Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa
File: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (raw, json)
Hash identifier: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=
Subject key identifier: 51:A5:D4:E0:94:73:7A:E1:8C:1B:AC:1D:60:B3:94:10:AF:72:7D:EF
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 019423693EB1CBC25740F1EDA9C08DA08715
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa
Signing time: Wed 01 Jan 2025 19:48:07 +0000
ROA not before: Wed 01 Jan 2025 19:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15395
IP address blocks: 193.142.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:3e:b1:cb:c2:57:40:f1:ed:a9:c0:8d:a0:87:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Jan 1 19:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a5d4e094737ae18c1bac1d60b39410af727def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:0a:a8:1f:00:f9:fd:73:8d:50:04:0e:d9:
66:16:bd:7b:0f:d6:c8:58:56:0d:da:d1:91:16:77:
47:46:da:3f:a9:26:11:5a:26:d3:71:7e:a6:9a:bb:
3f:d1:d2:64:ce:5a:32:7e:ee:69:ee:22:21:31:4c:
b1:a5:02:4b:a3:05:f8:49:68:d3:ee:af:35:0d:9e:
f6:36:c3:57:01:aa:27:b1:f8:a1:e1:6a:25:a8:fb:
70:80:c5:7e:0b:e5:7c:d3:3b:d3:96:a0:6b:b8:81:
6a:d5:ab:a8:e1:9d:7d:27:6c:ab:53:51:01:30:75:
30:21:ed:2b:66:87:fb:cc:9b:87:70:5d:1b:ef:be:
e6:c3:b3:95:8f:aa:17:ef:15:e4:b0:84:bc:95:92:
c9:f9:f0:e0:49:86:8e:c4:34:9c:97:87:5a:23:14:
b9:21:45:a4:f5:7d:2b:e3:5f:67:2f:80:e6:aa:2f:
da:3a:85:10:35:fd:73:1d:3e:7b:4a:2b:08:a6:bd:
c0:be:1c:36:c4:51:52:26:27:13:c2:69:3b:8e:4a:
ea:d2:ea:43:ee:03:72:a6:d1:2a:ba:86:38:68:f0:
a4:bc:72:26:66:64:92:bd:da:65:3f:76:09:e9:03:
92:48:70:ec:86:c6:61:05:f0:fb:ad:66:e2:10:f2:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:D4:E0:94:73:7A:E1:8C:1B:AC:1D:60:B3:94:10:AF:72:7D:EF
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e3:1f:7a:25:af:26:83:60:0c:c1:0e:8a:68:60:69:0f:1d:
54:8c:7a:f7:90:e1:19:c4:d9:25:e9:c8:cb:6a:72:63:27:f7:
2a:e9:54:61:2b:cc:12:17:ca:1e:96:0c:c3:ff:7e:d5:bc:83:
fa:5d:fc:fb:4e:4e:d5:8a:eb:0a:c7:6e:4e:54:83:cd:0d:56:
bd:b9:cc:e1:45:94:1e:7e:88:09:74:b7:8a:0e:68:31:2c:f6:
68:af:77:44:46:48:7b:41:3d:0f:04:ea:2b:28:6a:db:39:32:
8d:27:f8:80:d7:48:32:44:58:c7:a6:ea:5b:ad:d6:c0:4b:e7:
94:b0:01:9b:38:f6:2c:3b:55:93:3d:7e:9d:ab:09:4c:31:12:
54:7c:7b:03:68:c8:c9:de:62:90:43:e0:c7:3b:c3:8a:ba:9e:
95:22:79:95:72:bc:fb:35:1b:a7:f8:21:b4:9e:c8:fe:c6:a2:
65:b8:16:96:c6:9e:20:a5:98:4e:de:1a:10:06:25:dc:af:65:
8e:5e:8d:79:8f:62:c7:00:f6:be:ef:6e:1c:9d:79:c1:e5:2b:
d9:1c:69:b5:b6:e2:69:21:89:90:f6:30:e0:1a:f9:42:cf:4f:
e8:8c:83:8b:d5:56:11:b0:ae:f0:ba:1e:40:e5:02:db:5b:3f:
f9:46:35:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaT6xy8JXQPHtqcCNoIcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjUwMTAxMTk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE1ZDRlMDk0NzM3YWUxOGMxYmFjMWQ2MGIzOTQxMGFmNzI3ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzcKqB8A+f1zjVAEDtlmFr17D9bI
WFYN2tGRFndHRto/qSYRWibTcX6mmrs/0dJkzloyfu5p7iIhMUyxpQJLowX4SWjT
7q81DZ72NsNXAaonsfih4WolqPtwgMV+C+V80zvTlqBruIFq1auo4Z19J2yrU1EB
MHUwIe0rZof7zJuHcF0b777mw7OVj6oX7xXksIS8lZLJ+fDgSYaOxDScl4daIxS5
IUWk9X0r419nL4Dmqi/aOoUQNf1zHT57SisIpr3Avhw2xFFSJicTwmk7jkrq0upD
7gNyptEquoY4aPCkvHImZmSSvdplP3YJ6QOSSHDshsZhBfD7rWbiEPIkKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGl1OCUc3rhjBusHWCzlBCvcn3vMB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvVWFYVTRKUnpldUdNRzZ3ZFlMT1VFSzl5ZmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY70MA0G
CSqGSIb3DQEBCwUAA4IBAQCy4x96Ja8mg2AMwQ6KaGBpDx1UjHr3kOEZxNkl6cjL
anJjJ/cq6VRhK8wSF8oelgzD/37VvIP6Xfz7Tk7ViusKx25OVIPNDVa9uczhRZQe
fogJdLeKDmgxLPZor3dERkh7QT0PBOorKGrbOTKNJ/iA10gyRFjHpupbrdbAS+eU
sAGbOPYsO1WTPX6dqwlMMRJUfHsDaMjJ3mKQQ+DHO8OKup6VInmVcrz7NRun+CG0
nsj+xqJluBaWxp4gpZhO3hoQBiXcr2WOXo15j2LHAPa+724cnXnB5SvZHGm1tuJp
IYmQ9jDgGvlCz0/ojIOL1VYRsK7wuh5A5QLbWz/5RjUM
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:43:47 2025 by rpki-client