Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8DUVA8j9OFpbnF7Rssam8agO-W4.roa
File: 8DUVA8j9OFpbnF7Rssam8agO-W4.roa (raw, json)
Hash identifier: yMuLf1PTGJ1FrLKqzASrzYlKfxulF+QamjC+dEUbTHg=
Subject key identifier: F0:35:15:03:C8:FD:38:5A:5B:9C:5E:D1:B2:C6:A6:F1:A8:0E:F9:6E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019566F2D046007157034F8BF3B1F9DD9006
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8DUVA8j9OFpbnF7Rssam8agO-W4.roa
Signing time: Wed 05 Mar 2025 15:35:43 +0000
ROA not before: Wed 05 Mar 2025 15:35:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 194.93.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:f2:d0:46:00:71:57:03:4f:8b:f3:b1:f9:dd:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 5 15:35:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0351503c8fd385a5b9c5ed1b2c6a6f1a80ef96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:5d:f0:a6:5f:2c:2b:1d:20:30:c9:27:b6:
e6:94:06:ea:8e:84:bc:4d:c1:5d:ed:b7:3f:f0:16:
f3:a0:fc:bd:5e:ee:56:09:1c:b0:7e:02:bb:4f:9f:
2f:bd:e2:0b:d0:21:e8:00:a9:17:c9:15:6f:8e:66:
d3:07:7b:e3:e0:db:a4:0f:c5:10:3b:2b:e8:c9:d6:
85:49:70:bb:ee:ca:50:e8:e9:06:03:8f:82:27:81:
74:d8:7c:3a:0c:73:eb:fb:60:be:0c:94:41:39:5c:
93:a9:8c:5a:4b:70:79:8b:a5:a5:5e:06:0a:0e:b2:
f0:a3:7e:75:8d:f9:5b:6a:a0:8a:cc:74:4b:db:df:
be:6e:7b:67:fd:51:a9:a8:12:f9:77:08:d9:a4:3d:
af:2a:98:2f:ea:1d:12:72:90:06:8d:f2:65:bc:60:
26:51:30:d8:50:b2:b4:43:d3:73:ff:71:41:a2:e0:
7d:86:e5:52:45:2b:4e:df:0a:5e:b0:88:f2:9b:f9:
14:8a:dd:e8:92:bd:9e:53:e2:7c:cf:37:7a:6e:8b:
58:d4:80:ec:d5:5e:af:80:3a:cc:83:d6:22:ba:8f:
99:86:2d:37:27:b0:06:d7:81:39:f3:df:c6:d6:97:
a3:c4:2e:5f:83:22:66:e5:0b:7c:d6:73:54:e4:89:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:15:03:C8:FD:38:5A:5B:9C:5E:D1:B2:C6:A6:F1:A8:0E:F9:6E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8DUVA8j9OFpbnF7Rssam8agO-W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.58.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bc:de:b8:0a:25:c1:94:74:c1:0c:c9:60:8d:c9:5f:55:95:
c4:a0:d7:c2:5c:68:ca:d6:d1:9a:ea:4b:8e:c8:c2:83:52:dd:
09:92:af:55:f3:eb:df:6b:e3:88:e3:65:fd:fa:88:53:be:82:
4a:f8:cf:17:00:ca:3a:44:47:00:1b:75:4c:54:cc:54:d3:26:
6c:d1:75:a2:37:29:80:93:d8:df:2f:6c:42:33:58:d8:80:97:
fb:f4:4c:7a:79:34:6e:f2:c4:28:8c:b6:23:e1:9f:ca:46:e0:
ae:77:03:da:cd:2c:93:c0:0f:ad:1e:b3:05:94:74:27:ce:7c:
d9:f7:33:c9:d9:50:da:b9:d7:0b:90:82:18:0e:a5:7f:6e:79:
52:3c:07:b7:c2:48:17:66:bf:70:86:e8:32:79:98:a0:17:8f:
f5:1a:8b:55:8b:fd:0b:16:f5:0d:40:dd:85:75:19:00:36:1b:
a2:09:00:89:03:12:5a:f5:eb:ed:a1:76:1b:0a:dd:25:40:d5:
97:0c:0e:6b:75:75:91:df:c4:9a:b4:70:d7:dd:54:38:c0:32:
16:69:e4:29:20:b0:c9:74:03:60:d5:c2:e0:a3:b5:94:9d:ff:
b9:c0:7b:51:d9:ee:f2:93:6a:7a:d6:17:c5:33:7f:85:44:03:
11:54:d4:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVm8tBGAHFXA0+L87H53ZAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMzA1MTUzNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDM1MTUwM2M4ZmQzODVhNWI5YzVlZDFiMmM2YTZmMWE4MGVmOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY5d8KZfLCsdIDDJJ7bmlAbqjoS8
TcFd7bc/8BbzoPy9Xu5WCRywfgK7T58vveIL0CHoAKkXyRVvjmbTB3vj4NukD8UQ
OyvoydaFSXC77spQ6OkGA4+CJ4F02Hw6DHPr+2C+DJRBOVyTqYxaS3B5i6WlXgYK
DrLwo351jflbaqCKzHRL29++bntn/VGpqBL5dwjZpD2vKpgv6h0ScpAGjfJlvGAm
UTDYULK0Q9Nz/3FBouB9huVSRStO3wpesIjym/kUit3okr2eU+J8zzd6botY1IDs
1V6vgDrMg9Yiuo+Zhi03J7AG14E589/G1pejxC5fgyJm5Qt81nNU5ImSIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPA1FQPI/ThaW5xe0bLGpvGoDvluMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvOERVVkE4ajlPRnBibkY3UnNzYW04YWdPLVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl06MA0G
CSqGSIb3DQEBCwUAA4IBAQCVvN64CiXBlHTBDMlgjclfVZXEoNfCXGjK1tGa6kuO
yMKDUt0Jkq9V8+vfa+OI42X9+ohTvoJK+M8XAMo6REcAG3VMVMxU0yZs0XWiNymA
k9jfL2xCM1jYgJf79Ex6eTRu8sQojLYj4Z/KRuCudwPazSyTwA+tHrMFlHQnznzZ
9zPJ2VDaudcLkIIYDqV/bnlSPAe3wkgXZr9whugyeZigF4/1GotVi/0LFvUNQN2F
dRkANhuiCQCJAxJa9evtoXYbCt0lQNWXDA5rdXWR38SatHDX3VQ4wDIWaeQpILDJ
dANg1cLgo7WUnf+5wHtR2e7yk2p61hfFM3+FRAMRVNTk
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:40 2025 by rpki-client