Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/RNeOwPvYeOlbGm7WpTJbicYs9fM.roa
File: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (raw, json)
Hash identifier: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=
Subject key identifier: 44:D7:8E:C0:FB:D8:78:E9:5B:1A:6E:D6:A5:32:5B:89:C6:2C:F5:F3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01941FFA64DBBDB09AA18E500A3298A7BD56
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/RNeOwPvYeOlbGm7WpTJbicYs9fM.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44375
IP address blocks: 93.126.0.0/18 maxlen: 18
193.178.200.0/22 maxlen: 22
2a13:f140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:db:bd:b0:9a:a1:8e:50:0a:32:98:a7:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d78ec0fbd878e95b1a6ed6a5325b89c62cf5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:08:16:f9:ba:6f:9f:fd:7a:89:25:f5:14:
dd:4a:7a:7f:25:9c:af:6a:bb:bd:0e:53:a2:2a:5d:
c4:73:fc:0b:56:b5:16:e4:87:26:93:45:cc:b9:10:
88:cb:a8:8e:99:ec:bd:ec:b8:68:6d:03:a8:b1:ca:
57:4b:6f:cd:66:8f:76:2e:52:51:55:e9:44:dc:6a:
3d:ce:42:09:f1:1a:07:3d:e7:e6:5d:a6:93:23:95:
10:2d:d8:e5:a3:04:63:c5:71:2a:58:fa:93:bb:a3:
b8:14:30:d5:b0:de:8a:62:dc:cd:24:64:60:62:51:
35:8b:de:91:b1:1a:20:ab:1e:42:87:f1:79:a4:a1:
e5:8c:47:f7:1d:c3:a0:5e:0d:79:69:7c:93:74:9a:
e9:58:3b:b0:c9:73:26:dd:c4:24:f3:f2:fd:d1:56:
a9:d0:f3:cc:9a:5e:42:5b:17:3d:42:0b:7f:ed:5f:
7c:44:91:db:12:28:a4:c1:cc:e2:40:b3:d7:81:42:
7b:b5:22:93:3c:63:b2:ab:ab:5f:3c:d5:1e:92:84:
d0:17:e6:48:c1:b5:15:37:8d:cd:43:3b:77:5a:86:
5c:8c:1d:d9:13:09:ac:8e:79:d9:c7:b1:ff:a4:c6:
40:f2:4b:3a:a7:7d:02:c9:40:ff:13:70:68:82:78:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D7:8E:C0:FB:D8:78:E9:5B:1A:6E:D6:A5:32:5B:89:C6:2C:F5:F3
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/RNeOwPvYeOlbGm7WpTJbicYs9fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.0.0/18
193.178.200.0/22
IPv6:
2a13:f140::/29
Signature Algorithm: sha256WithRSAEncryption
4d:a2:b0:75:6f:6d:4c:16:e0:e2:99:3d:7b:53:50:04:aa:17:
da:ee:51:c6:8b:de:19:b1:d9:cb:39:b4:fb:45:2e:0b:16:a6:
5e:a0:0b:c8:46:2e:5c:3f:12:e6:8b:dc:2d:7c:12:b9:fe:c8:
89:f9:c3:92:f0:92:a2:92:ff:46:25:c9:5a:4b:4e:5b:d6:14:
b6:bc:59:79:04:c3:82:05:1b:06:60:36:f4:67:04:1c:09:87:
89:23:9e:6e:ea:e1:be:fe:85:f8:8e:ee:99:3a:41:d9:32:70:
39:46:64:1e:2b:c3:6e:57:b1:5f:1f:c4:cb:a4:d8:a3:eb:9c:
9b:53:e7:9d:e8:fa:13:8b:cf:33:01:e1:b0:2b:7a:68:ec:ba:
3e:63:3b:14:cb:cf:6e:f7:b2:d6:93:91:0a:b9:6d:a0:aa:77:
79:5d:64:2a:41:1c:ce:40:2e:ed:4d:31:cf:ea:5a:55:40:f1:
d0:72:bf:4c:ed:13:cb:1c:bb:4f:61:50:de:b2:f6:70:37:a7:
5b:4b:88:fd:97:14:87:26:44:42:be:8d:63:b4:17:81:27:85:
2e:35:00:53:4f:df:d4:fa:f6:1b:a0:68:5f:83:a9:6f:a1:96:
ad:be:07:73:a6:bd:0b:18:ab:0a:1c:76:01:4c:e7:04:4e:0c:
e1:9e:dd:79
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+mTbvbCaoY5QCjKYp71WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjUwMTAxMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQ3OGVjMGZiZDg3OGU5NWIxYTZlZDZhNTMyNWI4OWM2MmNmNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonIIFvm6b5/9eokl9RTdSnp/JZyv
aru9DlOiKl3Ec/wLVrUW5Icmk0XMuRCIy6iOmey97LhobQOoscpXS2/NZo92LlJR
VelE3Go9zkIJ8RoHPefmXaaTI5UQLdjlowRjxXEqWPqTu6O4FDDVsN6KYtzNJGRg
YlE1i96RsRogqx5Ch/F5pKHljEf3HcOgXg15aXyTdJrpWDuwyXMm3cQk8/L90Vap
0PPMml5CWxc9Qgt/7V98RJHbEiikwcziQLPXgUJ7tSKTPGOyq6tfPNUekoTQF+ZI
wbUVN43NQzt3WoZcjB3ZEwmsjnnZx7H/pMZA8ks6p30CyUD/E3Bogng6SwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFETXjsD72HjpWxpu1qUyW4nGLPXzMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvUk5lT3dQdlllT2xiR203V3BUSmJpY1lzOWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGXX4AAwQC
wbLIMA0EAgACMAcDBQMqE/FAMA0GCSqGSIb3DQEBCwUAA4IBAQBNorB1b21MFuDi
mT17U1AEqhfa7lHGi94ZsdnLObT7RS4LFqZeoAvIRi5cPxLmi9wtfBK5/siJ+cOS
8JKikv9GJclaS05b1hS2vFl5BMOCBRsGYDb0ZwQcCYeJI55u6uG+/oX4ju6ZOkHZ
MnA5RmQeK8NuV7FfH8TLpNij65ybU+ed6PoTi88zAeGwK3po7Lo+YzsUy89u97LW
k5EKuW2gqnd5XWQqQRzOQC7tTTHP6lpVQPHQcr9M7RPLHLtPYVDesvZwN6dbS4j9
lxSHJkRCvo1jtBeBJ4UuNQBTT9/U+vYboGhfg6lvoZatvgdzpr0LGKsKHHYBTOcE
Tgzhnt15
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:02:12 2025 by rpki-client