Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/m6l4SopMeawwf-xaFHTLkByhnNs.roa
File: m6l4SopMeawwf-xaFHTLkByhnNs.roa (raw, json)
Hash identifier: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=
Subject key identifier: 9B:A9:78:4A:8A:4C:79:AC:30:7F:EC:5A:14:74:CB:90:1C:A1:9C:DB
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019421B1897871F8CB152EC2D908E2398665
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/m6l4SopMeawwf-xaFHTLkByhnNs.roa
Signing time: Wed 01 Jan 2025 11:47:50 +0000
ROA not before: Wed 01 Jan 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5516
IP address blocks: 194.117.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:89:78:71:f8:cb:15:2e:c2:d9:08:e2:39:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ba9784a8a4c79ac307fec5a1474cb901ca19cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f6:e8:c5:bb:07:1e:54:c7:0a:72:2e:63:04:
a9:99:07:8d:81:b7:87:6a:de:5c:c6:2a:55:79:ce:
ee:9d:f6:4c:8f:86:2e:d5:7d:90:ec:b6:7c:e9:0e:
47:ee:05:6d:2c:58:55:04:04:b5:31:b4:30:ad:e8:
62:20:7e:c0:06:54:aa:21:e2:b7:aa:23:f0:5c:7b:
20:90:01:08:da:52:24:96:1e:7d:7d:b3:81:f9:32:
88:d5:97:ab:e0:41:78:b2:a0:9f:ea:80:b8:f1:e0:
f7:19:cd:5b:0c:ed:36:09:8b:30:9b:7b:ff:49:bf:
1b:8a:6e:b8:53:c5:68:53:ae:46:4b:85:15:c1:d4:
02:40:3e:47:df:95:ad:03:c0:1e:43:67:5e:c9:1f:
c4:86:12:92:9a:42:59:90:a8:87:fc:63:cf:a7:67:
bf:11:0c:c5:3b:70:ff:27:2a:eb:91:14:39:37:38:
c4:fd:fc:eb:ea:27:30:9e:60:54:ef:85:fc:44:65:
c5:df:21:b6:7d:8e:44:27:e8:7a:05:c4:4f:db:28:
69:37:ef:5d:e2:61:83:8f:49:f9:f5:5b:67:69:46:
f9:b8:b2:a2:5e:c7:11:a2:40:fc:3a:a2:43:98:46:
4b:40:29:cc:97:e8:a9:ba:23:af:03:90:45:e9:ea:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:78:4A:8A:4C:79:AC:30:7F:EC:5A:14:74:CB:90:1C:A1:9C:DB
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/m6l4SopMeawwf-xaFHTLkByhnNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.32.0/22
Signature Algorithm: sha256WithRSAEncryption
88:7b:b1:c9:ff:a2:a1:23:16:57:51:d2:59:e4:9d:e9:d7:d9:
de:d7:7d:06:36:9a:da:d3:55:b4:d8:aa:ed:8b:ea:5a:37:37:
4e:49:20:8a:14:4d:56:6c:6c:5c:ca:fb:c6:ca:e1:8a:01:7d:
bb:8b:c9:2c:7c:f0:28:ce:eb:af:8e:67:5f:7d:86:ea:3a:0c:
ed:a5:ac:4e:fb:29:25:18:5d:01:2d:39:2c:8f:a7:8b:48:c8:
63:04:eb:f2:e9:d5:e4:03:50:57:8f:7f:27:d9:ab:28:f8:33:
bb:01:49:97:f8:24:95:7b:a1:1a:fd:4f:da:03:4c:dd:2c:0a:
c1:33:56:a1:9f:ee:a7:4c:9e:b2:d3:ce:f0:4f:ed:3b:4d:50:
68:a0:94:2d:2e:cb:0f:95:2b:57:a1:d7:2c:c9:da:92:95:fd:
a1:1e:9f:83:57:31:eb:e8:6c:bb:a2:93:83:87:f8:99:bb:62:
11:fe:15:2f:5d:e2:39:95:99:b4:56:2f:c0:f0:00:98:a2:ab:
13:cd:b3:7d:68:2a:f3:50:fb:3b:fb:66:38:f9:6c:c0:14:d9:
e2:de:44:01:9d:76:fc:24:8c:3c:28:29:42:6c:a5:e5:3c:19:
e1:2c:e6:17:51:74:ce:fd:f9:99:44:e4:98:ff:38:9c:e5:8f:
30:7b:13:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsYl4cfjLFS7C2QjiOYZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjUwMTAxMTE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmE5Nzg0YThhNGM3OWFjMzA3ZmVjNWExNDc0Y2I5MDFjYTE5Y2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/boxbsHHlTHCnIuYwSpmQeNgbeH
at5cxipVec7unfZMj4Yu1X2Q7LZ86Q5H7gVtLFhVBAS1MbQwrehiIH7ABlSqIeK3
qiPwXHsgkAEI2lIklh59fbOB+TKI1Zer4EF4sqCf6oC48eD3Gc1bDO02CYswm3v/
Sb8bim64U8VoU65GS4UVwdQCQD5H35WtA8AeQ2deyR/EhhKSmkJZkKiH/GPPp2e/
EQzFO3D/JyrrkRQ5NzjE/fzr6icwnmBU74X8RGXF3yG2fY5EJ+h6BcRP2yhpN+9d
4mGDj0n59VtnaUb5uLKiXscRokD8OqJDmEZLQCnMl+ipuiOvA5BF6epHHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJupeEqKTHmsMH/sWhR0y5AcoZzbMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvbTZsNFNvcE1lYXd3Zi14YUZIVExrQnlobk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwnUgMA0G
CSqGSIb3DQEBCwUAA4IBAQCIe7HJ/6KhIxZXUdJZ5J3p19ne130GNpra01W02Krt
i+paNzdOSSCKFE1WbGxcyvvGyuGKAX27i8ksfPAozuuvjmdffYbqOgztpaxO+ykl
GF0BLTksj6eLSMhjBOvy6dXkA1BXj38n2aso+DO7AUmX+CSVe6Ea/U/aA0zdLArB
M1ahn+6nTJ6y087wT+07TVBooJQtLssPlStXodcsydqSlf2hHp+DVzHr6Gy7opOD
h/iZu2IR/hUvXeI5lZm0Vi/A8ACYoqsTzbN9aCrzUPs7+2Y4+WzAFNni3kQBnXb8
JIw8KClCbKXlPBnhLOYXUXTO/fmZROSY/zic5Y8wexOC
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:33 2025 by rpki-client