Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/Kn5YPKTavnkR9we3GavTZvxru0g.roa
File: Kn5YPKTavnkR9we3GavTZvxru0g.roa (raw, json)
Hash identifier: xBxCBv93EeHCLyNABUtZ7jn766Ch4SgbtDnPEkzOvDM=
Subject key identifier: 2A:7E:58:3C:A4:DA:BE:79:11:F7:07:B7:19:AB:D3:66:FC:6B:BB:48
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 019422FC2724EDBC0D8FF8AC1C947699ED26
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/Kn5YPKTavnkR9we3GavTZvxru0g.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5585
IP address blocks: 192.114.62.0/23 maxlen: 24
2001:7f8:3b::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:24:ed:bc:0d:8f:f8:ac:1c:94:76:99:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a7e583ca4dabe7911f707b719abd366fc6bbb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:cd:78:43:ba:39:89:d8:ec:ed:f6:46:ff:
a3:57:75:1a:0c:00:9d:1d:97:9d:58:d8:c8:34:13:
34:eb:a8:7d:ef:36:0f:77:88:de:f8:63:d9:29:58:
b0:bc:48:b1:72:70:f0:61:10:4b:cf:8d:5a:73:40:
54:3d:f9:06:f9:2e:b1:6d:31:f3:99:91:e6:8e:79:
85:6c:71:9a:39:12:46:4f:9c:c8:b2:4f:30:00:d3:
84:f3:d7:94:69:ae:64:ad:f0:60:c8:94:f3:d4:ec:
18:9f:a4:3d:0f:f2:0b:8e:df:15:ac:35:a7:e1:58:
ed:ea:d1:04:10:7d:35:57:c3:f7:6d:3b:e2:c3:ae:
75:be:27:83:a8:12:7c:cf:2b:75:3f:cb:6f:16:49:
f4:40:af:8c:c7:89:3a:f7:c2:4b:7f:33:bf:af:7b:
db:67:90:86:e0:90:bb:ef:62:ff:f0:7c:d2:4a:0c:
b2:79:a8:ba:0a:ae:c6:9c:e4:52:5f:f7:5c:39:4a:
6f:27:03:23:a5:f4:57:ce:80:08:65:c3:43:e4:1f:
7f:88:ad:f9:6e:fa:03:c0:c8:25:9b:71:78:2c:85:
a5:bc:00:ca:20:ec:0e:cb:53:c3:5d:9e:c6:33:f7:
01:6e:7d:86:e3:d0:22:da:1c:20:2e:aa:6e:45:3e:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:58:3C:A4:DA:BE:79:11:F7:07:B7:19:AB:D3:66:FC:6B:BB:48
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/Kn5YPKTavnkR9we3GavTZvxru0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.114.62.0/23
IPv6:
2001:7f8:3b::/48
Signature Algorithm: sha256WithRSAEncryption
94:5c:51:19:18:4c:be:98:4e:4b:58:d3:b2:b7:67:32:0c:00:
87:01:c0:b5:c5:96:49:42:12:c7:b9:5a:72:13:4d:f1:28:16:
24:96:e1:30:a4:9b:12:5b:17:bb:00:48:35:11:27:a0:2d:13:
b0:c0:a3:1f:6b:b5:57:8c:7e:97:5b:3a:7b:1a:b7:5a:48:26:
30:d9:f3:51:6b:fc:f8:23:4d:77:8d:87:31:9f:76:1f:95:4a:
6d:c4:21:98:f5:7d:6b:4d:b6:a9:ce:ee:cb:28:f1:e8:c8:d1:
d6:fd:a1:b6:4b:fc:f9:25:e4:8b:69:44:ba:cc:fa:61:bf:7f:
a3:76:82:73:85:d6:74:36:b8:8b:44:c7:bd:d0:8f:06:59:84:
fe:d8:89:cb:38:74:21:b4:82:42:d2:c1:3e:d1:74:ff:77:78:
24:01:93:c2:54:0c:93:7c:fa:bd:ba:13:e3:99:8e:a0:0b:94:
a8:8f:9c:c4:f4:e2:e6:c2:5d:85:10:b6:1c:91:be:db:14:68:
57:5b:bf:1d:44:6d:bd:9a:9d:19:e9:5b:7c:3d:fb:43:9d:a7:
98:40:3e:0c:93:dc:19:4b:14:3b:91:ca:42:4c:54:e4:41:0e:
48:ed:f7:26:4b:22:b6:1e:50:e0:81:4d:66:11:0a:1d:74:f0:
70:35:c7:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQi/Cck7bwNj/isHJR2me0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDk3MjFmNDU0OGMyNmNmMzYyZTk0NGE4MWIxYWNlZTdi
MjRiNTMwHhcNMjUwMTAxMTc0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTdlNTgzY2E0ZGFiZTc5MTFmNzA3YjcxOWFiZDM2NmZjNmJiYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEDNeEO6OYnY7O32Rv+jV3UaDACd
HZedWNjINBM066h97zYPd4je+GPZKViwvEixcnDwYRBLz41ac0BUPfkG+S6xbTHz
mZHmjnmFbHGaORJGT5zIsk8wANOE89eUaa5krfBgyJTz1OwYn6Q9D/ILjt8VrDWn
4Vjt6tEEEH01V8P3bTviw651vieDqBJ8zyt1P8tvFkn0QK+Mx4k698JLfzO/r3vb
Z5CG4JC772L/8HzSSgyyeai6Cq7GnORSX/dcOUpvJwMjpfRXzoAIZcND5B9/iK35
bvoDwMglm3F4LIWlvADKIOwOy1PDXZ7GM/cBbn2G49Ai2hwgLqpuRT6T0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCp+WDyk2r55EfcHtxmr02b8a7tIMB8GA1UdIwQY
MBaAFLIJch9FSMJs82LpRKgbGs7nsktTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQt
ZGJhNWMxODM0NjAxLzEvS241WVBLVGF2bmtSOXdlM0dhdlRadnhydTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQtZGJhNWMxODM0NjAx
LzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwHI+MA8E
AgACMAkDBwAgAQf4ADswDQYJKoZIhvcNAQELBQADggEBAJRcURkYTL6YTktY07K3
ZzIMAIcBwLXFlklCEse5WnITTfEoFiSW4TCkmxJbF7sASDURJ6AtE7DAox9rtVeM
fpdbOnsat1pIJjDZ81Fr/PgjTXeNhzGfdh+VSm3EIZj1fWtNtqnO7sso8ejI0db9
obZL/Pkl5ItpRLrM+mG/f6N2gnOF1nQ2uItEx73QjwZZhP7Yics4dCG0gkLSwT7R
dP93eCQBk8JUDJN8+r26E+OZjqALlKiPnMT04ubCXYUQthyRvtsUaFdbvx1Ebb2a
nRnpW3w9+0Odp5hAPgyT3BlLFDuRykJMVORBDkjt9yZLIrYeUOCBTWYRCh108HA1
xzo=
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:58 2025 by rpki-client