Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa
File: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (raw, json)
Hash identifier: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=
Subject key identifier: 53:48:A2:0B:25:4A:90:1B:6C:60:A4:10:E7:DB:85:83:05:74:BD:46
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019420D62936361FE2873017CC554A15C688
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16611
IP address blocks: 194.4.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:29:36:36:1f:e2:87:30:17:cc:55:4a:15:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5348a20b254a901b6c60a410e7db85830574bd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:4c:3a:5f:ec:52:4b:d5:02:12:dc:16:fa:
bb:c4:10:6e:f1:61:c8:de:b1:90:e0:2f:8a:71:8f:
69:56:f9:9e:04:03:1c:1e:4d:86:01:fd:d3:32:c0:
86:33:8a:4a:1b:ad:7e:ef:18:c9:5e:ac:04:12:e8:
d8:39:47:ab:fa:8d:93:9c:c7:7e:ca:8b:70:eb:19:
51:50:10:44:36:8f:ac:2b:22:5a:83:d5:d5:97:8b:
ac:c3:61:d5:76:23:0b:5d:71:af:82:7d:b1:3f:b8:
8c:48:4d:a1:61:24:85:bf:c8:6d:fb:5b:57:a4:00:
19:c1:ee:ea:a5:1f:61:98:46:27:8f:a8:d4:49:05:
c5:a5:19:55:d5:ca:b4:3b:10:73:f4:7c:f1:72:2a:
8e:d2:ae:8b:31:37:25:b5:81:ed:50:f6:a9:84:34:
c7:33:c0:a5:df:34:00:a1:42:e2:e1:99:34:0f:6a:
ab:74:1a:e5:aa:dd:bd:0c:07:1d:29:63:8c:03:f9:
f3:e1:fe:6d:65:56:cd:91:97:5b:9b:1f:6d:39:33:
df:56:82:0d:9a:91:90:da:c4:cf:5e:de:cd:a8:49:
b5:82:e8:80:45:ce:50:52:fb:c4:53:f4:cb:ac:05:
57:d3:3a:29:74:67:f0:7a:6a:de:e2:a0:c2:fc:9c:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:48:A2:0B:25:4A:90:1B:6C:60:A4:10:E7:DB:85:83:05:74:BD:46
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
53:77:b7:7f:b5:a7:8f:de:58:bc:48:7c:3e:6d:af:1d:c1:f1:
d7:c8:1b:ea:25:bd:2e:60:6f:10:1a:20:53:36:92:cc:d4:49:
00:3b:b6:a8:a4:96:e3:59:27:c7:19:4c:c9:5b:a9:78:8d:ac:
48:3b:ad:42:52:5c:77:96:c2:f3:45:0b:23:1a:66:b1:56:16:
ba:ca:6b:00:ce:3b:e6:33:48:43:c4:60:87:60:66:b0:bb:5f:
93:04:fa:1e:f7:52:78:fe:46:25:c8:c7:9b:93:12:d0:26:87:
07:ac:93:c7:87:97:42:fb:2e:0d:01:20:70:08:16:47:c2:e5:
e0:c5:25:08:ce:fc:8c:aa:b6:a6:f8:3f:7a:31:f5:f0:94:79:
57:f3:12:d4:de:a1:30:4d:47:f2:e1:6a:49:79:31:0c:09:1d:
c0:ba:cd:76:76:ef:41:1a:94:e5:86:21:e6:57:aa:15:12:86:
53:6f:e6:eb:5a:48:ef:ea:c8:a6:74:ff:58:82:33:03:e3:ca:
42:88:7e:64:fb:4a:96:27:50:a7:6a:11:0c:84:e2:f1:e0:cf:
54:98:b8:13:96:95:32:04:e6:c0:95:68:6f:16:7e:f8:6a:50:
37:5b:c6:0b:45:e3:1c:09:c0:ef:70:d2:b4:3a:91:a7:12:86:
d3:12:f3:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1ik2Nh/ihzAXzFVKFcaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjUwMTAxMDc0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQ4YTIwYjI1NGE5MDFiNmM2MGE0MTBlN2RiODU4MzA1NzRiZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZhMOl/sUkvVAhLcFvq7xBBu8WHI
3rGQ4C+KcY9pVvmeBAMcHk2GAf3TMsCGM4pKG61+7xjJXqwEEujYOUer+o2TnMd+
yotw6xlRUBBENo+sKyJag9XVl4usw2HVdiMLXXGvgn2xP7iMSE2hYSSFv8ht+1tX
pAAZwe7qpR9hmEYnj6jUSQXFpRlV1cq0OxBz9HzxciqO0q6LMTcltYHtUPaphDTH
M8Cl3zQAoULi4Zk0D2qrdBrlqt29DAcdKWOMA/nz4f5tZVbNkZdbmx9tOTPfVoIN
mpGQ2sTPXt7NqEm1guiARc5QUvvEU/TLrAVX0zopdGfwemre4qDC/JyPfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFNIogslSpAbbGCkEOfbhYMFdL1GMB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvVTBpaUN5VktrQnRzWUtRUTU5dUZnd1YwdlVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgQ3MA0G
CSqGSIb3DQEBCwUAA4IBAQBTd7d/taeP3li8SHw+ba8dwfHXyBvqJb0uYG8QGiBT
NpLM1EkAO7aopJbjWSfHGUzJW6l4jaxIO61CUlx3lsLzRQsjGmaxVha6ymsAzjvm
M0hDxGCHYGawu1+TBPoe91J4/kYlyMebkxLQJocHrJPHh5dC+y4NASBwCBZHwuXg
xSUIzvyMqram+D96MfXwlHlX8xLU3qEwTUfy4WpJeTEMCR3Aus12du9BGpTlhiHm
V6oVEoZTb+brWkjv6simdP9YgjMD48pCiH5k+0qWJ1CnahEMhOLx4M9UmLgTlpUy
BObAlWhvFn74alA3W8YLReMcCcDvcNK0OpGnEobTEvO/
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:57:19 2025 by rpki-client