Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/vQxaXFFye15rTmMFdspwW0lZXXw.roa
File: vQxaXFFye15rTmMFdspwW0lZXXw.roa (raw, json)
Hash identifier: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=
Subject key identifier: BD:0C:5A:5C:51:72:7B:5E:6B:4E:63:05:76:CA:70:5B:49:59:5D:7C
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0194244568BD5E171D5F36B03B7831CA1498
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/vQxaXFFye15rTmMFdspwW0lZXXw.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 168.199.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:68:bd:5e:17:1d:5f:36:b0:3b:78:31:ca:14:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0c5a5c51727b5e6b4e630576ca705b49595d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:0c:d6:d0:a6:ac:a3:ff:c3:d3:9a:44:48:
73:aa:81:a8:a3:51:d8:65:25:10:4e:b3:7a:d7:ad:
e5:cb:6f:bb:80:9d:a8:45:6c:16:7c:31:fb:72:df:
a4:44:96:9a:5c:26:a8:73:f0:6b:96:04:11:ba:9e:
55:01:68:43:06:70:f8:c3:ee:b8:79:af:9c:e6:ba:
84:16:cc:fb:bd:30:65:f1:5e:89:1f:41:d1:91:87:
40:7d:b6:2c:a7:d2:93:c1:8b:a9:7a:83:37:ac:ce:
84:a2:dd:d9:26:d1:85:c4:c2:aa:ee:bf:11:33:77:
3a:57:a1:fb:83:e9:40:8a:de:9f:cc:39:35:09:75:
5a:f7:52:05:7f:eb:37:28:a8:d6:d4:04:03:14:0f:
6e:ce:c0:b1:b3:e7:e8:08:3d:3e:73:2e:74:e5:d4:
38:24:46:49:f6:3e:87:99:4c:26:ad:69:20:3e:d3:
ab:c2:fa:3a:87:11:d5:e6:63:1e:56:b4:45:87:3d:
9b:c8:40:91:3a:4b:67:29:0f:b3:8a:49:e9:e9:98:
16:ac:e0:26:2c:7d:47:39:a6:8f:90:91:55:99:34:
2b:a0:d3:78:ff:6e:f8:36:a8:8b:cc:36:0b:20:66:
80:bf:d4:5e:39:dd:7e:f1:3a:4f:91:fa:81:06:a9:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:5A:5C:51:72:7B:5E:6B:4E:63:05:76:CA:70:5B:49:59:5D:7C
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/vQxaXFFye15rTmMFdspwW0lZXXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8f:cd:6e:23:2f:a1:93:52:d9:7a:36:dd:bd:54:ca:99:93:
c1:5f:6d:7a:ce:a3:7b:c2:fd:3f:44:07:53:5d:fe:cb:d2:61:
1e:6b:04:c8:87:12:e0:f6:22:a0:9d:76:0b:08:58:35:a9:09:
57:93:e1:2d:71:61:94:9a:54:fa:0f:46:8c:86:b8:34:84:e7:
b6:31:46:3c:c5:21:d5:f6:76:53:6d:f5:82:57:fb:fd:cf:2e:
9d:c2:b1:f6:cb:23:96:3d:90:33:66:34:c0:68:64:da:db:6a:
19:88:99:6b:d4:72:7f:28:f2:85:1a:4f:c9:34:b9:aa:66:8d:
2c:62:be:27:f9:f4:5b:3c:10:9f:67:40:e2:d8:3d:56:29:b4:
29:0b:c0:6d:2f:4d:c4:8e:9b:65:85:b1:80:33:52:49:09:e9:
bd:ed:37:b1:46:01:6e:9c:32:33:5b:3e:66:84:d6:1b:b6:71:
8b:84:4f:9e:1d:bd:be:1b:32:ab:f9:44:b9:03:b4:3b:21:c8:
97:8a:87:25:17:a8:a4:1a:37:24:5d:63:99:42:1d:62:9a:a7:
81:7a:20:0a:9f:94:5e:e7:5b:59:d0:8a:46:4f:53:5f:3b:17:
fb:66:fb:17:c8:fc:36:09:21:9b:eb:3b:90:07:09:89:7d:7a:
dc:ce:d1:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRWi9XhcdXzawO3gxyhSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjUwMTAxMjM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDBjNWE1YzUxNzI3YjVlNmI0ZTYzMDU3NmNhNzA1YjQ5NTk1ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL4M1tCmrKP/w9OaREhzqoGoo1HY
ZSUQTrN6163ly2+7gJ2oRWwWfDH7ct+kRJaaXCaoc/BrlgQRup5VAWhDBnD4w+64
ea+c5rqEFsz7vTBl8V6JH0HRkYdAfbYsp9KTwYupeoM3rM6Eot3ZJtGFxMKq7r8R
M3c6V6H7g+lAit6fzDk1CXVa91IFf+s3KKjW1AQDFA9uzsCxs+foCD0+cy505dQ4
JEZJ9j6HmUwmrWkgPtOrwvo6hxHV5mMeVrRFhz2byECROktnKQ+ziknp6ZgWrOAm
LH1HOaaPkJFVmTQroNN4/274NqiLzDYLIGaAv9ReOd1+8TpPkfqBBqmx6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0MWlxRcntea05jBXbKcFtJWV18MB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvdlF4YVhGRnllMTVyVG1NRmRzcHdXMGxaWFh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMcTMA0G
CSqGSIb3DQEBCwUAA4IBAQBMj81uIy+hk1LZejbdvVTKmZPBX216zqN7wv0/RAdT
Xf7L0mEeawTIhxLg9iKgnXYLCFg1qQlXk+EtcWGUmlT6D0aMhrg0hOe2MUY8xSHV
9nZTbfWCV/v9zy6dwrH2yyOWPZAzZjTAaGTa22oZiJlr1HJ/KPKFGk/JNLmqZo0s
Yr4n+fRbPBCfZ0Di2D1WKbQpC8BtL03EjptlhbGAM1JJCem97TexRgFunDIzWz5m
hNYbtnGLhE+eHb2+GzKr+US5A7Q7IciXioclF6ikGjckXWOZQh1imqeBeiAKn5Re
51tZ0IpGT1NfOxf7ZvsXyPw2CSGb6zuQBwmJfXrcztEP
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:09:43 2025 by rpki-client