Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/RTZYU-7DG4fUoipBd0qSh8BirjI.roa
File: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (raw, json)
Hash identifier: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=
Subject key identifier: 45:36:58:53:EE:C3:1B:87:D4:A2:2A:41:77:4A:92:87:C0:62:AE:32
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260E55243674AA7DA9E404CDB00956
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/RTZYU-7DG4fUoipBd0qSh8BirjI.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 188.191.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0e:55:24:36:74:aa:7d:a9:e4:04:cd:b0:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45365853eec31b87d4a22a41774a9287c062ae32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:2b:9c:8b:b4:8f:01:97:b9:99:33:eb:6a:
f4:35:84:55:04:dc:34:f3:ae:6c:ad:3c:0a:60:75:
86:3f:67:9c:ce:8c:76:40:e2:6b:0e:17:54:17:d9:
02:0b:02:6f:b6:fa:37:41:6f:a2:f9:38:1e:3d:ad:
43:b0:98:10:d8:29:8c:44:b4:ad:46:a9:a3:37:4a:
d6:a8:48:21:59:d4:3d:c2:93:cf:a5:68:ab:8c:42:
ec:60:8b:a2:83:fc:83:9d:b2:b6:66:22:e0:e3:ae:
82:06:df:9a:b2:8b:29:be:73:8b:87:b0:b2:79:0c:
30:75:37:9b:1a:94:e8:83:66:0f:43:19:fe:95:08:
51:da:0f:98:c7:f8:54:3d:5a:59:bb:08:3a:fb:b6:
39:f9:01:9f:d0:de:72:26:de:e2:4c:30:6c:e3:f1:
35:2b:32:05:ad:4b:af:6d:45:e3:2c:1b:6a:8e:9f:
7d:e7:b5:fc:00:be:19:0d:52:ea:b1:22:27:b6:f7:
22:f5:bc:62:43:a0:5b:e3:c9:8b:25:25:e7:7e:c8:
98:01:18:1f:11:37:89:dd:a3:ff:8f:98:50:d5:2a:
7a:fb:1b:81:3f:83:ae:f5:fb:0a:7b:f6:a9:be:7f:
bd:4d:45:d7:fd:31:4d:87:d0:ee:25:49:9c:8a:2c:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:58:53:EE:C3:1B:87:D4:A2:2A:41:77:4A:92:87:C0:62:AE:32
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/RTZYU-7DG4fUoipBd0qSh8BirjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f5:11:c0:ab:f2:a6:11:7f:07:7f:75:e3:09:f5:61:30:3a:
54:63:5f:1f:d0:08:15:b7:fb:23:75:10:b4:48:ee:98:92:20:
17:28:72:2d:e7:7b:ad:39:d5:cc:46:09:3e:c5:b4:57:e5:fd:
46:ff:85:aa:4a:21:05:a2:19:cc:cc:01:55:b6:b0:6d:69:e2:
a9:e7:a9:1a:50:93:8b:10:d2:b2:80:1c:0c:9e:7a:d6:0c:85:
59:1f:4c:90:5e:1e:68:78:21:3c:c4:ab:b7:0c:bf:52:fc:ec:
2b:4b:a9:51:29:44:57:89:30:64:33:bf:b5:2c:2e:07:7b:c1:
1d:79:66:06:bf:a3:a3:e4:b7:e6:ae:c8:fd:fd:c7:2e:79:1b:
d3:4a:4c:72:aa:cd:f2:ad:48:ac:2d:20:3c:55:ec:a6:7a:14:
2d:26:a8:16:e6:2d:63:64:e9:68:60:bb:74:19:c7:71:3e:bf:
c2:d4:96:55:59:c7:d3:2e:8b:62:59:a1:28:da:ae:46:08:2d:
45:60:9e:25:60:16:68:c1:8c:97:b8:46:8c:85:a5:b9:c5:d5:
a4:c4:e2:2b:d5:f2:e9:54:c0:da:53:92:9c:a5:2d:40:54:28:
76:8e:99:17:9f:9e:f8:0e:16:44:cf:13:3c:2f:c7:52:79:80:
ef:43:e8:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJg5VJDZ0qn2p5ATNsAlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUwMTAyMTc1MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM2NTg1M2VlYzMxYjg3ZDRhMjJhNDE3NzRhOTI4N2MwNjJhZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIkrnIu0jwGXuZkz62r0NYRVBNw0
865srTwKYHWGP2eczox2QOJrDhdUF9kCCwJvtvo3QW+i+TgePa1DsJgQ2CmMRLSt
RqmjN0rWqEghWdQ9wpPPpWirjELsYIuig/yDnbK2ZiLg466CBt+asospvnOLh7Cy
eQwwdTebGpTog2YPQxn+lQhR2g+Yx/hUPVpZuwg6+7Y5+QGf0N5yJt7iTDBs4/E1
KzIFrUuvbUXjLBtqjp9957X8AL4ZDVLqsSIntvci9bxiQ6Bb48mLJSXnfsiYARgf
ETeJ3aP/j5hQ1Sp6+xuBP4Ou9fsKe/apvn+9TUXX/TFNh9DuJUmciiyQFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEU2WFPuwxuH1KIqQXdKkofAYq4yMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvUlRaWVUtN0RHNGZVb2lwQmQwcVNoOEJpcmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9sMA0G
CSqGSIb3DQEBCwUAA4IBAQB99RHAq/KmEX8Hf3XjCfVhMDpUY18f0AgVt/sjdRC0
SO6YkiAXKHIt53utOdXMRgk+xbRX5f1G/4WqSiEFohnMzAFVtrBtaeKp56kaUJOL
ENKygBwMnnrWDIVZH0yQXh5oeCE8xKu3DL9S/OwrS6lRKURXiTBkM7+1LC4He8Ed
eWYGv6Oj5Lfmrsj9/ccueRvTSkxyqs3yrUisLSA8VeymehQtJqgW5i1jZOloYLt0
GcdxPr/C1JZVWcfTLotiWaEo2q5GCC1FYJ4lYBZowYyXuEaMhaW5xdWkxOIr1fLp
VMDaU5KcpS1AVCh2jpkXn574DhZEzxM8L8dSeYDvQ+j1
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:16 2025 by rpki-client