Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0_0OAlq27o_u0NL49X_FpSAJ038.roa
File: 0_0OAlq27o_u0NL49X_FpSAJ038.roa (raw, json)
Hash identifier: h0p4BIR8VcQLRAfZPKLFBQtiizVs1bwHpSZPb9vCUmU=
Subject key identifier: D3:FD:0E:02:5A:B6:EE:8F:EE:D0:D2:F8:F5:7F:C5:A5:20:09:D3:7F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22885E5445E877385BBE4739B149A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0_0OAlq27o_u0NL49X_FpSAJ038.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198595
IP address blocks: 195.136.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:28:85:e5:44:5e:87:73:85:bb:e4:73:9b:14:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3fd0e025ab6ee8feed0d2f8f57fc5a52009d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:91:23:db:aa:cd:94:9e:80:f2:98:eb:ea:
d3:30:e5:11:62:c2:4f:61:1b:ac:ad:18:6e:c9:e5:
2e:37:2a:72:c7:a1:e0:c8:a5:b4:fe:87:f4:27:a8:
21:a7:84:14:05:5e:3f:80:f9:3d:d4:21:4e:b3:6d:
d2:85:22:a5:8f:57:37:3c:a7:1e:9c:40:97:63:d6:
7b:d6:b2:ed:1e:4c:7c:14:80:41:42:2f:5a:df:e7:
c0:b4:93:47:c2:2e:fb:ae:f0:7d:71:f4:96:7c:f9:
f7:c9:79:9f:e1:cf:b8:dd:a0:9c:ca:45:55:ed:c8:
58:39:f8:a6:43:88:69:8c:f3:a2:de:66:b3:94:c0:
78:e5:d1:3b:70:c6:a8:87:0c:1f:aa:a4:78:62:8f:
06:f7:0e:7f:88:4f:e0:9b:a5:81:2e:f4:a2:23:f7:
f4:52:c0:03:2a:b0:74:8f:09:6b:49:47:7f:cb:ed:
c0:d8:09:06:c3:84:2f:79:38:ae:76:4b:52:b5:53:
47:e1:dc:2e:51:e1:07:bc:cb:23:92:9e:5b:b3:7e:
5a:f3:2e:7c:7f:50:71:77:b9:b6:13:fc:ab:53:db:
f8:e7:c5:c5:5b:6f:08:76:6a:5a:fc:92:2e:6e:1a:
b6:29:75:99:3e:3d:e0:7f:d3:51:6e:3c:44:91:03:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:0E:02:5A:B6:EE:8F:EE:D0:D2:F8:F5:7F:C5:A5:20:09:D3:7F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0_0OAlq27o_u0NL49X_FpSAJ038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d5:fc:6a:d7:5e:4d:6d:cf:6e:a8:38:eb:8c:15:84:70:e6:
07:3b:88:20:95:af:33:04:6c:20:7c:27:e5:da:41:d3:2c:f5:
a9:cb:cb:25:27:61:32:d0:b5:1e:74:10:d9:7a:b0:73:84:17:
b3:90:6d:19:f1:96:c5:13:b2:32:63:cc:26:64:eb:40:1a:15:
29:43:9e:4e:81:a3:a5:69:a1:2f:0e:5a:cd:64:ad:b6:06:64:
ed:84:7b:6a:66:db:25:f1:42:40:29:3e:41:26:19:d9:41:8b:
1c:f1:a5:b4:c2:75:db:39:37:80:92:2d:00:ab:cb:1c:fa:21:
2f:c8:eb:b2:e7:9c:ff:a0:c5:ff:f6:21:66:c5:59:5f:49:2f:
43:e8:34:8f:e4:a8:af:ad:16:a2:2e:50:27:19:a2:9c:9f:05:
4c:98:21:77:a2:41:8c:63:ec:94:cf:56:3d:44:72:2d:47:17:
71:f6:15:f2:7e:e2:78:f6:79:0a:8b:f8:9d:23:2c:70:d0:fc:
fa:b9:43:a8:e3:cd:7d:bd:e8:f8:1d:f6:f2:f6:12:5e:17:e9:
2c:44:fa:86:e4:5a:15:0a:c5:23:c5:ea:e7:65:da:86:4b:b5:
6c:f4:46:2d:0a:a3:d4:8d:2a:2a:63:56:5f:f7:e4:ff:36:cc:
c3:58:84:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsiiF5UReh3OFu+RzmxSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2ZkMGUwMjVhYjZlZThmZWVkMGQyZjhmNTdmYzVhNTIwMDlkMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV2RI9uqzZSegPKY6+rTMOURYsJP
YRusrRhuyeUuNypyx6HgyKW0/of0J6ghp4QUBV4/gPk91CFOs23ShSKlj1c3PKce
nECXY9Z71rLtHkx8FIBBQi9a3+fAtJNHwi77rvB9cfSWfPn3yXmf4c+43aCcykVV
7chYOfimQ4hpjPOi3mazlMB45dE7cMaohwwfqqR4Yo8G9w5/iE/gm6WBLvSiI/f0
UsADKrB0jwlrSUd/y+3A2AkGw4QveTiudktStVNH4dwuUeEHvMsjkp5bs35a8y58
f1Bxd7m2E/yrU9v458XFW28Idmpa/JIubhq2KXWZPj3gf9NRbjxEkQNcXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNP9DgJatu6P7tDS+PV/xaUgCdN/MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvMF8wT0FscTI3b191ME5MNDlYX0ZwU0FKMDM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4itMA0G
CSqGSIb3DQEBCwUAA4IBAQB01fxq115Nbc9uqDjrjBWEcOYHO4ggla8zBGwgfCfl
2kHTLPWpy8slJ2Ey0LUedBDZerBzhBezkG0Z8ZbFE7IyY8wmZOtAGhUpQ55OgaOl
aaEvDlrNZK22BmTthHtqZtsl8UJAKT5BJhnZQYsc8aW0wnXbOTeAki0Aq8sc+iEv
yOuy55z/oMX/9iFmxVlfSS9D6DSP5KivrRaiLlAnGaKcnwVMmCF3okGMY+yUz1Y9
RHItRxdx9hXyfuJ49nkKi/idIyxw0Pz6uUOo4819vej4Hfby9hJeF+ksRPqG5FoV
CsUjxernZdqGS7Vs9EYtCqPUjSoqY1Zf9+T/NszDWIQv
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:26 2025 by rpki-client