Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/p61VML8uLf1Dr4htLC12P2Sv8GU.roa
File: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (raw, json)
Hash identifier: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=
Subject key identifier: A7:AD:55:30:BF:2E:2D:FD:43:AF:88:6D:2C:2D:76:3F:64:AF:F0:65
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 019420D5F2BFE22B9675A203B4B18A2C0B1C
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/p61VML8uLf1Dr4htLC12P2Sv8GU.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35625
IP address blocks: 194.5.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f2:bf:e2:2b:96:75:a2:03:b4:b1:8a:2c:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ad5530bf2e2dfd43af886d2c2d763f64aff065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:99:34:5d:1d:2e:60:c3:12:9c:04:1b:ef:
fd:78:cf:19:33:b5:a6:ee:f2:0c:92:d0:0c:2a:ef:
2f:b1:8c:49:a8:b9:27:ef:eb:63:1c:74:c6:e4:b6:
1c:07:86:7a:02:7e:9a:7b:ba:50:71:82:f8:8c:74:
5a:5b:27:03:06:9f:24:dd:20:de:87:ea:14:e0:e6:
4e:a2:29:e8:15:74:30:8a:d0:b7:17:66:b5:1f:0c:
cf:24:89:5b:b5:c1:3f:14:fc:a9:86:6d:57:2f:29:
ed:4b:42:67:4f:41:43:c8:88:e5:ad:70:30:e4:ec:
e1:45:19:5c:ed:8d:2c:87:86:e5:87:70:c0:88:2c:
bb:10:66:97:38:ab:43:3d:79:99:fe:97:e4:e6:76:
73:ba:f3:69:bf:18:45:ed:ba:78:3f:90:9b:35:fa:
c1:3b:41:2b:31:78:26:bd:6b:4f:d3:32:2d:be:7c:
c5:3d:18:1e:32:18:6a:d1:7b:bb:d3:92:02:c9:2d:
87:46:88:91:cb:3d:eb:a7:73:72:e9:ad:7b:40:fa:
be:98:51:b4:c3:33:b2:a2:40:c7:00:a6:51:35:55:
36:5a:d7:73:85:a5:7b:b9:d6:45:7b:f9:9a:8f:c8:
e0:cb:e0:a0:e6:40:9e:b8:1f:ca:fe:66:55:4e:7a:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:55:30:BF:2E:2D:FD:43:AF:88:6D:2C:2D:76:3F:64:AF:F0:65
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/p61VML8uLf1Dr4htLC12P2Sv8GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fd:c7:71:fb:22:f1:6e:32:77:47:e4:37:f2:2a:5f:e1:8c:
6c:89:c2:63:07:1b:be:d4:24:9a:8d:64:b0:b0:63:e8:6a:31:
25:52:48:56:b6:fb:60:64:2f:47:19:ea:6b:5f:ca:c0:cd:b8:
f9:b8:81:87:94:63:b9:36:6d:04:c9:c9:ff:97:38:99:59:ab:
0f:4a:8a:b1:f0:db:fd:70:52:4a:42:c1:64:b4:e7:97:8b:d0:
0d:38:d3:84:3a:13:14:65:cc:7d:ac:50:ac:52:46:d2:c0:d6:
b7:44:0c:90:90:9c:ba:c0:23:e8:8b:57:64:10:38:7c:30:4d:
94:40:04:e1:c8:0f:80:fb:ae:5d:02:2f:24:28:50:78:ee:09:
77:42:90:c0:f2:a2:e0:c5:89:8c:68:05:fb:81:90:86:0f:36:
17:0a:fd:03:19:0a:f3:d4:42:88:da:79:a2:75:aa:e4:ec:6a:
55:a4:8d:d2:df:eb:c9:c1:d5:98:f3:fa:03:2f:71:32:29:e2:
11:1c:6a:b4:58:4f:c1:42:08:13:6a:3d:dd:f7:6b:2d:64:ce:
87:4a:b5:0b:74:50:b0:fb:f3:a2:65:56:a2:22:b3:f1:35:93:
c6:a9:6c:36:e7:c2:f8:8e:e2:f8:15:d8:bc:b8:92:d3:5d:fb:
7e:e7:02:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1fK/4iuWdaIDtLGKLAscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmVjZjY2NDJhNDUwYjUzYjA3NmQ0NDY0ODJkOWMxYTg5
ZGVkNzQwHhcNMjUwMTAxMDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2FkNTUzMGJmMmUyZGZkNDNhZjg4NmQyYzJkNzYzZjY0YWZmMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGiZNF0dLmDDEpwEG+/9eM8ZM7Wm
7vIMktAMKu8vsYxJqLkn7+tjHHTG5LYcB4Z6An6ae7pQcYL4jHRaWycDBp8k3SDe
h+oU4OZOoinoFXQwitC3F2a1HwzPJIlbtcE/FPyphm1XLyntS0JnT0FDyIjlrXAw
5OzhRRlc7Y0sh4blh3DAiCy7EGaXOKtDPXmZ/pfk5nZzuvNpvxhF7bp4P5CbNfrB
O0ErMXgmvWtP0zItvnzFPRgeMhhq0Xu705ICyS2HRoiRyz3rp3Ny6a17QPq+mFG0
wzOyokDHAKZRNVU2WtdzhaV7udZFe/maj8jgy+Cg5kCeuB/K/mZVTnqmtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKetVTC/Li39Q6+IbSwtdj9kr/BlMB8GA1UdIwQY
MBaAFEr+z2ZCpFC1OwdtRGSC2cGone10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQt
NDI4YTExMWFjNWUwLzEvcDYxVk1MOHVMZjFEcjRodExDMTJQMlN2OEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQtNDI4YTExMWFjNWUw
LzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgVIMA0G
CSqGSIb3DQEBCwUAA4IBAQBu/cdx+yLxbjJ3R+Q38ipf4YxsicJjBxu+1CSajWSw
sGPoajElUkhWtvtgZC9HGeprX8rAzbj5uIGHlGO5Nm0Eycn/lziZWasPSoqx8Nv9
cFJKQsFktOeXi9ANONOEOhMUZcx9rFCsUkbSwNa3RAyQkJy6wCPoi1dkEDh8ME2U
QAThyA+A+65dAi8kKFB47gl3QpDA8qLgxYmMaAX7gZCGDzYXCv0DGQrz1EKI2nmi
dark7GpVpI3S3+vJwdWY8/oDL3EyKeIRHGq0WE/BQggTaj3d92stZM6HSrULdFCw
+/OiZVaiIrPxNZPGqWw258L4juL4Fdi8uJLTXft+5wJa
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:01 2025 by rpki-client