Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa
File: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (raw, json)
Hash identifier: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=
Subject key identifier: 52:1D:A5:11:31:2A:F0:4E:71:FA:30:2E:F9:59:E3:42:B3:39:54:68
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC5A8549D35EBB06DBE4C32C18CE5
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50043
IP address blocks: 193.228.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c5:a8:54:9d:35:eb:b0:6d:be:4c:32:c1:8c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521da511312af04e71fa302ef959e342b3395468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:2b:a0:38:1a:86:b6:23:ab:7b:62:12:23:
a9:7f:06:7b:60:63:be:65:b3:3d:13:7f:47:64:84:
a0:6e:eb:9b:2b:66:86:fe:65:bb:28:7e:6f:96:97:
28:54:ff:10:e0:e4:32:99:a5:1f:38:29:f1:35:ea:
84:c0:88:0b:06:a3:97:fd:46:a3:e3:6f:6d:62:93:
f0:3b:3d:89:1a:70:d9:db:64:bf:64:66:4a:c3:c7:
dc:f8:95:ce:3a:2b:ca:40:4b:bc:90:ea:88:1f:fc:
31:9a:2b:52:ee:9c:86:e4:35:95:d2:c1:88:71:0f:
2a:5f:35:21:c6:78:48:04:da:0a:9c:1a:1e:70:d8:
88:bf:ff:e7:a0:0f:0a:0d:42:f3:ff:0b:ef:05:3f:
a9:3f:a7:dd:26:e1:d9:e2:e0:cb:36:2c:83:65:13:
ca:db:92:ca:2d:f5:eb:3c:a7:63:96:a2:b3:16:15:
d2:8b:77:88:1b:7e:61:b1:2e:47:4e:9c:f2:36:1e:
c4:69:e6:9c:cf:cd:bf:27:ce:85:50:15:8a:9a:3d:
89:3a:ea:5a:7f:fa:f4:c7:68:46:84:cb:32:dc:b4:
7f:f5:4f:bc:fa:ba:fb:89:a1:00:a6:71:48:c7:d0:
e3:f0:68:d1:da:14:b3:76:92:8d:89:e0:e1:8d:aa:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:A5:11:31:2A:F0:4E:71:FA:30:2E:F9:59:E3:42:B3:39:54:68
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.125.0/24
Signature Algorithm: sha256WithRSAEncryption
22:aa:8f:81:5a:35:d3:4d:48:d9:f3:a9:ae:99:1d:69:64:96:
66:3a:52:d1:12:5a:23:dd:c9:80:92:c2:18:20:43:79:c0:f8:
03:f0:bf:d8:d9:02:ec:f3:0e:e7:b6:c8:08:45:8e:53:6a:4f:
e4:c4:52:10:ca:e6:14:1f:d3:ae:87:b6:93:d2:a9:1a:8d:43:
a7:a1:01:00:ee:ad:09:49:32:f9:b8:fe:d8:52:62:bf:7c:bd:
f4:84:26:33:ca:d8:f8:66:04:7b:a8:58:12:a6:c6:ad:e8:8b:
92:ce:cb:14:bf:94:f8:2b:a8:7e:27:cb:81:a4:52:32:1b:57:
2f:63:8e:33:dc:65:21:2b:92:9d:7e:bf:cf:29:18:16:f8:90:
f9:0d:39:b2:24:16:e1:c8:1e:20:2b:ad:84:7f:f8:b5:c9:0f:
33:37:39:a5:05:57:4e:90:b7:d2:1e:9f:9c:e0:d7:da:b8:b4:
30:f2:ad:14:f5:72:78:86:98:18:23:79:dd:b0:bf:a3:b8:79:
66:7b:dc:df:01:86:b1:6b:4b:94:bb:23:23:c8:ec:b6:94:f9:
e1:9b:c6:c0:07:d0:ee:03:b7:d9:be:3e:83:3a:cb:fc:c8:8b:
73:5d:ce:ac:38:8f:e3:cf:1b:f5:f9:a3:da:40:16:a2:04:cb:
44:43:a7:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/cWoVJ0167BtvkwywYzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx
YmQyMTIwHhcNMjUwMTAyMDc0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjFkYTUxMTMxMmFmMDRlNzFmYTMwMmVmOTU5ZTM0MmIzMzk1NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4kroDgahrYjq3tiEiOpfwZ7YGO+
ZbM9E39HZISgbuubK2aG/mW7KH5vlpcoVP8Q4OQymaUfOCnxNeqEwIgLBqOX/Uaj
429tYpPwOz2JGnDZ22S/ZGZKw8fc+JXOOivKQEu8kOqIH/wxmitS7pyG5DWV0sGI
cQ8qXzUhxnhIBNoKnBoecNiIv//noA8KDULz/wvvBT+pP6fdJuHZ4uDLNiyDZRPK
25LKLfXrPKdjlqKzFhXSi3eIG35hsS5HTpzyNh7Eaeacz82/J86FUBWKmj2JOupa
f/r0x2hGhMsy3LR/9U+8+rr7iaEApnFIx9Dj8GjR2hSzdpKNieDhjar9mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIdpRExKvBOcfowLvlZ40KzOVRoMB8GA1UdIwQY
MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt
Mzk5M2FhMzI0ZTFmLzEvVWgybEVURXE4RTV4LWpBdS1WbmpRck01VkdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm
LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweR9MA0G
CSqGSIb3DQEBCwUAA4IBAQAiqo+BWjXTTUjZ86mumR1pZJZmOlLREloj3cmAksIY
IEN5wPgD8L/Y2QLs8w7ntsgIRY5Tak/kxFIQyuYUH9Ouh7aT0qkajUOnoQEA7q0J
STL5uP7YUmK/fL30hCYzytj4ZgR7qFgSpsat6IuSzssUv5T4K6h+J8uBpFIyG1cv
Y44z3GUhK5Kdfr/PKRgW+JD5DTmyJBbhyB4gK62Ef/i1yQ8zNzmlBVdOkLfSHp+c
4NfauLQw8q0U9XJ4hpgYI3ndsL+juHlme9zfAYaxa0uUuyMjyOy2lPnhm8bAB9Du
A7fZvj6DOsv8yItzXc6sOI/jzxv1+aPaQBaiBMtEQ6cd
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:39 2025 by rpki-client