Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/aUv0oKe6R2btvCdtOSYfT8WFAF0.roa
File: aUv0oKe6R2btvCdtOSYfT8WFAF0.roa (raw, json)
Hash identifier: lEgJxjlP6AlXHpqLTYKzkLDQsVq+Pi3xpQibZH/Rsds=
Subject key identifier: 69:4B:F4:A0:A7:BA:47:66:ED:BC:27:6D:39:26:1F:4F:C5:85:00:5D
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 01942444AFC38B1A13AB1EE16F9E181CA599
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/aUv0oKe6R2btvCdtOSYfT8WFAF0.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212942
IP address blocks: 176.105.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:c3:8b:1a:13:ab:1e:e1:6f:9e:18:1c:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=694bf4a0a7ba4766edbc276d39261f4fc585005d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:50:25:0f:e5:6f:24:c0:4a:2b:c2:4e:b7:
1d:a6:c0:0b:4c:d7:56:bf:a3:10:e8:94:0c:58:ed:
20:a5:90:3b:52:2f:c5:6d:da:39:cd:99:35:ed:98:
50:5d:3f:9e:eb:8e:1f:0c:d3:1f:6b:64:61:d5:d4:
43:42:78:01:42:29:67:b3:3c:6a:db:77:2b:67:49:
5a:2a:69:8f:87:2e:de:0a:d8:8e:a8:99:8a:47:e4:
86:02:77:a4:74:d7:38:1d:f6:25:b1:d4:60:b7:d8:
ab:d6:1b:df:c6:ec:0c:1b:30:6f:02:29:84:ef:9b:
56:16:e3:58:d6:9b:4e:1f:db:8d:b0:4b:e9:db:3c:
79:e2:fb:5b:97:b8:8e:36:16:4e:98:f5:25:41:2f:
b7:dc:e6:bf:72:aa:76:90:ca:73:94:a5:f3:3f:80:
92:4f:13:63:a5:ce:65:7a:e2:cd:17:44:1a:08:bf:
12:c5:13:82:a9:27:14:0e:cd:f3:a9:8d:bd:20:cd:
e7:75:d4:16:67:95:ef:80:31:f0:97:09:2e:e7:26:
4b:24:2f:c9:43:c3:c5:83:06:30:82:31:41:97:89:
54:17:3e:8c:20:91:25:92:7d:e8:4f:3a:b2:db:6d:
f6:44:53:6e:e1:e0:80:eb:1d:89:fa:92:4d:e5:9b:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:F4:A0:A7:BA:47:66:ED:BC:27:6D:39:26:1F:4F:C5:85:00:5D
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/aUv0oKe6R2btvCdtOSYfT8WFAF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:37:78:48:0f:7c:f8:84:26:4a:24:77:43:6f:6a:6b:11:a3:
b5:49:81:23:a8:76:5d:fb:cc:9e:22:b9:8e:42:aa:05:59:83:
5f:22:f7:0d:cf:77:b6:59:09:fa:6e:24:50:04:7f:7e:7e:76:
ac:ec:a0:9a:9c:82:78:b3:ba:ca:9c:2a:27:bd:d7:d3:41:33:
75:07:91:54:df:2c:fe:8f:6f:1a:be:0b:ad:33:f1:84:a2:00:
d2:77:03:a2:65:b6:a4:10:ee:c3:43:c8:ea:c7:47:4f:e1:bc:
d3:a1:df:b2:72:6b:12:58:32:96:0f:68:f1:45:1a:fd:cd:ab:
37:a7:7c:29:5c:db:1a:c8:b8:52:15:a4:92:88:66:72:1b:8c:
2a:ed:b3:d0:6b:6e:78:28:4d:f4:94:02:93:c4:65:0c:4b:88:
53:ab:0c:36:8f:c6:58:d5:1f:ae:4f:04:be:cc:22:84:20:37:
e1:ae:fa:b2:7f:5f:7d:18:3d:28:73:8a:ce:5f:69:22:7f:5e:
02:8c:5a:c8:ec:66:46:4d:55:7b:1d:eb:b8:e3:e2:94:37:5d:
ce:7a:7c:e2:f9:26:39:a0:5d:77:8f:f9:a3:69:6d:cb:70:d6:
05:71:fc:a2:90:14:b4:6c:5c:7b:13:ce:26:6e:3a:d0:91:c7:
64:5c:b8:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRK/DixoTqx7hb54YHKWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTY1ODhiZDFjY2IyZGQyMjFjNmY4NzgzODU2NzQ3NWQ3
ZWYyOWIwHhcNMjUwMTAxMjM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTRiZjRhMGE3YmE0NzY2ZWRiYzI3NmQzOTI2MWY0ZmM1ODUwMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXhQJQ/lbyTASivCTrcdpsALTNdW
v6MQ6JQMWO0gpZA7Ui/Fbdo5zZk17ZhQXT+e644fDNMfa2Rh1dRDQngBQilnszxq
23crZ0laKmmPhy7eCtiOqJmKR+SGAnekdNc4HfYlsdRgt9ir1hvfxuwMGzBvAimE
75tWFuNY1ptOH9uNsEvp2zx54vtbl7iONhZOmPUlQS+33Oa/cqp2kMpzlKXzP4CS
TxNjpc5leuLNF0QaCL8SxROCqScUDs3zqY29IM3nddQWZ5XvgDHwlwku5yZLJC/J
Q8PFgwYwgjFBl4lUFz6MIJElkn3oTzqy2232RFNu4eCA6x2J+pJN5ZtVWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlL9KCnukdm7bwnbTkmH0/FhQBdMB8GA1UdIwQY
MBaAFKAWWIvRzLLdIhxvh4OFZ0ddfvKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEt
NzczMTIwZmY3YzBmLzEvYVV2MG9LZTZSMmJ0dkNkdE9TWWZUOFdGQUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEtNzczMTIwZmY3YzBm
LzEvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGmnMA0G
CSqGSIb3DQEBCwUAA4IBAQAdN3hID3z4hCZKJHdDb2prEaO1SYEjqHZd+8yeIrmO
QqoFWYNfIvcNz3e2WQn6biRQBH9+fnas7KCanIJ4s7rKnConvdfTQTN1B5FU3yz+
j28avgutM/GEogDSdwOiZbakEO7DQ8jqx0dP4bzTod+ycmsSWDKWD2jxRRr9zas3
p3wpXNsayLhSFaSSiGZyG4wq7bPQa254KE30lAKTxGUMS4hTqww2j8ZY1R+uTwS+
zCKEIDfhrvqyf199GD0oc4rOX2kif14CjFrI7GZGTVV7Heu44+KUN13Oenzi+SY5
oF13j/mjaW3LcNYFcfyikBS0bFx7E84mbjrQkcdkXLiF
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:53:04 2025 by rpki-client