Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa
File: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (raw, json)
Hash identifier: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=
Subject key identifier: 29:AD:02:6D:BA:B1:BE:29:D5:14:3F:0D:0A:98:0B:4B:33:78:62:E9
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA68B753EC35DA0FBBA088C2BDDDD2
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205459
IP address blocks: 195.64.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:b7:53:ec:35:da:0f:bb:a0:88:c2:bd:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29ad026dbab1be29d5143f0d0a980b4b337862e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:e3:6b:9a:6c:f3:2f:14:c1:ea:4a:e1:84:
eb:9a:ce:7a:cf:91:43:aa:f6:d2:b8:26:89:62:36:
b6:41:f4:9f:cc:e7:f0:5e:58:ef:22:16:48:ed:80:
6e:57:f7:74:c4:6c:78:ae:1f:e4:b6:0f:fe:02:ac:
67:a8:a2:38:ba:8b:e1:00:52:43:08:7d:5c:b8:e2:
74:bb:dd:80:9e:6e:87:70:5d:02:ae:db:d4:bf:c1:
7e:91:10:25:51:45:70:f9:66:07:b3:90:31:5f:a4:
fc:3f:21:c4:6b:b5:23:72:72:ed:8c:bf:91:a3:0a:
46:80:2e:4f:7c:fc:6a:bd:21:4b:90:ec:e1:d3:c8:
2c:28:c7:60:aa:03:92:22:80:f9:e4:a9:b1:b7:5e:
a6:bb:5b:df:db:50:7b:f5:f1:bb:b1:32:10:ff:44:
58:ab:d4:9c:ed:30:a4:99:f7:d1:b4:85:c6:5f:ec:
e7:1b:cf:04:f5:3d:8d:1a:ad:6d:ba:90:32:16:d5:
61:75:0a:b9:70:4b:fd:2b:d1:03:d4:4e:c8:7f:29:
50:a3:c4:3f:04:0b:8e:4e:82:79:ed:12:04:d1:1f:
45:35:0a:3e:81:ef:8a:0f:0b:11:04:d7:c3:59:b0:
6e:c4:57:a0:31:8d:3a:56:f3:85:ad:10:f3:c5:cc:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:02:6D:BA:B1:BE:29:D5:14:3F:0D:0A:98:0B:4B:33:78:62:E9
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.230.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cf:f4:cd:18:87:50:c3:3d:95:5b:05:15:21:c3:5d:5d:78:
4a:f1:9c:f6:d9:96:6d:21:5b:95:eb:a2:03:00:a8:42:b6:e4:
55:8b:1d:b2:42:21:d7:6d:46:0c:79:df:69:1c:17:0a:b4:c3:
c2:ec:5f:47:6b:55:96:d7:12:9e:4e:00:ca:26:ea:c8:e7:5e:
b7:7e:86:6e:cf:52:04:82:1d:f4:16:d5:a4:e7:c2:58:c5:7a:
f4:28:47:1f:d5:30:95:98:d9:47:84:e2:e7:3a:9a:e8:f4:f8:
81:0e:ce:e7:3f:e0:3f:f0:51:2e:d1:12:80:39:a5:60:64:c2:
d8:3c:5b:0f:fb:d0:74:e6:6c:29:0d:ec:0a:3f:a0:60:03:3c:
ad:dd:5c:40:39:bd:55:ed:fd:24:bb:c9:96:65:73:cc:a7:d4:
07:68:43:7d:50:9d:0a:25:c9:c8:2e:4d:a3:b3:29:04:a0:7b:
96:7f:a0:28:7c:e9:4d:1f:ab:ca:a5:24:e7:3f:6a:96:90:4c:
4f:32:24:4c:00:9b:37:69:e3:30:e7:28:1c:03:0a:ce:30:7c:
f1:1a:53:75:15:59:9d:38:87:76:5b:58:4f:dd:53:7e:e0:d1:
66:ee:b0:7e:13:21:88:4c:50:5f:5d:54:c1:35:29:05:65:2d:
d6:05:46:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mi3U+w12g+7oIjCvd3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx
ODRmNGQwHhcNMjUwMTAxMDM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWFkMDI2ZGJhYjFiZTI5ZDUxNDNmMGQwYTk4MGI0YjMzNzg2MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19vja5ps8y8UwepK4YTrms56z5FD
qvbSuCaJYja2QfSfzOfwXljvIhZI7YBuV/d0xGx4rh/ktg/+AqxnqKI4uovhAFJD
CH1cuOJ0u92Anm6HcF0CrtvUv8F+kRAlUUVw+WYHs5AxX6T8PyHEa7UjcnLtjL+R
owpGgC5PfPxqvSFLkOzh08gsKMdgqgOSIoD55Kmxt16mu1vf21B79fG7sTIQ/0RY
q9Sc7TCkmffRtIXGX+znG88E9T2NGq1tupAyFtVhdQq5cEv9K9ED1E7IfylQo8Q/
BAuOToJ57RIE0R9FNQo+ge+KDwsRBNfDWbBuxFegMY06VvOFrRDzxcxnqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmtAm26sb4p1RQ/DQqYC0szeGLpMB8GA1UdIwQY
MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt
OGU5M2NiNWM1MzU1LzEvS2EwQ2JicXh2aW5WRkQ4TkNwZ0xTek40WXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1
LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0DmMA0G
CSqGSIb3DQEBCwUAA4IBAQA3z/TNGIdQwz2VWwUVIcNdXXhK8Zz22ZZtIVuV66ID
AKhCtuRVix2yQiHXbUYMed9pHBcKtMPC7F9Ha1WW1xKeTgDKJurI5163foZuz1IE
gh30FtWk58JYxXr0KEcf1TCVmNlHhOLnOpro9PiBDs7nP+A/8FEu0RKAOaVgZMLY
PFsP+9B05mwpDewKP6BgAzyt3VxAOb1V7f0ku8mWZXPMp9QHaEN9UJ0KJcnILk2j
sykEoHuWf6AofOlNH6vKpSTnP2qWkExPMiRMAJs3aeMw5ygcAwrOMHzxGlN1FVmd
OId2W1hP3VN+4NFm7rB+EyGITFBfXVTBNSkFZS3WBUbl
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:35:29 2025 by rpki-client