Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/a5SThzVTiz_HAgBiI_2C-cBicRU.roa
File: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (raw, json)
Hash identifier: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=
Subject key identifier: 6B:94:93:87:35:53:8B:3F:C7:02:00:62:23:FD:82:F9:C0:62:71:15
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 019422FC3106B8E5444615F857A0E6B798AA
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/a5SThzVTiz_HAgBiI_2C-cBicRU.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22683
IP address blocks: 149.59.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:31:06:b8:e5:44:46:15:f8:57:a0:e6:b7:98:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b94938735538b3fc702006223fd82f9c0627115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:38:3d:b4:df:de:06:60:6b:47:77:b1:35:
7b:2c:5a:b8:e0:55:bb:a4:f6:7d:57:ef:c7:06:5f:
b6:13:6d:a8:80:42:4e:e2:61:9d:ea:dc:36:ec:f0:
1a:88:5e:9e:5e:8a:fd:3e:d4:07:7c:95:c6:ba:97:
24:e9:3e:e3:8e:8c:f5:4f:b8:25:35:8c:31:8e:19:
c5:72:f8:7b:67:a1:4a:78:0a:58:b8:c9:3f:6b:db:
d0:09:b7:54:b7:bf:a7:71:aa:7b:43:4e:80:b8:c8:
c9:19:f2:9b:24:bd:14:d5:19:58:76:42:f2:04:a3:
6c:bc:4a:6a:b9:92:ab:ca:8b:32:97:52:2e:8f:ea:
5d:a1:15:34:cc:72:bb:42:0b:08:98:2c:89:59:e6:
91:1a:52:6d:11:53:8a:b8:f4:ff:3a:a0:71:e1:d9:
71:29:5a:16:7b:df:12:15:7f:8b:05:6f:50:95:79:
f7:5f:a9:4c:86:8a:9a:cc:5f:15:a8:f6:9c:5f:ed:
78:59:1c:b9:73:93:b7:18:50:6b:96:be:1a:1f:80:
f7:00:02:d1:99:39:d3:9c:90:b8:19:7d:8e:2a:90:
4d:62:15:b0:fe:fc:0d:8d:cd:ff:47:91:97:84:78:
ef:aa:ed:28:ec:d6:f2:8a:01:75:23:93:b7:d6:de:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:94:93:87:35:53:8B:3F:C7:02:00:62:23:FD:82:F9:C0:62:71:15
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/a5SThzVTiz_HAgBiI_2C-cBicRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:f4:fc:d5:7d:a2:09:5b:a1:10:b7:79:f0:65:4c:0e:bb:94:
5a:bd:16:45:ac:08:0e:cd:34:e5:7c:b4:c6:f3:56:b9:13:d9:
7e:bb:1e:fa:d0:d9:84:a2:7b:5e:5a:a8:e4:d1:6d:4d:c7:03:
0d:57:7d:5f:08:a8:68:2f:01:5a:43:f3:78:a5:ea:52:13:9b:
45:9e:0e:28:93:5e:83:86:04:f7:42:93:35:43:cf:03:24:1f:
23:21:73:86:c9:a7:ed:3f:f0:6c:bf:d4:93:09:b8:eb:02:92:
82:eb:d4:4f:ec:9e:9e:d9:52:4d:cf:66:74:05:0d:06:70:98:
f5:08:d5:df:4f:f6:78:c6:9b:f5:94:da:73:25:b0:09:19:82:
9f:47:22:7b:48:f5:d3:b4:8a:d9:5c:e8:a6:e3:68:92:c3:78:
0e:e4:f4:54:c0:52:46:96:dc:28:8e:f9:22:6f:21:14:58:66:
c3:e1:87:c8:b2:1e:56:4a:96:6e:0c:9c:7b:79:68:db:44:d3:
a3:3b:cc:5b:a6:b2:5e:04:c0:4e:bc:0c:ba:c6:64:76:8f:8d:
82:52:a5:1c:be:02:97:b3:c4:4f:e2:6d:a6:a7:1e:c1:35:e3:
43:b6:3c:3e:88:98:7f:90:5e:0e:d3:5a:3b:09:08:d4:18:f5:
65:52:d5:a2
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQi/DEGuOVERhX4V6Dmt5iqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk0OTM4NzM1NTM4YjNmYzcwMjAwNjIyM2ZkODJmOWMwNjI3MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNw4PbTf3gZga0d3sTV7LFq44FW7
pPZ9V+/HBl+2E22ogEJO4mGd6tw27PAaiF6eXor9PtQHfJXGupck6T7jjoz1T7gl
NYwxjhnFcvh7Z6FKeApYuMk/a9vQCbdUt7+ncap7Q06AuMjJGfKbJL0U1RlYdkLy
BKNsvEpquZKryosyl1Iuj+pdoRU0zHK7QgsImCyJWeaRGlJtEVOKuPT/OqBx4dlx
KVoWe98SFX+LBW9QlXn3X6lMhoqazF8VqPacX+14WRy5c5O3GFBrlr4aH4D3AALR
mTnTnJC4GX2OKpBNYhWw/vwNjc3/R5GXhHjvqu0o7NbyigF1I5O31t58RQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGuUk4c1U4s/xwIAYiP9gvnAYnEVMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvYTVTVGh6VlRpel9IQWdCaUlfMkMtY0JpY1JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlTswDQYJ
KoZIhvcNAQELBQADggEBAGb0/NV9oglboRC3efBlTA67lFq9FkWsCA7NNOV8tMbz
VrkT2X67HvrQ2YSie15aqOTRbU3HAw1XfV8IqGgvAVpD83il6lITm0WeDiiTXoOG
BPdCkzVDzwMkHyMhc4bJp+0/8Gy/1JMJuOsCkoLr1E/snp7ZUk3PZnQFDQZwmPUI
1d9P9njGm/WU2nMlsAkZgp9HIntI9dO0itlc6KbjaJLDeA7k9FTAUkaW3CiO+SJv
IRRYZsPhh8iyHlZKlm4MnHt5aNtE06M7zFumsl4EwE68DLrGZHaPjYJSpRy+Apez
xE/ibaanHsE140O2PD6ImH+QXg7TWjsJCNQY9WVS1aI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:11:38 2025 by rpki-client