Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/RlHwhR54JFo3eiYjQ0HNmngGq1c.roa
File: RlHwhR54JFo3eiYjQ0HNmngGq1c.roa (raw, json)
Hash identifier: Zd+He0y/cu8f6yOcHa/4lo5/3/FYNL3U25I+7MQxDIs=
Subject key identifier: 46:51:F0:85:1E:78:24:5A:37:7A:26:23:43:41:CD:9A:78:06:AB:57
Certificate issuer: /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial: 0194221F833602AB471FE3C0B00D4CBB6DAA
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/RlHwhR54JFo3eiYjQ0HNmngGq1c.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47346
IP address blocks: 94.139.33.0/24 maxlen: 24
194.140.235.0/24 maxlen: 24
2a14:1380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:83:36:02:ab:47:1f:e3:c0:b0:0d:4c:bb:6d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4651f0851e78245a377a26234341cd9a7806ab57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:d1:fb:a4:c1:e6:08:ea:5d:54:93:c4:a1:
60:0d:82:3e:86:62:02:9e:4b:49:86:3b:50:d8:00:
65:da:d0:92:3a:67:ac:15:1f:42:d1:7d:c4:c5:b7:
7b:c9:9c:ed:62:d9:b3:6b:3a:c1:ff:16:4c:66:76:
7b:b6:a5:ad:15:f1:04:ff:6b:5a:e5:4c:e6:54:6c:
27:67:79:8c:1c:36:ce:ec:bf:fd:11:26:e5:cf:19:
4c:e0:d6:0f:de:53:00:bc:f2:be:cf:90:fa:6a:d1:
58:80:77:17:d8:09:71:7c:71:75:d5:09:da:09:36:
d5:fd:b1:53:19:5c:56:bb:40:7d:dc:f6:c9:fc:d4:
7d:e5:44:13:04:1d:93:c3:79:e0:ad:1c:db:26:44:
a6:2f:c7:ad:77:1e:2a:c2:1b:ca:40:96:05:51:80:
98:54:53:40:be:2e:e2:e6:03:c9:d8:a6:b1:8c:cc:
d3:a8:f1:72:0f:b2:bb:c5:12:d2:5a:45:43:e1:0f:
11:10:1d:26:8b:9f:eb:dc:03:98:8a:44:b1:17:eb:
ae:23:c4:5d:b1:03:d4:6c:55:ef:76:ab:53:18:db:
33:d3:66:df:4d:2d:ca:08:67:66:f6:08:fd:25:9d:
45:1c:ec:ff:3c:68:7e:ff:5d:9d:66:c4:2d:07:b1:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:51:F0:85:1E:78:24:5A:37:7A:26:23:43:41:CD:9A:78:06:AB:57
X509v3 Authority Key Identifier:
keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/RlHwhR54JFo3eiYjQ0HNmngGq1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.33.0/24
194.140.235.0/24
IPv6:
2a14:1380::/32
Signature Algorithm: sha256WithRSAEncryption
25:50:86:6f:60:80:ed:3a:c1:e7:c5:c8:c5:92:66:93:09:39:
86:cc:8b:a9:b0:3f:3c:0f:9a:f4:6c:91:d9:a1:38:8b:fa:e6:
92:a3:8e:11:b0:12:1c:03:f6:4c:76:f1:43:56:ba:48:15:00:
0a:9c:4e:75:10:15:b8:36:14:24:97:01:f0:33:da:8d:fe:ef:
3e:ee:92:dd:65:1d:43:e9:89:18:27:a2:6f:be:36:94:9b:ab:
bc:cc:25:c0:fd:ab:5e:60:cd:7c:7f:0d:d5:ee:ac:5e:11:49:
73:94:cb:90:3c:9b:46:cb:cc:9a:8f:4b:7f:11:49:ed:73:28:
24:14:a0:1d:fb:03:83:66:5b:d0:19:3b:f1:a6:8d:c0:77:5d:
da:39:41:95:37:95:2b:61:21:e4:a9:79:59:b5:c2:14:a4:0e:
fd:8a:29:4b:84:51:21:ae:e1:d8:9f:07:f6:7b:04:58:31:15:
9e:a9:0a:09:92:01:c9:38:d3:9f:f8:dc:81:0f:ce:56:8b:4b:
da:27:5f:12:ac:26:36:f6:43:7e:a1:e1:45:db:96:15:a5:70:
16:9a:5a:d8:35:85:e2:99:cd:42:88:ab:9d:18:b2:62:f0:b0:
ff:97:8d:14:ab:64:bb:64:74:b4:10:12:f8:76:81:b6:18:85:
0b:bd:4c:a0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiH4M2AqtHH+PAsA1Mu22qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmVkMTFiYjZkNWUyZDZhNmVhYmExOWRhZjYzN2I1M2Y3
NjdlZDUwHhcNMjUwMTAxMTM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjUxZjA4NTFlNzgyNDVhMzc3YTI2MjM0MzQxY2Q5YTc4MDZhYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/R+6TB5gjqXVSTxKFgDYI+hmIC
nktJhjtQ2ABl2tCSOmesFR9C0X3Exbd7yZztYtmzazrB/xZMZnZ7tqWtFfEE/2ta
5UzmVGwnZ3mMHDbO7L/9ESblzxlM4NYP3lMAvPK+z5D6atFYgHcX2AlxfHF11Qna
CTbV/bFTGVxWu0B93PbJ/NR95UQTBB2Tw3ngrRzbJkSmL8etdx4qwhvKQJYFUYCY
VFNAvi7i5gPJ2KaxjMzTqPFyD7K7xRLSWkVD4Q8REB0mi5/r3AOYikSxF+uuI8Rd
sQPUbFXvdqtTGNsz02bfTS3KCGdm9gj9JZ1FHOz/PGh+/12dZsQtB7GbwQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEZR8IUeeCRaN3omI0NBzZp4BqtXMB8GA1UdIwQY
MBaAFFVu0Ru21eLWpuq6Gdr2N7U/dn7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYt
MTk5ODY2NWJkNzkzLzEvUmxId2hSNTRKRm8zZWlZalEwSE5tbmdHcTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYtMTk5ODY2NWJkNzkz
LzEvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXoshAwQA
wozrMA0EAgACMAcDBQAqFBOAMA0GCSqGSIb3DQEBCwUAA4IBAQAlUIZvYIDtOsHn
xcjFkmaTCTmGzIupsD88D5r0bJHZoTiL+uaSo44RsBIcA/ZMdvFDVrpIFQAKnE51
EBW4NhQklwHwM9qN/u8+7pLdZR1D6YkYJ6JvvjaUm6u8zCXA/ateYM18fw3V7qxe
EUlzlMuQPJtGy8yaj0t/EUntcygkFKAd+wODZlvQGTvxpo3Ad13aOUGVN5UrYSHk
qXlZtcIUpA79iilLhFEhruHYnwf2ewRYMRWeqQoJkgHJONOf+NyBD85Wi0vaJ18S
rCY29kN+oeFF25YVpXAWmlrYNYXimc1CiKudGLJi8LD/l40Uq2S7ZHS0EBL4doG2
GIULvUyg
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:28 2025 by rpki-client