Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bHc2sO8P0_5kXyQVLpYnFLcWY_U.roa
File: bHc2sO8P0_5kXyQVLpYnFLcWY_U.roa (raw, json)
Hash identifier: RdPvmtffWKcAiaB1JCJZ6BZqIxmsz1LfFOl4uzgeijU=
Subject key identifier: 6C:77:36:B0:EF:0F:D3:FE:64:5F:24:15:2E:96:27:14:B7:16:63:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF81A58C5C4EA39C8C851AD3B654A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bHc2sO8P0_5kXyQVLpYnFLcWY_U.roa
Signing time: Thu 02 Jan 2025 05:49:39 +0000
ROA not before: Thu 02 Jan 2025 05:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207228
IP address blocks: 31.148.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f8:1a:58:c5:c4:ea:39:c8:c8:51:ad:3b:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7736b0ef0fd3fe645f24152e962714b71663f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:1e:82:02:16:a2:83:2e:02:72:5d:ea:c5:
79:50:39:a2:1c:30:9f:7d:27:03:50:94:4c:38:a3:
96:68:a1:1d:4c:eb:5d:4e:b4:bb:06:5b:b5:66:a4:
de:df:6c:44:a9:41:ba:5f:a3:be:4a:35:3b:32:d7:
7a:83:88:34:d0:f2:4b:2d:8e:4b:10:61:0a:9d:5a:
f3:1a:e1:f3:79:d8:64:72:0d:ce:2b:8a:ec:17:07:
6d:5c:38:2f:6b:4d:dc:39:cb:0f:09:9e:63:93:74:
d2:f3:3e:ef:fa:66:49:93:33:9c:b7:85:cc:f0:6a:
c4:a4:11:91:1d:1a:e7:5a:dd:70:45:4a:77:0a:92:
ec:02:1a:1b:15:a3:f3:f5:fe:04:76:53:67:26:1c:
17:6b:54:e1:42:60:e6:61:fc:af:c9:1a:4f:97:ed:
ac:ad:ec:f4:73:da:96:67:ab:9f:b6:97:02:82:a0:
39:58:d3:46:a7:03:0b:4d:d9:9c:35:a0:bc:7d:ad:
7e:5b:7b:77:af:c4:40:dd:62:bd:dd:cc:de:b6:e7:
69:cc:77:3a:45:d8:82:47:b0:4c:d7:44:10:6e:4d:
46:e7:cb:bb:0b:19:8c:fc:eb:d6:dc:83:b8:f6:c5:
ef:1f:fb:eb:00:02:9e:87:2b:0c:2e:66:94:8e:01:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:77:36:B0:EF:0F:D3:FE:64:5F:24:15:2E:96:27:14:B7:16:63:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bHc2sO8P0_5kXyQVLpYnFLcWY_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ea:5c:37:c1:8b:8c:9f:db:c1:40:82:fe:74:a0:1d:64:c9:
76:b2:90:ee:58:e2:e1:9c:68:f7:38:73:f5:a6:5d:41:6f:12:
e3:47:04:7d:eb:79:7e:11:0b:4a:9b:8c:2a:f8:f3:f5:84:29:
39:6c:4f:4e:79:b0:23:f5:1e:40:90:86:5b:61:a1:dd:55:73:
2c:45:cc:01:30:8e:71:1b:a4:41:59:8d:4d:b6:e9:08:e2:0c:
5c:5e:1b:04:b3:5a:3b:55:91:52:54:8b:cc:be:76:7c:78:f0:
c6:a4:80:c0:f8:9c:75:69:60:fd:fb:54:d7:55:a0:03:d3:c0:
2e:a0:50:8b:45:39:59:e6:01:b2:e3:66:69:4d:0b:d7:5a:77:
48:c8:47:09:0e:5a:48:63:5e:d6:c7:6c:a3:d1:72:34:78:65:
40:17:0b:29:fd:0c:38:ef:2b:fb:35:00:78:26:b5:cb:bf:3c:
df:6b:d8:e5:de:3b:05:c5:59:6f:d8:ae:68:e8:b9:ce:9d:4c:
5f:16:b4:49:03:96:f2:ed:e4:da:5d:fd:ac:b8:a3:94:d8:1c:
58:64:16:b0:fb:1d:f1:34:6f:c3:cd:0d:99:e7:07:f1:6a:2d:
d5:c0:1d:ca:34:e3:ee:3a:cb:e4:11:22:ad:cd:af:59:1a:35:
fd:f9:ee:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj/gaWMXE6jnIyFGtO2VKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzc3MzZiMGVmMGZkM2ZlNjQ1ZjI0MTUyZTk2MjcxNGI3MTY2M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjkeggIWooMuAnJd6sV5UDmiHDCf
fScDUJRMOKOWaKEdTOtdTrS7Blu1ZqTe32xEqUG6X6O+SjU7Mtd6g4g00PJLLY5L
EGEKnVrzGuHzedhkcg3OK4rsFwdtXDgva03cOcsPCZ5jk3TS8z7v+mZJkzOct4XM
8GrEpBGRHRrnWt1wRUp3CpLsAhobFaPz9f4EdlNnJhwXa1ThQmDmYfyvyRpPl+2s
rez0c9qWZ6uftpcCgqA5WNNGpwMLTdmcNaC8fa1+W3t3r8RA3WK93czetudpzHc6
RdiCR7BM10QQbk1G58u7CxmM/OvW3IO49sXvH/vrAAKehysMLmaUjgH6XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGx3NrDvD9P+ZF8kFS6WJxS3FmP1MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYkhjMnNPOFAwXzVrWHlRVkxwWW5GTGNXWV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH5QwMA0G
CSqGSIb3DQEBCwUAA4IBAQB86lw3wYuMn9vBQIL+dKAdZMl2spDuWOLhnGj3OHP1
pl1BbxLjRwR963l+EQtKm4wq+PP1hCk5bE9OebAj9R5AkIZbYaHdVXMsRcwBMI5x
G6RBWY1NtukI4gxcXhsEs1o7VZFSVIvMvnZ8ePDGpIDA+Jx1aWD9+1TXVaAD08Au
oFCLRTlZ5gGy42ZpTQvXWndIyEcJDlpIY17Wx2yj0XI0eGVAFwsp/Qw47yv7NQB4
JrXLvzzfa9jl3jsFxVlv2K5o6LnOnUxfFrRJA5by7eTaXf2suKOU2BxYZBaw+x3x
NG/DzQ2Z5wfxai3VwB3KNOPuOsvkESKtza9ZGjX9+e5/
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:55 2025 by rpki-client