Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/bEQstBMsIq-USPnqf3A5IqnOEVs.roa
File: bEQstBMsIq-USPnqf3A5IqnOEVs.roa (raw, json)
Hash identifier: dlwl7Y9SvRWuBlEJJDLRBkmdTgGXUzcp/rFQfnHi1fE=
Subject key identifier: 6C:44:2C:B4:13:2C:22:AF:94:48:F9:EA:7F:70:39:22:A9:CE:11:5B
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019421B18A58C71003A7D07CDB12D12C7C83
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/bEQstBMsIq-USPnqf3A5IqnOEVs.roa
Signing time: Wed 01 Jan 2025 11:47:50 +0000
ROA not before: Wed 01 Jan 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43887
IP address blocks: 193.236.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8a:58:c7:10:03:a7:d0:7c:db:12:d1:2c:7c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c442cb4132c22af9448f9ea7f703922a9ce115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:41:5f:94:d9:42:28:03:03:da:22:bd:e9:
24:92:28:cc:5c:bc:51:cd:7c:d4:af:78:aa:61:de:
68:92:7f:eb:84:5d:84:23:ee:73:9a:32:59:19:5e:
30:c3:fe:c6:92:5a:51:5d:70:28:5a:e6:e4:d4:fb:
f0:5f:0f:45:8a:2d:8c:dd:2e:64:0f:61:04:2e:6f:
04:89:79:2b:2b:a0:1e:ab:ae:da:cc:92:f7:57:2b:
bd:b1:eb:7b:14:0e:f4:39:7e:4c:42:c6:b4:ca:35:
73:96:a0:38:ff:3f:f1:5e:63:e9:6d:41:3f:cf:c7:
9a:60:43:ba:41:c3:fb:c4:86:d0:6c:7e:1b:8d:7b:
a2:d9:51:1b:fa:ae:99:ed:cc:ac:bf:d5:18:fb:f1:
16:43:ca:68:2f:a9:37:57:fa:3f:dd:f7:b9:35:98:
27:46:3b:ee:bc:c5:e4:6f:17:87:4d:73:5f:60:46:
fb:e7:c6:59:3f:7f:5c:99:5f:01:42:11:fe:14:33:
80:c7:e8:28:81:90:1d:b3:98:33:41:a6:ea:87:ba:
ce:cd:36:cc:39:46:19:55:18:8d:53:ca:18:af:1c:
ee:a6:da:24:39:12:a4:61:77:bb:a5:1b:14:25:b1:
13:c1:5d:05:59:d8:10:2d:23:43:ae:a5:e4:f6:9e:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:2C:B4:13:2C:22:AF:94:48:F9:EA:7F:70:39:22:A9:CE:11:5B
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/bEQstBMsIq-USPnqf3A5IqnOEVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2b:a0:9b:26:aa:43:6b:75:b6:d6:eb:1b:35:d0:0b:1c:66:
17:f4:4b:9a:04:00:fa:89:02:68:fd:17:c6:c9:82:af:8d:e9:
c6:8d:f2:45:8d:b7:0c:da:e0:39:13:71:87:cd:f6:eb:0f:0c:
3a:21:d7:f2:58:b8:2a:db:3f:be:f7:bc:7c:db:23:eb:ef:4b:
02:2d:e7:4c:40:64:0e:fc:d9:72:62:0d:85:fc:df:87:ee:de:
70:ac:2d:c3:aa:13:b2:53:ee:00:9a:d2:45:87:28:94:18:1f:
85:f9:1e:a0:0c:36:f5:5f:6e:2e:da:53:07:c2:eb:fa:02:14:
1d:51:df:b2:76:16:a0:5c:c7:da:a8:88:f6:d2:34:84:2a:02:
9e:ac:27:df:9e:14:d8:13:81:ec:73:1d:16:34:61:08:a4:d8:
a1:65:62:6c:d9:78:8e:cd:59:32:b8:eb:47:d0:da:1b:a1:78:
52:13:7c:d9:b6:d9:a5:e8:cc:2c:71:1b:fa:ec:76:25:43:1a:
02:75:21:93:5d:95:b7:69:32:69:5b:53:1c:06:97:f7:96:f6:
d2:e5:66:0c:b4:36:94:ee:bc:13:b7:09:51:1d:37:38:6b:6c:
69:72:71:99:c1:79:22:ff:8a:4d:c5:11:94:ed:9c:92:2d:41:
ba:b4:71:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsYpYxxADp9B82xLRLHyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjUwMTAxMTE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQ0MmNiNDEzMmMyMmFmOTQ0OGY5ZWE3ZjcwMzkyMmE5Y2UxMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ZBX5TZQigDA9oivekkkijMXLxR
zXzUr3iqYd5okn/rhF2EI+5zmjJZGV4ww/7GklpRXXAoWubk1PvwXw9Fii2M3S5k
D2EELm8EiXkrK6Aeq67azJL3Vyu9set7FA70OX5MQsa0yjVzlqA4/z/xXmPpbUE/
z8eaYEO6QcP7xIbQbH4bjXui2VEb+q6Z7cysv9UY+/EWQ8poL6k3V/o/3fe5NZgn
RjvuvMXkbxeHTXNfYEb758ZZP39cmV8BQhH+FDOAx+gogZAds5gzQabqh7rOzTbM
OUYZVRiNU8oYrxzuptokORKkYXe7pRsUJbETwV0FWdgQLSNDrqXk9p4hPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGxELLQTLCKvlEj56n9wOSKpzhFbMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvYkVRc3RCTXNJcS1VU1BucWYzQTVJcW5PRVZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweyYMA0G
CSqGSIb3DQEBCwUAA4IBAQBdK6CbJqpDa3W21usbNdALHGYX9EuaBAD6iQJo/RfG
yYKvjenGjfJFjbcM2uA5E3GHzfbrDww6IdfyWLgq2z++97x82yPr70sCLedMQGQO
/NlyYg2F/N+H7t5wrC3DqhOyU+4AmtJFhyiUGB+F+R6gDDb1X24u2lMHwuv6AhQd
Ud+ydhagXMfaqIj20jSEKgKerCffnhTYE4Hscx0WNGEIpNihZWJs2XiOzVkyuOtH
0NoboXhSE3zZttml6MwscRv67HYlQxoCdSGTXZW3aTJpW1McBpf3lvbS5WYMtDaU
7rwTtwlRHTc4a2xpcnGZwXki/4pNxRGU7ZySLUG6tHGN
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:06 2025 by rpki-client