Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa
File: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (raw, json)
Hash identifier: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=
Subject key identifier: 54:90:F4:B6:C6:17:0C:ED:AC:23:87:5C:7F:D3:08:22:B4:A5:2F:07
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01941FFA44639DE6F8191DAFF8524E7B086F
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400040
IP address blocks: 194.169.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:44:63:9d:e6:f8:19:1d:af:f8:52:4e:7b:08:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5490f4b6c6170cedac23875c7fd30822b4a52f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:d1:85:9f:cd:b5:77:b0:df:f8:85:c4:11:
7c:14:70:15:c6:5a:3d:23:2f:5f:3d:b3:dc:5c:08:
86:fc:5d:f5:b0:6f:6e:a8:4c:27:16:67:69:cf:0b:
dc:ee:0b:12:77:76:39:ce:1f:e6:e4:bf:e2:97:02:
70:d1:ff:cb:be:c6:d7:ef:ab:4a:c4:8e:5b:f2:b1:
01:e9:bf:33:b9:16:94:29:73:1b:50:63:a5:7c:31:
2a:18:94:77:6d:1a:3e:d6:cd:cc:e2:5a:32:46:82:
de:a9:63:de:4b:ae:f5:5b:b1:0f:c9:8f:ac:09:38:
62:a1:f5:90:12:b5:3a:f3:a5:30:c4:ce:76:8b:5a:
0f:26:ca:6a:e2:c6:6b:ec:7f:2f:fc:98:56:0d:5b:
fb:b1:72:0a:29:59:92:29:18:d6:fc:57:02:83:14:
3e:38:c5:56:db:89:c6:98:cc:1c:17:02:af:45:17:
56:40:a2:3d:a9:f6:23:c2:a0:15:3f:0f:18:a1:61:
d0:d5:b4:c8:5a:40:bc:32:7a:f6:09:35:ce:0b:34:
0a:99:86:5e:8e:a5:6b:37:45:c4:16:9b:bd:d5:29:
7f:5d:4c:8b:cb:5d:92:3b:0b:63:b1:72:ef:15:95:
c9:45:04:95:9c:a6:2a:37:fd:fe:5f:d3:6b:4d:b2:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:F4:B6:C6:17:0C:ED:AC:23:87:5C:7F:D3:08:22:B4:A5:2F:07
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.49.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b9:88:25:0c:a2:1d:ba:1a:f8:16:c3:ed:8d:c2:ee:4d:6b:
0c:41:fc:c4:36:d4:b4:1b:92:b6:15:77:97:3e:13:26:89:a8:
f2:da:2b:bf:f4:cd:45:eb:30:92:97:94:8a:c4:76:a6:ec:2c:
28:2b:d2:4f:81:25:2d:5a:d0:65:7c:3b:ef:16:91:45:c8:d4:
c8:88:41:6a:24:da:89:c9:11:f9:d1:2b:16:d2:2f:5d:33:cb:
d8:47:2c:df:1e:fb:0a:e0:52:14:d3:05:f4:9f:ad:2a:00:b0:
9f:db:97:17:12:d4:71:83:39:61:79:94:e9:ec:c7:c9:3a:c1:
c8:24:29:3a:ad:31:36:97:9c:da:27:3e:6b:20:3a:60:5a:84:
ad:df:db:6b:db:8e:52:50:a0:9a:44:a8:be:15:86:72:b1:bd:
b2:56:85:1e:0a:96:97:f4:f2:bc:53:6b:08:5f:b5:b7:de:74:
ad:e8:05:e4:55:f8:1f:33:9c:3d:0c:72:11:73:56:2c:42:20:
e3:d6:7d:06:c8:6f:64:7d:6f:80:29:fc:bd:f5:22:23:c8:ce:
4c:e5:a3:b9:48:5f:c9:11:42:2b:4f:7d:bd:9b:08:1e:36:e8:
78:03:48:73:6f:ee:da:9a:ae:98:5f:c9:fd:91:d1:08:e2:5b:
93:91:a4:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kRjneb4GR2v+FJOewhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDkwZjRiNmM2MTcwY2VkYWMyMzg3NWM3ZmQzMDgyMmI0YTUyZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjDRhZ/NtXew3/iFxBF8FHAVxlo9
Iy9fPbPcXAiG/F31sG9uqEwnFmdpzwvc7gsSd3Y5zh/m5L/ilwJw0f/LvsbX76tK
xI5b8rEB6b8zuRaUKXMbUGOlfDEqGJR3bRo+1s3M4loyRoLeqWPeS671W7EPyY+s
CThiofWQErU686UwxM52i1oPJspq4sZr7H8v/JhWDVv7sXIKKVmSKRjW/FcCgxQ+
OMVW24nGmMwcFwKvRRdWQKI9qfYjwqAVPw8YoWHQ1bTIWkC8Mnr2CTXOCzQKmYZe
jqVrN0XEFpu91Sl/XUyLy12SOwtjsXLvFZXJRQSVnKYqN/3+X9NrTbJcoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFSQ9LbGFwztrCOHXH/TCCK0pS8HMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvVkpEMHRzWVhETzJzSTRkY2Y5TUlJclNsTHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqkxMA0G
CSqGSIb3DQEBCwUAA4IBAQBiuYglDKIduhr4FsPtjcLuTWsMQfzENtS0G5K2FXeX
PhMmiajy2iu/9M1F6zCSl5SKxHam7CwoK9JPgSUtWtBlfDvvFpFFyNTIiEFqJNqJ
yRH50SsW0i9dM8vYRyzfHvsK4FIU0wX0n60qALCf25cXEtRxgzlheZTp7MfJOsHI
JCk6rTE2l5zaJz5rIDpgWoSt39tr245SUKCaRKi+FYZysb2yVoUeCpaX9PK8U2sI
X7W33nSt6AXkVfgfM5w9DHIRc1YsQiDj1n0GyG9kfW+AKfy99SIjyM5M5aO5SF/J
EUIrT329mwgeNuh4A0hzb+7amq6YX8n9kdEI4luTkaTX
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:16 2025 by rpki-client