Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hy_ucIJUi3CJ6kVxcgXVxieywhM.roa
File: hy_ucIJUi3CJ6kVxcgXVxieywhM.roa (raw, json)
Hash identifier: Y7r8fZDcKnprbX5sry93KuVWc9Ktb8EvMmXkL4jAn9c=
Subject key identifier: 87:2F:EE:70:82:54:8B:70:89:EA:45:71:72:05:D5:C6:27:B2:C2:13
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC83BF8F9D195D45DAB663CF163E70
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hy_ucIJUi3CJ6kVxcgXVxieywhM.roa
Signing time: Thu 02 Jan 2025 07:48:13 +0000
ROA not before: Thu 02 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212517
IP address blocks: 202.133.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:83:bf:8f:9d:19:5d:45:da:b6:63:cf:16:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=872fee7082548b7089ea45717205d5c627b2c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:4a:67:e0:9b:dc:7f:29:0d:cc:5a:e6:54:
cd:32:e1:01:d9:bf:87:63:b4:24:dd:7d:36:3c:25:
3f:b3:c9:c6:d5:ee:b2:d5:49:a5:d0:2a:8e:e1:8b:
49:c3:b6:4f:2a:1c:57:c3:74:5c:eb:bc:0f:75:e2:
6b:ad:b0:4c:80:4e:4e:c8:04:b8:82:d7:ce:89:67:
58:27:6e:1d:e3:e5:f7:63:48:1f:83:cf:37:60:2a:
66:50:59:13:52:34:c4:dc:e1:4b:43:be:ea:60:d7:
e5:7b:8f:64:f9:3d:6e:de:34:5f:2b:c1:ac:73:6c:
ae:6c:1f:bd:98:f0:79:06:57:2e:4e:17:b0:ac:0e:
19:f3:29:b7:65:cb:ea:64:7e:a6:96:6d:2a:0f:69:
9c:d3:47:fa:aa:14:92:8b:98:b2:ff:e9:7e:17:c4:
bb:fb:57:9e:28:18:53:bd:00:6d:03:6b:77:6b:48:
d1:b8:0d:92:2f:06:22:1e:c8:70:4e:28:a7:35:e7:
60:1c:38:e7:d3:f0:bf:7c:c5:48:1b:ea:15:8d:77:
c4:8d:bd:da:a1:6b:ce:00:31:3e:ef:4c:53:f1:50:
d0:2a:48:7d:1b:6b:cd:3d:ab:47:a0:d6:18:fd:3f:
f4:2f:63:c5:92:ce:d0:dd:38:59:06:cc:e3:34:93:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:EE:70:82:54:8B:70:89:EA:45:71:72:05:D5:C6:27:B2:C2:13
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hy_ucIJUi3CJ6kVxcgXVxieywhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.133.88.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:fc:62:56:2b:82:1a:d2:27:91:7b:4d:ca:77:97:df:2d:19:
68:c3:0a:05:5e:94:f6:ac:d7:36:fb:79:97:6a:df:e4:04:a2:
06:e6:ba:f1:9e:e3:80:9b:1e:6b:2e:85:0c:e5:ee:0a:4b:68:
60:04:89:90:18:47:31:8e:11:73:c1:5c:25:c6:29:54:73:e2:
c8:b5:a3:83:90:7e:2b:88:24:cc:2a:1f:35:a9:5e:40:e0:96:
fa:0b:c2:11:5d:ab:72:6b:33:a7:57:0f:f4:70:ef:4b:00:31:
57:9d:ff:ce:9b:0b:69:57:a2:91:16:61:2b:e8:59:b8:dc:d5:
24:61:c0:34:41:e9:15:97:58:49:fd:f8:fc:45:23:b1:73:7c:
14:09:03:22:4f:89:06:b3:50:16:62:0d:45:03:23:92:d8:d6:
53:61:15:b6:64:16:c8:57:3c:18:d8:ce:38:0c:b3:79:5e:14:
c8:d3:1b:be:8c:79:84:29:e6:82:a6:78:90:57:17:3b:d9:eb:
51:62:72:e8:8b:74:12:bf:e7:4b:32:09:f5:7b:30:03:e9:f6:
79:eb:a2:dd:c1:fa:dd:9b:c8:30:e3:d7:a4:a8:8e:44:a2:71:
1a:0d:f8:9c:ef:08:6d:58:17:78:3c:28:ec:94:fd:09:8a:17:
94:1e:47:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/IO/j50ZXUXatmPPFj5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAyMDc0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzJmZWU3MDgyNTQ4YjcwODllYTQ1NzE3MjA1ZDVjNjI3YjJjMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl61KZ+Cb3H8pDcxa5lTNMuEB2b+H
Y7Qk3X02PCU/s8nG1e6y1Uml0CqO4YtJw7ZPKhxXw3Rc67wPdeJrrbBMgE5OyAS4
gtfOiWdYJ24d4+X3Y0gfg883YCpmUFkTUjTE3OFLQ77qYNfle49k+T1u3jRfK8Gs
c2yubB+9mPB5BlcuThewrA4Z8ym3ZcvqZH6mlm0qD2mc00f6qhSSi5iy/+l+F8S7
+1eeKBhTvQBtA2t3a0jRuA2SLwYiHshwTiinNedgHDjn0/C/fMVIG+oVjXfEjb3a
oWvOADE+70xT8VDQKkh9G2vNPatHoNYY/T/0L2PFks7Q3ThZBszjNJM4VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIcv7nCCVItwiepFcXIF1cYnssITMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvaHlfdWNJSlVpM0NKNmtWeGNnWFZ4aWV5d2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByoVYMA0G
CSqGSIb3DQEBCwUAA4IBAQDH/GJWK4Ia0ieRe03Kd5ffLRlowwoFXpT2rNc2+3mX
at/kBKIG5rrxnuOAmx5rLoUM5e4KS2hgBImQGEcxjhFzwVwlxilUc+LItaODkH4r
iCTMKh81qV5A4Jb6C8IRXatyazOnVw/0cO9LADFXnf/OmwtpV6KRFmEr6Fm43NUk
YcA0QekVl1hJ/fj8RSOxc3wUCQMiT4kGs1AWYg1FAyOS2NZTYRW2ZBbIVzwY2M44
DLN5XhTI0xu+jHmEKeaCpniQVxc72etRYnLoi3QSv+dLMgn1ezAD6fZ566Ldwfrd
m8gw49ekqI5EonEaDfic7whtWBd4PCjslP0JiheUHkcG
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:51:46 2025 by rpki-client