Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa
File: tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa (raw, json)
Hash identifier: +3QbGwJKO1wVzcZZV/GJcxqJzgKbCl/1gOdPe63EVdE=
Subject key identifier: B6:DE:1F:0F:66:37:67:05:1B:22:FB:41:C2:53:61:64:49:33:FE:CD
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 01942826958F519FA24B9505505297800A4B
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa
Signing time: Thu 02 Jan 2025 17:53:24 +0000
ROA not before: Thu 02 Jan 2025 17:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202319
IP address blocks: 194.34.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:95:8f:51:9f:a2:4b:95:05:50:52:97:80:0a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 2 17:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6de1f0f663767051b22fb41c25361644933fecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:21:1b:e2:36:5d:b5:9a:ee:a2:f4:51:98:
01:d9:79:8d:7e:41:79:1e:e0:91:70:3c:89:db:7a:
77:d5:fe:e7:c4:f6:6f:63:59:26:5e:b3:94:32:8a:
9a:39:f1:9b:dd:02:bf:5d:ea:6e:52:b6:d1:29:86:
71:ed:cc:90:84:7f:4f:1e:c9:ab:08:f3:08:49:f1:
e0:24:80:91:5b:34:97:82:3f:fd:6d:49:7f:fc:ed:
d2:dc:ad:2a:93:55:3b:95:12:7d:13:f3:50:7a:b8:
a4:0d:d3:b5:76:79:33:31:94:41:d9:e3:c7:c4:6c:
7c:07:63:9e:04:7f:ae:80:4e:99:25:08:92:3c:32:
32:ba:b1:5c:95:e1:6c:8d:b0:ee:5d:8a:13:0c:b1:
e9:55:b1:f6:7b:d9:f8:c2:c4:84:47:41:a5:28:6f:
47:5d:f7:bb:c3:a5:8b:ef:84:0d:73:1d:bb:68:c0:
3d:32:81:64:e3:88:0c:56:bd:cc:f2:b2:05:ff:92:
31:3b:ea:07:0a:d6:3f:7f:ff:4e:82:f6:53:63:59:
42:b0:b4:e8:af:3a:1c:a7:68:53:87:a8:62:72:69:
4f:0e:97:23:e8:1b:1f:56:26:53:ac:e3:4f:ff:78:
dc:6b:ff:dc:01:ba:fd:1c:10:df:c1:1f:5b:7b:a5:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:1F:0F:66:37:67:05:1B:22:FB:41:C2:53:61:64:49:33:FE:CD
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.163.0/24
Signature Algorithm: sha256WithRSAEncryption
21:15:2a:da:0e:c1:97:17:eb:08:3d:e5:9a:8c:be:9e:f8:2a:
06:44:f8:14:e3:7c:ee:5b:d2:88:20:b8:fc:55:d2:67:f2:dd:
65:1b:b0:b7:4f:4d:d5:82:66:f8:f3:b6:f7:d7:86:21:96:9f:
b0:60:b4:a8:62:a6:75:2b:dd:56:96:5c:23:49:39:3d:54:2b:
d7:9b:2d:b2:f8:12:0e:ac:cc:0b:cb:da:da:78:4e:c1:83:85:
59:8c:4c:ac:c6:50:70:a8:66:30:7f:72:15:98:5c:47:98:35:
50:9d:ec:95:43:9e:b7:27:21:6b:47:53:e9:90:cb:99:8b:eb:
3f:1e:4b:7b:b1:bc:a9:45:62:88:e0:5a:c5:98:20:65:c4:18:
b4:73:38:61:6b:0f:0d:e8:1b:f3:f1:0f:45:ab:ac:fd:32:7f:
6b:86:29:e6:4c:7c:ce:22:51:67:14:23:dc:b0:87:1b:1c:31:
af:b4:3e:39:ca:bf:98:41:9b:d8:36:1f:95:52:c4:dd:11:46:
27:22:7d:54:ba:50:c5:97:10:35:c6:28:e3:e2:ba:1d:7d:dd:
b6:9a:d1:be:3f:80:69:fe:d6:da:10:5f:b8:76:fe:5a:84:58:
0a:2e:44:4a:1b:89:5c:68:7c:10:98:f5:c4:61:71:5c:e3:77:
2c:6b:92:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJpWPUZ+iS5UFUFKXgApLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWQ1NmM1MmM3NzMzZjgzYmU3NzRhZmE0N2JiZDU1ZDI4
Nzk3YWMwHhcNMjUwMTAyMTc1MzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmRlMWYwZjY2Mzc2NzA1MWIyMmZiNDFjMjUzNjE2NDQ5MzNmZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnIhG+I2XbWa7qL0UZgB2XmNfkF5
HuCRcDyJ23p31f7nxPZvY1kmXrOUMoqaOfGb3QK/XepuUrbRKYZx7cyQhH9PHsmr
CPMISfHgJICRWzSXgj/9bUl//O3S3K0qk1U7lRJ9E/NQerikDdO1dnkzMZRB2ePH
xGx8B2OeBH+ugE6ZJQiSPDIyurFcleFsjbDuXYoTDLHpVbH2e9n4wsSER0GlKG9H
Xfe7w6WL74QNcx27aMA9MoFk44gMVr3M8rIF/5IxO+oHCtY/f/9OgvZTY1lCsLTo
rzocp2hTh6hicmlPDpcj6BsfViZTrONP/3jca//cAbr9HBDfwR9be6XqqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbeHw9mN2cFGyL7QcJTYWRJM/7NMB8GA1UdIwQY
MBaAFPWdVsUsdzP4O+d0r6R7vVXSh5esMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUt
NWMwNjdiOGI5MWE1LzEvdHQ0ZkQyWTNad1ViSXZ0QndsTmhaRWt6X3MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUtNWMwNjdiOGI5MWE1
LzEvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiKjMA0G
CSqGSIb3DQEBCwUAA4IBAQAhFSraDsGXF+sIPeWajL6e+CoGRPgU43zuW9KIILj8
VdJn8t1lG7C3T03Vgmb487b314Yhlp+wYLSoYqZ1K91WllwjSTk9VCvXmy2y+BIO
rMwLy9raeE7Bg4VZjEysxlBwqGYwf3IVmFxHmDVQneyVQ563JyFrR1PpkMuZi+s/
Hkt7sbypRWKI4FrFmCBlxBi0czhhaw8N6Bvz8Q9Fq6z9Mn9rhinmTHzOIlFnFCPc
sIcbHDGvtD45yr+YQZvYNh+VUsTdEUYnIn1UulDFlxA1xijj4rodfd22mtG+P4Bp
/tbaEF+4dv5ahFgKLkRKG4lcaHwQmPXEYXFc43csa5L8
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:00 2025 by rpki-client