16:a4:fe:61:0c:
27:dc:3a:f3:8a:b2:26:9d:ff:3c:a3:46:c7:bf:2a:
73:d0:d7:08:1f:dc:91:2c:40:88:ee:44:11:0a:fc:
01:34:43:5a:46:3f:b6:83:c3:6b:92:63:f7:bf:dd:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:99:1D:6A:40:76:39:D2:2E:54:4D:F8:F3:EC:B5:EB:9A:30:97:3D
X509v3 Authority Key Identifier:
keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/SpkdakB2OdIuVE348-y165owlz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:fd:2a:0f:01:be:36:3b:df:e6:89:3e:24:fc:27:1b:c3:d9:
a1:b6:f2:97:d7:c1:50:44:42:d6:a8:cc:1b:63:dd:de:9e:4e:
30:61:31:51:26:a8:c8:11:20:00:9c:f7:a2:72:01:4d:b6:74:
de:b1:cb:40:06:74:4a:eb:f5:78:e9:49:bc:38:83:97:68:ab:
7b:ee:ab:be:51:4f:68:9d:90:c7:6a:89:dd:11:a5:6a:8a:ad:
d7:97:91:74:28:78:42:14:62:37:a4:94:f5:7b:e0:5e:82:28:
e9:ee:7d:ef:52:aa:c3:fc:40:44:8d:b8:2f:22:ed:dd:47:66:
f8:60:77:35:d9:fb:45:37:df:85:40:37:78:5e:10:2d:cf:2d:
04:4d:d1:c7:fe:14:53:df:4d:cf:05:b1:b2:5f:e1:df:8a:37:
51:fe:cc:0f:d7:eb:82:f9:09:4c:80:65:cf:1a:ea:fd:3a:29:
24:1f:e2:a2:ed:a5:f5:5b:c2:28:87:03:57:f8:58:55:f7:15:
be:e0:29:ae:bb:fc:dd:f9:2f:85:81:d6:e2:0d:aa:0f:bb:fd:
2e:be:26:05:63:d4:1a:39:0d:55:63:b0:8d:f1:dd:23:b8:e2:
64:10:d4:f5:29:1b:90:fb:38:76:f5:da:1e:d1:de:56:a8:2f:
99:e3:6c:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIVCDAAzTSq4eqwYjEZ+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMmEzMmJhNDIxOTY4MGRjZGQ1OGY2MTAxZTVjN2FlYzE1
NDBhNzMwHhcNMjUwMTAyMDM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTk5MWQ2YTQwNzYzOWQyMmU1NDRkZjhmM2VjYjVlYjlhMzA5NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqyo0mZ+wCfsDCLSgI0XK0IF9ODP
S1NGtEYUeHs9qNfuU0r6wo49gzTjtRQa2rM2qzUhXXPTcgSa2nCpBdaQfXbgEZSs
SVQaRr/fjb151LIHxgUi0f9K2h6SH+Zb2wSfuCLvMoASfdXrEt58sVQzIaD5Rbxv
cKvQfqTI5Ht9ifDenCemVQpnggqXoeaXUalJODppRjiOmNXSpTWVTvMqI0/vOoUl
0ik9IlsfrZem92+sdPXW983vMbt3YPEFcQJVnoVr7iK57hFB2CtnFqT+YQwn3Drz
irImnf88o0bHvypz0NcIH9yRLECI7kQRCvwBNENaRj+2g8NrkmP3v91VYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqZHWpAdjnSLlRN+PPsteuaMJc9MB8GA1UdIwQY
MBaAFH8qMrpCGWgNzdWPYQHlx67BVApzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNlOWUtOTZlNi00NzRlLWFkMmMt
MjJlNmRmNDU4NGFmLzEvU3BrZGFrQjJPZEl1VkUzNDgteTE2NW93bHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNDNlOWUtOTZlNi00NzRlLWFkMmMtMjJlNmRmNDU4NGFm
LzEvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURDYMA0G
CSqGSIb3DQEBCwUAA4IBAQCg/SoPAb42O9/miT4k/Ccbw9mhtvKX18FQRELWqMwb
Y93enk4wYTFRJqjIESAAnPeicgFNtnTesctABnRK6/V46Um8OIOXaKt77qu+UU9o
nZDHaondEaVqiq3Xl5F0KHhCFGI3pJT1e+Begijp7n3vUqrD/EBEjbgvIu3dR2b4
YHc12ftFN9+FQDd4XhAtzy0ETdHH/hRT303PBbGyX+HfijdR/swP1+uC+QlMgGXP
Gur9OikkH+Ki7aX1W8IohwNX+FhV9xW+4Cmuu/zd+S+FgdbiDaoPu/0uviYFY9Qa
OQ1VY7CN8d0juOJkENT1KRuQ+zh29doe0d5WqC+Z42zA
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:15 2025 by rpki-client