Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/BBc69UDcCnvJ9YXOkYKIegaNiDE.roa
File: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (raw, json)
Hash identifier: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=
Subject key identifier: 04:17:3A:F5:40:DC:0A:7B:C9:F5:85:CE:91:82:88:7A:06:8D:88:31
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019420D59991E76903A6477242070809E846
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/BBc69UDcCnvJ9YXOkYKIegaNiDE.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49553
IP address blocks: 130.193.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:99:91:e7:69:03:a6:47:72:42:07:08:09:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04173af540dc0a7bc9f585ce9182887a068d8831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:e0:0c:7c:fb:ec:89:b3:55:79:f4:45:d1:
9e:df:ef:b9:0f:e5:2d:39:64:4c:3d:d8:29:d9:d5:
af:6c:e0:82:29:7b:0d:fd:69:10:50:c4:91:e8:b6:
5c:1b:a6:77:94:92:3c:aa:7e:5d:57:9b:ea:de:3b:
ac:3d:29:e9:9c:7a:56:e0:30:fb:b3:50:87:52:9e:
cd:86:88:40:29:36:f4:60:39:e9:fd:5a:4b:42:98:
89:01:44:7d:49:6d:ed:ce:44:bc:5d:9f:36:0c:1f:
ab:dd:f3:7a:28:75:57:21:ef:d3:90:6f:ec:35:90:
bb:ef:36:b8:7d:35:62:ab:df:24:4e:45:c1:77:cb:
f3:40:1e:b4:51:83:77:0a:ff:0f:ba:98:34:7c:27:
db:b3:f6:42:12:e5:be:e3:b4:4f:5c:f4:11:75:ab:
83:c9:75:8c:d6:ac:d5:94:74:32:6f:e2:8d:94:96:
d3:ab:84:0b:ae:a8:b2:02:9d:5f:a9:05:af:f7:cb:
bb:74:b4:7d:5a:64:f3:0b:a3:61:08:a2:04:25:a7:
c4:14:72:6a:fa:19:18:db:8f:99:6e:6c:7c:a4:7e:
f9:8a:30:70:23:a9:4e:63:55:0f:56:da:34:72:15:
1f:68:5d:8f:7a:ac:91:aa:24:b2:96:68:f2:62:42:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:3A:F5:40:DC:0A:7B:C9:F5:85:CE:91:82:88:7A:06:8D:88:31
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/BBc69UDcCnvJ9YXOkYKIegaNiDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:79:57:21:3c:16:7f:c2:fb:3a:2c:2e:a5:1e:31:20:5a:3c:
cc:d9:6e:67:78:3a:ff:11:f6:e5:f3:6c:e9:4e:b0:0c:0c:8e:
9c:ca:f3:c9:5f:4e:ad:14:1b:f6:a5:62:46:10:44:55:eb:b0:
bd:11:0f:55:be:2f:ed:77:50:d5:64:cb:66:df:f0:1c:a8:53:
82:d4:81:0c:93:45:dc:57:ef:f3:50:2c:e0:1a:b0:8d:22:06:
76:28:08:9e:82:1c:e3:c3:76:15:06:25:77:6d:ed:d1:fd:fb:
a5:8f:f2:19:1c:f5:56:42:ac:c5:cf:25:6a:79:68:6b:eb:2a:
84:69:21:ca:a7:d7:4a:2a:3f:ac:f4:b7:b0:b9:49:0c:66:a6:
5a:f2:53:6f:b5:8d:68:17:70:38:b0:a9:86:2f:50:d5:e9:58:
b9:c2:5e:e2:05:15:f0:7a:0b:df:87:14:59:15:f2:7b:d9:38:
64:67:f4:a9:a7:88:5b:c2:66:db:9b:ba:42:2b:a7:e7:95:c4:
69:53:b3:b6:af:95:99:fb:f8:ba:5f:58:9b:56:ae:84:85:d1:
9d:fc:a8:67:67:b9:81:27:8e:6c:e4:88:d6:b4:a2:df:9a:f8:
65:57:3a:bf:c5:6a:1d:be:85:11:fc:d4:60:fc:66:22:62:d4:
74:da:8d:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1ZmR52kDpkdyQgcICehGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGQzZTVkOTk0YmVjZDNmMjU4YzQxZGYzOWYxZjYzZWM1
NjNlMWQwHhcNMjUwMTAxMDc0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDE3M2FmNTQwZGMwYTdiYzlmNTg1Y2U5MTgyODg3YTA2OGQ4ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05HgDHz77ImzVXn0RdGe3++5D+Ut
OWRMPdgp2dWvbOCCKXsN/WkQUMSR6LZcG6Z3lJI8qn5dV5vq3jusPSnpnHpW4DD7
s1CHUp7NhohAKTb0YDnp/VpLQpiJAUR9SW3tzkS8XZ82DB+r3fN6KHVXIe/TkG/s
NZC77za4fTViq98kTkXBd8vzQB60UYN3Cv8Pupg0fCfbs/ZCEuW+47RPXPQRdauD
yXWM1qzVlHQyb+KNlJbTq4QLrqiyAp1fqQWv98u7dLR9WmTzC6NhCKIEJafEFHJq
+hkY24+Zbmx8pH75ijBwI6lOY1UPVto0chUfaF2PeqyRqiSylmjyYkKfoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQXOvVA3Ap7yfWFzpGCiHoGjYgxMB8GA1UdIwQY
MBaAFOdNPl2ZS+zT8ljEHfOfH2PsVj4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMt
YzIzZDdhZGJlYmRjLzEvQkJjNjlVRGNDbnZKOVlYT2tZS0llZ2FOaURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMtYzIzZDdhZGJlYmRj
LzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsFIMA0G
CSqGSIb3DQEBCwUAA4IBAQB+eVchPBZ/wvs6LC6lHjEgWjzM2W5neDr/Efbl82zp
TrAMDI6cyvPJX06tFBv2pWJGEERV67C9EQ9Vvi/td1DVZMtm3/AcqFOC1IEMk0Xc
V+/zUCzgGrCNIgZ2KAieghzjw3YVBiV3be3R/fulj/IZHPVWQqzFzyVqeWhr6yqE
aSHKp9dKKj+s9LewuUkMZqZa8lNvtY1oF3A4sKmGL1DV6Vi5wl7iBRXwegvfhxRZ
FfJ72ThkZ/Spp4hbwmbbm7pCK6fnlcRpU7O2r5WZ+/i6X1ibVq6EhdGd/KhnZ7mB
J45s5IjWtKLfmvhlVzq/xWodvoUR/NRg/GYiYtR02o0l
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:49:26 2025 by rpki-client