Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/5_5ZxyaYymDkazwik4_YUJ_u6nk.roa
File: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (raw, json)
Hash identifier: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=
Subject key identifier: E7:FE:59:C7:26:98:CA:60:E4:6B:3C:22:93:8F:D8:50:9F:EE:EA:79
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 01942143BBADC37519A86571B9FDEC9446D9
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/5_5ZxyaYymDkazwik4_YUJ_u6nk.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 194.61.25.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 09:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bb:ad:c3:75:19:a8:65:71:b9:fd:ec:94:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fe59c72698ca60e46b3c22938fd8509feeea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:28:1f:96:af:54:7d:3b:5f:1f:3f:6e:d5:
4c:a3:60:bd:05:9e:e2:68:74:83:36:8b:bd:0c:de:
d4:47:9c:91:44:7d:29:bc:84:06:50:f1:02:5e:fb:
11:c9:af:e4:0c:76:2a:bb:56:63:77:7b:4b:ab:dc:
f4:82:65:55:32:43:31:40:7f:ef:55:ef:3d:67:b3:
53:80:f1:99:3f:46:b4:aa:72:9f:d1:65:81:d1:5b:
49:f8:fb:52:67:1a:b1:87:a1:22:f7:df:87:6f:dd:
a9:e6:39:47:d2:a2:02:bb:4c:d3:77:b7:d6:74:35:
22:8c:ca:dc:8a:b3:27:4a:c4:4b:05:22:53:92:60:
51:8e:c1:ab:0f:9d:5b:34:ae:48:0c:8e:bb:89:18:
d9:56:98:6b:54:d9:fa:16:cb:e7:52:60:76:c9:c7:
25:f6:ae:23:3c:02:6e:91:b2:fd:17:8b:fc:24:22:
90:2d:7c:ca:11:9f:21:79:e3:86:46:b7:b2:bf:ec:
d8:a0:eb:bb:9d:c2:b0:81:3b:4c:5e:59:d1:d7:ff:
4b:c4:83:2c:de:21:2e:85:08:e2:bf:9a:87:b1:ac:
2e:c2:81:a2:d8:07:ff:8c:18:75:ed:3f:ed:7d:63:
62:e0:1a:3f:fb:95:87:01:8b:2f:2d:cf:55:d4:57:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:59:C7:26:98:CA:60:E4:6B:3C:22:93:8F:D8:50:9F:EE:EA:79
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/5_5ZxyaYymDkazwik4_YUJ_u6nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.25.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1f:1a:47:f2:0a:12:9a:9d:61:3c:74:60:d4:9a:fc:a9:93:
4f:b9:52:30:d0:bf:7c:45:c0:82:2b:1e:8f:5e:78:f1:42:5c:
4b:5d:97:29:44:95:ad:85:44:a1:92:bc:7f:40:e4:e1:b3:9e:
16:7b:f9:80:ef:e0:f0:5c:0d:79:d4:ba:5b:2f:dd:2f:7e:85:
77:a8:1e:8c:31:ef:d2:c7:4d:11:cd:b3:2b:6e:fe:2e:c1:43:
fe:90:20:72:63:39:7c:31:8b:93:d5:68:eb:cc:5c:85:70:d0:
66:69:2e:6d:34:c1:4e:2a:4a:35:71:2a:08:6f:9b:ec:cc:95:
ca:d7:5c:0c:24:c6:f6:d1:c8:2b:7e:40:77:8d:1d:82:d9:37:
fc:fb:10:d3:f8:b2:29:08:39:d2:1f:a7:88:17:6c:03:8c:01:
d6:5d:e4:c8:84:51:1a:91:56:f0:5f:59:7f:48:72:98:d1:f1:
6a:be:53:13:22:f4:dc:ba:e4:8b:f1:01:9f:d7:b7:47:c1:23:
03:eb:fb:00:7d:e2:d5:31:93:2c:7a:2e:4d:c0:fe:df:19:e5:
47:f0:6a:1d:76:5d:e5:bb:60:ec:f0:a6:de:29:a5:32:14:25:
97:5e:22:35:a7:2f:58:7b:72:10:90:fe:15:4e:32:41:41:4e:
d1:c4:b9:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ7utw3UZqGVxuf3slEbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDNjYzU5MWNlYmEzODYxMzBmM2M5Zjc0MjY0NThiODg4
N2MyZWIwHhcNMjUwMTAxMDk0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2ZlNTljNzI2OThjYTYwZTQ2YjNjMjI5MzhmZDg1MDlmZWVlYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs80oH5avVH07Xx8/btVMo2C9BZ7i
aHSDNou9DN7UR5yRRH0pvIQGUPECXvsRya/kDHYqu1Zjd3tLq9z0gmVVMkMxQH/v
Ve89Z7NTgPGZP0a0qnKf0WWB0VtJ+PtSZxqxh6Ei99+Hb92p5jlH0qICu0zTd7fW
dDUijMrcirMnSsRLBSJTkmBRjsGrD51bNK5IDI67iRjZVphrVNn6FsvnUmB2yccl
9q4jPAJukbL9F4v8JCKQLXzKEZ8heeOGRreyv+zYoOu7ncKwgTtMXlnR1/9LxIMs
3iEuhQjiv5qHsawuwoGi2Af/jBh17T/tfWNi4Bo/+5WHAYsvLc9V1Fe7OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOf+WccmmMpg5Gs8IpOP2FCf7up5MB8GA1UdIwQY
MBaAFETTzFkc66OGEw88n3QmRYuIh8LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5Zjgt
MmJiNjU0MDhkZjc0LzEvNV81Wnh5YVl5bURrYXp3aWs0X1lVSl91Nm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5ZjgtMmJiNjU0MDhkZjc0
LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj0ZMA0G
CSqGSIb3DQEBCwUAA4IBAQCVHxpH8goSmp1hPHRg1Jr8qZNPuVIw0L98RcCCKx6P
XnjxQlxLXZcpRJWthUShkrx/QOThs54We/mA7+DwXA151LpbL90vfoV3qB6MMe/S
x00RzbMrbv4uwUP+kCByYzl8MYuT1WjrzFyFcNBmaS5tNMFOKko1cSoIb5vszJXK
11wMJMb20cgrfkB3jR2C2Tf8+xDT+LIpCDnSH6eIF2wDjAHWXeTIhFEakVbwX1l/
SHKY0fFqvlMTIvTcuuSL8QGf17dHwSMD6/sAfeLVMZMsei5NwP7fGeVH8Goddl3l
u2Ds8KbeKaUyFCWXXiI1py9Ye3IQkP4VTjJBQU7RxLkp
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:52:04 2025 by rpki-client