Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/30clEHSQ2FtWcxS6WRrlfziweF0.roa
File: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (raw, json)
Hash identifier: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=
Subject key identifier: DF:47:25:10:74:90:D8:5B:56:73:14:BA:59:1A:E5:7F:38:B0:78:5D
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 019423D6DC632F83092C96E88B86F9C29AA0
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/30clEHSQ2FtWcxS6WRrlfziweF0.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209140
IP address blocks: 193.105.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dc:63:2f:83:09:2c:96:e8:8b:86:f9:c2:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4725107490d85b567314ba591ae57f38b0785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:bd:d3:69:57:e8:2f:54:78:32:26:1d:40:
44:5b:64:fd:31:10:64:84:01:a1:87:45:97:2d:dd:
26:1b:29:e3:0a:fe:fb:76:83:f4:a6:bb:58:98:3c:
53:e1:a2:d5:cd:3d:13:7c:4f:35:40:d1:7c:c0:2a:
41:92:1b:98:bf:02:75:22:65:27:26:3f:bc:e3:78:
df:d8:4b:20:95:bf:b0:12:47:fe:33:9b:f3:a4:7a:
19:1d:ab:b3:48:38:0a:3f:60:f0:47:df:cc:d3:e0:
88:f8:ee:ab:63:77:7d:36:69:96:8c:4a:60:17:15:
05:0d:a6:e9:ec:3a:ef:1d:ae:67:9f:39:32:0d:9f:
3b:25:50:34:79:02:60:4d:24:88:57:3a:f9:8e:ad:
d4:96:b1:e3:94:98:51:77:a0:38:e4:28:14:4b:a2:
8a:7c:6f:db:33:ca:45:eb:c1:9a:03:21:dc:8e:67:
ea:47:d1:b5:fb:95:28:06:f9:ca:04:22:6a:8a:23:
3d:24:9b:05:d5:1e:fd:aa:39:8d:e6:ca:73:f1:0e:
bb:2b:a1:fd:fa:eb:30:c6:c3:e8:48:2c:a6:dc:40:
3e:70:89:e3:ca:4e:de:60:0a:38:f7:2c:6c:0e:68:
4b:dd:ec:01:2b:f1:11:fa:3f:33:c4:f7:d7:34:37:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:25:10:74:90:D8:5B:56:73:14:BA:59:1A:E5:7F:38:B0:78:5D
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/30clEHSQ2FtWcxS6WRrlfziweF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a8:bc:bb:45:92:88:1e:22:75:3e:45:f6:87:27:6f:59:37:
bf:83:82:2a:c2:41:61:5f:55:0e:9d:39:ae:e5:87:44:ce:6e:
cd:37:7a:5d:62:fe:0b:64:41:a8:37:60:58:fc:a2:05:f6:37:
f9:b8:f6:14:4f:ce:75:bf:32:c5:2c:e6:d5:87:9e:8d:d5:d7:
d9:23:6d:6d:54:0c:41:57:74:d7:ee:c4:7e:a8:1d:dc:85:3a:
22:15:b5:be:5f:65:88:c3:46:c0:09:11:30:25:ec:53:fd:fa:
07:12:34:f1:cf:e1:fc:0b:93:c9:a4:b7:2c:86:74:d9:0b:17:
46:8b:01:6a:2e:64:1c:83:71:ca:30:85:59:1b:98:f9:ea:89:
7f:c4:20:2f:09:be:9e:fb:13:4e:5a:e1:84:80:88:37:2e:c1:
42:55:74:24:7a:03:b0:cf:f1:7b:c0:6d:8b:8e:76:8f:37:3b:
51:66:11:2b:a9:f4:2c:1d:8d:64:b0:17:4e:07:ad:2c:ba:0a:
8a:63:d8:94:cb:f2:9f:14:f9:d0:f4:63:f3:8f:9a:88:09:bb:
fb:4f:ad:63:48:dd:7e:df:67:b8:d5:07:95:70:80:2d:f1:c1:
de:8a:c4:f1:ed:07:77:d9:3b:88:19:50:1b:dc:ee:f2:ef:95:
0c:60:56:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1txjL4MJLJboi4b5wpqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2
NjBiOTUwHhcNMjUwMTAxMjE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjQ3MjUxMDc0OTBkODViNTY3MzE0YmE1OTFhZTU3ZjM4YjA3ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG6902lX6C9UeDImHUBEW2T9MRBk
hAGhh0WXLd0mGynjCv77doP0prtYmDxT4aLVzT0TfE81QNF8wCpBkhuYvwJ1ImUn
Jj+843jf2Esglb+wEkf+M5vzpHoZHauzSDgKP2DwR9/M0+CI+O6rY3d9NmmWjEpg
FxUFDabp7DrvHa5nnzkyDZ87JVA0eQJgTSSIVzr5jq3UlrHjlJhRd6A45CgUS6KK
fG/bM8pF68GaAyHcjmfqR9G1+5UoBvnKBCJqiiM9JJsF1R79qjmN5spz8Q67K6H9
+uswxsPoSCym3EA+cInjyk7eYAo49yxsDmhL3ewBK/ER+j8zxPfXNDeNNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9HJRB0kNhbVnMUulka5X84sHhdMB8GA1UdIwQY
MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt
ZmRjMWRjZGEyOTYxLzEvMzBjbEVIU1EyRnRXY3hTNldScmxmeml3ZUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx
LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlUMA0G
CSqGSIb3DQEBCwUAA4IBAQBeqLy7RZKIHiJ1PkX2hydvWTe/g4IqwkFhX1UOnTmu
5YdEzm7NN3pdYv4LZEGoN2BY/KIF9jf5uPYUT851vzLFLObVh56N1dfZI21tVAxB
V3TX7sR+qB3chToiFbW+X2WIw0bACREwJexT/foHEjTxz+H8C5PJpLcshnTZCxdG
iwFqLmQcg3HKMIVZG5j56ol/xCAvCb6e+xNOWuGEgIg3LsFCVXQkegOwz/F7wG2L
jnaPNztRZhErqfQsHY1ksBdOB60sugqKY9iUy/KfFPnQ9GPzj5qICbv7T61jSN1+
32e41QeVcIAt8cHeisTx7Qd32TuIGVAb3O7y75UMYFZJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:49 2025 by rpki-client