Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/b37_mvewRVwCg1bn4EBDzO-L-T4.roa
File: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (raw, json)
Hash identifier: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=
Subject key identifier: 6F:7E:FF:9A:F7:B0:45:5C:02:83:56:E7:E0:40:43:CC:EF:8B:F9:3E
Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial: 0194258F5D1009E8B41D04BD674DD64F4F64
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/b37_mvewRVwCg1bn4EBDzO-L-T4.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48391
IP address blocks: 193.200.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:10:09:e8:b4:1d:04:bd:67:4d:d6:4f:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f7eff9af7b0455c028356e7e04043ccef8bf93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:47:89:9d:bd:08:fa:a9:e1:ff:9c:2e:d3:
4e:de:30:03:ab:6c:ca:a3:f4:66:a2:f0:c0:ea:9a:
72:24:63:4a:d9:30:8f:d3:1d:7e:2e:4e:55:3b:69:
32:4e:e2:2b:60:9d:f6:1e:40:c8:76:e1:c7:94:26:
f2:a2:73:14:66:c9:09:cc:6e:07:cc:ea:fd:2e:20:
54:c9:e2:b9:54:ca:d0:28:35:42:b9:a7:6e:6d:4e:
63:14:67:1e:a8:19:cf:19:47:39:4b:17:30:11:b3:
75:77:0e:40:a2:c1:a5:f4:de:bb:68:df:db:13:97:
f3:8b:8d:4f:51:cd:8a:bb:85:26:9a:15:da:61:52:
57:ec:8c:92:5a:35:5d:d2:d9:9d:ce:73:0e:3a:84:
a7:5c:19:87:e8:94:16:16:b5:f7:5b:97:24:1e:1b:
25:8e:c5:a4:8a:f4:08:0e:b7:6d:fe:b0:88:14:47:
76:84:c0:8e:81:3b:cf:95:36:81:30:e0:5a:15:eb:
dd:97:f3:fb:2c:19:98:88:be:bd:43:fa:9f:02:d6:
8a:82:fd:86:61:42:bc:4e:c5:4b:11:7b:6c:da:fb:
2f:fc:57:f9:12:62:ba:63:7f:42:98:3c:28:ee:ad:
98:e9:b7:3d:4e:76:8f:92:7a:93:eb:13:8a:c8:6d:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7E:FF:9A:F7:B0:45:5C:02:83:56:E7:E0:40:43:CC:EF:8B:F9:3E
X509v3 Authority Key Identifier:
keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/b37_mvewRVwCg1bn4EBDzO-L-T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.148.0/24
Signature Algorithm: sha256WithRSAEncryption
10:98:76:cb:2d:6a:21:fe:98:21:38:5f:17:0e:1f:8a:9d:9f:
d8:14:d1:2d:1d:bd:63:d7:45:0b:1c:93:8b:6e:71:f0:48:6a:
a0:87:e0:cc:39:75:96:cc:2d:f3:55:91:ea:08:3f:2b:e8:1f:
60:34:bb:42:a0:a7:60:65:b6:c9:dd:c7:3a:0d:51:01:7a:e6:
1c:71:4f:8b:5f:ca:84:7e:ba:c1:b5:c9:6b:56:d8:6a:7d:e2:
02:70:fd:2e:bb:7b:c3:42:02:32:e4:f3:3a:5c:45:11:5f:f0:
87:49:43:96:db:1f:ac:2b:0e:06:b1:69:b2:41:db:f9:2c:3b:
ac:73:95:35:a3:f3:03:86:7f:ae:9e:fa:2e:0e:9f:59:1a:70:
4f:78:b3:a8:b7:8e:3e:33:21:dc:53:b3:bf:d1:d1:71:98:18:
82:69:28:03:21:df:f0:69:c9:9e:e4:6e:ec:a2:6f:38:8f:23:
60:f6:01:fe:3f:4a:54:71:88:6e:ab:9a:b2:18:89:22:eb:fd:
14:ad:b3:87:98:1e:d9:24:1d:39:a8:d6:ea:46:df:27:f9:e5:
6c:44:79:af:50:fa:b1:f9:61:1e:96:b2:09:2f:e8:73:db:d0:
67:50:4d:ba:aa:e4:cd:b4:f8:c7:ad:71:bc:01:02:9e:8f:57:
6e:16:24:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj10QCei0HQS9Z03WT09kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw
ZTgxZTMwHhcNMjUwMTAyMDU0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjdlZmY5YWY3YjA0NTVjMDI4MzU2ZTdlMDQwNDNjY2VmOGJmOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppNHiZ29CPqp4f+cLtNO3jADq2zK
o/RmovDA6ppyJGNK2TCP0x1+Lk5VO2kyTuIrYJ32HkDIduHHlCbyonMUZskJzG4H
zOr9LiBUyeK5VMrQKDVCuadubU5jFGceqBnPGUc5SxcwEbN1dw5AosGl9N67aN/b
E5fzi41PUc2Ku4UmmhXaYVJX7IySWjVd0tmdznMOOoSnXBmH6JQWFrX3W5ckHhsl
jsWkivQIDrdt/rCIFEd2hMCOgTvPlTaBMOBaFevdl/P7LBmYiL69Q/qfAtaKgv2G
YUK8TsVLEXts2vsv/Ff5EmK6Y39CmDwo7q2Y6bc9TnaPknqT6xOKyG26wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9+/5r3sEVcAoNW5+BAQ8zvi/k+MB8GA1UdIwQY
MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt
ZDJkY2YwNWQzMzc2LzEvYjM3X212ZXdSVndDZzFibjRFQkR6Ty1MLVQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2
LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciUMA0G
CSqGSIb3DQEBCwUAA4IBAQAQmHbLLWoh/pghOF8XDh+KnZ/YFNEtHb1j10ULHJOL
bnHwSGqgh+DMOXWWzC3zVZHqCD8r6B9gNLtCoKdgZbbJ3cc6DVEBeuYccU+LX8qE
frrBtclrVthqfeICcP0uu3vDQgIy5PM6XEURX/CHSUOW2x+sKw4GsWmyQdv5LDus
c5U1o/MDhn+unvouDp9ZGnBPeLOot44+MyHcU7O/0dFxmBiCaSgDId/wacme5G7s
om84jyNg9gH+P0pUcYhuq5qyGIki6/0UrbOHmB7ZJB05qNbqRt8n+eVsRHmvUPqx
+WEelrIJL+hz29BnUE26quTNtPjHrXG8AQKej1duFiQv
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:22:48 2025 by rpki-client