Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/UA_CLesELhQ-K1ritg7wCW9o0fw.roa
File: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (raw, json)
Hash identifier: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=
Subject key identifier: 50:0F:C2:2D:EB:04:2E:14:3E:2B:5A:E2:B6:0E:F0:09:6F:68:D1:FC
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019423D7391DFEDC4289B883F44101476C95
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/UA_CLesELhQ-K1ritg7wCW9o0fw.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5610
IP address blocks: 195.246.96.0/23 maxlen: 23
195.246.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:39:1d:fe:dc:42:89:b8:83:f4:41:01:47:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=500fc22deb042e143e2b5ae2b60ef0096f68d1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:2f:a4:e0:ed:95:42:f6:b5:c8:9b:d7:8f:
56:a2:c6:cd:b3:04:07:45:4a:df:34:b2:e8:1e:49:
c2:2b:7a:b9:1c:6c:92:6f:df:9d:0d:3d:a3:c5:86:
6e:61:d7:6e:00:d8:63:a4:51:f6:df:9f:5c:73:aa:
cd:77:17:f5:6d:aa:6b:24:6a:98:2a:31:59:e6:b3:
c4:70:55:05:a7:09:44:c5:26:ab:db:5d:ad:8b:9b:
d6:78:5a:8b:6c:80:25:c9:06:05:df:bc:65:f3:d8:
4e:3e:1d:c2:65:ab:8e:65:68:40:ec:6c:c4:0e:01:
66:34:7e:2c:f9:b7:f9:4f:21:4a:1e:ea:65:ca:27:
87:ff:dc:71:40:4a:1d:30:e8:e4:2f:07:23:93:84:
31:2e:ac:d8:2e:df:a7:cb:48:c5:ff:73:dd:2d:c0:
f4:56:d4:f8:65:3d:98:d5:9a:3d:37:74:c9:23:11:
e0:b1:a4:3c:da:f4:fe:29:37:7b:5c:28:a4:d1:9e:
3a:67:ec:04:0d:36:75:09:59:13:a8:4f:31:94:72:
19:31:c2:e4:a1:41:be:50:d0:97:79:bd:0f:1f:0e:
b4:c3:ad:5f:d6:7f:90:25:8c:21:35:26:06:bb:0a:
ea:2e:af:eb:11:f0:a2:37:88:d3:b9:f9:f4:9e:7c:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0F:C2:2D:EB:04:2E:14:3E:2B:5A:E2:B6:0E:F0:09:6F:68:D1:FC
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/UA_CLesELhQ-K1ritg7wCW9o0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.96.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:80:72:78:83:e6:d5:90:de:37:21:00:9f:be:c3:ae:62:04:
bd:2b:3d:fa:a6:e7:15:27:2e:9d:aa:7f:99:7c:3b:83:13:c4:
e7:af:12:a7:4e:28:e7:ac:e3:d2:01:df:77:88:8f:7b:13:d8:
52:0e:9e:03:63:65:01:c5:de:88:63:24:93:24:19:b9:b5:ab:
86:21:51:ca:2e:45:82:54:23:e6:c3:1a:42:57:85:3d:a5:d5:
b7:97:50:fa:79:dc:58:7a:4b:1e:29:de:e3:ff:dc:8f:34:38:
8a:a2:a5:75:d5:1c:89:fe:12:84:b1:59:2d:b5:cc:02:1c:2e:
4f:c7:90:aa:89:a0:f3:dc:6f:3b:99:df:72:62:c9:7d:59:a8:
61:36:d4:9b:21:70:54:be:57:2a:d1:1d:41:b3:0c:8b:d8:60:
6c:48:e9:34:f7:7d:63:60:ef:1e:b2:e8:b6:50:00:11:5a:bb:
1c:ad:2a:ab:e4:71:f1:ea:f1:b3:0c:c7:23:c4:a9:6d:d4:8d:
6c:c6:08:c9:53:1d:42:b8:2d:9c:c7:bc:7f:bd:ff:a0:6c:d6:
f8:fd:b5:ac:d5:be:ad:ee:3b:64:af:43:c3:a2:f0:95:32:f3:
fa:d7:55:bc:3a:ef:9c:db:b0:15:47:40:08:bd:72:62:03:6c:
f9:c4:32:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1zkd/txCibiD9EEBR2yVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz
NWZiZjEwHhcNMjUwMTAxMjE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDBmYzIyZGViMDQyZTE0M2UyYjVhZTJiNjBlZjAwOTZmNjhkMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpQvpODtlUL2tcib149WosbNswQH
RUrfNLLoHknCK3q5HGySb9+dDT2jxYZuYdduANhjpFH2359cc6rNdxf1baprJGqY
KjFZ5rPEcFUFpwlExSar212ti5vWeFqLbIAlyQYF37xl89hOPh3CZauOZWhA7GzE
DgFmNH4s+bf5TyFKHuplyieH/9xxQEodMOjkLwcjk4QxLqzYLt+ny0jF/3PdLcD0
VtT4ZT2Y1Zo9N3TJIxHgsaQ82vT+KTd7XCik0Z46Z+wEDTZ1CVkTqE8xlHIZMcLk
oUG+UNCXeb0PHw60w61f1n+QJYwhNSYGuwrqLq/rEfCiN4jTufn0nnzhowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFAPwi3rBC4UPita4rYO8AlvaNH8MB8GA1UdIwQY
MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt
NmJhZjMwMDc5MDVjLzEvVUFfQ0xlc0VMaFEtSzFyaXRnN3dDVzlvMGZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj
LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/ZgMA0G
CSqGSIb3DQEBCwUAA4IBAQBugHJ4g+bVkN43IQCfvsOuYgS9Kz36pucVJy6dqn+Z
fDuDE8TnrxKnTijnrOPSAd93iI97E9hSDp4DY2UBxd6IYySTJBm5tauGIVHKLkWC
VCPmwxpCV4U9pdW3l1D6edxYekseKd7j/9yPNDiKoqV11RyJ/hKEsVkttcwCHC5P
x5CqiaDz3G87md9yYsl9WahhNtSbIXBUvlcq0R1BswyL2GBsSOk0931jYO8esui2
UAARWrscrSqr5HHx6vGzDMcjxKlt1I1sxgjJUx1CuC2cx7x/vf+gbNb4/bWs1b6t
7jtkr0PDovCVMvP611W8Ou+c27AVR0AIvXJiA2z5xDK3
-----END CERTIFICATE-----
Generated at Sun Apr 13 22:10:04 2025 by rpki-client