Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1hgso2lccKM-lJMA4gcdw60wIFU.roa
File: 1hgso2lccKM-lJMA4gcdw60wIFU.roa (raw, json)
Hash identifier: yyXPpz+zE0xj6JsKCT2l725THoS1U4R0ARhX06QaZVw=
Subject key identifier: D6:18:2C:A3:69:5C:70:A3:3E:94:93:00:E2:07:1D:C3:AD:30:20:55
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC80F79BF7EF9797D0286DA49D497C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1hgso2lccKM-lJMA4gcdw60wIFU.roa
Signing time: Thu 02 Jan 2025 07:48:12 +0000
ROA not before: Thu 02 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 195.96.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:80:f7:9b:f7:ef:97:97:d0:28:6d:a4:9d:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6182ca3695c70a33e949300e2071dc3ad302055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:88:eb:0b:57:25:c1:5e:1d:80:4b:5a:7f:
4c:c7:5c:79:d4:4a:25:56:7f:11:84:32:d9:0c:9e:
7a:5d:00:26:29:00:3b:b7:5c:e7:de:8c:04:b2:4f:
47:5c:2c:ef:22:67:ab:6f:55:57:00:a3:a7:25:63:
a0:7a:8c:b0:1a:b0:46:82:4e:78:e1:35:26:25:ed:
89:b0:68:28:8c:d6:17:69:b9:14:a0:7f:47:14:cc:
0d:d2:52:2f:07:a0:cb:e7:24:c6:2a:c8:5f:c6:6f:
d2:a5:c8:e7:85:11:e4:88:29:a4:61:16:22:e3:cb:
81:de:4a:0b:c1:5b:e8:fc:1b:06:2b:04:01:d0:f1:
ca:b8:ae:bf:c2:b6:90:54:53:ca:03:36:6b:8e:f5:
38:e3:10:fc:3f:86:50:17:08:af:a4:e2:6b:ab:0b:
c3:f3:b6:95:f2:7b:4b:53:53:40:e1:75:60:bd:93:
59:bf:1a:82:a2:c8:df:3b:7e:c8:0d:bc:71:ad:10:
f2:4b:8c:17:44:a1:b0:21:cf:eb:4a:87:0b:b3:46:
fd:40:5d:0a:76:33:ad:09:22:6b:53:b8:80:f4:55:
74:95:cf:68:5e:9d:03:9f:b7:ca:98:f2:b0:91:f8:
df:f2:1c:00:90:be:9e:3b:ba:56:dd:4f:47:9e:60:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:2C:A3:69:5C:70:A3:3E:94:93:00:E2:07:1D:C3:AD:30:20:55
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1hgso2lccKM-lJMA4gcdw60wIFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e8:16:d6:6a:ba:2a:a0:8f:1c:0a:33:f9:d4:88:52:eb:e2:
f0:0b:8f:43:9f:ec:2f:55:3d:4f:4e:34:9f:91:1e:64:ce:49:
e5:d8:18:cf:67:71:1b:b2:47:2f:2c:d9:9a:b7:1e:78:f0:df:
27:6d:c3:6b:a7:12:96:35:32:58:67:8c:61:b3:d5:06:65:db:
6f:36:99:6b:09:42:88:30:6e:14:3b:9d:64:f5:4e:a6:8f:25:
9f:0a:bc:1f:92:a5:27:d9:5a:ea:cc:74:a7:6f:95:31:a7:97:
fd:aa:f3:a1:fc:73:c4:3e:a2:ff:8e:d2:cb:8c:dc:1d:28:a7:
5c:08:28:0f:c4:1d:b0:20:ec:6f:34:e7:33:5d:58:3f:b8:73:
bb:8b:a0:3c:c7:f0:ee:9c:d6:5a:26:f1:c7:41:63:45:fe:0b:
3f:24:8e:01:31:ba:79:b3:ab:d1:76:78:e2:51:31:bb:cc:83:
c3:3f:d5:57:47:74:32:2c:a6:79:1e:2f:28:a8:e6:14:cc:47:
fc:ad:74:ac:67:fe:f3:21:9f:51:ab:79:4a:68:0f:c1:9e:30:
cd:de:3b:ae:b2:7e:6b:7b:99:f7:39:6d:8d:ae:cb:04:40:94:
1f:0c:50:6f:bf:64:06:3b:cb:15:2e:bd:54:ef:60:02:6f:f7:
0c:fe:2c:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ID3m/fvl5fQKG2knUl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAyMDc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjE4MmNhMzY5NWM3MGEzM2U5NDkzMDBlMjA3MWRjM2FkMzAyMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjSI6wtXJcFeHYBLWn9Mx1x51Eol
Vn8RhDLZDJ56XQAmKQA7t1zn3owEsk9HXCzvImerb1VXAKOnJWOgeoywGrBGgk54
4TUmJe2JsGgojNYXabkUoH9HFMwN0lIvB6DL5yTGKshfxm/SpcjnhRHkiCmkYRYi
48uB3koLwVvo/BsGKwQB0PHKuK6/wraQVFPKAzZrjvU44xD8P4ZQFwivpOJrqwvD
87aV8ntLU1NA4XVgvZNZvxqCosjfO37IDbxxrRDyS4wXRKGwIc/rSocLs0b9QF0K
djOtCSJrU7iA9FV0lc9oXp0Dn7fKmPKwkfjf8hwAkL6eO7pW3U9HnmCkwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYYLKNpXHCjPpSTAOIHHcOtMCBVMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvMWhnc28ybGNjS00tbEpNQTRnY2R3NjB3SUZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CHMA0G
CSqGSIb3DQEBCwUAA4IBAQBu6BbWaroqoI8cCjP51IhS6+LwC49Dn+wvVT1PTjSf
kR5kzknl2BjPZ3EbskcvLNmatx548N8nbcNrpxKWNTJYZ4xhs9UGZdtvNplrCUKI
MG4UO51k9U6mjyWfCrwfkqUn2VrqzHSnb5Uxp5f9qvOh/HPEPqL/jtLLjNwdKKdc
CCgPxB2wIOxvNOczXVg/uHO7i6A8x/DunNZaJvHHQWNF/gs/JI4BMbp5s6vRdnji
UTG7zIPDP9VXR3QyLKZ5Hi8oqOYUzEf8rXSsZ/7zIZ9Rq3lKaA/BnjDN3juusn5r
e5n3OW2NrssEQJQfDFBvv2QGO8sVLr1U72ACb/cM/iwP
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:45:44 2025 by rpki-client