Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/rnVgQnSvZayWReSkh23-vQQTXhc.roa
File: rnVgQnSvZayWReSkh23-vQQTXhc.roa (raw, json)
Hash identifier: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=
Subject key identifier: AE:75:60:42:74:AF:65:AC:96:45:E4:A4:87:6D:FE:BD:04:13:5E:17
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0194266A08CE36F52B1D2EA3ECBF7E71B782
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/rnVgQnSvZayWReSkh23-vQQTXhc.roa
Signing time: Thu 02 Jan 2025 09:47:50 +0000
ROA not before: Thu 02 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206907
IP address blocks: 193.200.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:08:ce:36:f5:2b:1d:2e:a3:ec:bf:7e:71:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jan 2 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae75604274af65ac9645e4a4876dfebd04135e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:b1:9f:41:29:65:69:01:c6:ab:16:e8:3a:
24:9d:2a:69:91:a8:ae:77:bd:9f:69:75:d0:e8:f0:
2c:1d:34:a5:3d:b9:80:ad:b9:32:8a:f2:90:32:74:
75:06:54:12:90:d7:22:db:3e:40:ca:1a:b0:da:ee:
7d:c1:aa:ae:b6:50:75:ec:5c:df:58:7f:ab:b0:03:
cf:be:cf:18:45:2d:a7:0c:c0:37:f6:97:b5:d3:e3:
b4:80:9a:af:23:59:01:12:56:8d:bf:24:17:52:cb:
d5:40:2c:e7:cc:09:77:49:03:78:be:82:9b:cc:80:
76:b3:0b:6b:55:1e:de:e0:9f:3f:8d:04:9f:6e:20:
8f:7d:28:b6:4d:34:4d:00:19:1a:0c:c3:59:20:5d:
b7:4d:0c:c2:35:17:f8:30:b7:b0:76:67:c7:08:01:
4e:9c:42:47:b5:af:f9:f1:5c:35:62:f6:5b:7f:c2:
02:07:1d:96:2f:f2:dc:e2:e9:85:38:df:e0:37:80:
f2:42:0c:62:69:06:cd:21:38:d3:7d:32:4f:5b:37:
a0:3c:41:08:03:10:72:b1:20:03:39:83:4a:e9:e5:
64:e2:e4:09:ed:0b:0c:8c:65:35:42:ce:99:54:1d:
e4:0a:4b:da:13:2c:55:a3:5f:e2:ea:cf:27:dd:4a:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:60:42:74:AF:65:AC:96:45:E4:A4:87:6D:FE:BD:04:13:5E:17
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/rnVgQnSvZayWReSkh23-vQQTXhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.84.0/23
Signature Algorithm: sha256WithRSAEncryption
36:03:8a:3b:cc:99:21:72:59:41:ef:c4:c6:c8:86:ab:c1:0d:
ba:32:63:2c:45:97:e5:81:73:6e:70:cc:33:cb:31:c6:32:cf:
f1:33:56:c5:f0:ba:ed:a1:77:4b:41:12:fe:bd:bb:ac:7a:fe:
3d:57:b5:0c:ab:b4:dd:39:eb:9d:31:9a:5b:ae:c7:73:56:14:
e4:0b:93:13:57:92:6e:df:26:13:d2:8d:95:3d:1e:d4:ee:58:
9c:65:cf:ee:83:f9:81:f6:da:5b:8b:19:42:f6:14:ed:07:9a:
42:22:b0:90:72:47:1c:d1:25:ee:1c:0f:42:a0:a0:95:03:c6:
40:de:48:69:76:f7:3c:7f:f2:eb:ea:20:02:2a:83:93:fe:43:
2e:0b:fb:e2:08:30:7d:3d:a0:a7:dc:b2:27:76:e3:1a:2d:12:
20:7c:0f:cd:17:5b:48:13:eb:c4:b9:17:8d:b4:09:b3:65:bb:
5b:ca:2b:22:db:bb:14:0c:5a:58:8e:fc:79:3f:d9:ca:08:0e:
cf:8d:64:e4:80:95:3d:bb:4e:11:3e:87:1e:36:51:75:39:1e:
57:01:09:9f:71:7e:e1:57:bb:d7:36:63:88:c4:49:72:fe:e8:
83:94:5c:e2:b4:7d:fd:3f:c6:e8:2d:1d:02:14:c0:e3:31:bc:
15:f7:b1:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmagjONvUrHS6j7L9+cbeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2U4YTUwZGQ0MzI3MmI0NzRkNTU0NDNkMmZhYzQ2NTY2
NDc3YzIwHhcNMjUwMTAyMDk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTc1NjA0Mjc0YWY2NWFjOTY0NWU0YTQ4NzZkZmViZDA0MTM1ZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWqxn0EpZWkBxqsW6DoknSppkaiu
d72faXXQ6PAsHTSlPbmArbkyivKQMnR1BlQSkNci2z5Ayhqw2u59waqutlB17Fzf
WH+rsAPPvs8YRS2nDMA39pe10+O0gJqvI1kBElaNvyQXUsvVQCznzAl3SQN4voKb
zIB2swtrVR7e4J8/jQSfbiCPfSi2TTRNABkaDMNZIF23TQzCNRf4MLewdmfHCAFO
nEJHta/58Vw1YvZbf8ICBx2WL/Lc4umFON/gN4DyQgxiaQbNITjTfTJPWzegPEEI
AxBysSADOYNK6eVk4uQJ7QsMjGU1Qs6ZVB3kCkvaEyxVo1/i6s8n3UqORQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK51YEJ0r2WslkXkpIdt/r0EE14XMB8GA1UdIwQY
MBaAFAHOilDdQycrR01VRD0vrEZWZHfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEt
YmI5NDUzMDg0MWU1LzEvcm5WZ1FuU3ZaYXlXUmVTa2gyMy12UVFUWGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEtYmI5NDUzMDg0MWU1
LzEvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwchUMA0G
CSqGSIb3DQEBCwUAA4IBAQA2A4o7zJkhcllB78TGyIarwQ26MmMsRZflgXNucMwz
yzHGMs/xM1bF8LrtoXdLQRL+vbusev49V7UMq7TdOeudMZpbrsdzVhTkC5MTV5Ju
3yYT0o2VPR7U7licZc/ug/mB9tpbixlC9hTtB5pCIrCQckcc0SXuHA9CoKCVA8ZA
3khpdvc8f/Lr6iACKoOT/kMuC/viCDB9PaCn3LInduMaLRIgfA/NF1tIE+vEuReN
tAmzZbtbyisi27sUDFpYjvx5P9nKCA7PjWTkgJU9u04RPoceNlF1OR5XAQmfcX7h
V7vXNmOIxEly/uiDlFzitH39P8boLR0CFMDjMbwV97H8
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:35 2025 by rpki-client