Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/fj83OICA2dXkb7sofXdOoGdjzq4.roa
File: fj83OICA2dXkb7sofXdOoGdjzq4.roa (raw, json)
Hash identifier: pOA5XIvHm6EKh1V95/EfmbQrXTJ90+bGbqMr2BZtsSk=
Subject key identifier: 7E:3F:37:38:80:80:D9:D5:E4:6F:BB:28:7D:77:4E:A0:67:63:CE:AE
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019421B1D9EF06CEC04BB2D799D183B8C45A
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/fj83OICA2dXkb7sofXdOoGdjzq4.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5539
IP address blocks: 5.182.154.0/23 maxlen: 24
5.182.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d9:ef:06:ce:c0:4b:b2:d7:99:d1:83:b8:c4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e3f37388080d9d5e46fbb287d774ea06763ceae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:59:0d:c6:9f:6e:a5:69:92:3e:2c:fc:da:
b3:b3:75:e5:8c:3e:4c:fd:70:00:ce:37:37:ed:77:
d8:32:3d:d7:2e:1d:19:63:84:a6:10:a8:fd:60:b1:
0b:d4:cb:90:b1:e3:e5:39:05:ac:23:f6:4d:cb:20:
4d:45:8e:24:87:cd:08:9e:a0:84:4d:d6:92:e1:e0:
8d:68:81:d7:49:6e:ba:a5:c6:cc:d9:9b:bf:6c:05:
91:ed:30:44:5d:e1:c6:4a:31:bd:f0:5a:04:45:f7:
b5:49:78:73:33:ef:9a:c3:e9:a9:12:96:ac:88:5b:
93:6f:75:7c:e5:31:32:d1:61:1f:ca:68:d3:12:da:
6c:80:32:a9:b2:6e:29:9d:05:8f:d1:0d:5c:a8:2f:
b0:fc:13:a3:c8:be:65:53:1e:4c:3a:f6:a3:03:ca:
ac:9e:7e:11:ae:4a:7c:ba:79:b3:49:98:98:f3:10:
1f:a3:e4:08:b2:fb:af:f8:00:0e:55:c4:c1:9c:04:
f4:7a:df:1a:30:4a:39:a0:43:a0:74:b8:13:83:bc:
45:56:23:7c:d9:48:af:19:ba:46:ca:14:e8:ce:e6:
22:9a:e3:20:e2:1e:8a:80:d0:74:aa:da:44:b3:fd:
16:53:0a:c6:77:a3:25:0b:48:41:5f:34:45:bd:bd:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:37:38:80:80:D9:D5:E4:6F:BB:28:7D:77:4E:A0:67:63:CE:AE
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/fj83OICA2dXkb7sofXdOoGdjzq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.154.0/23
Signature Algorithm: sha256WithRSAEncryption
90:c7:ae:9c:ee:c1:3d:7d:b8:c4:30:9d:ba:84:e5:d6:e6:7a:
2a:69:14:44:2d:a8:c4:23:34:25:ca:97:19:c7:5c:57:32:7f:
f9:3c:df:86:52:fe:61:d3:47:ba:d0:9a:fd:2d:01:35:2d:02:
7a:fc:31:e6:da:3c:5f:7d:f3:66:7b:a5:ce:bf:e9:74:75:05:
79:33:87:86:3f:21:c2:63:49:69:d9:07:64:dd:aa:05:ab:a9:
7d:b4:e8:59:bb:0d:73:3c:76:60:f9:5f:f0:e8:d0:dd:c3:6f:
f3:e3:58:ee:9b:a6:87:62:18:93:4e:1c:62:8e:9b:24:dc:ec:
6f:3e:0a:7a:57:7a:eb:e4:7b:e0:42:74:e7:24:92:90:ba:6c:
8f:5a:f3:33:cd:80:7f:cb:5c:41:1e:ce:31:c3:0f:98:7f:43:
92:40:24:36:5f:d5:ca:ba:19:03:f8:15:32:f7:6f:52:d7:92:
82:32:77:f1:eb:06:98:9a:b6:5b:90:fa:b5:5e:94:f4:bf:73:
7f:e8:e0:cf:af:35:b0:fb:6a:4b:d7:56:41:71:a2:7a:c7:f6:
12:23:03:31:81:9e:15:30:33:c5:14:55:09:15:ac:1e:ea:27:
b2:19:8e:51:28:9e:5f:e5:6e:ed:18:18:71:1b:4d:85:48:ba:
a8:09:9b:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdnvBs7AS7LXmdGDuMRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjUyYTc1Yzk2MWFkMzM4ZmQ5MTE0N2Q0NjFkZDhiM2Qy
MGNmNTEwHhcNMjUwMTAxMTE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNmMzczODgwODBkOWQ1ZTQ2ZmJiMjg3ZDc3NGVhMDY3NjNjZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ExZDcafbqVpkj4s/Nqzs3XljD5M
/XAAzjc37XfYMj3XLh0ZY4SmEKj9YLEL1MuQsePlOQWsI/ZNyyBNRY4kh80InqCE
TdaS4eCNaIHXSW66pcbM2Zu/bAWR7TBEXeHGSjG98FoERfe1SXhzM++aw+mpEpas
iFuTb3V85TEy0WEfymjTEtpsgDKpsm4pnQWP0Q1cqC+w/BOjyL5lUx5MOvajA8qs
nn4Rrkp8unmzSZiY8xAfo+QIsvuv+AAOVcTBnAT0et8aMEo5oEOgdLgTg7xFViN8
2UivGbpGyhTozuYimuMg4h6KgNB0qtpEs/0WUwrGd6MlC0hBXzRFvb3fXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH4/NziAgNnV5G+7KH13TqBnY86uMB8GA1UdIwQY
MBaAFL0lKnXJYa0zj9kRR9Rh3Ys9IM9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNVcWRjbGhyVE9QMlJGSDFHSGRpejBnejFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWM3MGUtMjI2YS00NzgxLWI2NjIt
NzQxYWI5Mjk5N2QwLzEvZmo4M09JQ0EyZFhrYjdzb2ZYZE9vR2RqenE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kMWM3MGUtMjI2YS00NzgxLWI2NjItNzQxYWI5Mjk5N2Qw
LzEvdlNVcWRjbGhyVE9QMlJGSDFHSGRpejBnejFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbaaMA0G
CSqGSIb3DQEBCwUAA4IBAQCQx66c7sE9fbjEMJ26hOXW5noqaRRELajEIzQlypcZ
x1xXMn/5PN+GUv5h00e60Jr9LQE1LQJ6/DHm2jxfffNme6XOv+l0dQV5M4eGPyHC
Y0lp2Qdk3aoFq6l9tOhZuw1zPHZg+V/w6NDdw2/z41jum6aHYhiTThxijpsk3Oxv
Pgp6V3rr5HvgQnTnJJKQumyPWvMzzYB/y1xBHs4xww+Yf0OSQCQ2X9XKuhkD+BUy
929S15KCMnfx6waYmrZbkPq1XpT0v3N/6ODPrzWw+2pL11ZBcaJ6x/YSIwMxgZ4V
MDPFFFUJFawe6ieyGY5RKJ5f5W7tGBhxG02FSLqoCZsq
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:34:15 2025 by rpki-client