Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vUVwERf8SKd5Jwx9Sl0j7q9Go_Q.roa
File: vUVwERf8SKd5Jwx9Sl0j7q9Go_Q.roa (raw, json)
Hash identifier: 50Agfr4oVEnScAteWN3rDM9HqxDjkyj+PNeifzm9eaQ=
Subject key identifier: BD:45:70:11:17:FC:48:A7:79:27:0C:7D:4A:5D:23:EE:AF:46:A3:F4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194B71707B918969E3055A83C1173B21769
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vUVwERf8SKd5Jwx9Sl0j7q9Go_Q.roa
Signing time: Thu 30 Jan 2025 12:02:07 +0000
ROA not before: Thu 30 Jan 2025 12:02:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213517
IP address blocks: 213.130.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:17:07:b9:18:96:9e:30:55:a8:3c:11:73:b2:17:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 30 12:02:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd45701117fc48a779270c7d4a5d23eeaf46a3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:3d:ed:4b:00:a8:bc:3b:16:d2:00:53:f0:
05:a2:db:aa:84:d8:52:4a:0e:fa:cf:53:b0:32:29:
b8:7e:94:4c:97:e3:52:22:bc:5f:82:68:a3:db:b9:
52:64:3c:19:f5:e7:03:6b:94:11:34:c2:06:e1:8a:
1b:d9:44:07:9c:2d:60:dd:2a:4a:cb:ef:64:a7:69:
69:e3:e0:eb:92:c8:73:2c:4b:c3:53:f7:f6:ab:02:
23:e3:27:97:87:af:9d:55:9d:bc:4e:35:eb:6a:e5:
f3:f8:8b:6d:54:17:d0:3f:14:2f:74:3f:14:01:f9:
f3:fa:da:6c:80:fa:fd:2c:68:db:78:02:4b:90:ed:
31:24:a0:98:71:90:a5:2d:df:9d:d1:48:d0:8e:25:
9d:92:37:14:b5:bc:6c:ca:4a:dc:18:b9:a4:3b:6e:
4f:4e:7d:20:bd:3e:94:c4:fd:d3:36:01:d4:a0:81:
1d:62:13:75:1b:ec:2c:d4:c1:e8:15:10:02:57:b2:
af:1a:3b:d3:36:49:ce:7c:90:a2:b0:ec:1c:3c:15:
2b:c5:91:51:bb:e9:40:30:fe:0c:f2:67:bc:57:9d:
3f:7f:80:68:3e:0a:bd:e6:15:10:e2:d7:a0:5a:5b:
d9:50:f2:63:83:91:0a:a8:93:50:96:80:d6:44:5e:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:70:11:17:FC:48:A7:79:27:0C:7D:4A:5D:23:EE:AF:46:A3:F4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vUVwERf8SKd5Jwx9Sl0j7q9Go_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8a:b7:ab:6e:e7:39:7c:2c:4b:1e:de:cf:af:6c:65:d2:08:
96:44:4f:e4:bc:1d:57:f5:0d:e3:4a:58:52:8b:3f:ee:10:33:
50:8f:d4:47:05:81:82:a2:b8:32:1b:23:d0:02:c7:dc:03:57:
53:f7:0b:81:2d:f4:b4:15:7f:80:45:e5:a5:93:c4:01:c6:94:
58:35:3e:75:6e:79:5c:96:b7:29:cf:d3:83:77:aa:65:cb:eb:
22:5c:46:e7:17:fd:fa:f7:d2:2f:2c:a0:54:ed:e6:d9:41:02:
a5:27:ed:0b:d6:5b:eb:1c:f1:1b:91:5f:42:0b:2b:31:df:7f:
8d:d8:25:70:7f:c0:dc:a0:f5:0e:db:07:f1:b6:37:51:71:5d:
91:41:68:09:a4:8d:a6:55:a9:f1:d7:a7:37:a3:2c:e9:6b:35:
77:d3:c7:82:65:6e:cf:02:90:84:26:d5:d4:04:bf:9b:a2:1d:
a3:aa:9f:33:29:8e:81:c4:a5:f6:af:8f:43:ee:6c:be:bb:a9:
bf:2f:c9:db:ea:6e:e3:e4:37:aa:04:45:59:75:2e:7d:c4:c5:
70:26:4c:34:44:be:4f:68:a7:4b:de:73:3b:2d:50:47:7a:29:
4e:72:d0:1a:db:06:4c:2f:8d:83:20:fc:6a:9f:87:23:e7:07:
23:3d:47:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS3Fwe5GJaeMFWoPBFzshdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTMwMTIwMjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQ1NzAxMTE3ZmM0OGE3NzkyNzBjN2Q0YTVkMjNlZWFmNDZhM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI097UsAqLw7FtIAU/AFotuqhNhS
Sg76z1OwMim4fpRMl+NSIrxfgmij27lSZDwZ9ecDa5QRNMIG4Yob2UQHnC1g3SpK
y+9kp2lp4+DrkshzLEvDU/f2qwIj4yeXh6+dVZ28TjXrauXz+IttVBfQPxQvdD8U
Afnz+tpsgPr9LGjbeAJLkO0xJKCYcZClLd+d0UjQjiWdkjcUtbxsykrcGLmkO25P
Tn0gvT6UxP3TNgHUoIEdYhN1G+ws1MHoFRACV7KvGjvTNknOfJCisOwcPBUrxZFR
u+lAMP4M8me8V50/f4BoPgq95hUQ4tegWlvZUPJjg5EKqJNQloDWRF4KZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1FcBEX/EineScMfUpdI+6vRqP0MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdlVWd0VSZjhTS2Q1Snd4OVNsMGo3cTlHb19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YKZMA0G
CSqGSIb3DQEBCwUAA4IBAQA/irerbuc5fCxLHt7Pr2xl0giWRE/kvB1X9Q3jSlhS
iz/uEDNQj9RHBYGCorgyGyPQAsfcA1dT9wuBLfS0FX+AReWlk8QBxpRYNT51bnlc
lrcpz9ODd6ply+siXEbnF/3699IvLKBU7ebZQQKlJ+0L1lvrHPEbkV9CCysx33+N
2CVwf8DcoPUO2wfxtjdRcV2RQWgJpI2mVanx16c3oyzpazV308eCZW7PApCEJtXU
BL+boh2jqp8zKY6BxKX2r49D7my+u6m/L8nb6m7j5DeqBEVZdS59xMVwJkw0RL5P
aKdL3nM7LVBHeilOctAa2wZML42DIPxqn4cj5wcjPUeo
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:15:08 2025 by rpki-client