Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/H88IYruuL0twhULuG-i1XZU0D-w.roa
File: H88IYruuL0twhULuG-i1XZU0D-w.roa (raw, json)
Hash identifier: sBN3wNJ3Oj8EGcK0XcXqEw6kGA6DvRRDXZwkQV+CLEA=
Subject key identifier: 1F:CF:08:62:BB:AE:2F:4B:70:85:42:EE:1B:E8:B5:5D:95:34:0F:EC
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A5460424C2AEF0C926CA9E82DB1C
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/H88IYruuL0twhULuG-i1XZU0D-w.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16028
IP address blocks: 81.52.208.0/21 maxlen: 24
193.251.160.0/24 maxlen: 24
193.251.162.0/23 maxlen: 24
2a01:cde0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a5:46:04:24:c2:ae:f0:c9:26:ca:9e:82:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fcf0862bbae2f4b708542ee1be8b55d95340fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:16:7e:57:16:87:63:56:c1:fb:58:75:4d:
14:b2:09:a1:76:5a:29:27:11:50:7c:30:4c:91:a9:
aa:73:fb:b6:9b:35:7a:57:94:1d:9a:3b:3d:ec:c6:
2e:bc:c1:87:f0:e5:cb:e2:0f:48:63:4d:7e:53:8c:
38:f8:18:9b:8b:72:26:44:63:ef:c1:c6:2e:3b:76:
b0:b9:14:cf:34:0c:c0:0a:8a:50:c9:34:04:ac:67:
1e:5d:88:df:6f:65:6b:86:08:36:20:e4:dc:b5:07:
b6:4a:ea:a2:bb:ee:91:d0:e8:75:e3:ce:1f:c3:df:
a3:ac:34:20:6c:9a:e6:1f:26:42:d8:79:b9:5b:a6:
4e:18:e0:5a:48:7f:00:0d:87:86:cb:f5:a7:d3:d4:
71:e0:61:8c:90:80:b3:6c:f3:16:a8:fe:da:c5:c0:
20:fd:4c:1e:d8:d2:d4:44:68:e1:8a:1b:1f:99:5b:
8a:18:6d:9b:22:00:f4:85:e6:da:b6:3c:21:e7:c5:
75:9f:7d:0c:3e:bf:e2:98:c9:86:fb:6d:ab:ac:6f:
da:d6:37:fd:b1:2f:01:3a:a0:a9:c5:0f:38:c1:a3:
1a:b2:a1:2f:76:00:18:bc:03:a6:23:b7:00:fc:5c:
dc:b3:5b:5c:6b:a6:ea:b7:1b:44:9c:da:c9:b4:ba:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CF:08:62:BB:AE:2F:4B:70:85:42:EE:1B:E8:B5:5D:95:34:0F:EC
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/H88IYruuL0twhULuG-i1XZU0D-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.208.0/21
193.251.160.0/24
193.251.162.0/23
IPv6:
2a01:cde0::/32
Signature Algorithm: sha256WithRSAEncryption
95:61:08:cf:a5:1c:74:24:8f:e1:c1:ba:20:b3:a8:df:57:60:
f5:1e:73:22:13:52:99:57:fc:6d:0a:79:3a:9a:14:7d:be:d8:
9c:c8:5e:9a:d2:84:91:3f:08:7a:03:d4:ee:37:0f:f0:a3:4f:
d2:c0:d5:c2:0b:36:83:f8:87:5d:b0:7c:b9:6c:a0:9b:7e:1d:
3d:4e:50:05:b8:98:af:e8:28:6f:45:c4:7e:88:5f:07:8e:e4:
bc:10:fb:32:55:df:df:77:ed:fa:dd:60:53:24:68:2f:6c:0e:
a7:6c:f8:36:54:03:15:91:bc:5d:fc:aa:56:d9:4f:32:a1:e0:
45:65:85:aa:5a:f2:ae:34:ad:a4:63:b4:31:40:ea:a8:9c:05:
d1:74:81:2e:45:52:ac:06:37:bb:e8:db:b9:21:0b:9f:e7:47:
5c:34:eb:c8:5c:ab:57:38:08:67:1c:87:ef:9d:ee:76:64:42:
a1:56:ae:2f:f8:a8:a7:59:df:a1:3f:e6:84:13:6d:25:43:81:
b0:f9:87:5a:4a:13:6b:a3:81:6c:e8:92:a0:5c:61:fc:ce:3d:
18:be:37:0e:73:a6:f2:4c:e1:3c:4b:98:2e:e4:d5:98:21:70:
4d:80:c0:77:3d:bc:cd:c2:be:54:ef:72:99:ed:c9:ac:57:9c:
7a:fe:22:dc
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQg1aVGBCTCrvDJJsqegtscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmNmMDg2MmJiYWUyZjRiNzA4NTQyZWUxYmU4YjU1ZDk1MzQwZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2gWflcWh2NWwftYdU0Usgmhdlop
JxFQfDBMkamqc/u2mzV6V5Qdmjs97MYuvMGH8OXL4g9IY01+U4w4+Bibi3ImRGPv
wcYuO3awuRTPNAzACopQyTQErGceXYjfb2Vrhgg2IOTctQe2Suqiu+6R0Oh1484f
w9+jrDQgbJrmHyZC2Hm5W6ZOGOBaSH8ADYeGy/Wn09Rx4GGMkICzbPMWqP7axcAg
/Uwe2NLURGjhihsfmVuKGG2bIgD0hebatjwh58V1n30MPr/imMmG+22rrG/a1jf9
sS8BOqCpxQ84waMasqEvdgAYvAOmI7cA/Fzcs1tca6bqtxtEnNrJtLp8iQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFB/PCGK7ri9LcIVC7hvotV2VNA/sMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvSDg4SVlydXVMMHR3aFVMdUctaTFYWlUwRC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDUTTQAwQA
wfugAwQBwfuiMA0EAgACMAcDBQAqAc3gMA0GCSqGSIb3DQEBCwUAA4IBAQCVYQjP
pRx0JI/hwbogs6jfV2D1HnMiE1KZV/xtCnk6mhR9vticyF6a0oSRPwh6A9TuNw/w
o0/SwNXCCzaD+IddsHy5bKCbfh09TlAFuJiv6ChvRcR+iF8HjuS8EPsyVd/fd+36
3WBTJGgvbA6nbPg2VAMVkbxd/KpW2U8yoeBFZYWqWvKuNK2kY7QxQOqonAXRdIEu
RVKsBje76Nu5IQuf50dcNOvIXKtXOAhnHIfvne52ZEKhVq4v+KinWd+hP+aEE20l
Q4Gw+YdaShNro4Fs6JKgXGH8zj0YvjcOc6byTOE8S5gu5NWYIXBNgMB3PbzNwr5U
73KZ7cmsV5x6/iLc
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:23:35 2025 by rpki-client