Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/_OYA4765g9NJpcF7TDI32R4HwJ8.roa
File: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (raw, json)
Hash identifier: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=
Subject key identifier: FC:E6:00:E3:BE:B9:83:D3:49:A5:C1:7B:4C:32:37:D9:1E:07:C0:9F
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019420D62B1DC963AB89DA9A0D7FC73D4817
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/_OYA4765g9NJpcF7TDI32R4HwJ8.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 194.4.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:1d:c9:63:ab:89:da:9a:0d:7f:c7:3d:48:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fce600e3beb983d349a5c17b4c3237d91e07c09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:6c:4e:e8:57:41:00:56:43:81:36:e6:24:
08:63:09:82:98:09:9d:c4:d9:b0:a6:bf:6a:91:11:
42:cd:01:09:92:82:2c:c6:f7:71:d7:91:a5:92:5e:
e8:1d:3f:b2:66:9e:e0:4d:04:dd:39:a8:a0:1f:39:
ce:6c:8e:7a:e3:23:da:f5:fa:2c:31:14:12:d8:f9:
e6:c9:22:f1:df:3a:50:aa:ed:42:28:c0:9c:81:5d:
29:50:94:79:f0:74:6b:b8:1d:97:0e:d2:0a:de:19:
51:ea:bc:26:62:6a:56:b5:92:1a:5c:c3:86:05:b3:
a5:5a:e9:fa:e5:59:92:f3:ee:4d:c8:27:a0:6b:10:
99:0f:69:0a:48:eb:a2:8e:6d:77:fe:a9:0b:7a:74:
b2:99:90:5e:32:b1:d1:99:4f:47:6d:43:db:6a:b2:
fc:34:17:6a:a5:4d:6c:59:1b:7f:a9:af:b8:12:91:
ef:37:14:b0:0d:0d:d5:51:c5:bc:ae:d4:7b:6c:ab:
3f:83:d6:68:08:45:9d:b4:f1:5b:c3:bf:65:a3:60:
f6:d6:da:cb:10:10:28:bc:4b:08:83:76:3a:33:48:
47:b3:64:7a:7f:aa:be:e1:ad:f1:c8:da:cc:64:a9:
cd:29:ad:80:d6:ca:35:a4:4d:63:24:3b:ea:3a:4c:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E6:00:E3:BE:B9:83:D3:49:A5:C1:7B:4C:32:37:D9:1E:07:C0:9F
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/_OYA4765g9NJpcF7TDI32R4HwJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:81:e5:f1:d6:f8:6d:48:85:d7:41:e8:48:97:0c:6e:95:42:
56:5c:ed:1b:33:c2:e5:65:21:6e:88:f6:25:df:60:76:9e:63:
a7:59:72:1d:88:bb:d4:cb:d6:f8:e8:f9:0a:21:17:4a:a3:3a:
b7:ea:e5:53:d9:a5:f9:44:46:ea:ef:2f:aa:84:46:b9:de:67:
88:6b:7c:f7:b5:bc:af:e8:21:39:ef:db:28:3b:7f:c1:44:e9:
82:5e:3c:4c:99:ab:6e:50:47:e1:06:7e:24:d2:3c:f5:e4:27:
3b:c5:0d:8c:e2:29:34:b3:8d:45:ec:8e:2b:bc:35:8d:25:a7:
58:dc:0b:43:72:dc:0f:91:09:10:7f:78:7c:19:89:84:a2:c5:
69:5e:d8:ef:4c:03:99:80:c9:7c:18:cf:9a:8a:d1:78:60:93:
be:28:2b:60:40:0b:06:4b:2b:fe:40:da:26:6c:9d:33:ea:cd:
f6:bd:d1:09:f5:b9:19:ab:9a:cc:0a:2d:08:9a:de:19:91:0d:
1c:16:2b:2c:a6:4a:35:00:c1:62:34:59:23:67:f2:af:1c:d1:
aa:c7:d1:8d:e2:50:1b:75:d8:8a:21:f9:89:90:2b:e8:2b:0b:
4a:ea:32:34:88:e6:46:68:20:3b:59:36:1a:25:e9:fe:52:aa:
f4:ff:bf:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1isdyWOridqaDX/HPUgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjUwMTAxMDc0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2U2MDBlM2JlYjk4M2QzNDlhNWMxN2I0YzMyMzdkOTFlMDdjMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt5sTuhXQQBWQ4E25iQIYwmCmAmd
xNmwpr9qkRFCzQEJkoIsxvdx15Glkl7oHT+yZp7gTQTdOaigHznObI564yPa9fos
MRQS2PnmySLx3zpQqu1CKMCcgV0pUJR58HRruB2XDtIK3hlR6rwmYmpWtZIaXMOG
BbOlWun65VmS8+5NyCegaxCZD2kKSOuijm13/qkLenSymZBeMrHRmU9HbUPbarL8
NBdqpU1sWRt/qa+4EpHvNxSwDQ3VUcW8rtR7bKs/g9ZoCEWdtPFbw79lo2D21trL
EBAovEsIg3Y6M0hHs2R6f6q+4a3xyNrMZKnNKa2A1so1pE1jJDvqOkygNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzmAOO+uYPTSaXBe0wyN9keB8CfMB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvX09ZQTQ3NjVnOU5KcGNGN1RESTMyUjRId0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgQ1MA0G
CSqGSIb3DQEBCwUAA4IBAQBegeXx1vhtSIXXQehIlwxulUJWXO0bM8LlZSFuiPYl
32B2nmOnWXIdiLvUy9b46PkKIRdKozq36uVT2aX5REbq7y+qhEa53meIa3z3tbyv
6CE579soO3/BROmCXjxMmatuUEfhBn4k0jz15Cc7xQ2M4ik0s41F7I4rvDWNJadY
3AtDctwPkQkQf3h8GYmEosVpXtjvTAOZgMl8GM+aitF4YJO+KCtgQAsGSyv+QNom
bJ0z6s32vdEJ9bkZq5rMCi0Imt4ZkQ0cFisspko1AMFiNFkjZ/KvHNGqx9GN4lAb
ddiKIfmJkCvoKwtK6jI0iOZGaCA7WTYaJen+Uqr0/79f
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:49:42 2025 by rpki-client